$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS139838.roa File: AS139838.roa (raw, json) Hash identifier: lnboPY+jS6ppW2sJnJ3XPLyJyOhM+UpFYH4mZRAikWs= Subject key identifier: 0A:C8:45:1A:56:92:98:4C:5B:14:DD:96:A3:18:1D:A2:9C:F6:A1:73 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4AF0529F3DF3B677CA79E90A71724D8D44064279 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS139838.roa Signing time: Sat 02 May 2026 09:25:03 +0000 ROA not before: Sat 02 May 2026 09:20:03 +0000 ROA not after: Sat 01 May 2027 09:25:03 +0000 asID: 139838 IP address blocks: 192.189.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f0:52:9f:3d:f3:b6:77:ca:79:e9:0a:71:72:4d:8d:44:06:42:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:20:03 2026 GMT Not After : May 1 09:25:03 2027 GMT Subject: CN=0AC8451A5692984C5B14DD96A3181DA29CF6A173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:1b:a1:4b:c8:f1:94:73:6b:ad:2c:a3:15: 6d:68:8b:15:e8:a4:39:13:c8:d7:74:c8:a3:e3:b5: 61:55:33:e9:e9:e2:9a:12:40:aa:cf:ac:dd:90:40: d7:7d:96:92:6c:dd:b8:92:40:a0:65:61:f0:55:96: e0:f8:4b:ee:46:00:ab:58:08:00:63:f5:8b:ec:61: be:3b:8d:3b:4f:62:e8:f4:e0:8b:c3:f1:e3:a9:b9: ab:22:26:db:3a:bf:a7:22:cf:24:76:6e:1c:11:86: e2:b1:fb:a2:51:91:94:50:ff:d4:e2:55:fe:2e:1e: af:9b:39:41:68:8e:48:e2:60:15:ea:9d:9d:a5:df: dd:5f:75:db:f7:67:89:0d:53:0e:6d:52:ad:cd:8f: 57:53:ee:5a:cf:c1:25:fa:f0:c9:e2:08:fd:95:1f: 27:42:43:72:88:d5:5f:33:7a:c5:3c:87:73:d1:8a: 2c:a6:30:51:e1:64:6a:f0:2c:3e:7b:db:2d:b7:90: be:f1:11:de:34:a3:34:ac:00:09:5f:35:e8:51:af: 33:30:45:c0:fe:df:1d:9f:e1:e6:6d:51:82:13:62: ad:1e:aa:14:b5:10:73:54:4a:12:28:4f:2d:46:ee: a9:d5:af:d8:49:e9:ba:05:91:66:28:49:23:86:55: a4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C8:45:1A:56:92:98:4C:5B:14:DD:96:A3:18:1D:A2:9C:F6:A1:73 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS139838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.189.233.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:62:b0:20:cc:40:53:8f:c2:6e:c2:8b:11:98:90:40:42:42: 97:69:75:a5:30:16:97:c4:f5:5a:dd:ce:5e:21:fe:b8:d7:7a: 20:8d:2e:23:4c:9d:a3:7d:b9:cc:56:56:08:3e:f5:54:69:6e: fe:58:4e:23:6c:36:bc:3d:f9:53:43:29:b3:3c:6f:3c:03:aa: 07:5a:5c:ff:8b:f0:df:dc:97:ef:54:d8:0b:27:e1:6d:0d:48: ae:2f:72:5c:ba:30:ca:b0:79:ca:5b:6f:a8:b9:b9:10:9f:86: 1a:33:95:b3:ab:52:8c:2c:38:03:fa:45:7b:1e:ff:1f:ae:ee: 3f:4e:51:17:10:76:40:b5:86:f9:46:c6:51:78:a3:b6:7e:42: 26:12:5a:51:16:ed:86:75:6a:58:e5:ba:14:79:46:da:b4:c8: fc:f9:b0:5c:47:1c:bb:0d:d0:11:8e:09:35:55:a3:2d:b4:c4: 88:9b:39:15:64:aa:cd:38:84:ef:4e:8d:1c:d9:47:c9:b0:fe: e2:73:29:d1:fa:5f:4f:24:3a:f1:ba:ca:12:4a:b6:4f:ad:01: 81:32:da:b2:60:c7:5e:61:4b:fe:dd:f9:6a:53:a0:25:32:39: 34:9f:36:89:e3:80:f8:96:db:6e:dd:4f:6b:27:1b:75:82:8f: 7b:5d:a5:57 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUSvBSnz3ztnfKeekKcXJNjUQGQnkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MjAwM1oX DTI3MDUwMTA5MjUwM1owMzExMC8GA1UEAxMoMEFDODQ1MUE1NjkyOTg0QzVCMTRE RDk2QTMxODFEQTI5Q0Y2QTE3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5GG6FLyPGUc2utLKMVbWiLFeikORPI13TIo+O1YVUz6enimhJAqs+s3ZBA 132WkmzduJJAoGVh8FWW4PhL7kYAq1gIAGP1i+xhvjuNO09i6PTgi8Px46m5qyIm 2zq/pyLPJHZuHBGG4rH7olGRlFD/1OJV/i4er5s5QWiOSOJgFeqdnaXf3V912/dn iQ1TDm1Src2PV1PuWs/BJfrwyeII/ZUfJ0JDcojVXzN6xTyHc9GKLKYwUeFkavAs PnvbLbeQvvER3jSjNKwACV816FGvMzBFwP7fHZ/h5m1RghNirR6qFLUQc1RKEihP LUbuqdWv2EnpugWRZihJI4ZVpP8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQKyEUa VpKYTFsU3ZajGB2inPahczAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM5ODM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwL3pMA0GCSqGSIb3DQEBCwUAA4IBAQBeYrAgzEBTj8JuwosRmJBAQkKX aXWlMBaXxPVa3c5eIf6413ogjS4jTJ2jfbnMVlYIPvVUaW7+WE4jbDa8PflTQymz PG88A6oHWlz/i/Df3JfvVNgLJ+FtDUiuL3JcujDKsHnKW2+oubkQn4YaM5Wzq1KM LDgD+kV7Hv8fru4/TlEXEHZAtYb5RsZReKO2fkImElpRFu2GdWpY5boUeUbatMj8 +bBcRxy7DdARjgk1VaMttMSImzkVZKrNOITvTo0c2UfJsP7icynR+l9PJDrxusoS SrZPrQGBMtqyYMdeYUv+3flqU6AlMjk0nzaJ44D4lttu3U9rJxt1go97XaVX -----END CERTIFICATE-----Generated at Sat May 2 21:05:38 2026 by rpki-client