$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS139952.roa File: AS139952.roa (raw, json) Hash identifier: tu4/DotOmHQlzsFCsBqzYxgbUxhghssNS47V17MHb6M= Subject key identifier: 37:EB:D5:08:7B:A2:24:21:0D:31:70:50:64:0C:EA:A6:52:F2:84:DB Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 721C47A75584D58EC3A02CFE1273DF136781365C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS139952.roa Signing time: Sat 02 May 2026 09:23:55 +0000 ROA not before: Sat 02 May 2026 09:18:55 +0000 ROA not after: Sat 01 May 2027 09:23:55 +0000 asID: 139952 IP address blocks: 157.15.40.0/23 maxlen: 24 157.20.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1c:47:a7:55:84:d5:8e:c3:a0:2c:fe:12:73:df:13:67:81:36:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:55 2026 GMT Not After : May 1 09:23:55 2027 GMT Subject: CN=37EBD5087BA224210D317050640CEAA652F284DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:c8:8d:49:e0:bf:0c:6e:41:b3:33:4d:21: 89:d6:09:9a:40:52:92:4b:da:1a:0e:f2:4b:7f:05: a7:e7:8d:84:e8:89:44:96:d2:03:f4:9e:50:05:dc: e3:5e:da:cd:37:17:f5:2b:af:11:5d:40:f5:3c:7b: 2a:97:6d:99:cb:e7:6f:50:81:fd:91:11:86:a0:74: 40:5b:0a:01:c1:87:aa:e7:2e:5d:3f:6f:04:aa:3a: 17:da:ea:df:0f:79:59:44:26:42:9a:00:06:a2:f6: 72:c7:77:6f:f2:9c:f0:01:23:6a:02:b9:c5:b6:d7: 00:35:7c:1e:06:08:3c:05:e4:ae:83:a0:34:5f:59: a3:2b:54:97:33:39:27:a3:7d:3b:ff:50:7d:c8:86: 6d:63:66:7d:5f:d9:86:ea:32:40:81:fd:a1:ae:fa: 8c:d4:19:73:29:9d:e0:00:ad:91:fd:09:c5:d4:fe: e0:a4:eb:a8:40:1e:8c:f5:57:53:2f:6c:dd:87:27: 81:0a:f8:15:b7:6c:2d:0a:b8:2f:c2:15:e4:f0:1e: 20:1a:76:03:5e:74:d5:be:8f:7f:49:14:d4:9b:c0: 57:e4:43:f4:5f:50:c3:11:94:50:f9:ef:54:03:5b: 32:db:a8:18:65:e4:1a:b5:0a:9f:3a:cd:e8:53:d6: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EB:D5:08:7B:A2:24:21:0D:31:70:50:64:0C:EA:A6:52:F2:84:DB X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS139952.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.40.0/23 157.20.122.0/23 Signature Algorithm: sha256WithRSAEncryption 59:8f:f4:39:b9:9a:ca:fa:0e:cb:6b:1f:d1:9d:25:58:ec:9f: 49:65:a6:4a:35:b8:d8:07:52:4c:93:5c:c4:2e:bc:6d:0c:2d: 0d:55:ec:09:e6:4a:a4:64:fa:9d:d1:9f:f0:3d:7e:87:42:c8: a9:63:77:36:76:d8:c0:7e:6d:96:18:80:b0:b2:58:55:60:6f: 11:dd:ae:18:6b:6d:d4:9c:85:58:b3:45:b4:ea:ff:c8:f2:57: df:7d:3a:7e:f2:26:60:99:a6:1f:1e:21:de:8a:ee:20:3e:28: 59:af:f4:39:a9:48:13:0e:28:36:96:ab:ea:4d:f4:77:0a:b8: 5c:a8:c2:8c:c9:5a:19:f9:ae:0e:a2:27:af:a0:e0:79:52:5d: d8:56:af:40:f0:ff:3c:5e:5f:6f:d3:5e:70:78:a3:87:c0:c4: dc:a7:ad:68:6d:10:2f:11:d6:60:76:76:4f:f9:cc:7f:c8:7b: d2:b9:9d:14:51:78:ac:39:99:ae:16:de:ea:93:2d:35:f7:0d: b0:7f:62:f8:9c:1c:4f:5a:9e:cf:62:ad:67:39:2e:ff:a0:3f: 7a:18:4a:44:96:f7:49:6b:c5:cd:22:37:ad:ae:c3:44:30:e2: 16:11:87:29:00:9d:8c:7e:19:d1:91:12:8d:5b:65:3b:ae:a7: a3:17:89:e1 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUchxHp1WE1Y7DoCz+EnPfE2eBNlwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTg1NVoX DTI3MDUwMTA5MjM1NVowMzExMC8GA1UEAxMoMzdFQkQ1MDg3QkEyMjQyMTBEMzE3 MDUwNjQwQ0VBQTY1MkYyODREQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALH+yI1J4L8MbkGzM00hidYJmkBSkkvaGg7yS38Fp+eNhOiJRJbSA/SeUAXc 417azTcX9SuvEV1A9Tx7Kpdtmcvnb1CB/ZERhqB0QFsKAcGHqucuXT9vBKo6F9rq 3w95WUQmQpoABqL2csd3b/Kc8AEjagK5xbbXADV8HgYIPAXkroOgNF9ZoytUlzM5 J6N9O/9QfciGbWNmfV/ZhuoyQIH9oa76jNQZcymd4ACtkf0JxdT+4KTrqEAejPVX Uy9s3YcngQr4FbdsLQq4L8IV5PAeIBp2A1501b6Pf0kU1JvAV+RD9F9QwxGUUPnv VANbMtuoGGXkGrUKnzrN6FPWmAkCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBQ369UI e6IkIQ0xcFBkDOqmUvKE2zAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM5OTUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQBnQ8oAwQBnRR6MA0GCSqGSIb3DQEBCwUAA4IBAQBZj/Q5uZrK+g7Lax/R nSVY7J9JZaZKNbjYB1JMk1zELrxtDC0NVewJ5kqkZPqd0Z/wPX6HQsipY3c2dtjA fm2WGICwslhVYG8R3a4Ya23UnIVYs0W06v/I8lfffTp+8iZgmaYfHiHeiu4gPihZ r/Q5qUgTDig2lqvqTfR3CrhcqMKMyVoZ+a4OoievoOB5Ul3YVq9A8P88Xl9v015w eKOHwMTcp61obRAvEdZgdnZP+cx/yHvSuZ0UUXisOZmuFt7qky019w2wf2L4nBxP Wp7PYq1nOS7/oD96GEpElvdJa8XNIjetrsNEMOIWEYcpAJ2MfhnRkRKNW2U7rqej F4nh -----END CERTIFICATE-----Generated at Sat May 2 21:05:00 2026 by rpki-client