$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS139981.roa File: AS139981.roa (raw, json) Hash identifier: YClyL1y07HH4PrmwNEo9Y2SM2eCsFOUWMJwPuPotZYE= Subject key identifier: 80:2D:3A:B3:4A:7B:46:EB:CB:B9:98:C4:64:0D:0E:DB:D2:A7:AA:C9 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 40E399A58F05FE1EF14AE82DDC96C74283D0B0A4 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS139981.roa Signing time: Sat 02 May 2026 09:23:55 +0000 ROA not before: Sat 02 May 2026 09:18:55 +0000 ROA not after: Sat 01 May 2027 09:23:55 +0000 asID: 139981 IP address blocks: 157.66.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e3:99:a5:8f:05:fe:1e:f1:4a:e8:2d:dc:96:c7:42:83:d0:b0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:55 2026 GMT Not After : May 1 09:23:55 2027 GMT Subject: CN=802D3AB34A7B46EBCBB998C4640D0EDBD2A7AAC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:0d:08:bf:d3:5a:94:04:03:8d:27:60:2c: 5a:96:e9:e3:20:25:e3:07:e3:e4:71:fc:56:2d:1d: ba:3c:5a:65:eb:c7:bf:df:bf:3d:a5:5c:9d:8f:f7: e2:32:49:3a:c3:19:93:1c:4d:d8:7c:aa:5d:de:9b: 62:5f:7c:7b:9c:19:c4:cf:47:bb:e8:aa:7b:9b:c5: e9:ec:ad:dc:bc:69:5f:c5:e1:e4:ae:a9:45:6e:6b: f2:8d:c8:42:14:c9:2e:61:39:bc:eb:af:63:e0:06: c0:d1:4d:12:9f:eb:d1:0e:06:cf:b6:8b:3d:26:d7: 95:2a:c5:d6:05:a2:b8:72:e6:c3:d0:77:26:9b:3a: 6c:c8:89:1a:b6:d4:c7:fb:c8:1a:4c:81:d6:6f:c2: 25:d9:12:0e:89:a8:47:82:01:50:bf:d1:76:be:c1: 03:a4:98:49:3a:20:07:6d:2b:2e:6c:3e:e5:71:6e: 45:01:33:fe:da:a2:bf:cd:d1:59:c0:a0:a6:39:b9: 2d:dd:b0:ad:ce:40:af:2b:cc:98:3c:ea:1a:dc:a1: b3:92:99:46:91:81:6e:9e:3f:b7:e2:57:da:c7:6e: 48:72:48:a7:17:ad:7a:9d:c5:54:75:72:1a:0f:0e: a4:6b:61:c7:99:a4:bc:37:6b:63:64:f3:df:c1:4b: 9e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2D:3A:B3:4A:7B:46:EB:CB:B9:98:C4:64:0D:0E:DB:D2:A7:AA:C9 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS139981.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.84.0/23 Signature Algorithm: sha256WithRSAEncryption 78:a0:dd:8a:7b:35:a9:03:ee:3e:a1:71:00:de:e4:93:ca:da: f4:17:24:63:94:ce:f3:a6:b3:37:9b:7c:9e:49:7f:87:6e:d4: 15:ff:55:96:70:54:65:de:c2:47:22:84:98:0f:0c:4e:c7:76: b5:a5:e9:22:87:31:2d:58:bd:68:9f:f5:80:4d:90:64:11:b3: 72:28:bd:c4:50:68:2c:3c:f7:4f:75:f2:03:6b:ab:f6:8f:ff: 8c:bb:14:d2:3e:60:79:42:08:ef:65:aa:3d:86:29:9e:9e:db: e5:39:1c:32:36:58:4e:2d:6e:1e:10:fc:5d:fc:64:5f:0a:fc: 73:22:02:fb:15:46:15:c6:be:33:96:91:a9:ef:8d:d3:57:9d: 8c:f8:96:26:fe:78:d8:87:48:a4:7e:6e:78:38:3a:44:99:88: 41:e7:67:21:35:2d:ab:bb:46:3b:ab:f3:5a:c5:4f:87:c1:59: 27:92:ef:1b:12:90:61:7d:e6:92:fe:43:ea:3d:90:25:51:0a: c3:05:9b:fd:92:f0:9c:0e:a8:bf:67:9b:94:c5:91:f2:d4:6b: 5c:74:1a:af:5c:23:72:2a:04:c7:2e:87:d5:fc:50:9d:3b:d9: c1:97:1c:78:ce:5d:4d:6e:a0:83:74:49:0f:29:86:29:6c:be: 88:78:50:e4 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUQOOZpY8F/h7xSugt3JbHQoPQsKQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTg1NVoX DTI3MDUwMTA5MjM1NVowMzExMC8GA1UEAxMoODAyRDNBQjM0QTdCNDZFQkNCQjk5 OEM0NjQwRDBFREJEMkE3QUFDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ8eDQi/01qUBAONJ2AsWpbp4yAl4wfj5HH8Vi0dujxaZevHv9+/PaVcnY/3 4jJJOsMZkxxN2HyqXd6bYl98e5wZxM9Hu+iqe5vF6eyt3LxpX8Xh5K6pRW5r8o3I QhTJLmE5vOuvY+AGwNFNEp/r0Q4Gz7aLPSbXlSrF1gWiuHLmw9B3Jps6bMiJGrbU x/vIGkyB1m/CJdkSDomoR4IBUL/Rdr7BA6SYSTogB20rLmw+5XFuRQEz/tqiv83R WcCgpjm5Ld2wrc5AryvMmDzqGtyhs5KZRpGBbp4/t+JX2sduSHJIpxetep3FVHVy Gg8OpGthx5mkvDdrY2Tz38FLngUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSALTqz SntG68u5mMRkDQ7b0qeqyTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM5OTgxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBnUJUMA0GCSqGSIb3DQEBCwUAA4IBAQB4oN2KezWpA+4+oXEA3uSTytr0 FyRjlM7zprM3m3yeSX+HbtQV/1WWcFRl3sJHIoSYDwxOx3a1pekihzEtWL1on/WA TZBkEbNyKL3EUGgsPPdPdfIDa6v2j/+MuxTSPmB5QgjvZao9himentvlORwyNlhO LW4eEPxd/GRfCvxzIgL7FUYVxr4zlpGp743TV52M+JYm/njYh0ikfm54ODpEmYhB 52chNS2ru0Y7q/NaxU+HwVknku8bEpBhfeaS/kPqPZAlUQrDBZv9kvCcDqi/Z5uU xZHy1GtcdBqvXCNyKgTHLofV/FCdO9nBlxx4zl1NbqCDdEkPKYYpbL6IeFDk -----END CERTIFICATE-----Generated at Sat May 2 21:05:38 2026 by rpki-client