$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS140913.roa File: AS140913.roa (raw, json) Hash identifier: USGgS9CDQ2h9mG21wUdXg7mSae8nA6wWjl1DJbKy5ec= Subject key identifier: 3A:85:6A:D0:FF:06:76:B7:15:58:BA:46:6A:47:C2:7A:A2:24:1E:7C Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 1242BADC6737D5051E795B698D4CC900F8512E86 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS140913.roa Signing time: Sat 02 May 2026 09:23:04 +0000 ROA not before: Sat 02 May 2026 09:18:04 +0000 ROA not after: Sat 01 May 2027 09:23:04 +0000 asID: 140913 IP address blocks: 138.252.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:42:ba:dc:67:37:d5:05:1e:79:5b:69:8d:4c:c9:00:f8:51:2e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:04 2026 GMT Not After : May 1 09:23:04 2027 GMT Subject: CN=3A856AD0FF0676B71558BA466A47C27AA2241E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:7d:7c:dc:4c:58:0e:41:8a:67:fc:3e:6e: 98:71:1d:48:e2:d6:03:06:46:b6:bd:b9:e7:1d:6f: 65:0e:5c:c6:19:b3:e4:6b:6b:f3:05:df:76:f9:37: df:6d:7b:98:b0:7d:43:21:e9:2f:20:8c:9e:a3:82: 44:42:1a:de:f8:bb:89:e2:61:6d:34:1a:87:02:12: 61:18:0b:7d:91:29:74:6b:34:3b:92:db:98:99:9e: b0:40:7d:86:d0:d4:c2:9b:ea:c7:64:68:4b:58:4f: a6:f4:e9:7a:e3:7a:28:99:64:8a:71:00:8b:52:a9: 44:56:bf:db:44:9c:42:76:58:71:92:7b:74:f1:35: bf:84:6c:47:82:c2:fe:2f:9f:ac:6b:08:ec:9f:d0: 97:00:23:92:3f:69:03:18:4e:1a:5c:d1:bd:7a:c8: 85:80:95:20:2f:fe:ce:df:32:14:99:ae:72:32:c9: 02:10:c9:7d:02:c9:aa:20:52:e5:20:fa:0b:29:10: 34:09:5b:87:c4:fd:2d:b1:6d:ae:f8:85:7e:c9:42: ae:0e:29:2d:8b:4e:cb:c6:59:7d:22:dd:57:50:2d: b5:24:60:04:df:88:4b:67:c1:f7:2c:43:05:5e:ea: 6b:a3:45:d6:26:53:00:d9:ae:53:3f:e9:4a:14:de: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:85:6A:D0:FF:06:76:B7:15:58:BA:46:6A:47:C2:7A:A2:24:1E:7C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS140913.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.122.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:4d:8c:ad:3e:28:b5:e0:d2:ed:f8:27:70:8b:cb:eb:a6:11: 50:e5:a7:2a:4f:e3:5d:ad:a7:a3:f1:7c:52:39:ca:c9:8c:f2: c7:0b:de:35:8e:f1:e7:a2:2e:0f:0b:c6:5f:cd:aa:79:b8:e1: 40:a5:97:ee:6b:a7:d8:18:14:44:cb:69:aa:8b:2a:f8:4c:d4: 75:07:89:28:ce:80:16:ae:6a:e1:72:c9:e1:b7:12:b1:ef:39: fa:68:2d:6a:df:88:83:bc:fa:e9:5d:5c:5b:08:3c:99:a2:e0: 75:96:c8:b4:a9:93:90:e2:9f:3b:95:a6:6c:0f:57:b9:a6:7a: e3:88:ae:29:4d:40:4d:8d:2b:e5:df:8c:67:83:69:32:c6:39: c3:65:3c:47:e7:d6:68:41:41:93:d4:3b:60:22:7e:d3:bf:97: 9d:10:d4:3c:3f:88:04:3b:e1:58:8a:3a:d6:d3:c9:37:c1:fa: cd:3b:db:31:6e:27:78:bb:e2:d0:4b:24:29:08:d1:09:da:ff: f4:2e:e0:9b:bf:a7:b9:9b:a7:93:b7:5c:28:18:db:f0:00:aa: 71:d2:0d:04:5b:2e:e2:f3:d6:c3:e6:87:3e:d2:9c:f2:ea:0c: 57:bf:83:f7:6e:3b:ef:11:ac:6f:1f:ab:2a:b7:82:c1:be:51: 0b:0f:91:2a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEkK63Gc31QUeeVtpjUzJAPhRLoYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgwNFoX DTI3MDUwMTA5MjMwNFowMzExMC8GA1UEAxMoM0E4NTZBRDBGRjA2NzZCNzE1NThC QTQ2NkE0N0MyN0FBMjI0MUU3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkBfXzcTFgOQYpn/D5umHEdSOLWAwZGtr255x1vZQ5cxhmz5Gtr8wXfdvk3 3217mLB9QyHpLyCMnqOCREIa3vi7ieJhbTQahwISYRgLfZEpdGs0O5LbmJmesEB9 htDUwpvqx2RoS1hPpvTpeuN6KJlkinEAi1KpRFa/20ScQnZYcZJ7dPE1v4RsR4LC /i+frGsI7J/QlwAjkj9pAxhOGlzRvXrIhYCVIC/+zt8yFJmucjLJAhDJfQLJqiBS 5SD6CykQNAlbh8T9LbFtrviFfslCrg4pLYtOy8ZZfSLdV1AttSRgBN+IS2fB9yxD BV7qa6NF1iZTANmuUz/pShTeV4ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ6hWrQ /wZ2txVYukZqR8J6oiQefDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQwOTEzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBivx6MA0GCSqGSIb3DQEBCwUAA4IBAQCfTYytPii14NLt+Cdwi8vrphFQ 5acqT+Ndraej8XxSOcrJjPLHC941jvHnoi4PC8Zfzap5uOFApZfua6fYGBREy2mq iyr4TNR1B4kozoAWrmrhcsnhtxKx7zn6aC1q34iDvPrpXVxbCDyZouB1lsi0qZOQ 4p87laZsD1e5pnrjiK4pTUBNjSvl34xng2kyxjnDZTxH59ZoQUGT1DtgIn7Tv5ed ENQ8P4gEO+FYijrW08k3wfrNO9sxbid4u+LQSyQpCNEJ2v/0LuCbv6e5m6eTt1wo GNvwAKpx0g0EWy7i89bD5oc+0pzy6gxXv4P3bjvvEaxvH6sqt4LBvlELD5Eq -----END CERTIFICATE-----Generated at Sat May 2 21:05:06 2026 by rpki-client