$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139205.roa File: AS139205.roa (raw, json) Hash identifier: 2nE3cnG4j33vKDTzsPIQq3N2dYlQCeGaQ37XqwnxAKI= Subject key identifier: E9:1D:86:F5:58:2A:73:97:FA:00:1A:89:04:86:77:10:D0:0D:50:DF Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0258FDD77DC4BDB931E99C1616F0701271AB7936 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139205.roa Signing time: Sat 02 May 2026 08:35:14 +0000 ROA not before: Sat 02 May 2026 08:30:14 +0000 ROA not after: Sat 01 May 2027 08:35:14 +0000 asID: 139205 IP address blocks: 2001:df6:7840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:58:fd:d7:7d:c4:bd:b9:31:e9:9c:16:16:f0:70:12:71:ab:79:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:14 2026 GMT Not After : May 1 08:35:14 2027 GMT Subject: CN=E91D86F5582A7397FA001A8904867710D00D50DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:be:1e:26:8e:22:51:b1:b3:37:8b:ca:71: 5a:61:7e:92:2f:62:de:a1:29:7a:4e:47:7c:bf:2a: 41:74:19:7d:d7:62:9c:b4:8e:d4:14:ae:7e:8e:5d: 38:5a:f5:c3:75:3a:10:fa:a0:3b:ab:9b:53:dc:6e: a6:fe:bb:d0:ba:77:e5:66:31:40:72:04:d3:aa:5d: a5:0c:13:ec:66:f3:cb:4d:48:83:78:2d:d0:24:f6: 14:92:e7:dd:cd:8a:1d:a7:1c:f1:7c:9f:7b:e6:00: 7d:9c:7a:6a:c4:d3:8a:18:cf:c2:71:ca:9e:cc:15: 94:7c:0e:fb:a5:90:83:b5:c1:11:ae:8c:7d:45:26: e6:16:54:04:a7:86:44:2e:8d:e3:2d:19:1e:78:ad: 1e:ae:39:d9:f4:59:98:70:50:89:0e:8c:e6:ca:72: 41:5b:5a:74:a6:05:f0:81:af:90:23:38:63:da:e4: 22:2a:bc:04:2c:64:b6:3f:07:94:c7:c3:c8:2e:0c: d2:8a:15:11:8f:e4:dc:6b:ab:84:7a:b0:19:fb:24: ee:e6:c3:01:41:6e:7b:d4:6d:59:23:9a:72:40:59: 58:2b:a5:89:2e:25:70:41:3c:3a:1f:c2:c1:f2:fe: f1:6f:4e:a2:04:de:1b:bf:fa:86:04:e6:30:c3:cd: 10:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1D:86:F5:58:2A:73:97:FA:00:1A:89:04:86:77:10:D0:0D:50:DF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139205.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:7840::/48 Signature Algorithm: sha256WithRSAEncryption 30:cf:cd:8e:ba:56:38:8b:90:86:d2:61:4d:64:5a:a3:8b:1c: 60:f3:43:d5:fa:e6:36:12:d9:f2:62:b8:61:8d:41:59:f5:87: df:3e:0a:06:57:09:f5:e3:03:b4:05:1b:c5:7a:82:3d:62:20: 14:34:fc:f4:1b:ff:7d:8a:28:d8:7d:e3:1a:62:22:76:bb:cc: 47:75:05:62:e9:f3:4f:03:81:cd:e4:fd:cb:27:39:bd:8c:d3: 4e:38:a9:82:05:ba:ae:6d:ca:e3:c2:f3:86:fa:51:64:39:48: 4d:31:bf:52:87:55:9b:98:87:a2:0c:fb:bc:27:e1:4f:4a:2c: 8b:3e:ea:fe:f3:7f:60:5f:91:d6:27:91:5d:90:ea:64:cc:c8: 4e:32:36:bc:f1:15:94:81:f2:5c:57:7b:18:b6:77:4c:46:7e: f0:06:7b:6d:55:de:be:81:c8:b6:0b:dd:97:31:50:0d:1e:6f: 73:e8:2f:7f:e0:67:14:ec:37:83:8f:1d:b0:b3:40:8e:50:4b: c9:68:bf:68:59:af:ad:4c:54:2f:a5:76:a7:7f:82:b2:83:13: 0b:6c:bb:57:ae:1f:d6:a2:32:8a:46:58:48:ca:7a:c9:fb:48: 3f:9f:ae:d7:0e:1c:42:1d:1d:2c:fc:83:87:24:47:f1:dc:48: 7d:e6:f3:3a -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUAlj9133Evbkx6ZwWFvBwEnGreTYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzAxNFoX DTI3MDUwMTA4MzUxNFowMzExMC8GA1UEAxMoRTkxRDg2RjU1ODJBNzM5N0ZBMDAx QTg5MDQ4Njc3MTBEMDBENTBERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJUvh4mjiJRsbM3i8pxWmF+ki9i3qEpek5HfL8qQXQZfddinLSO1BSufo5d OFr1w3U6EPqgO6ubU9xupv670Lp35WYxQHIE06pdpQwT7Gbzy01Ig3gt0CT2FJLn 3c2KHacc8Xyfe+YAfZx6asTTihjPwnHKnswVlHwO+6WQg7XBEa6MfUUm5hZUBKeG RC6N4y0ZHnitHq452fRZmHBQiQ6M5spyQVtadKYF8IGvkCM4Y9rkIiq8BCxktj8H lMfDyC4M0ooVEY/k3GurhHqwGfsk7ubDAUFue9RtWSOackBZWCuliS4lcEE8Oh/C wfL+8W9OogTeG7/6hgTmMMPNELECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTpHYb1 WCpzl/oAGokEhncQ0A1Q3zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5MjA1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9nhAMA0GCSqGSIb3DQEBCwUAA4IBAQAwz82OulY4i5CG0mFNZFqj ixxg80PV+uY2EtnyYrhhjUFZ9YffPgoGVwn14wO0BRvFeoI9YiAUNPz0G/99iijY feMaYiJ2u8xHdQVi6fNPA4HN5P3LJzm9jNNOOKmCBbqubcrjwvOG+lFkOUhNMb9S h1WbmIeiDPu8J+FPSiyLPur+839gX5HWJ5FdkOpkzMhOMja88RWUgfJcV3sYtndM Rn7wBnttVd6+gci2C92XMVANHm9z6C9/4GcU7DeDjx2ws0COUEvJaL9oWa+tTFQv pXanf4KygxMLbLtXrh/WojKKRlhIynrJ+0g/n67XDhxCHR0s/IOHJEfx3Eh95vM6 -----END CERTIFICATE-----Generated at Sun May 3 00:42:16 2026 by rpki-client