$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139233.roa File: AS139233.roa (raw, json) Hash identifier: 2X4ASRmlNCIxgwkHBD/O9e/yt2lAU/q3MDCZLf7Rp0g= Subject key identifier: CE:13:DE:7A:BB:52:15:18:E4:04:26:9D:39:8B:33:A9:E6:74:0B:AD Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 20AFBB3F8A636BE0585D3D4676534CCE9C0CDFFA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139233.roa Signing time: Sat 02 May 2026 09:27:11 +0000 ROA not before: Sat 02 May 2026 09:22:11 +0000 ROA not after: Sat 01 May 2027 09:27:11 +0000 asID: 139233 IP address blocks: 2001:df6:f7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 23:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:af:bb:3f:8a:63:6b:e0:58:5d:3d:46:76:53:4c:ce:9c:0c:df:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:11 2026 GMT Not After : May 1 09:27:11 2027 GMT Subject: CN=CE13DE7ABB521518E404269D398B33A9E6740BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:37:23:c8:5d:ca:4c:96:ca:a4:8a:b7:41:c0: ce:e7:d1:7e:2d:ab:f8:33:fb:00:ad:5e:5b:6c:4c: e2:8a:49:5b:b8:a5:45:39:60:a0:f2:ee:21:ab:1b: a6:a3:5d:9a:a0:1b:be:16:21:13:74:3a:5b:ee:0d: b8:02:b0:dc:df:b9:31:07:91:c1:1b:df:d3:05:27: 24:25:71:e8:1a:6f:e4:73:06:a5:dc:59:35:df:dc: d9:e5:3d:55:b8:fa:f0:00:9c:53:72:e8:f0:f5:4f: 5f:38:4d:ef:9b:0e:40:04:a8:42:87:4e:af:4a:15: 87:62:c3:f4:e2:d1:df:7d:eb:c8:a8:2d:b4:27:23: 78:2c:10:e4:f8:42:cf:de:74:33:1b:95:9b:c1:7a: b1:d3:74:2d:0b:1c:91:cf:02:e5:50:71:18:e6:f6: 51:32:f5:49:84:d2:c3:f0:98:14:1f:63:9e:4b:7c: 33:ed:17:55:10:b1:3a:ad:4b:d5:0d:b2:16:74:e3: 3d:92:9d:58:4f:6c:f4:9f:7c:a3:95:09:f5:bd:d9: 74:e0:f3:3a:f3:e6:54:90:8c:f5:75:e6:f7:a0:36: fc:8e:6b:32:3f:38:ee:11:26:53:aa:62:1f:d7:5b: f5:fb:8e:c5:54:be:12:6c:1f:64:38:a1:c2:47:44: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:13:DE:7A:BB:52:15:18:E4:04:26:9D:39:8B:33:A9:E6:74:0B:AD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:f7c0::/48 Signature Algorithm: sha256WithRSAEncryption 34:36:fd:9b:52:d0:5b:8d:79:33:47:95:b5:d4:83:53:32:39: a5:2c:5c:75:83:3b:c3:62:c8:07:4f:e1:ee:c7:63:7c:04:5e: 64:15:a6:cb:a4:da:9b:a5:66:99:3f:1b:fb:a0:6b:1b:c0:92: 6a:45:4e:e4:48:5e:10:89:70:aa:7e:7e:d8:c6:cf:d8:65:02: aa:84:b7:07:d0:63:fe:a6:33:d5:ce:3e:65:10:36:01:4b:13: 91:55:cf:97:9c:80:83:a7:94:20:cc:b8:c2:62:b5:6c:17:48: fc:76:a5:75:3b:58:9e:09:1d:4f:3a:6f:cf:0c:64:ba:83:fe: 90:b1:c5:c3:7a:94:c0:04:4f:a9:90:a3:88:9d:93:cb:df:63: 7a:cc:5a:d0:e0:1b:7f:e7:b1:d0:cb:3f:f8:05:b3:32:90:2d: fa:81:37:72:57:37:fa:61:54:35:d2:30:a4:4d:eb:5b:d2:71: 74:9a:03:01:dd:80:18:d2:4a:0c:ec:1b:d3:0a:ea:4d:13:e3: 91:6d:e3:6a:28:dd:87:e4:1e:f8:40:2b:11:26:62:a3:d3:9d: cc:ff:f2:d3:81:7b:ea:16:4b:78:2e:39:80:65:f4:9b:f8:90: c0:76:3e:05:78:cf:72:5f:be:f1:6b:6b:46:de:70:ba:ae:ad: 69:f8:34:8b -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUIK+7P4pja+BYXT1GdlNMzpwM3/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIxMVoX DTI3MDUwMTA5MjcxMVowMzExMC8GA1UEAxMoQ0UxM0RFN0FCQjUyMTUxOEU0MDQy NjlEMzk4QjMzQTlFNjc0MEJBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMo3I8hdykyWyqSKt0HAzufRfi2r+DP7AK1eW2xM4opJW7ilRTlgoPLuIasb pqNdmqAbvhYhE3Q6W+4NuAKw3N+5MQeRwRvf0wUnJCVx6Bpv5HMGpdxZNd/c2eU9 Vbj68ACcU3Lo8PVPXzhN75sOQASoQodOr0oVh2LD9OLR333ryKgttCcjeCwQ5PhC z950MxuVm8F6sdN0LQsckc8C5VBxGOb2UTL1SYTSw/CYFB9jnkt8M+0XVRCxOq1L 1Q2yFnTjPZKdWE9s9J98o5UJ9b3ZdODzOvPmVJCM9XXm96A2/I5rMj847hEmU6pi H9db9fuOxVS+EmwfZDihwkdEDa8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTOE956 u1IVGOQEJp05izOp5nQLrTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5MjMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9vfAMA0GCSqGSIb3DQEBCwUAA4IBAQA0Nv2bUtBbjXkzR5W11INT MjmlLFx1gzvDYsgHT+Hux2N8BF5kFabLpNqbpWaZPxv7oGsbwJJqRU7kSF4QiXCq fn7Yxs/YZQKqhLcH0GP+pjPVzj5lEDYBSxORVc+XnICDp5QgzLjCYrVsF0j8dqV1 O1ieCR1POm/PDGS6g/6QscXDepTABE+pkKOInZPL32N6zFrQ4Bt/57HQyz/4BbMy kC36gTdyVzf6YVQ10jCkTetb0nF0mgMB3YAY0koM7BvTCupNE+ORbeNqKN2H5B74 QCsRJmKj053M//LTgXvqFkt4LjmAZfSb+JDAdj4FeM9yX77xa2tG3nC6rq1p+DSL -----END CERTIFICATE-----Generated at Sat May 2 22:50:46 2026 by rpki-client