$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139328.roa File: AS139328.roa (raw, json) Hash identifier: JxA8ERf/EJjezE3RDRxVeAmbU6Kksk6xXvxnvB5oKnY= Subject key identifier: 5A:51:06:E8:36:D1:CF:5C:7E:48:B4:D3:C3:59:21:2C:A6:14:64:AC Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 13DA282A53F6120438A519DFBCA19447160103F5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139328.roa Signing time: Sat 02 May 2026 08:35:27 +0000 ROA not before: Sat 02 May 2026 08:30:27 +0000 ROA not after: Sat 01 May 2027 08:35:27 +0000 asID: 139328 IP address blocks: 2001:df5:c740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:da:28:2a:53:f6:12:04:38:a5:19:df:bc:a1:94:47:16:01:03:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:27 2026 GMT Not After : May 1 08:35:27 2027 GMT Subject: CN=5A5106E836D1CF5C7E48B4D3C359212CA61464AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:dc:63:66:28:6c:81:0d:ea:6b:17:c0:b0: fd:7b:ee:67:f8:76:f4:b7:27:e5:e6:41:bc:7f:02: 4c:54:7c:71:8d:c7:81:65:34:18:27:fe:44:64:f6: 4c:b8:44:90:92:98:31:15:c7:87:97:29:bd:5c:5f: 05:8d:31:90:8f:6c:39:a5:5c:98:cf:35:3d:c4:2b: 34:af:6a:2f:86:a1:d7:37:a6:1c:15:a8:d2:53:e8: f5:b8:0f:59:5c:3d:a5:62:c1:aa:b5:a8:7f:95:81: 3b:f5:a6:21:65:76:b2:54:b2:95:27:48:5d:27:5f: 28:1e:d8:76:c2:fe:3f:a9:f6:89:0a:09:54:eb:0a: 28:3f:06:e0:65:a7:0a:9e:0b:cc:53:0c:3c:bc:a8: bf:4d:d9:0f:25:98:01:a1:bc:cc:e8:71:f7:bd:04: 44:12:b9:06:f2:61:fb:f2:44:ac:cc:2a:18:59:f1: c5:e4:6f:3b:68:c3:c8:71:0a:85:83:03:8a:c1:61: f2:3c:e0:bc:fb:66:6c:7b:02:57:20:77:62:02:c8: 56:74:8d:5c:08:a9:4e:f6:9b:b0:4c:44:ff:92:50: 1a:ba:2a:81:be:87:d4:47:b9:ae:94:0d:f5:69:e2: fe:28:58:6c:e3:bb:7f:56:5e:b5:58:6b:f1:11:5e: 23:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:51:06:E8:36:D1:CF:5C:7E:48:B4:D3:C3:59:21:2C:A6:14:64:AC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139328.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:c740::/48 Signature Algorithm: sha256WithRSAEncryption 55:64:45:98:89:f7:bf:0f:85:c6:4d:fa:1c:f1:6a:44:ea:c1: dc:02:89:98:dc:c5:1c:63:be:8c:b1:e6:37:b0:28:4e:e9:4f: 82:fa:b8:af:e1:7c:2a:f8:f2:4b:bd:46:52:76:f4:c4:0a:e6: ba:0c:5f:f8:e5:96:60:a7:72:ee:6c:78:e7:f7:fb:79:b9:bc: 9e:7b:1f:af:2f:15:9f:33:71:aa:65:71:64:78:0e:45:c7:1b: 44:df:17:e1:58:46:8d:eb:0f:e1:4c:01:a8:af:e5:c4:18:76: 48:db:b4:76:cf:1d:10:8e:1a:9e:ec:ae:dc:fc:ab:5c:f1:1a: b3:97:43:32:28:3a:17:69:c3:d7:f2:87:46:28:30:54:95:c0: 68:4f:4f:a6:e7:ad:83:38:40:7a:2a:12:13:33:1e:d4:d2:a2: 1f:9d:f6:55:91:cd:9a:9f:c0:63:31:6c:c3:e6:55:5e:63:7d: 06:cc:06:11:67:65:de:fe:4b:2c:08:97:5a:95:20:23:b1:ec: 11:2c:6e:ab:64:47:e6:b6:b7:6a:a9:fb:d0:a6:62:59:85:bb: 1f:98:bc:83:a5:52:a3:55:17:2d:63:b2:54:f0:c3:04:00:f6: 32:0d:bd:69:d6:d4:d1:e4:bb:f6:79:40:81:ab:16:9c:03:b5: e5:40:ad:fa -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUE9ooKlP2EgQ4pRnfvKGURxYBA/UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzAyN1oX DTI3MDUwMTA4MzUyN1owMzExMC8GA1UEAxMoNUE1MTA2RTgzNkQxQ0Y1QzdFNDhC NEQzQzM1OTIxMkNBNjE0NjRBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFK3GNmKGyBDeprF8Cw/XvuZ/h29Lcn5eZBvH8CTFR8cY3HgWU0GCf+RGT2 TLhEkJKYMRXHh5cpvVxfBY0xkI9sOaVcmM81PcQrNK9qL4ah1zemHBWo0lPo9bgP WVw9pWLBqrWof5WBO/WmIWV2slSylSdIXSdfKB7YdsL+P6n2iQoJVOsKKD8G4GWn Cp4LzFMMPLyov03ZDyWYAaG8zOhx970ERBK5BvJh+/JErMwqGFnxxeRvO2jDyHEK hYMDisFh8jzgvPtmbHsCVyB3YgLIVnSNXAipTvabsExE/5JQGroqgb6H1Ee5rpQN 9Wni/ihYbOO7f1ZetVhr8RFeIycCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRaUQbo NtHPXH5ItNPDWSEsphRkrDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5MzI4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9cdAMA0GCSqGSIb3DQEBCwUAA4IBAQBVZEWYife/D4XGTfoc8WpE 6sHcAomY3MUcY76MseY3sChO6U+C+riv4Xwq+PJLvUZSdvTECua6DF/45ZZgp3Lu bHjn9/t5ubyeex+vLxWfM3GqZXFkeA5FxxtE3xfhWEaN6w/hTAGor+XEGHZI27R2 zx0Qjhqe7K7c/Ktc8Rqzl0MyKDoXacPX8odGKDBUlcBoT0+m562DOEB6KhITMx7U 0qIfnfZVkc2an8BjMWzD5lVeY30GzAYRZ2Xe/kssCJdalSAjsewRLG6rZEfmtrdq qfvQpmJZhbsfmLyDpVKjVRctY7JU8MMEAPYyDb1p1tTR5Lv2eUCBqxacA7XlQK36 -----END CERTIFICATE-----Generated at Sun May 3 00:42:02 2026 by rpki-client