$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139365.roa File: AS139365.roa (raw, json) Hash identifier: Ypgd3otJ+iokAaKrucXaIMdVDKzaIMB1ylCt0gH+D/M= Subject key identifier: 5F:0C:EF:9A:ED:03:82:14:C4:48:D1:04:ED:D1:4E:A3:BC:53:C0:7A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 414E964EE8BFA25E95B66F8B3D78BF434D3E298E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139365.roa Signing time: Sat 02 May 2026 17:34:11 +0000 ROA not before: Sat 02 May 2026 17:29:11 +0000 ROA not after: Sat 01 May 2027 17:34:11 +0000 asID: 139365 IP address blocks: 103.141.244.0/23 maxlen: 24 202.169.253.0/24 maxlen: 24 2001:df1:1d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4e:96:4e:e8:bf:a2:5e:95:b6:6f:8b:3d:78:bf:43:4d:3e:29:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 17:29:11 2026 GMT Not After : May 1 17:34:11 2027 GMT Subject: CN=5F0CEF9AED038214C448D104EDD14EA3BC53C07A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0a:17:db:bb:4d:5d:18:ae:f9:63:10:d6:9f: fe:a4:c3:c5:06:e1:82:bb:5d:98:ce:84:68:2e:cd: 7b:fa:82:b7:c8:5a:8d:0f:10:9d:ed:2a:97:fc:a4: d2:10:45:58:f8:90:1d:de:44:27:02:91:27:a0:ae: bf:0e:de:bb:2a:24:84:86:c3:fa:05:3d:3b:97:91: 55:c3:62:6f:06:53:4a:1d:ae:05:97:f4:bc:2e:08: d8:50:19:50:24:0e:02:f1:6e:c5:ed:00:38:2d:eb: b8:19:3a:89:b0:84:e4:c3:a7:67:e4:7a:28:35:e2: 9f:4e:a2:9d:a4:be:4b:b6:d7:01:25:d5:8a:f3:ca: f7:1b:30:f3:dd:89:d1:9b:df:a8:d6:7a:87:a4:3e: ef:e3:c2:e1:1d:9d:72:ba:46:41:f3:94:6a:9a:09: 09:b4:3f:5d:7e:1b:c1:bb:a0:d0:0b:94:e9:2e:54: 72:d3:8f:0c:27:db:dc:b6:73:76:34:27:16:09:44: 1b:3f:a8:7d:13:41:8a:d7:8e:77:78:fd:75:bf:8a: 71:75:1e:6b:a1:89:e8:a9:a8:d4:40:f5:24:55:36: 34:65:f4:a7:27:a4:dc:2e:b6:a7:df:3b:80:e2:55: 61:b4:ff:f8:e2:20:81:f0:6d:3f:c7:2e:36:38:d8: 7b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0C:EF:9A:ED:03:82:14:C4:48:D1:04:ED:D1:4E:A3:BC:53:C0:7A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139365.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.244.0/23 202.169.253.0/24 IPv6: 2001:df1:1d80::/48 Signature Algorithm: sha256WithRSAEncryption 9a:70:53:18:37:9e:7d:4b:e0:2b:2e:d1:e7:16:2e:c2:06:36: eb:03:0c:ab:6a:a9:ca:a3:67:2c:5f:d1:a2:3a:93:35:26:a7: 1c:04:9d:5f:fb:37:7d:64:d9:ee:27:18:fd:de:40:d5:d9:e4: d2:20:ff:df:19:5c:be:0a:d4:41:10:dd:b8:c2:f3:68:b1:4b: ff:81:ab:89:78:0a:a0:54:86:ff:c1:bb:1f:c9:ce:51:65:00: cc:25:a1:76:e2:ce:48:0f:ab:df:9a:cc:21:bc:46:75:ee:f7: c3:7f:dc:4f:0d:3f:47:79:2d:9a:03:9b:15:d4:ac:5c:80:02: 70:dd:b8:42:1c:6c:0c:24:4d:c8:05:eb:0e:61:1b:f2:22:58: 8a:ea:ec:67:03:62:75:a8:30:ac:ce:71:b9:af:89:08:f7:75: 29:39:b0:5d:7b:57:c4:98:91:07:fe:3d:5a:ad:6e:d1:39:06: 2e:ec:62:e8:33:1d:c3:48:d2:b5:11:48:28:31:06:e5:e2:29: a0:51:4e:52:4d:89:25:da:0b:37:c2:d9:85:76:18:69:82:5b: 3a:95:65:af:2b:22:1a:65:74:53:b7:91:cf:7c:af:77:92:05: 29:8b:b2:e9:a9:b2:90:ef:6e:a3:09:a9:77:da:04:86:3a:83: 67:63:9a:97 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUQU6WTui/ol6Vtm+LPXi/Q00+KY4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE3MjkxMVoX DTI3MDUwMTE3MzQxMVowMzExMC8GA1UEAxMoNUYwQ0VGOUFFRDAzODIxNEM0NDhE MTA0RUREMTRFQTNCQzUzQzA3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI4KF9u7TV0YrvljENaf/qTDxQbhgrtdmM6EaC7Ne/qCt8hajQ8Qne0ql/yk 0hBFWPiQHd5EJwKRJ6Cuvw7euyokhIbD+gU9O5eRVcNibwZTSh2uBZf0vC4I2FAZ UCQOAvFuxe0AOC3ruBk6ibCE5MOnZ+R6KDXin06inaS+S7bXASXVivPK9xsw892J 0ZvfqNZ6h6Q+7+PC4R2dcrpGQfOUapoJCbQ/XX4bwbug0AuU6S5UctOPDCfb3LZz djQnFglEGz+ofRNBiteOd3j9db+KcXUea6GJ6Kmo1ED1JFU2NGX0pyek3C62p987 gOJVYbT/+OIggfBtP8cuNjjYe7sCAwEAAaOCAeMwggHfMB0GA1UdDgQWBBRfDO+a 7QOCFMRI0QTt0U6jvFPAejAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5MzY1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIA ATAMAwQBZ430AwQAyqn9MA8EAgACMAkDBwAgAQ3xHYAwDQYJKoZIhvcNAQELBQAD ggEBAJpwUxg3nn1L4Csu0ecWLsIGNusDDKtqqcqjZyxf0aI6kzUmpxwEnV/7N31k 2e4nGP3eQNXZ5NIg/98ZXL4K1EEQ3bjC82ixS/+Bq4l4CqBUhv/Bux/JzlFlAMwl oXbizkgPq9+azCG8RnXu98N/3E8NP0d5LZoDmxXUrFyAAnDduEIcbAwkTcgF6w5h G/IiWIrq7GcDYnWoMKzOcbmviQj3dSk5sF17V8SYkQf+PVqtbtE5Bi7sYugzHcNI 0rURSCgxBuXiKaBRTlJNiSXaCzfC2YV2GGmCWzqVZa8rIhpldFO3kc98r3eSBSmL sumpspDvbqMJqXfaBIY6g2djmpc= -----END CERTIFICATE-----Generated at Sun May 3 00:42:29 2026 by rpki-client