$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139366.roa File: AS139366.roa (raw, json) Hash identifier: dt1Yyfj0mUJyOoxgd4fjqyVlppoUQqYjlfiW+GJis9M= Subject key identifier: 88:49:A9:3F:D3:D8:29:A2:6B:02:12:8F:9F:FF:55:09:36:F1:67:76 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2CFA5A0F6BD8179B1E6C406429D316C59137B336 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139366.roa Signing time: Sat 02 May 2026 21:06:01 +0000 ROA not before: Sat 02 May 2026 21:01:01 +0000 ROA not after: Sat 01 May 2027 21:06:01 +0000 asID: 139366 IP address blocks: 103.141.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fa:5a:0f:6b:d8:17:9b:1e:6c:40:64:29:d3:16:c5:91:37:b3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:01:01 2026 GMT Not After : May 1 21:06:01 2027 GMT Subject: CN=8849A93FD3D829A26B02128F9FFF550936F16776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:52:e4:61:12:b9:35:a8:35:8c:c2:43:83: bb:5c:6e:ea:29:5f:a3:0e:7c:5a:de:59:44:10:54: 6b:c6:92:f2:4a:17:55:bf:99:e7:92:d6:9c:ba:7c: 19:98:85:2f:61:2b:43:9c:e2:fc:f3:69:4b:a7:92: 8c:64:b1:e8:1b:58:dc:03:04:da:d1:79:ba:61:34: fd:d0:c0:24:83:5e:73:27:dd:9d:e7:12:4a:56:16: 14:f1:52:4a:4b:7a:9c:bc:97:36:8b:0e:d9:e7:ac: a2:06:94:9c:72:15:3d:cc:aa:6a:5d:29:39:e0:24: 81:b5:19:a2:b1:d7:66:de:6e:d1:e0:85:43:2f:6f: ed:b7:a1:86:1d:97:27:97:09:92:12:9b:ad:92:f2: 1e:5d:a9:18:81:b1:63:39:dc:70:6b:f7:8c:c5:8f: 21:c8:ac:c0:f3:18:f5:3f:7c:54:4c:5a:c9:3d:64: 68:ff:41:60:b3:64:f8:b6:3f:3c:2a:d6:a2:90:cf: 58:90:54:5c:93:28:c2:00:27:36:ef:7b:6f:5c:2e: 72:60:82:fe:57:56:7d:81:fb:1b:58:24:57:2f:bc: 65:9e:e2:c7:d3:8c:2d:d4:03:cf:a1:d3:c5:86:c2: 4f:e0:9b:24:7a:33:61:54:2d:51:d2:6a:54:f8:71: 21:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:49:A9:3F:D3:D8:29:A2:6B:02:12:8F:9F:FF:55:09:36:F1:67:76 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139366.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.230.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:49:dd:90:47:c4:2e:14:7d:ff:c0:e8:17:e1:39:a3:6a:2a: 0d:63:a0:44:c7:6e:e5:13:85:2f:7d:5e:0a:4d:a0:17:7d:db: 27:f9:42:ca:cd:59:a3:57:26:1b:89:2d:e7:21:93:e0:37:c7: a8:48:83:bd:54:0d:c1:5b:d4:28:da:3d:8f:1a:87:de:84:cd: 9b:db:20:05:0e:d3:1f:76:bb:89:00:37:d7:ce:c9:9c:c0:bc: 63:79:06:98:53:23:65:13:49:8e:2f:b3:05:16:8a:83:b3:65: d9:da:ed:a4:fa:f8:92:4a:b7:5f:b5:1f:2a:5f:ec:6e:b0:2e: e5:ca:7f:52:5d:fd:d9:13:66:8d:b6:e9:e5:9f:33:5b:c3:15: fe:b1:dc:14:fa:de:0c:eb:be:f5:1d:57:3f:9d:95:33:2c:59: 6d:dd:82:2c:fb:02:5d:5c:5c:ad:46:18:66:38:7a:a4:8b:2f: 0b:1a:83:a9:0e:b9:be:5a:72:55:48:a4:a9:bb:08:68:7c:f0: 15:fe:d3:55:45:35:4b:19:51:89:c4:1f:02:86:8b:f9:e9:70: 44:2b:cb:28:7a:ff:f9:0e:49:97:15:a0:5b:0b:7d:0b:f9:72: cc:03:9f:71:e8:f8:56:5c:91:98:b6:a6:ae:92:04:c1:54:26: 36:a3:ea:97 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIULPpaD2vYF5sebEBkKdMWxZE3szYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDEwMVoX DTI3MDUwMTIxMDYwMVowMzExMC8GA1UEAxMoODg0OUE5M0ZEM0Q4MjlBMjZCMDIx MjhGOUZGRjU1MDkzNkYxNjc3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRnUuRhErk1qDWMwkODu1xu6ilfow58Wt5ZRBBUa8aS8koXVb+Z55LWnLp8 GZiFL2ErQ5zi/PNpS6eSjGSx6BtY3AME2tF5umE0/dDAJINecyfdnecSSlYWFPFS Skt6nLyXNosO2eesogaUnHIVPcyqal0pOeAkgbUZorHXZt5u0eCFQy9v7behhh2X J5cJkhKbrZLyHl2pGIGxYznccGv3jMWPIciswPMY9T98VExayT1kaP9BYLNk+LY/ PCrWopDPWJBUXJMowgAnNu97b1wucmCC/ldWfYH7G1gkVy+8ZZ7ix9OMLdQDz6HT xYbCT+CbJHozYVQtUdJqVPhxIQ8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSISak/ 09gpomsCEo+f/1UJNvFndjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5MzY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ43mMA0GCSqGSIb3DQEBCwUAA4IBAQA+Sd2QR8QuFH3/wOgX4TmjaioN Y6BEx27lE4UvfV4KTaAXfdsn+ULKzVmjVyYbiS3nIZPgN8eoSIO9VA3BW9Qo2j2P GofehM2b2yAFDtMfdruJADfXzsmcwLxjeQaYUyNlE0mOL7MFFoqDs2XZ2u2k+viS SrdftR8qX+xusC7lyn9SXf3ZE2aNtunlnzNbwxX+sdwU+t4M6771HVc/nZUzLFlt 3YIs+wJdXFytRhhmOHqkiy8LGoOpDrm+WnJVSKSpuwhofPAV/tNVRTVLGVGJxB8C hov56XBEK8soev/5DkmXFaBbC30L+XLMA59x6PhWXJGYtqaukgTBVCY2o+qX -----END CERTIFICATE-----Generated at Sun May 3 01:40:56 2026 by rpki-client