$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139380.roa File: AS139380.roa (raw, json) Hash identifier: c0W+XSGPiMkZ7je78echBokDOs2sGjsRSsJon8tETDM= Subject key identifier: 32:10:4D:04:3F:06:C2:AC:15:5E:46:4D:1F:08:58:1B:F7:44:AB:25 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 638F76DF2A031F3471CD82E5925062DBEC664912 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139380.roa Signing time: Sat 02 May 2026 08:36:08 +0000 ROA not before: Sat 02 May 2026 08:31:08 +0000 ROA not after: Sat 01 May 2027 08:36:08 +0000 asID: 139380 IP address blocks: 103.239.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:8f:76:df:2a:03:1f:34:71:cd:82:e5:92:50:62:db:ec:66:49:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:08 2026 GMT Not After : May 1 08:36:08 2027 GMT Subject: CN=32104D043F06C2AC155E464D1F08581BF744AB25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:02:9c:11:2a:b2:0d:8a:15:43:15:fc:71:e7: d7:45:60:46:bf:34:f6:d3:e1:d9:64:f6:89:b3:0c: 07:16:ad:01:d9:3b:e6:c7:d0:fa:76:ec:9c:ec:af: d6:8a:cb:6b:9d:4b:13:64:13:94:90:d5:07:a4:c4: a1:0d:14:96:09:19:c8:e5:c3:57:2b:e0:3a:e9:b0: 4c:73:90:45:7a:26:cb:af:ef:f4:b9:5d:30:29:fd: c2:3a:0f:21:5c:e9:4c:6a:da:2d:6a:1c:59:cf:f1: 30:88:98:a1:1a:b9:62:50:4e:a6:98:4e:58:1a:dd: ce:0a:0d:ba:8c:f4:ab:ea:9e:13:5a:64:0a:c6:2b: d1:28:e8:81:fc:83:96:f5:0b:c1:05:c5:de:58:a6: 74:61:b5:0f:72:a4:e1:b7:b2:ab:43:2f:bf:4b:2f: 58:c8:8d:cd:1e:e6:f8:b3:d7:3b:10:be:48:f5:90: 4e:2b:d4:30:e7:79:b2:f4:2f:43:59:10:cd:ef:80: 4b:73:89:f9:08:78:b1:c8:be:c8:d5:6d:34:33:95: 96:02:65:9c:87:75:3c:b6:9c:6d:0a:5d:4c:f4:a5: 80:93:a2:e3:4d:99:4b:ad:fa:ca:68:fc:b7:d0:21: f7:a8:cc:7f:42:dc:69:08:19:a4:31:be:6f:17:1a: 12:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:10:4D:04:3F:06:C2:AC:15:5E:46:4D:1F:08:58:1B:F7:44:AB:25 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139380.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.126.0/24 Signature Algorithm: sha256WithRSAEncryption 07:a3:f2:34:6e:ed:f1:3a:68:a2:a3:9a:dd:0c:ee:ee:35:4b: 0f:0f:98:03:07:6d:fc:0c:a3:41:1f:fd:b9:c4:0d:da:b8:f5: 0a:fc:bd:31:7b:43:19:fd:19:16:83:cd:93:f7:e6:75:66:12: 19:d2:43:56:ab:41:db:97:03:57:b2:77:52:76:4d:c2:27:d0: 11:63:5d:3a:0f:ae:27:ed:5e:52:e8:c2:eb:24:b1:0d:68:f4: a2:2d:a6:0e:37:74:f0:fb:07:8c:73:d8:61:be:0b:ac:34:f5: 77:1d:17:86:e4:9f:6b:f4:f7:ea:5c:2f:35:82:ec:a3:c8:d4: de:10:eb:22:65:b5:89:a6:c9:68:c6:64:13:9c:df:82:f0:8d: 58:a8:53:c7:49:3a:b8:43:8d:62:fc:a5:ac:3e:09:22:58:77: 26:08:14:9f:ac:4a:ed:ef:21:85:45:05:5e:21:02:4c:81:90: 0a:c2:62:74:fa:c6:aa:4d:4d:0b:29:bd:45:12:45:12:d2:ab: 85:64:e7:5c:d4:5f:92:26:34:09:72:e4:b2:65:01:7c:55:65: c8:5d:3b:05:df:4c:9e:f6:8f:41:6b:29:40:b5:e6:5f:7b:d0: de:d7:ed:58:62:c7:f9:09:49:33:59:5b:e2:ef:e9:26:bc:b1: 4e:0e:4b:84 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUY4923yoDHzRxzYLlklBi2+xmSRIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzEwOFoX DTI3MDUwMTA4MzYwOFowMzExMC8GA1UEAxMoMzIxMDREMDQzRjA2QzJBQzE1NUU0 NjREMUYwODU4MUJGNzQ0QUIyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUCnBEqsg2KFUMV/HHn10VgRr809tPh2WT2ibMMBxatAdk75sfQ+nbsnOyv 1orLa51LE2QTlJDVB6TEoQ0UlgkZyOXDVyvgOumwTHOQRXomy6/v9LldMCn9wjoP IVzpTGraLWocWc/xMIiYoRq5YlBOpphOWBrdzgoNuoz0q+qeE1pkCsYr0SjogfyD lvULwQXF3limdGG1D3Kk4beyq0Mvv0svWMiNzR7m+LPXOxC+SPWQTivUMOd5svQv Q1kQze+AS3OJ+Qh4sci+yNVtNDOVlgJlnId1PLacbQpdTPSlgJOi402ZS636ymj8 t9Ah96jMf0LcaQgZpDG+bxcaEskCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQyEE0E PwbCrBVeRk0fCFgb90SrJTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5MzgwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ+9+MA0GCSqGSIb3DQEBCwUAA4IBAQAHo/I0bu3xOmiio5rdDO7uNUsP D5gDB238DKNBH/25xA3auPUK/L0xe0MZ/RkWg82T9+Z1ZhIZ0kNWq0HblwNXsndS dk3CJ9ARY106D64n7V5S6MLrJLENaPSiLaYON3Tw+weMc9hhvgusNPV3HReG5J9r 9PfqXC81guyjyNTeEOsiZbWJpsloxmQTnN+C8I1YqFPHSTq4Q41i/KWsPgkiWHcm CBSfrErt7yGFRQVeIQJMgZAKwmJ0+saqTU0LKb1FEkUS0quFZOdc1F+SJjQJcuSy ZQF8VWXIXTsF30ye9o9BaylAteZfe9De1+1YYsf5CUkzWVvi7+kmvLFODkuE -----END CERTIFICATE-----Generated at Sun May 3 01:44:01 2026 by rpki-client