$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139388.roa File: AS139388.roa (raw, json) Hash identifier: vKG0iTyxUGsYrYZhemhNxUqn9R6jpGFjRIaYN7bjHFo= Subject key identifier: D8:1A:A0:21:8B:A1:03:81:96:32:09:C5:2B:AA:66:54:BB:F0:94:0A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 109186938479471399A51F63A0BB5306FD09A0C4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139388.roa Signing time: Sat 02 May 2026 09:24:05 +0000 ROA not before: Sat 02 May 2026 09:19:05 +0000 ROA not after: Sat 01 May 2027 09:24:05 +0000 asID: 139388 IP address blocks: 160.20.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:91:86:93:84:79:47:13:99:a5:1f:63:a0:bb:53:06:fd:09:a0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:19:05 2026 GMT Not After : May 1 09:24:05 2027 GMT Subject: CN=D81AA0218BA10381963209C52BAA6654BBF0940A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:af:f4:6e:ed:4d:5d:f3:b7:98:71:0d:4c:f9: e4:9d:bc:9f:87:58:9c:b4:29:48:d0:b5:63:7e:16: 6a:5f:1f:48:c6:61:c0:95:99:af:5a:65:3c:e0:c7: 08:c7:1e:0c:5a:cd:b8:ac:b0:86:a8:04:60:32:02: aa:5a:c1:a4:64:d5:0d:95:39:18:8c:1e:30:1d:fe: 88:43:fd:78:9d:f0:69:f1:3c:06:af:d2:0d:44:0d: 9e:aa:0e:f3:36:76:4b:5e:e1:65:0c:09:c6:dc:8e: 07:e8:7c:c7:6b:a3:17:07:05:09:27:9d:a3:98:55: 35:ec:95:90:09:4a:47:3d:62:4c:0f:44:25:ea:df: 39:69:e8:ab:ad:b9:bd:26:71:9f:8e:83:13:ab:c7: 18:ff:6c:58:47:de:e5:29:e7:06:d4:8d:e0:e4:a1: b7:3c:5a:59:c7:5f:c8:69:2b:f3:87:4b:31:c8:04: b8:e1:c1:0c:4b:e8:76:16:9b:88:88:f6:2c:e6:f2: 3b:2d:89:f9:49:2f:af:bd:ad:3e:94:d5:01:6e:6c: 33:5e:7b:cb:e2:eb:3f:61:d3:eb:e5:be:76:0a:0e: ed:6e:b0:52:09:e9:dc:8b:ab:bd:38:ee:82:e1:c0: 2f:1a:38:04:62:18:53:c9:04:f7:0b:69:08:82:e4: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1A:A0:21:8B:A1:03:81:96:32:09:C5:2B:AA:66:54:BB:F0:94:0A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139388.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.223.0/24 Signature Algorithm: sha256WithRSAEncryption 35:60:79:8b:8a:df:bb:f5:77:b6:05:a2:ff:0a:b7:13:19:df: ef:02:ac:bc:e2:43:15:5e:c9:55:96:c6:fa:6f:69:f8:23:5b: ee:67:8c:92:55:3c:4a:37:96:7d:02:bd:58:9c:29:b7:d6:9d: e5:50:a3:93:b3:27:2b:0a:78:45:f2:50:e0:6f:9f:cc:77:7b: 7c:89:4f:dd:02:c4:11:ec:c6:8a:2f:23:dc:9d:04:8d:fb:51: 54:63:d3:7d:df:55:8a:6c:5f:e2:f1:8f:9a:6c:1c:e5:8f:60: e8:ae:81:0f:fb:23:59:0f:39:f4:88:22:62:d5:e9:8a:40:77: a4:dd:b5:fc:fd:fe:9b:41:05:f8:78:63:d7:3f:e5:aa:b5:11: 0d:81:1c:f6:de:84:7b:ce:60:02:7d:99:11:80:69:42:0b:11: 0f:01:d8:62:47:5b:8d:6d:07:8c:ca:5c:f7:e6:83:8c:c5:d6: 35:2b:db:3a:82:b4:06:5d:4d:e7:ac:50:5d:47:9c:31:52:36: be:b0:31:ae:4b:c0:4e:39:52:b7:b4:af:fb:0e:6d:bc:f9:5f: 7c:fc:26:54:dd:a8:f8:16:f3:75:7d:b8:68:f3:42:bc:03:47: 2b:cf:0b:df:c8:b4:08:34:ae:51:2d:7b:23:ed:da:ff:f5:81: 89:7c:06:e1 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEJGGk4R5RxOZpR9joLtTBv0JoMQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTkwNVoX DTI3MDUwMTA5MjQwNVowMzExMC8GA1UEAxMoRDgxQUEwMjE4QkExMDM4MTk2MzIw OUM1MkJBQTY2NTRCQkYwOTQwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmv9G7tTV3zt5hxDUz55J28n4dYnLQpSNC1Y34Wal8fSMZhwJWZr1plPODH CMceDFrNuKywhqgEYDICqlrBpGTVDZU5GIweMB3+iEP9eJ3wafE8Bq/SDUQNnqoO 8zZ2S17hZQwJxtyOB+h8x2ujFwcFCSedo5hVNeyVkAlKRz1iTA9EJerfOWnoq625 vSZxn46DE6vHGP9sWEfe5SnnBtSN4OShtzxaWcdfyGkr84dLMcgEuOHBDEvodhab iIj2LObyOy2J+Ukvr72tPpTVAW5sM157y+LrP2HT6+W+dgoO7W6wUgnp3IurvTju guHALxo4BGIYU8kE9wtpCILkmjsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTYGqAh i6EDgZYyCcUrqmZUu/CUCjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5Mzg4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoBTfMA0GCSqGSIb3DQEBCwUAA4IBAQA1YHmLit+79Xe2BaL/CrcTGd/v Aqy84kMVXslVlsb6b2n4I1vuZ4ySVTxKN5Z9Ar1YnCm31p3lUKOTsycrCnhF8lDg b5/Md3t8iU/dAsQR7MaKLyPcnQSN+1FUY9N931WKbF/i8Y+abBzlj2DoroEP+yNZ Dzn0iCJi1emKQHek3bX8/f6bQQX4eGPXP+WqtRENgRz23oR7zmACfZkRgGlCCxEP AdhiR1uNbQeMylz35oOMxdY1K9s6grQGXU3nrFBdR5wxUja+sDGuS8BOOVK3tK/7 Dm28+V98/CZU3aj4FvN1fbho80K8A0crzwvfyLQINK5RLXsj7dr/9YGJfAbh -----END CERTIFICATE-----Generated at Sun May 3 00:42:20 2026 by rpki-client