$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139389.roa File: AS139389.roa (raw, json) Hash identifier: m0R3QNzL5FhvO/EAU782+HdpFz/VrBblwUqeKnpGn10= Subject key identifier: 2A:CB:54:9E:80:C4:13:68:16:F3:12:A6:80:FA:2E:CB:8A:E6:E2:3B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 554BF7553D8B50FAF56C752EA120498DA58773C5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139389.roa Signing time: Sat 02 May 2026 21:34:29 +0000 ROA not before: Sat 02 May 2026 21:29:29 +0000 ROA not after: Sat 01 May 2027 21:34:29 +0000 asID: 139389 IP address blocks: 103.143.70.0/23 maxlen: 24 2405:4a40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4b:f7:55:3d:8b:50:fa:f5:6c:75:2e:a1:20:49:8d:a5:87:73:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:29:29 2026 GMT Not After : May 1 21:34:29 2027 GMT Subject: CN=2ACB549E80C4136816F312A680FA2ECB8AE6E23B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:07:4b:3c:37:fa:48:d5:52:0e:72:ad:8c: 4e:5c:85:e9:fb:0b:e9:84:3a:e5:4d:fe:98:10:31: 13:e5:96:76:04:f7:eb:86:3c:13:97:c2:ce:ea:45: 3f:bc:8c:15:51:04:f4:15:61:55:d0:b8:d3:b1:95: 40:50:0d:7f:48:eb:39:20:f3:4b:ff:be:36:5a:06: c4:7c:30:a1:0d:93:2d:41:c9:4b:75:57:27:c2:81: a5:63:33:c5:ce:81:a2:a3:d5:ed:53:21:fd:d2:92: 26:41:30:4d:e5:77:98:cb:ef:b7:15:47:db:40:ab: 15:08:52:ed:84:1d:f2:f6:b0:c9:7a:cb:db:07:78: 40:14:79:60:37:2a:97:54:d8:88:eb:5c:ec:f5:26: 18:73:3d:d4:9e:f5:c2:a7:9b:90:46:9a:4d:c8:ed: a9:61:ad:36:b7:a1:de:d9:21:5e:44:62:62:da:89: 03:55:3a:ca:3c:64:4a:e9:e3:36:38:38:de:d6:4a: 57:1b:7b:b6:07:8d:8f:5f:72:4f:29:6a:42:00:22: 3d:d0:92:a0:77:9e:03:f4:8f:3d:21:67:ab:3a:6a: 4a:ed:da:d8:db:1b:cc:bf:b2:3b:6a:f1:7b:2d:ad: 97:44:05:29:28:25:07:ab:d4:96:e7:f3:f5:bc:ca: ca:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CB:54:9E:80:C4:13:68:16:F3:12:A6:80:FA:2E:CB:8A:E6:E2:3B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139389.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.70.0/23 IPv6: 2405:4a40::/32 Signature Algorithm: sha256WithRSAEncryption 6b:4d:0b:78:44:69:11:1f:54:77:16:00:c8:30:40:21:a8:20: ad:21:2a:b8:44:ac:45:00:7f:0f:fd:bd:08:38:80:95:3d:2b: d4:ff:6c:dd:b9:15:04:67:94:91:4d:de:b0:21:44:72:76:f2: b5:a9:b0:a5:a9:36:83:5f:60:1d:67:35:86:d8:da:24:b3:19: 5c:94:f1:3c:12:f4:a9:ec:3e:55:35:47:b3:7e:dd:ec:77:34: de:d4:33:1e:78:93:14:e7:ea:6d:97:98:c2:be:85:91:e5:92: 24:d9:24:b2:ac:0c:fd:39:1b:08:fb:f9:92:33:c2:77:cb:2b: 88:13:c2:65:13:5b:28:83:66:c5:67:fd:98:14:eb:03:46:78: 74:b9:00:ca:22:84:73:f4:df:58:95:4f:13:c7:e2:5b:d9:b4: 31:ce:8b:5b:c0:46:16:bf:ea:a3:4d:e3:a2:e9:fe:44:0a:12: e1:3e:8d:09:37:18:aa:3a:a4:51:8f:2c:7a:46:49:50:83:76: 83:8e:2f:b9:04:a3:77:71:ef:f4:49:56:d9:39:9b:8c:33:2f: c3:4b:f5:8a:df:ed:ab:f2:2f:a5:d3:2d:ee:f2:c3:80:58:84: 6e:5c:f4:e5:d5:fa:a3:ef:1c:f6:ec:19:d1:ad:bc:a1:8f:be: 85:ca:fe:53 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUVUv3VT2LUPr1bHUuoSBJjaWHc8UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjkyOVoX DTI3MDUwMTIxMzQyOVowMzExMC8GA1UEAxMoMkFDQjU0OUU4MEM0MTM2ODE2RjMx MkE2ODBGQTJFQ0I4QUU2RTIzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkBB0s8N/pI1VIOcq2MTlyF6fsL6YQ65U3+mBAxE+WWdgT364Y8E5fCzupF P7yMFVEE9BVhVdC407GVQFANf0jrOSDzS/++NloGxHwwoQ2TLUHJS3VXJ8KBpWMz xc6BoqPV7VMh/dKSJkEwTeV3mMvvtxVH20CrFQhS7YQd8vawyXrL2wd4QBR5YDcq l1TYiOtc7PUmGHM91J71wqebkEaaTcjtqWGtNreh3tkhXkRiYtqJA1U6yjxkSunj Njg43tZKVxt7tgeNj19yTylqQgAiPdCSoHeeA/SPPSFnqzpqSu3a2NsbzL+yO2rx ey2tl0QFKSglB6vUlufz9bzKygsCAwEAAaOCAdswggHXMB0GA1UdDgQWBBQqy1Se gMQTaBbzEqaA+i7LiubiOzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5Mzg5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQBZ49GMA0EAgACMAcDBQAkBUpAMA0GCSqGSIb3DQEBCwUAA4IBAQBrTQt4 RGkRH1R3FgDIMEAhqCCtISq4RKxFAH8P/b0IOICVPSvU/2zduRUEZ5SRTd6wIURy dvK1qbClqTaDX2AdZzWG2NoksxlclPE8EvSp7D5VNUezft3sdzTe1DMeeJMU5+pt l5jCvoWR5ZIk2SSyrAz9ORsI+/mSM8J3yyuIE8JlE1sog2bFZ/2YFOsDRnh0uQDK IoRz9N9YlU8Tx+Jb2bQxzotbwEYWv+qjTeOi6f5EChLhPo0JNxiqOqRRjyx6RklQ g3aDji+5BKN3ce/0SVbZOZuMMy/DS/WK3+2r8i+l0y3u8sOAWIRuXPTl1fqj7xz2 7BnRrbyhj76Fyv5T -----END CERTIFICATE-----Generated at Sun May 3 00:42:33 2026 by rpki-client