$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139400.roa File: AS139400.roa (raw, json) Hash identifier: jxKPcbzwnIJcrxEVlFbHWshaD4CzdVkK8aojt00Z/jo= Subject key identifier: 29:EB:1B:05:B8:32:FC:3E:FC:D2:97:94:7E:D0:30:DE:83:26:EB:B1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2B37A1D97B430545C5094EB603D7D294587672 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139400.roa Signing time: Sat 02 May 2026 08:35:35 +0000 ROA not before: Sat 02 May 2026 08:30:35 +0000 ROA not after: Sat 01 May 2027 08:35:35 +0000 asID: 139400 IP address blocks: 103.143.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:37:a1:d9:7b:43:05:45:c5:09:4e:b6:03:d7:d2:94:58:76:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:35 2026 GMT Not After : May 1 08:35:35 2027 GMT Subject: CN=29EB1B05B832FC3EFCD297947ED030DE8326EBB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:27:22:64:12:19:18:36:29:17:ed:f3:a3: 18:e3:c6:17:37:2a:39:ee:81:13:41:0d:9e:8e:c2: 87:eb:bc:b2:c6:e5:bf:58:66:bc:b0:c6:c6:5c:7b: 9d:d9:59:e6:4e:2e:94:5e:43:65:4e:c4:19:da:fd: 67:a4:36:f9:6c:db:31:41:76:f0:aa:96:8c:f3:13: 84:32:ca:82:77:98:11:9a:5b:fd:19:e5:36:da:44: c0:f7:97:77:2c:e0:74:16:95:76:1d:00:f5:63:a9: 9b:58:01:6b:09:33:f0:b1:b7:22:d4:33:33:ca:ab: 41:e8:1f:17:8a:8e:10:84:04:76:f4:a2:05:b1:0e: d9:bd:b6:08:94:91:87:cd:cc:4b:68:b5:0c:03:2e: e4:5a:28:78:be:0e:f1:9e:6b:8c:74:8d:ad:97:f7: 4b:73:8e:21:01:4d:33:f5:86:e2:c9:24:f5:73:88: a3:ee:cf:0e:59:20:b1:7b:0c:20:51:90:d8:1e:66: 01:1c:c2:8c:ab:48:d9:99:ba:56:45:92:4d:ae:24: e0:6e:2e:19:63:1b:de:6f:15:62:47:09:86:d3:4f: 43:d0:27:f0:c5:53:60:3d:33:ec:26:1d:85:73:83: 67:97:db:87:4b:01:56:a1:d9:df:98:86:f6:b1:06: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EB:1B:05:B8:32:FC:3E:FC:D2:97:94:7E:D0:30:DE:83:26:EB:B1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139400.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.170.0/23 Signature Algorithm: sha256WithRSAEncryption 70:da:f3:de:1d:7a:8f:3c:48:f6:92:e4:89:0f:bb:47:94:74: 4a:37:36:90:b3:17:7a:45:1b:c3:20:b4:c1:66:07:ea:02:00: 8e:75:0f:32:3e:ca:c0:68:74:23:77:34:c8:f3:28:f3:be:0e: 02:5e:cf:09:4b:0c:3e:b9:85:c4:6c:bd:e2:3e:fe:87:f0:10: 97:0a:05:9d:ff:82:e6:c3:64:e2:c7:d1:e1:7b:5d:78:0f:18: c9:42:58:f8:85:41:aa:d8:fd:39:9c:b5:c5:02:29:b1:f1:97: 65:0b:a9:3a:c0:0f:96:9d:b5:e6:95:ba:21:8a:3f:d7:78:ec: 2d:3b:0e:5a:07:08:b2:d1:78:94:fb:47:8c:63:f2:44:19:dc: e2:f7:9f:d0:61:f6:1e:5e:37:83:ec:49:10:15:0b:c8:a5:b9: 49:2b:78:9e:af:6f:94:93:21:d0:2a:d8:d3:1c:fd:d3:d0:46: fd:bd:c5:13:da:ea:3a:38:ea:bc:14:a5:03:6c:7d:01:f6:91: 05:3c:31:4e:ea:b3:38:a9:33:0e:05:7d:f5:03:e4:83:90:01: 64:8b:07:76:c8:24:0f:7d:cc:cc:40:58:ec:2c:cf:fe:0f:c0: 0f:cb:19:82:cc:b4:a2:14:8b:b1:82:76:a9:09:f8:54:33:b3: 81:fc:f7:a3 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgITKzeh2XtDBUXFCU62A9fSlFh2cjANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDQxOUE4NUNERjhB NDMwNTE2OTQ2ODY5RDFDNDkyMDM3RDZCQzZFOUUwHhcNMjYwNTAyMDgzMDM1WhcN MjcwNTAxMDgzNTM1WjAzMTEwLwYDVQQDEygyOUVCMUIwNUI4MzJGQzNFRkNEMjk3 OTQ3RUQwMzBERTgzMjZFQkIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFonImQSGRg2KRft86MY48YXNyo57oETQQ2ejsKH67yyxuW/WGa8sMbGXHud 2VnmTi6UXkNlTsQZ2v1npDb5bNsxQXbwqpaM8xOEMsqCd5gRmlv9GeU22kTA95d3 LOB0FpV2HQD1Y6mbWAFrCTPwsbci1DMzyqtB6B8Xio4QhAR29KIFsQ7ZvbYIlJGH zcxLaLUMAy7kWih4vg7xnmuMdI2tl/dLc44hAU0z9YbiyST1c4ij7s8OWSCxewwg UZDYHmYBHMKMq0jZmbpWRZJNriTgbi4ZYxvebxViRwmG009D0CfwxVNgPTPsJh2F c4Nnl9uHSwFWodnfmIb2sQZnIQIDAQABo4IBzDCCAcgwHQYDVR0OBBYEFCnrGwW4 Mvw+/NKXlH7QMN6DJuuxMB8GA1UdIwQYMBaAFEGahc34pDBRaUaGnRxJIDfWvG6e MA4GA1UdDwEB/wQEAwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kt cnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80MTlBODVDREY4QTQzMDUxNjk0 Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFGemZpa01GRnBSb2FkSEVrZ045 YThicDQuY2VyMFIGCCsGAQUFBwELBEYwRDBCBggrBgEFBQcwC4Y2cnN5bmM6Ly9y cGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvQVMxMzk0MDAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnj6owDQYJKoZIhvcNAQELBQADggEBAHDa894deo88SPaS5IkPu0eUdEo3 NpCzF3pFG8MgtMFmB+oCAI51DzI+ysBodCN3NMjzKPO+DgJezwlLDD65hcRsveI+ /ofwEJcKBZ3/gubDZOLH0eF7XXgPGMlCWPiFQarY/TmctcUCKbHxl2ULqTrAD5ad teaVuiGKP9d47C07DloHCLLReJT7R4xj8kQZ3OL3n9Bh9h5eN4PsSRAVC8iluUkr eJ6vb5STIdAq2NMc/dPQRv29xRPa6jo46rwUpQNsfQH2kQU8MU7qszipMw4FffUD 5IOQAWSLB3bIJA99zMxAWOwsz/4PwA/LGYLMtKIUi7GCdqkJ+FQzs4H896M= -----END CERTIFICATE-----Generated at Sun May 3 00:42:30 2026 by rpki-client