$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139421.roa File: AS139421.roa (raw, json) Hash identifier: A9Yr9qRwgc8jvtk8hufxg1EHOF0nHgHHbq5DNXz+BNo= Subject key identifier: 75:3F:50:DA:0C:4D:13:40:83:5C:CC:DC:E0:4A:81:D4:5B:2A:CB:6A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6433D3013CE739249B7EBC197C5A7CA23CA08F90 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139421.roa Signing time: Sat 02 May 2026 21:34:37 +0000 ROA not before: Sat 02 May 2026 21:29:37 +0000 ROA not after: Sat 01 May 2027 21:34:37 +0000 asID: 139421 IP address blocks: 2405:6b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:33:d3:01:3c:e7:39:24:9b:7e:bc:19:7c:5a:7c:a2:3c:a0:8f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:29:37 2026 GMT Not After : May 1 21:34:37 2027 GMT Subject: CN=753F50DA0C4D1340835CCCDCE04A81D45B2ACB6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:f6:01:25:c1:9f:20:52:4a:f2:04:ee:1c: f1:bc:96:b6:60:a7:64:ff:a3:80:c2:53:0a:ab:dc: bb:bd:fe:fa:c3:dc:fa:a1:82:5f:c3:57:bb:57:86: ff:fc:e9:ea:65:d5:39:f0:13:d3:36:eb:44:91:fe: bf:4a:af:0e:02:d3:a3:ac:19:4a:33:b0:40:ee:c2: 5f:41:e3:ae:da:36:dd:4c:d6:dd:c1:b8:2d:a1:54: 52:07:91:f8:58:00:f2:c9:52:06:d1:f6:f2:fe:d6: e7:d9:76:c1:38:e0:90:5e:40:de:a3:a7:2a:0b:89: 06:8e:05:87:76:c0:ab:6e:5e:35:f6:e0:56:07:06: 22:7f:f9:df:b7:03:c9:de:0e:93:90:e5:16:76:3d: 72:b4:37:ae:a7:f1:da:d5:1a:4e:64:ee:c3:f4:87: 41:86:fd:86:cf:0e:92:a9:17:07:d7:fd:47:bc:a6: ca:eb:9f:fa:ca:93:c0:5b:af:80:39:63:50:f2:ae: bb:66:48:8a:ca:a0:49:a8:03:08:d3:21:e8:3e:cf: 15:9f:18:18:35:1d:b0:9c:a2:40:d5:40:32:cf:ce: ab:9f:c1:5c:70:5d:f5:62:37:5b:05:5c:33:3b:26: 34:e5:9c:0e:6c:42:b4:97:e9:d9:af:ca:cd:a6:63: ad:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3F:50:DA:0C:4D:13:40:83:5C:CC:DC:E0:4A:81:D4:5B:2A:CB:6A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139421.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:6b40::/32 Signature Algorithm: sha256WithRSAEncryption 40:33:00:0b:f2:b3:f0:67:e7:bf:10:15:02:be:4a:29:ce:88: c6:33:29:4f:b2:48:37:56:d2:db:cf:48:07:25:46:25:9d:45: a0:58:f8:7d:9b:b2:ee:ac:73:d5:e2:49:79:2c:07:ab:a3:54: 55:70:a2:45:9f:47:ac:90:13:f4:1d:7e:6d:27:4b:08:0e:6e: 7f:f0:39:16:cc:d7:9a:5d:cb:bd:fb:6a:f4:05:e5:eb:e9:07: a9:b1:29:b3:40:d1:cb:c4:c3:45:6f:0c:ed:63:f9:87:7c:f9: a6:bc:4e:6e:a2:4c:9a:c4:a0:85:2c:d1:d3:1b:12:08:d9:fb: 17:b9:11:4f:7e:2b:56:b0:36:bf:e4:01:cc:81:3f:4d:1a:8a: b3:36:ba:ab:f7:61:f0:13:e0:73:fd:90:08:d9:8a:d6:d0:5c: d5:55:4a:e9:76:c2:4b:3f:d6:65:ea:09:75:5c:e1:9a:04:fa: 15:ab:8f:e9:33:b3:99:83:33:c3:05:ea:b0:e0:01:0c:26:c9: e9:66:ab:c9:90:a1:43:d0:26:9a:e7:49:fb:9e:3b:c8:ce:ac: 05:de:13:29:da:49:ce:56:7f:96:5a:2d:bb:31:80:4d:4e:ff: 2e:85:c0:f7:36:80:23:bf:bf:68:28:09:cf:67:a5:f9:b4:e2: 7c:d0:6f:dd -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUZDPTATznOSSbfrwZfFp8ojygj5AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjkzN1oX DTI3MDUwMTIxMzQzN1owMzExMC8GA1UEAxMoNzUzRjUwREEwQzREMTM0MDgzNUND Q0RDRTA0QTgxRDQ1QjJBQ0I2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+X9gElwZ8gUkryBO4c8byWtmCnZP+jgMJTCqvcu73++sPc+qGCX8NXu1eG //zp6mXVOfAT0zbrRJH+v0qvDgLTo6wZSjOwQO7CX0Hjrto23UzW3cG4LaFUUgeR +FgA8slSBtH28v7W59l2wTjgkF5A3qOnKguJBo4Fh3bAq25eNfbgVgcGIn/537cD yd4Ok5DlFnY9crQ3rqfx2tUaTmTuw/SHQYb9hs8OkqkXB9f9R7ymyuuf+sqTwFuv gDljUPKuu2ZIisqgSagDCNMh6D7PFZ8YGDUdsJyiQNVAMs/Oq5/BXHBd9WI3WwVc MzsmNOWcDmxCtJfp2a/KzaZjrXUCAwEAAaOCAc0wggHJMB0GA1UdDgQWBBR1P1Da DE0TQINczNzgSoHUWyrLajAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5NDIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAVrQDANBgkqhkiG9w0BAQsFAAOCAQEAQDMAC/Kz8GfnvxAVAr5KKc6I xjMpT7JIN1bS289IByVGJZ1FoFj4fZuy7qxz1eJJeSwHq6NUVXCiRZ9HrJAT9B1+ bSdLCA5uf/A5FszXml3Lvftq9AXl6+kHqbEps0DRy8TDRW8M7WP5h3z5prxObqJM msSghSzR0xsSCNn7F7kRT34rVrA2v+QBzIE/TRqKsza6q/dh8BPgc/2QCNmK1tBc 1VVK6XbCSz/WZeoJdVzhmgT6FauP6TOzmYMzwwXqsOABDCbJ6WaryZChQ9AmmudJ +547yM6sBd4TKdpJzlZ/llotuzGATU7/LoXA9zaAI7+/aCgJz2el+bTifNBv3Q== -----END CERTIFICATE-----Generated at Sun May 3 00:42:33 2026 by rpki-client