
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139429.roa
File: AS139429.roa (raw, json)
Hash identifier: vVl4U0qSvGSKs7SUD5M8vBh2v32zSH2MFl34W3l7Y38=
Subject key identifier: B0:EA:D1:18:80:21:52:03:DA:41:F3:6E:88:4E:FB:E9:FF:99:6E:D9
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 2F4B3D8DB52EE59A8802C6C9649287F7BC458000
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139429.roa
Signing time: Sat 02 May 2026 21:06:55 +0000
ROA not before: Sat 02 May 2026 21:01:55 +0000
ROA not after: Sat 01 May 2027 21:06:55 +0000
asID: 139429
IP address blocks: 103.144.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:4b:3d:8d:b5:2e:e5:9a:88:02:c6:c9:64:92:87:f7:bc:45:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:01:55 2026 GMT
Not After : May 1 21:06:55 2027 GMT
Subject: CN=B0EAD11880215203DA41F36E884EFBE9FF996ED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:b8:f3:00:29:07:e0:40:39:6e:c2:a1:41:
b6:b6:17:19:9f:56:3c:15:b6:24:1a:a8:49:cd:49:
0b:99:5c:d9:73:0a:d5:21:4d:6e:71:ac:bc:f9:ba:
6e:a8:d8:43:41:9e:83:07:a2:74:75:ca:ea:80:ce:
39:f5:ec:b1:55:92:d0:ab:f5:7b:4b:0c:ab:4a:d9:
8c:26:bd:8b:9a:5a:34:20:d3:d1:c7:59:68:1e:07:
9c:06:e0:a1:fc:c0:a8:24:45:09:c1:86:09:fc:7d:
71:bc:16:97:ab:98:bb:e9:c8:f4:c9:40:f9:53:49:
17:d5:56:7f:71:cf:99:de:ce:4c:1d:eb:2d:93:2b:
e1:f0:36:ee:c8:76:b7:75:b3:ad:a7:a0:3f:b2:cf:
48:89:2c:32:df:c4:da:93:76:5f:6f:cf:d8:9b:ee:
04:b0:f7:e3:9d:6d:5d:af:a8:c7:ae:b8:9d:4f:8b:
5d:08:2a:5b:d0:e6:d0:27:21:08:76:cc:a1:79:49:
0e:40:56:c5:86:01:e1:71:1e:ce:c4:39:17:0b:88:
38:39:36:94:d4:d6:db:88:e6:ac:87:0b:9f:b5:e2:
1a:22:85:76:23:76:fa:a3:7b:6f:97:d8:ab:38:46:
84:58:cd:9b:1f:75:52:6b:f7:59:85:e6:f2:63:f8:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EA:D1:18:80:21:52:03:DA:41:F3:6E:88:4E:FB:E9:FF:99:6E:D9
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.143.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:30:eb:3d:96:00:1f:ee:18:70:ab:ff:9b:f4:da:ca:f0:6f:
24:15:6d:ac:d2:c9:00:c7:57:c5:44:e3:24:58:5b:6d:75:20:
a6:29:ea:9d:99:5d:f6:fc:75:dd:02:ab:16:99:06:7d:34:5c:
60:c7:63:a7:1c:5b:0a:53:34:36:d3:ce:17:86:94:df:45:c8:
b4:50:20:f8:b6:82:a2:5a:4a:93:78:fb:6a:e8:13:1b:65:26:
35:21:7b:76:21:42:03:1c:66:42:94:4f:9e:d7:15:53:6b:d1:
ef:fd:ff:75:42:dd:f2:7f:b5:be:97:e9:f2:1c:1a:5a:f9:1d:
61:9d:7b:a1:51:63:a7:2f:b4:51:d3:3b:f8:94:47:e6:e5:09:
a1:37:e1:57:2d:db:53:f5:e2:08:89:f3:97:ee:22:5b:4e:ce:
a0:cf:55:d8:30:49:93:4f:ca:6a:70:27:18:ef:58:d6:59:2e:
86:89:6e:0d:c6:a5:d6:ce:d8:4d:b7:bd:f2:52:37:6c:d6:2f:
1e:b9:65:49:b1:0c:3c:d2:99:38:4a:88:e1:f3:f8:11:9a:6b:
e6:67:64:58:31:58:f2:00:94:0f:c9:d2:0c:22:01:79:ab:f9:
85:3d:1a:71:26:15:f5:e0:3f:a1:b1:cd:47:c2:9d:ff:37:22:
80:f3:27:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:41:56 2026 by rpki-client