$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139444.roa File: AS139444.roa (raw, json) Hash identifier: OI6bel9CeX51U7P3G/h8xAG+m3HRR/wIhrGF9a8S80M= Subject key identifier: 9C:A6:58:A6:3D:B7:C9:10:12:59:F7:26:F7:1A:04:BE:19:5F:2B:53 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 64DFB944D7B3C67AB54CF13435A123A0D712CA4A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139444.roa Signing time: Sat 02 May 2026 14:28:27 +0000 ROA not before: Sat 02 May 2026 14:23:27 +0000 ROA not after: Sat 01 May 2027 14:28:27 +0000 asID: 139444 IP address blocks: 103.145.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:df:b9:44:d7:b3:c6:7a:b5:4c:f1:34:35:a1:23:a0:d7:12:ca:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 14:23:27 2026 GMT Not After : May 1 14:28:27 2027 GMT Subject: CN=9CA658A63DB7C9101259F726F71A04BE195F2B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:d1:f8:f6:ab:a2:f0:d6:46:40:72:b1:25: 3a:4d:5a:b4:1a:b4:39:4a:25:cf:f8:fa:71:84:41: 50:ee:f7:74:bf:e6:58:63:6f:e4:09:2a:1e:ed:fa: 00:6c:2c:fc:db:c9:3b:af:b5:3b:07:e2:41:18:50: 6b:0c:eb:cb:2d:93:cd:cf:7b:19:1e:5a:f3:7b:2e: 30:59:88:1e:a1:d6:da:77:1e:36:99:4a:ad:b0:2b: 00:13:4e:ad:c0:51:01:60:10:c6:22:f4:41:51:16: 50:ed:c9:8c:8e:aa:a0:ed:a8:09:d4:ab:ab:14:d8: 25:7c:54:8b:59:f4:3a:c5:a0:d3:e1:ba:b1:59:87: 1d:f0:1d:04:ea:f7:9e:0b:3d:c9:7e:36:6c:45:15: d7:2b:55:6f:61:d4:98:e9:f2:31:a2:02:e6:5e:ea: 78:cc:a7:7c:72:41:d9:e5:38:92:3b:f3:44:c0:9d: 74:85:92:ee:f6:e2:ab:0b:f6:a5:01:f2:e5:04:e5: 19:25:7f:24:61:6d:4b:af:a0:1b:c4:c6:cf:f7:bb: db:08:5f:f6:0f:b6:6b:1e:51:7d:9a:8b:5e:c7:01: 0b:b2:db:1d:bc:77:e6:50:e9:44:ad:4a:6d:c5:92: 00:96:be:82:8d:fa:75:17:79:4e:8c:70:e8:5b:c9: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A6:58:A6:3D:B7:C9:10:12:59:F7:26:F7:1A:04:BE:19:5F:2B:53 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139444.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.101.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:ec:67:44:46:82:58:6b:cf:f8:93:fd:bb:f9:ff:d9:fc:08: 55:23:7b:72:93:af:41:7f:71:f4:95:7f:69:57:8b:54:a3:76: 98:51:2b:22:8e:94:68:cf:34:5a:7b:0b:81:54:6f:ed:69:01: 78:75:b6:63:2b:78:c4:36:c3:05:b2:3f:c2:f1:f1:c9:b2:15: 44:36:dc:f1:0f:14:7f:40:f7:bf:f6:16:5a:25:97:a8:16:b4: f3:3a:e2:a1:be:f5:7c:71:be:b2:ef:15:7d:d8:93:fe:78:d9: aa:54:84:23:45:0e:b7:e3:fd:17:62:f7:50:05:cc:a7:56:f1: c0:fa:17:09:00:15:1c:3b:34:17:45:66:b4:bb:b0:32:cb:1b: e2:49:44:0c:09:be:04:f1:27:b4:28:7a:54:ef:44:50:26:ea: 8e:46:c0:d1:55:19:08:d3:cb:d9:e2:75:a0:14:44:54:3a:c2: 6a:84:4c:4f:d8:dd:f3:d4:41:1a:70:68:39:34:da:66:86:5a: 51:3b:d1:74:71:30:64:aa:85:86:d6:73:2b:6a:6a:9a:ea:78: 15:28:69:a1:6e:45:cf:22:e5:92:26:a9:0d:1e:4d:47:55:72: 12:e2:18:79:17:93:f6:d2:55:3d:de:63:75:33:3e:9a:40:7a: da:5a:2f:e1 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZN+5RNezxnq1TPE0NaEjoNcSykowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE0MjMyN1oX DTI3MDUwMTE0MjgyN1owMzExMC8GA1UEAxMoOUNBNjU4QTYzREI3QzkxMDEyNTlG NzI2RjcxQTA0QkUxOTVGMkI1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANX90fj2q6Lw1kZAcrElOk1atBq0OUolz/j6cYRBUO73dL/mWGNv5AkqHu36 AGws/NvJO6+1OwfiQRhQawzryy2Tzc97GR5a83suMFmIHqHW2nceNplKrbArABNO rcBRAWAQxiL0QVEWUO3JjI6qoO2oCdSrqxTYJXxUi1n0OsWg0+G6sVmHHfAdBOr3 ngs9yX42bEUV1ytVb2HUmOnyMaIC5l7qeMynfHJB2eU4kjvzRMCddIWS7vbiqwv2 pQHy5QTlGSV/JGFtS6+gG8TGz/e72whf9g+2ax5RfZqLXscBC7LbHbx35lDpRK1K bcWSAJa+go36dRd5Toxw6FvJ/CMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBScplim PbfJEBJZ9yb3GgS+GV8rUzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5NDQ0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ5FlMA0GCSqGSIb3DQEBCwUAA4IBAQA77GdERoJYa8/4k/27+f/Z/AhV I3tyk69Bf3H0lX9pV4tUo3aYUSsijpRozzRaewuBVG/taQF4dbZjK3jENsMFsj/C 8fHJshVENtzxDxR/QPe/9hZaJZeoFrTzOuKhvvV8cb6y7xV92JP+eNmqVIQjRQ63 4/0XYvdQBcynVvHA+hcJABUcOzQXRWa0u7AyyxviSUQMCb4E8Se0KHpU70RQJuqO RsDRVRkI08vZ4nWgFERUOsJqhExP2N3z1EEacGg5NNpmhlpRO9F0cTBkqoWG1nMr amqa6ngVKGmhbkXPIuWSJqkNHk1HVXIS4hh5F5P20lU93mN1Mz6aQHraWi/h -----END CERTIFICATE-----Generated at Sun May 3 00:42:33 2026 by rpki-client