$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139640.roa File: AS139640.roa (raw, json) Hash identifier: jgnhLEl2FDcORuuUG0e9wAxsaoD6ZyVLdsMmrqWgZ/g= Subject key identifier: 5E:9C:A8:CB:D6:59:06:C4:B0:91:91:07:6F:70:F9:81:35:B7:C3:DC Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 70CFD0A6DF8D8F4A5D3E931F56A4BDB81CD0BE61 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139640.roa Signing time: Sat 02 May 2026 21:29:04 +0000 ROA not before: Sat 02 May 2026 21:24:04 +0000 ROA not after: Sat 01 May 2027 21:29:04 +0000 asID: 139640 IP address blocks: 202.6.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:cf:d0:a6:df:8d:8f:4a:5d:3e:93:1f:56:a4:bd:b8:1c:d0:be:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:24:04 2026 GMT Not After : May 1 21:29:04 2027 GMT Subject: CN=5E9CA8CBD65906C4B09191076F70F98135B7C3DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:b9:02:4d:0a:c9:21:18:ed:74:3e:25:01: 93:8c:e1:31:f2:01:2b:cd:a2:08:aa:02:f6:d6:bd: 4b:e3:eb:02:d9:90:95:fc:d0:1b:9e:f8:4a:e3:70: 19:f5:c1:35:1c:32:f2:5a:0a:75:15:a9:b9:54:37: 3f:3a:06:4f:be:de:c8:79:1f:81:c1:c2:f3:cc:ad: 9d:52:f5:c4:66:c1:70:b5:79:5c:59:de:92:f1:84: af:d9:e7:80:24:f9:8e:9b:96:82:ca:86:c4:f0:fc: 1f:17:09:b2:a3:ff:61:1f:9a:8b:b4:08:b8:d3:e5: 1f:64:c0:7c:a9:de:4f:53:a7:76:8f:ec:36:d8:e9: 04:90:cd:33:87:7f:67:b0:67:19:d8:bc:24:92:5c: 61:19:d0:9d:bc:3f:ad:3b:33:bd:bc:70:79:50:93: 3c:9b:e3:fb:bb:12:53:30:52:9c:60:3d:0c:9b:d6: ce:09:a5:0b:e4:5f:7f:3c:9d:ec:97:c9:11:72:4f: f9:ce:92:7c:ac:62:65:35:6b:62:4c:1f:80:eb:eb: 60:90:85:40:6e:aa:e5:52:a6:98:fa:72:56:c0:3f: b5:f1:8b:4e:cc:a2:d1:37:cf:e6:0b:78:92:29:85: 9c:0d:cd:ff:bb:4f:3a:62:ed:b3:d9:2e:99:25:38: bd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9C:A8:CB:D6:59:06:C4:B0:91:91:07:6F:70:F9:81:35:B7:C3:DC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139640.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.6.200.0/23 Signature Algorithm: sha256WithRSAEncryption 35:c5:19:8f:48:61:1b:64:25:fc:21:7f:15:b5:81:f0:fa:98: 66:f2:42:00:ea:b5:74:14:71:a9:53:5a:29:f4:24:a7:b9:c6: 9a:f5:ca:b5:4c:65:8e:96:30:7a:20:c0:e1:e5:36:8a:33:9f: 9c:fc:8d:b8:12:7d:df:46:8c:1e:7f:ae:c3:29:fb:68:d0:a6: 0b:5b:a0:a9:d1:70:33:53:67:20:64:ef:f1:4d:9d:ba:c5:3a: b4:a7:52:4e:b2:d9:c3:dc:d6:bd:4f:33:e6:7f:e2:04:19:03: 34:19:b8:5e:c2:6e:ba:cc:c0:25:13:6a:e1:66:ea:1b:28:43: 21:d3:09:86:21:24:89:c9:6b:17:45:ce:ad:1f:57:c6:2c:ec: 76:fe:ad:18:f6:0b:ef:8c:f9:a6:df:aa:a5:db:13:3b:14:ba: d7:7a:1d:32:eb:2e:3b:40:cc:e7:a8:06:69:39:69:e6:fb:37: 06:04:3a:7f:5b:48:ed:19:13:2d:a2:07:03:3f:10:b1:21:0a: d3:e1:ff:96:81:32:21:52:7b:16:ff:2c:42:2c:08:1f:ec:1e: bb:a0:aa:da:4a:a4:1d:98:fd:87:c0:80:70:0e:f9:1b:20:94: 9e:02:55:ea:c1:cc:55:2f:48:03:3e:88:a2:55:3c:c2:09:67: 2e:f2:c6:9c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUcM/Qpt+Nj0pdPpMfVqS9uBzQvmEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjQwNFoX DTI3MDUwMTIxMjkwNFowMzExMC8GA1UEAxMoNUU5Q0E4Q0JENjU5MDZDNEIwOTE5 MTA3NkY3MEY5ODEzNUI3QzNEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyquQJNCskhGO10PiUBk4zhMfIBK82iCKoC9ta9S+PrAtmQlfzQG574SuNw GfXBNRwy8loKdRWpuVQ3PzoGT77eyHkfgcHC88ytnVL1xGbBcLV5XFnekvGEr9nn gCT5jpuWgsqGxPD8HxcJsqP/YR+ai7QIuNPlH2TAfKneT1Ondo/sNtjpBJDNM4d/ Z7BnGdi8JJJcYRnQnbw/rTszvbxweVCTPJvj+7sSUzBSnGA9DJvWzgmlC+Rffzyd 7JfJEXJP+c6SfKxiZTVrYkwfgOvrYJCFQG6q5VKmmPpyVsA/tfGLTsyi0TfP5gt4 kimFnA3N/7tPOmLts9kumSU4vTECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRenKjL 1lkGxLCRkQdvcPmBNbfD3DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5NjQwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBygbIMA0GCSqGSIb3DQEBCwUAA4IBAQA1xRmPSGEbZCX8IX8VtYHw+phm 8kIA6rV0FHGpU1op9CSnucaa9cq1TGWOljB6IMDh5TaKM5+c/I24En3fRowef67D Kfto0KYLW6Cp0XAzU2cgZO/xTZ26xTq0p1JOstnD3Na9TzPmf+IEGQM0Gbhewm66 zMAlE2rhZuobKEMh0wmGISSJyWsXRc6tH1fGLOx2/q0Y9gvvjPmm36ql2xM7FLrX eh0y6y47QMznqAZpOWnm+zcGBDp/W0jtGRMtogcDPxCxIQrT4f+WgTIhUnsW/yxC LAgf7B67oKraSqQdmP2HwIBwDvkbIJSeAlXqwcxVL0gDPoiiVTzCCWcu8sac -----END CERTIFICATE-----Generated at Sun May 3 01:44:03 2026 by rpki-client