$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139653.roa File: AS139653.roa (raw, json) Hash identifier: eV0LLExwHpgSDmzsZH06L5dETgQ6Z4ZBb3maR4P8aZ0= Subject key identifier: 06:EA:A0:7A:45:DB:0B:A9:46:BD:E8:1A:18:57:5B:1C:5B:21:4E:38 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 02224ACD8F7929E515464FB14319CB130E9D0A10 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139653.roa Signing time: Sat 02 May 2026 09:27:33 +0000 ROA not before: Sat 02 May 2026 09:22:33 +0000 ROA not after: Sat 01 May 2027 09:27:33 +0000 asID: 139653 IP address blocks: 49.213.58.0/23 maxlen: 24 2001:df5:ffc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:22:4a:cd:8f:79:29:e5:15:46:4f:b1:43:19:cb:13:0e:9d:0a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:33 2026 GMT Not After : May 1 09:27:33 2027 GMT Subject: CN=06EAA07A45DB0BA946BDE81A18575B1C5B214E38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:21:af:64:07:7d:bd:18:5e:13:50:c9:55:80: a2:de:fa:21:80:56:05:10:7e:71:19:7c:37:91:df: 5e:b4:59:30:8c:05:89:21:60:c8:92:95:ec:a3:a6: a2:c3:94:e3:89:44:db:51:0c:53:a9:d4:db:c9:ca: 82:9d:c5:6a:bd:bb:74:35:14:90:6e:61:61:7f:27: e4:d6:e0:7d:f3:57:5a:61:02:e9:01:b5:e0:fd:e6: 6e:9f:f9:b4:e7:1a:63:a9:af:f9:cf:79:5c:57:b1: 2c:b8:2d:17:f4:c9:bd:7c:3b:52:90:40:4c:15:4f: 7b:a7:63:5c:d1:58:9f:50:4a:9f:87:49:51:5e:8e: e7:cb:a9:ce:de:fe:86:4c:ee:f3:e2:20:f3:57:74: 82:35:c4:4a:38:6e:cb:e1:25:3a:6d:1c:7c:90:98: 71:3d:d4:73:d6:e5:80:51:84:3e:f7:17:7b:bd:9f: 59:32:4c:9c:8d:79:09:ec:6b:97:14:94:18:63:75: e3:58:ae:3c:e2:32:b7:7d:e6:1c:c8:fb:80:e6:72: 69:4c:a7:60:b4:72:9e:5f:80:97:a7:3f:22:fa:5e: 03:bf:9e:43:57:ff:2b:50:4c:e8:66:ae:44:5c:6f: 46:b3:2a:82:8e:4f:16:86:a5:91:6c:78:04:a2:15: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EA:A0:7A:45:DB:0B:A9:46:BD:E8:1A:18:57:5B:1C:5B:21:4E:38 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139653.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.213.58.0/23 IPv6: 2001:df5:ffc0::/48 Signature Algorithm: sha256WithRSAEncryption 47:b1:2b:f9:c6:6c:39:62:f1:58:07:2f:6a:30:71:f5:48:f8: e8:55:92:8c:80:a7:7c:28:2a:0d:fd:c5:cf:87:ef:97:94:32: 76:86:33:68:db:5d:02:93:6c:e3:3c:7e:25:55:d0:23:01:5d: 73:8a:25:a6:1e:af:bc:c3:eb:d9:53:23:0c:e3:bb:f9:d2:83: 16:4c:a2:04:cc:5a:11:bb:3b:de:a0:34:6b:59:ab:16:15:e2: ed:1c:a6:af:1e:9b:dd:52:a8:ca:7c:3e:e7:03:b5:e1:9a:13: 5b:97:8f:2a:a2:ba:57:f5:c3:69:ce:b0:87:c3:97:cb:12:32: 2b:35:86:e1:7a:71:a4:fd:d6:12:85:a1:ec:8c:bc:02:7c:55: 31:62:ea:26:03:86:32:d1:a1:3e:27:c3:87:6a:fb:1d:20:c1: 2b:53:e0:ca:96:5d:46:fd:5e:42:e5:3f:4e:52:1c:51:48:5a: 6c:95:6f:94:ba:eb:49:69:13:91:9f:c5:44:d6:83:35:66:11: 83:66:03:f4:0e:58:ba:55:b3:8f:a3:b7:42:76:46:a4:79:34: 6b:12:02:e4:8f:1e:5e:46:57:32:58:5d:85:9f:d3:75:8e:80: 29:4c:85:92:d5:ff:5c:f7:a9:80:f1:db:14:b9:b2:7a:13:e8: c3:ca:81:56 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUAiJKzY95KeUVRk+xQxnLEw6dChAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIzM1oX DTI3MDUwMTA5MjczM1owMzExMC8GA1UEAxMoMDZFQUEwN0E0NURCMEJBOTQ2QkRF ODFBMTg1NzVCMUM1QjIxNEUzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN8hr2QHfb0YXhNQyVWAot76IYBWBRB+cRl8N5HfXrRZMIwFiSFgyJKV7KOm osOU44lE21EMU6nU28nKgp3Far27dDUUkG5hYX8n5NbgffNXWmEC6QG14P3mbp/5 tOcaY6mv+c95XFexLLgtF/TJvXw7UpBATBVPe6djXNFYn1BKn4dJUV6O58upzt7+ hkzu8+Ig81d0gjXESjhuy+ElOm0cfJCYcT3Uc9blgFGEPvcXe72fWTJMnI15Cexr lxSUGGN141iuPOIyt33mHMj7gOZyaUynYLRynl+Al6c/IvpeA7+eQ1f/K1BM6Gau RFxvRrMqgo5PFoalkWx4BKIVHKUCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQG6qB6 RdsLqUa96BoYV1scWyFOODAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5NjUzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBMdU6MA8EAgACMAkDBwAgAQ31/8AwDQYJKoZIhvcNAQELBQADggEBAEex K/nGbDli8VgHL2owcfVI+OhVkoyAp3woKg39xc+H75eUMnaGM2jbXQKTbOM8fiVV 0CMBXXOKJaYer7zD69lTIwzju/nSgxZMogTMWhG7O96gNGtZqxYV4u0cpq8em91S qMp8PucDteGaE1uXjyqiulf1w2nOsIfDl8sSMis1huF6caT91hKFoeyMvAJ8VTFi 6iYDhjLRoT4nw4dq+x0gwStT4MqWXUb9XkLlP05SHFFIWmyVb5S660lpE5GfxUTW gzVmEYNmA/QOWLpVs4+jt0J2RqR5NGsSAuSPHl5GVzJYXYWf03WOgClMhZLV/1z3 qYDx2xS5snoT6MPKgVY= -----END CERTIFICATE-----Generated at Sun May 3 01:44:39 2026 by rpki-client