$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139932.roa File: AS139932.roa (raw, json) Hash identifier: nkU3OkyT4zLJkhDRQj3+Fz0TyqKi5Xs+gWrIEWPz7tE= Subject key identifier: 27:14:63:43:80:47:0F:7F:B1:9E:A6:6E:58:77:52:6E:F1:2B:E2:D9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6A79806D78A74BBE6A898B576364C6749100BEDD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139932.roa Signing time: Sat 02 May 2026 21:07:56 +0000 ROA not before: Sat 02 May 2026 21:02:56 +0000 ROA not after: Sat 01 May 2027 21:07:56 +0000 asID: 139932 IP address blocks: 103.146.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:79:80:6d:78:a7:4b:be:6a:89:8b:57:63:64:c6:74:91:00:be:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:02:56 2026 GMT Not After : May 1 21:07:56 2027 GMT Subject: CN=2714634380470F7FB19EA66E5877526EF12BE2D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:29:da:6d:35:63:f9:e3:e8:cf:8f:8c:20: 2b:f5:81:cf:c4:74:89:9e:dc:00:c3:2f:57:04:32: 6f:76:97:37:a1:f3:28:99:7c:83:85:6a:3d:44:9c: 4e:c0:78:18:f0:42:6b:cf:5a:4d:d2:61:66:ef:22: b1:89:6b:00:29:10:5d:df:e7:3f:e6:1f:17:0f:dd: 28:b3:dd:a2:5c:f9:d8:e9:a9:56:ed:9c:cf:24:ab: 40:3b:c9:69:a3:5c:8b:0d:28:6d:38:4a:1f:03:2b: e3:de:7d:2e:3d:7c:5c:91:c4:5d:f4:83:4e:9d:75: aa:01:57:f3:1e:1d:ae:cb:e7:25:f7:e4:7e:89:0a: 27:ce:f2:8d:c9:d2:f3:d3:b2:16:62:cd:ae:78:99: 29:85:0e:76:38:06:ad:eb:86:7c:be:15:9f:0f:f1: 61:06:ea:bd:a6:68:f8:a1:3b:9e:33:01:dc:38:92: 7f:72:10:3e:80:af:8b:dc:42:90:71:0f:63:fe:8f: 21:a1:84:6d:81:0e:a4:22:d7:ba:cc:50:fb:b7:b0: de:f6:af:23:d3:13:c8:7b:20:f4:8f:3e:c5:bd:04: ee:3a:33:4c:38:3e:61:b9:ec:08:f7:ca:db:e8:06: 88:f2:60:cc:51:ec:7e:7a:80:59:ed:ec:6c:6a:7d: 7b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:14:63:43:80:47:0F:7F:B1:9E:A6:6E:58:77:52:6E:F1:2B:E2:D9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.74.0/24 Signature Algorithm: sha256WithRSAEncryption 24:fb:8d:b0:90:ab:9d:50:f7:07:42:10:e5:df:7d:75:92:dc: a7:23:b8:83:e0:e2:2f:cf:cf:04:87:43:ac:c6:54:14:26:51: 19:6e:a1:c6:8b:4e:df:72:f9:88:06:0f:ba:85:73:b3:88:29: e7:56:5f:d9:04:2d:f1:31:cb:de:e7:35:31:b8:19:1e:7a:6b: 9b:aa:b3:65:b1:5b:56:7d:84:8f:e8:8d:0c:eb:a6:81:f6:bd: b7:1a:ac:b5:69:f3:14:01:ad:3e:f5:b7:ed:77:e7:94:4b:f1: 2b:06:42:24:cb:d5:38:b9:60:06:73:fb:2f:4d:a6:16:92:5b: a6:5b:24:f1:65:de:7f:af:3a:5e:60:8f:11:87:2b:0e:79:0e: 15:3e:69:9d:ae:dd:54:7d:c9:fe:a4:80:e0:cc:d6:2d:17:6f: 7c:1c:52:ef:19:a4:15:6e:37:b7:18:fa:9f:6b:68:8b:0f:29: 3a:a1:96:ad:66:1a:ca:aa:33:4d:ca:1c:23:e6:b9:d8:49:83: 53:e5:6b:5b:21:e4:6c:b5:47:57:d7:5a:f0:26:95:b7:41:17: 64:14:7d:e9:bc:d3:17:30:51:a5:f9:50:4e:b3:dc:73:3f:8c: 29:62:5c:1e:91:86:86:75:62:31:ec:bc:cc:80:14:a4:42:06: 25:8a:7b:85 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUanmAbXinS75qiYtXY2TGdJEAvt0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDI1NloX DTI3MDUwMTIxMDc1NlowMzExMC8GA1UEAxMoMjcxNDYzNDM4MDQ3MEY3RkIxOUVB NjZFNTg3NzUyNkVGMTJCRTJEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMklKdptNWP54+jPj4wgK/WBz8R0iZ7cAMMvVwQyb3aXN6HzKJl8g4VqPUSc TsB4GPBCa89aTdJhZu8isYlrACkQXd/nP+YfFw/dKLPdolz52OmpVu2czySrQDvJ aaNciw0obThKHwMr4959Lj18XJHEXfSDTp11qgFX8x4drsvnJffkfokKJ87yjcnS 89OyFmLNrniZKYUOdjgGreuGfL4Vnw/xYQbqvaZo+KE7njMB3DiSf3IQPoCvi9xC kHEPY/6PIaGEbYEOpCLXusxQ+7ew3vavI9MTyHsg9I8+xb0E7jozTDg+YbnsCPfK 2+gGiPJgzFHsfnqAWe3sbGp9e+ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQnFGND gEcPf7Gepm5Yd1Ju8Svi2TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTMyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ5JKMA0GCSqGSIb3DQEBCwUAA4IBAQAk+42wkKudUPcHQhDl3311ktyn I7iD4OIvz88Eh0OsxlQUJlEZbqHGi07fcvmIBg+6hXOziCnnVl/ZBC3xMcve5zUx uBkeemubqrNlsVtWfYSP6I0M66aB9r23Gqy1afMUAa0+9bftd+eUS/ErBkIky9U4 uWAGc/svTaYWklumWyTxZd5/rzpeYI8RhysOeQ4VPmmdrt1Ufcn+pIDgzNYtF298 HFLvGaQVbje3GPqfa2iLDyk6oZatZhrKqjNNyhwj5rnYSYNT5WtbIeRstUdX11rw JpW3QRdkFH3pvNMXMFGl+VBOs9xzP4wpYlwekYaGdWIx7LzMgBSkQgYlinuF -----END CERTIFICATE-----Generated at Sun May 3 00:41:48 2026 by rpki-client