$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139934.roa File: AS139934.roa (raw, json) Hash identifier: 8s/36utBba7EQ6sbevty+bnOw9wNZ22FmrxKZkpELUk= Subject key identifier: AB:3B:E0:D0:93:D7:AE:BC:17:E3:D8:91:5A:D8:51:1B:F1:48:05:A7 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5DA0F1707888E1DF0FC4ED13CFC5783F6BD2FE15 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139934.roa Signing time: Sat 02 May 2026 21:15:50 +0000 ROA not before: Sat 02 May 2026 21:10:50 +0000 ROA not after: Sat 01 May 2027 21:15:50 +0000 asID: 139934 IP address blocks: 103.227.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a0:f1:70:78:88:e1:df:0f:c4:ed:13:cf:c5:78:3f:6b:d2:fe:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:10:50 2026 GMT Not After : May 1 21:15:50 2027 GMT Subject: CN=AB3BE0D093D7AEBC17E3D8915AD8511BF14805A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:35:d3:fd:2b:67:49:96:8c:cb:ae:33:01: 94:0d:5e:e0:ba:25:23:36:53:ee:7e:5c:1b:cb:c7: 97:88:82:0d:e1:0e:ba:6d:15:33:e3:d2:16:ab:b6: 7b:5a:1a:0d:db:5a:18:70:89:1c:0f:99:51:93:78: 0c:2b:c5:88:64:fb:8e:ba:43:8e:ce:21:7d:39:37: 36:66:b2:1e:45:20:aa:9a:3f:3d:60:61:2a:88:2a: 55:a8:bf:4c:1b:2e:0b:db:5c:96:61:fa:f7:c7:01: 99:dd:97:73:c1:da:07:77:10:3a:13:23:05:77:15: d0:5b:71:fd:c4:c6:6d:c6:95:db:42:aa:d6:50:71: da:f8:6c:6e:c6:4a:8e:3f:37:9f:92:22:cb:18:8c: 57:da:30:1b:ee:5c:cd:a3:dd:75:98:5c:fc:cf:94: 71:13:71:cc:33:63:5a:47:ef:8b:e6:28:27:a9:df: 77:60:b9:ce:6f:37:b4:3a:64:40:9c:7f:f0:3a:af: c6:d5:9d:6b:c8:ed:76:91:e3:fc:49:59:67:3f:59: fc:ab:33:42:23:6b:5c:6c:06:c1:da:bd:d0:46:d2: 15:84:de:a0:f1:61:84:a2:41:20:f9:45:99:f8:23: 70:23:47:47:af:e3:e6:38:e3:9a:ed:fe:50:a8:08: 72:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3B:E0:D0:93:D7:AE:BC:17:E3:D8:91:5A:D8:51:1B:F1:48:05:A7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.106.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:23:53:8f:aa:98:4f:9e:5a:b9:ed:09:a8:73:7c:1b:65:6c: f4:04:41:a3:74:0c:26:11:73:f7:ad:91:2f:78:ce:7a:4e:c6: 20:f7:f3:ba:96:f2:3c:f2:73:0c:97:72:e6:8e:35:c3:c4:aa: 6d:c4:b4:d5:ef:f6:9d:c9:76:c8:ef:0b:b2:84:b5:df:ae:15: 21:fd:73:0b:e3:29:5b:b4:4d:3e:6d:1c:30:af:27:41:b3:9f: f6:b3:4c:50:00:c8:ff:ba:d5:17:9d:e4:78:31:cf:d2:e0:16: ae:de:1a:69:b1:b7:db:8c:1c:b0:46:51:15:6e:52:8e:34:5f: fc:0b:36:e4:3f:b7:39:12:d3:41:02:58:67:ee:68:5d:ca:7c: 7d:a2:1c:71:62:af:61:7b:d6:32:77:cd:ff:d6:23:11:84:90: b1:ee:48:1e:f9:49:0b:bc:99:3c:5c:75:ea:77:e7:03:8b:3e: 80:b5:c0:cb:9d:c8:63:21:82:3d:bf:75:b6:4a:15:60:4c:b8: f7:76:14:25:e5:38:9f:7b:19:4d:e1:12:81:d7:e8:05:97:5e: 2b:c8:7d:57:88:14:fb:5f:1a:71:97:07:30:01:86:a4:29:d0: 5a:18:a3:dd:3e:ef:ee:2d:d5:2f:7f:35:27:cb:f9:d2:1a:87: a2:90:0e:2d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUXaDxcHiI4d8PxO0Tz8V4P2vS/hUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTA1MFoX DTI3MDUwMTIxMTU1MFowMzExMC8GA1UEAxMoQUIzQkUwRDA5M0Q3QUVCQzE3RTNE ODkxNUFEODUxMUJGMTQ4MDVBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKU3NdP9K2dJlozLrjMBlA1e4LolIzZT7n5cG8vHl4iCDeEOum0VM+PSFqu2 e1oaDdtaGHCJHA+ZUZN4DCvFiGT7jrpDjs4hfTk3NmayHkUgqpo/PWBhKogqVai/ TBsuC9tclmH698cBmd2Xc8HaB3cQOhMjBXcV0Ftx/cTGbcaV20Kq1lBx2vhsbsZK jj83n5IiyxiMV9owG+5czaPddZhc/M+UcRNxzDNjWkfvi+YoJ6nfd2C5zm83tDpk QJx/8DqvxtWda8jtdpHj/ElZZz9Z/KszQiNrXGwGwdq90EbSFYTeoPFhhKJBIPlF mfgjcCNHR6/j5jjjmu3+UKgIciUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSrO+DQ k9euvBfj2JFa2FEb8UgFpzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTM0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ+NqMA0GCSqGSIb3DQEBCwUAA4IBAQBqI1OPqphPnlq57Qmoc3wbZWz0 BEGjdAwmEXP3rZEveM56TsYg9/O6lvI88nMMl3LmjjXDxKptxLTV7/adyXbI7wuy hLXfrhUh/XML4ylbtE0+bRwwrydBs5/2s0xQAMj/utUXneR4Mc/S4Bau3hppsbfb jBywRlEVblKONF/8CzbkP7c5EtNBAlhn7mhdynx9ohxxYq9he9Yyd83/1iMRhJCx 7kge+UkLvJk8XHXqd+cDiz6AtcDLnchjIYI9v3W2ShVgTLj3dhQl5TifexlN4RKB 1+gFl14ryH1XiBT7XxpxlwcwAYakKdBaGKPdPu/uLdUvfzUny/nSGoeikA4t -----END CERTIFICATE-----Generated at Sun May 3 00:39:54 2026 by rpki-client