$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139938.roa File: AS139938.roa (raw, json) Hash identifier: 9xAcA6srkbrwuzGWU5NIMkc+XwK3lzyWugMr7KZEdvE= Subject key identifier: 38:73:8E:7B:67:19:7F:03:7E:54:BC:97:51:63:7D:DC:63:A8:D8:25 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 75666D922BA034B699BBC7B79F80CBD7926B5F57 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139938.roa Signing time: Sat 02 May 2026 21:26:35 +0000 ROA not before: Sat 02 May 2026 21:21:35 +0000 ROA not after: Sat 01 May 2027 21:26:35 +0000 asID: 139938 IP address blocks: 2001:df2:2c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:66:6d:92:2b:a0:34:b6:99:bb:c7:b7:9f:80:cb:d7:92:6b:5f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:21:35 2026 GMT Not After : May 1 21:26:35 2027 GMT Subject: CN=38738E7B67197F037E54BC9751637DDC63A8D825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:19:35:70:c1:aa:24:e5:54:ea:4a:6e:00: ea:cd:71:5a:58:72:95:97:11:4f:0c:bf:55:bb:8e: 64:51:aa:bf:1c:54:6b:64:8e:8c:36:46:18:ce:61: 49:63:1d:98:6b:26:e5:23:4f:55:9d:76:b8:e8:4c: ac:c2:57:28:7d:4b:9c:6d:8d:15:35:71:60:a1:c6: dd:83:9b:12:fb:9f:7c:2e:39:54:2f:b2:51:a7:69: bd:32:83:c6:b7:4b:19:a6:51:fa:7d:d5:d6:59:b3: 95:aa:76:ee:06:23:08:34:f7:9a:eb:e1:ae:4c:a2: 2a:3e:00:df:67:5c:82:89:be:b5:3c:29:26:5e:2b: 75:69:ae:af:9f:26:32:78:fb:b3:32:d4:59:a6:4b: c3:22:c1:00:de:d9:7a:ea:27:d6:86:66:16:43:b4: 4d:54:64:76:f1:92:fd:c1:3e:98:57:ef:bb:b6:ae: 80:71:26:9e:e0:38:39:0f:93:ba:78:d6:ef:d6:11: ab:f5:11:79:99:7c:c8:3f:61:4e:fa:b8:1f:66:2c: d7:5b:02:e3:81:03:82:ec:79:b8:60:21:9e:15:f8: 2a:6a:a9:77:1c:5e:48:d2:9b:67:ee:6f:fe:a1:6f: 62:e6:11:16:96:d9:37:57:3a:23:c8:19:e2:08:a0: 14:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:73:8E:7B:67:19:7F:03:7E:54:BC:97:51:63:7D:DC:63:A8:D8:25 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:2c80::/48 Signature Algorithm: sha256WithRSAEncryption 80:7f:59:59:b7:43:59:55:a5:30:5d:25:96:91:28:89:b5:b3: 0b:ee:74:f0:c4:96:b6:58:11:07:a8:c3:04:22:db:9f:c2:7a: 15:9e:a9:9f:e5:fc:15:81:d7:14:19:74:ea:3b:52:cd:a4:73: b5:f2:09:26:9d:3e:ae:00:c4:ac:e5:4c:d4:b6:f7:d2:9e:ea: de:04:ee:b5:eb:39:97:2a:e5:1c:45:93:d4:00:99:1f:72:cb: 9b:c2:b5:e3:f0:27:fc:dc:90:65:33:db:48:ab:7f:a0:7c:19: 0d:74:c2:a2:a6:cd:06:0e:cf:02:f9:ae:b0:92:9e:ae:59:14: a4:52:ce:4c:a6:6d:ae:49:18:d6:84:7f:ae:d0:c2:06:f7:ed: f2:2b:fa:27:4c:e8:9b:ff:84:2c:47:4d:c5:38:48:85:8b:08: 5d:14:24:b8:0d:d6:54:cd:40:92:36:be:24:c5:b3:eb:aa:47: 8e:41:a4:5a:f7:aa:b0:57:be:dc:97:2e:52:29:63:da:61:d1: 32:6a:04:5b:94:51:64:88:c2:ae:cf:d6:ff:a4:65:2a:97:3f: e3:91:ef:5a:69:6e:68:d7:96:39:e3:37:52:05:90:0c:05:6c: 8a:0a:c4:35:5e:8c:a8:2c:b8:ba:69:6f:da:59:92:e4:37:bd: 18:96:e2:14 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUdWZtkiugNLaZu8e3n4DL15JrX1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjEzNVoX DTI3MDUwMTIxMjYzNVowMzExMC8GA1UEAxMoMzg3MzhFN0I2NzE5N0YwMzdFNTRC Qzk3NTE2MzdEREM2M0E4RDgyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbmGTVwwaok5VTqSm4A6s1xWlhylZcRTwy/VbuOZFGqvxxUa2SOjDZGGM5h SWMdmGsm5SNPVZ12uOhMrMJXKH1LnG2NFTVxYKHG3YObEvuffC45VC+yUadpvTKD xrdLGaZR+n3V1lmzlap27gYjCDT3muvhrkyiKj4A32dcgom+tTwpJl4rdWmur58m Mnj7szLUWaZLwyLBAN7Zeuon1oZmFkO0TVRkdvGS/cE+mFfvu7augHEmnuA4OQ+T unjW79YRq/UReZl8yD9hTvq4H2Ys11sC44EDgux5uGAhnhX4KmqpdxxeSNKbZ+5v /qFvYuYRFpbZN1c6I8gZ4gigFKsCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQ4c457 Zxl/A35UvJdRY33cY6jYJTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8iyAMA0GCSqGSIb3DQEBCwUAA4IBAQCAf1lZt0NZVaUwXSWWkSiJ tbML7nTwxJa2WBEHqMMEItufwnoVnqmf5fwVgdcUGXTqO1LNpHO18gkmnT6uAMSs 5UzUtvfSnureBO616zmXKuUcRZPUAJkfcsubwrXj8Cf83JBlM9tIq3+gfBkNdMKi ps0GDs8C+a6wkp6uWRSkUs5Mpm2uSRjWhH+u0MIG9+3yK/onTOib/4QsR03FOEiF iwhdFCS4DdZUzUCSNr4kxbPrqkeOQaRa96qwV77cly5SKWPaYdEyagRblFFkiMKu z9b/pGUqlz/jke9aaW5o15Y54zdSBZAMBWyKCsQ1XoyoLLi6aW/aWZLkN70YluIU -----END CERTIFICATE-----Generated at Sun May 3 00:42:37 2026 by rpki-client