$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139939.roa File: AS139939.roa (raw, json) Hash identifier: nFWFtibbAPGKSj678rOnHg7EE4AeqKLsT/CGFQnxDwg= Subject key identifier: 56:28:03:A4:A6:BF:39:E2:FB:69:DE:4B:84:C3:4B:EB:45:A9:3F:69 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 47C7B65711DDAFF2DA60F866BA0AE5AAAC05F046 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139939.roa Signing time: Wed 26 Aug 2026 02:44:54 +0000 ROA not before: Wed 26 Aug 2026 02:39:54 +0000 ROA not after: Wed 25 Aug 2027 02:44:54 +0000 asID: 139939 IP address blocks: 103.146.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c7:b6:57:11:dd:af:f2:da:60:f8:66:ba:0a:e5:aa:ac:05:f0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 26 02:39:54 2026 GMT Not After : Aug 25 02:44:54 2027 GMT Subject: CN=562803A4A6BF39E2FB69DE4B84C34BEB45A93F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:84:49:a7:e2:24:5d:ce:87:62:c8:66:be: 3c:9f:f8:02:0e:a2:5d:9c:ad:e5:a0:f7:ee:f7:68: 9e:86:9f:15:89:9a:2a:bc:89:73:c3:64:55:9a:88: 6f:ba:ef:e0:4d:26:47:df:6a:46:bf:94:f6:b3:9a: fb:b6:25:3b:f6:d0:ae:9a:be:47:7d:8a:f5:9a:07: 33:26:9a:72:69:c6:62:1d:24:9c:3e:7d:73:7c:74: e3:19:9d:f2:c9:42:ad:85:46:70:81:7c:0d:c8:43: 73:3b:07:16:1d:8c:70:9e:43:db:6e:d5:85:b6:bc: 7a:eb:ec:30:5c:37:15:ff:50:a1:d9:b5:1b:b2:af: 91:50:f5:22:30:10:e5:f5:e8:e3:12:0c:62:eb:77: 76:50:2b:ac:50:be:82:07:12:04:1b:69:ef:69:eb: 84:67:ae:e8:0b:9d:91:3f:8b:fb:fd:8e:af:97:b2: 80:06:ad:78:9f:1e:90:d2:50:f3:9a:c4:99:d0:cb: 73:a1:d8:22:0d:74:75:96:bf:19:d4:0f:62:f0:11: 56:7d:72:c1:f9:e5:da:73:6e:c5:d3:d8:10:99:8d: 72:2c:49:64:47:1c:0a:75:e5:71:ad:85:89:41:52: 9c:29:77:6b:69:58:b9:79:53:2a:a0:7e:79:fe:59: 6b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:28:03:A4:A6:BF:39:E2:FB:69:DE:4B:84:C3:4B:EB:45:A9:3F:69 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.169.0/24 Signature Algorithm: sha256WithRSAEncryption 13:f5:d8:52:00:87:de:90:bf:30:b2:de:d3:55:83:a5:b1:3f: ff:c1:1d:a6:a8:c7:05:6c:9d:8a:12:09:64:a2:57:c3:e7:c3: 74:9b:ec:1d:34:b0:f8:38:b4:9b:9a:16:54:b8:3e:a0:b2:af: fa:7f:6a:c6:b4:d3:89:43:18:c2:e0:27:83:71:dd:58:df:c0: 1c:ff:71:b9:fd:e6:24:c0:5c:62:03:e6:98:3b:a5:91:8f:f9: a9:a2:22:f0:cd:10:6c:31:ed:1d:ad:47:4f:22:fe:7c:b7:ad: 88:8a:95:6b:14:44:b7:91:c2:f4:52:68:db:a6:78:10:e7:91: e1:e2:c3:cf:b7:99:a0:64:59:9c:29:d0:ac:54:e6:f0:29:eb: 7a:c3:ef:78:13:67:6d:67:0a:17:c1:46:9c:2c:85:58:1e:4e: 0d:b7:4d:89:f6:1d:ee:8c:75:9a:35:d4:7a:65:c7:64:06:94: d7:79:3c:53:69:70:c8:be:3f:90:34:3e:13:32:5f:a1:93:36: 89:98:74:67:9f:5e:38:b8:27:da:68:dc:3b:2a:9f:9a:79:4a: f4:46:33:98:9b:7a:c1:ca:66:03:10:fb:2c:e1:b7:5d:87:12: fe:e9:18:34:b2:e1:37:97:55:6f:ed:58:ba:3b:e3:84:63:fe: 52:a5:67:50 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUR8e2VxHdr/LaYPhmugrlqqwF8EYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgyNjAyMzk1NFoX DTI3MDgyNTAyNDQ1NFowMzExMC8GA1UEAxMoNTYyODAzQTRBNkJGMzlFMkZCNjlE RTRCODRDMzRCRUI0NUE5M0Y2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNvhEmn4iRdzodiyGa+PJ/4Ag6iXZyt5aD37vdonoafFYmaKryJc8NkVZqI b7rv4E0mR99qRr+U9rOa+7YlO/bQrpq+R32K9ZoHMyaacmnGYh0knD59c3x04xmd 8slCrYVGcIF8DchDczsHFh2McJ5D227Vhba8euvsMFw3Ff9Qodm1G7KvkVD1IjAQ 5fXo4xIMYut3dlArrFC+ggcSBBtp72nrhGeu6AudkT+L+/2Or5eygAateJ8ekNJQ 85rEmdDLc6HYIg10dZa/GdQPYvARVn1ywfnl2nNuxdPYEJmNcixJZEccCnXlca2F iUFSnCl3a2lYuXlTKqB+ef5Za3ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRWKAOk pr854vtp3kuEw0vrRak/aTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ5KpMA0GCSqGSIb3DQEBCwUAA4IBAQAT9dhSAIfekL8wst7TVYOlsT// wR2mqMcFbJ2KEglkolfD58N0m+wdNLD4OLSbmhZUuD6gsq/6f2rGtNOJQxjC4CeD cd1Y38Ac/3G5/eYkwFxiA+aYO6WRj/mpoiLwzRBsMe0drUdPIv58t62IipVrFES3 kcL0UmjbpngQ55Hh4sPPt5mgZFmcKdCsVObwKet6w+94E2dtZwoXwUacLIVYHk4N t02J9h3ujHWaNdR6ZcdkBpTXeTxTaXDIvj+QND4TMl+hkzaJmHRnn144uCfaaNw7 Kp+aeUr0RjOYm3rBymYDEPss4bddhxL+6Rg0suE3l1Vv7Vi6O+OEY/5SpWdQ -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:51 2026 by rpki-client