$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139946.roa File: AS139946.roa (raw, json) Hash identifier: 6COARpsQRVbLJIxMtUM8XJFNdt6gAHjLwWL+1uwVW94= Subject key identifier: 40:A3:43:16:68:B7:38:DE:34:B6:E4:7D:76:27:B3:39:BB:39:AA:41 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6C12182044B77627B12F102F368331CD507822AE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139946.roa Signing time: Sat 02 May 2026 21:34:45 +0000 ROA not before: Sat 02 May 2026 21:29:45 +0000 ROA not after: Sat 01 May 2027 21:34:45 +0000 asID: 139946 IP address blocks: 103.147.46.0/23 maxlen: 23 103.147.46.0/23 maxlen: 24 2405:a8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:12:18:20:44:b7:76:27:b1:2f:10:2f:36:83:31:cd:50:78:22:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:29:45 2026 GMT Not After : May 1 21:34:45 2027 GMT Subject: CN=40A3431668B738DE34B6E47D7627B339BB39AA41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:eb:72:d6:02:56:20:fd:b5:88:29:31:74:ab: 05:7c:9a:7d:dd:e7:72:fe:c8:91:4c:ca:13:96:94: e7:81:f0:03:5d:81:64:8d:d4:b8:4a:4c:1e:69:59: ac:75:35:1a:7b:bd:f3:6c:2b:5b:6d:39:9e:d1:cd: 76:63:7f:7d:05:6c:69:0e:bc:ac:42:ce:4f:fb:55: cc:1b:93:0f:d7:c6:80:63:19:8c:98:28:8f:4b:5f: 46:54:ff:46:74:a0:48:39:7e:3c:0e:c2:2e:79:c1: 04:68:6c:b6:4f:11:e1:f7:33:d5:25:c9:58:7a:57: e3:77:33:ca:f0:91:9f:8f:f0:af:ca:44:e0:69:a9: a2:3b:0a:64:d5:89:6f:26:d8:b7:76:7e:4f:31:24: 23:7b:3b:17:23:21:47:8f:de:0c:43:73:63:01:c5: 4c:89:ba:1f:6e:38:9c:ba:50:8f:11:2a:85:10:0a: 3c:53:3a:27:16:da:ae:cf:90:f8:6b:cc:3c:2a:4b: 41:84:09:70:2a:dc:b2:b0:f0:1f:2e:81:7a:f2:da: 8b:9e:f2:6f:3e:eb:52:c5:1f:2b:2b:0c:ed:52:52: 0c:47:0e:21:b8:a9:e6:13:b5:93:f8:fa:94:74:b1: 21:20:6d:89:eb:cd:d6:1f:38:03:40:d0:98:4e:16: ab:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A3:43:16:68:B7:38:DE:34:B6:E4:7D:76:27:B3:39:BB:39:AA:41 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.46.0/23 IPv6: 2405:a8c0::/32 Signature Algorithm: sha256WithRSAEncryption 36:8c:54:2f:7f:8a:6f:41:7d:ee:b5:af:e2:0a:16:1f:e5:ab: a2:4b:ec:1e:68:64:e6:04:10:c5:62:96:b6:f8:cc:84:8c:ef: bb:a7:43:76:c9:ee:90:f2:4e:34:3a:48:85:22:9a:9c:0d:ba: c6:1c:f6:38:8c:0b:cd:30:fd:e3:3a:cb:3c:45:48:60:7a:28: 40:ea:9d:89:64:91:57:45:44:c0:b5:9c:1f:10:48:5f:72:39: 9d:34:90:c1:4d:e0:d7:9e:c9:f7:8f:c8:5e:1c:b4:0d:a0:d3: c5:75:75:37:3a:97:21:a4:2e:d0:c2:47:67:fa:33:14:d7:32: ef:9a:c3:16:8a:20:56:82:79:2d:08:a5:ce:9b:ca:09:84:27: 0d:09:e8:a9:79:fb:84:b4:00:08:dd:5e:77:38:22:ac:7f:7f: a3:bc:50:de:fb:a2:24:9e:ab:fb:a9:ad:5b:03:9e:85:d2:f8: dd:1b:f4:4b:68:65:3d:0f:9d:f3:4b:0d:5d:91:a2:eb:7e:f2: 29:f4:36:c6:80:04:b2:a6:7a:36:d0:69:95:5c:a5:df:c4:2f: 27:21:83:b6:a8:b6:1c:22:3f:15:e1:97:e5:48:ee:92:65:60: 90:d3:3b:cf:37:f4:71:97:ea:5a:d4:62:4a:3a:5d:8c:9b:1e: dc:da:8e:ef -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUbBIYIES3diexLxAvNoMxzVB4Iq4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjk0NVoX DTI3MDUwMTIxMzQ0NVowMzExMC8GA1UEAxMoNDBBMzQzMTY2OEI3MzhERTM0QjZF NDdENzYyN0IzMzlCQjM5QUE0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIvrctYCViD9tYgpMXSrBXyafd3ncv7IkUzKE5aU54HwA12BZI3UuEpMHmlZ rHU1Gnu982wrW205ntHNdmN/fQVsaQ68rELOT/tVzBuTD9fGgGMZjJgoj0tfRlT/ RnSgSDl+PA7CLnnBBGhstk8R4fcz1SXJWHpX43czyvCRn4/wr8pE4GmpojsKZNWJ bybYt3Z+TzEkI3s7FyMhR4/eDENzYwHFTIm6H244nLpQjxEqhRAKPFM6Jxbars+Q +GvMPCpLQYQJcCrcsrDwHy6BevLai57ybz7rUsUfKysM7VJSDEcOIbip5hO1k/j6 lHSxISBtievN1h84A0DQmE4Wq+ECAwEAAaOCAdswggHXMB0GA1UdDgQWBBRAo0MW aLc43jS25H12J7M5uzmqQTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQBZ5MuMA0EAgACMAcDBQAkBajAMA0GCSqGSIb3DQEBCwUAA4IBAQA2jFQv f4pvQX3uta/iChYf5auiS+weaGTmBBDFYpa2+MyEjO+7p0N2ye6Q8k40OkiFIpqc DbrGHPY4jAvNMP3jOss8RUhgeihA6p2JZJFXRUTAtZwfEEhfcjmdNJDBTeDXnsn3 j8heHLQNoNPFdXU3OpchpC7Qwkdn+jMU1zLvmsMWiiBWgnktCKXOm8oJhCcNCeip efuEtAAI3V53OCKsf3+jvFDe+6Iknqv7qa1bA56F0vjdG/RLaGU9D53zSw1dkaLr fvIp9DbGgASypno20GmVXKXfxC8nIYO2qLYcIj8V4ZflSO6SZWCQ0zvPN/Rxl+pa 1GJKOl2Mmx7c2o7v -----END CERTIFICATE-----Generated at Sun May 3 00:40:29 2026 by rpki-client