$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139952.roa File: AS139952.roa (raw, json) Hash identifier: KKTo9991pYitY8sKrXEhUG9pKGWJDA0w5cHWUBj8u+s= Subject key identifier: 64:16:9D:7C:A4:2E:25:B1:29:21:0C:B2:24:13:D7:CC:B0:05:BB:42 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 17CD6F53475B14BB872B153DCC622FC4AC187E8D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139952.roa Signing time: Sat 02 May 2026 21:17:31 +0000 ROA not before: Sat 02 May 2026 21:12:31 +0000 ROA not after: Sat 01 May 2027 21:17:31 +0000 asID: 139952 IP address blocks: 103.245.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:cd:6f:53:47:5b:14:bb:87:2b:15:3d:cc:62:2f:c4:ac:18:7e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:12:31 2026 GMT Not After : May 1 21:17:31 2027 GMT Subject: CN=64169D7CA42E25B129210CB22413D7CCB005BB42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:88:07:98:46:08:96:b9:f2:06:70:69:64: cb:6a:a3:03:72:4c:af:e0:ed:5b:f4:8c:36:68:3c: d4:2d:f6:9f:42:f8:2d:27:ac:06:aa:20:55:66:f6: e8:32:57:21:7f:33:e5:d4:ea:9d:24:22:a3:39:84: 59:56:1e:62:07:11:99:a6:c6:9d:2b:7d:66:2c:46: e4:a0:fe:c4:9c:18:11:06:03:d2:9b:c3:cf:1f:71: 7a:cf:9d:69:9d:15:50:81:d6:52:23:52:67:fb:3e: 80:58:db:07:cb:96:ee:cf:5c:00:38:07:7d:a5:65: 59:ef:f6:17:c2:a7:2e:f6:eb:37:fd:ec:b7:bc:da: df:a9:9b:97:14:7c:fe:83:b2:d3:0f:16:0c:c1:58: 4e:ed:dd:49:7c:7b:9d:3c:c5:12:56:20:a1:39:d7: 70:a1:ee:f1:f0:a1:85:27:ca:93:9b:57:83:75:5a: 12:17:30:24:c1:99:a5:b6:15:fe:3b:47:af:a5:ac: ff:af:b1:ab:8b:14:a1:8f:b4:cc:a6:36:26:cb:b2: c7:c6:66:34:2c:55:4c:10:d4:58:d3:82:a1:f7:28: dc:c2:56:0f:5d:65:4b:65:7a:3c:9f:83:3c:97:d1: 2b:fd:84:a2:d0:cd:e2:b4:4c:7e:cb:de:92:69:a0: e2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:16:9D:7C:A4:2E:25:B1:29:21:0C:B2:24:13:D7:CC:B0:05:BB:42 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139952.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.26.0/23 Signature Algorithm: sha256WithRSAEncryption 24:bd:ca:89:75:98:fd:f9:a5:61:dd:b1:a3:c5:69:07:f8:68: 01:28:40:55:e4:d4:4a:21:c7:45:cd:39:a9:5e:fd:5b:02:bf: b0:de:b7:f8:a9:c9:09:01:24:25:fd:df:9a:15:34:fa:7e:27: 80:fa:ae:ea:c0:f0:9e:2d:21:af:7d:72:1f:56:c2:89:8d:95: 7a:1e:90:29:e7:ab:a7:1f:00:08:50:14:70:ce:21:33:58:e9: 7e:f5:d1:26:b3:27:f6:c3:19:0c:c9:3a:7f:03:6d:d1:7f:f7: 79:c7:a4:0f:5f:76:c8:fd:63:bf:f8:04:19:a6:12:88:1f:0a: ae:6e:19:04:66:02:89:f1:e2:d3:32:22:d8:71:ba:cc:38:63: d9:f6:99:76:8d:bf:94:e1:be:08:da:a4:6e:15:15:10:a1:b0: fc:bc:41:50:68:12:fb:d4:b2:3f:1e:8e:77:74:87:19:86:2b: 21:28:ac:d1:64:8c:2f:97:de:5b:46:ca:c3:85:c6:ab:9a:c8: 56:f2:ee:40:a0:31:c4:9a:ac:82:54:7d:0d:bd:36:50:4f:15: d0:b4:6a:07:46:2c:0c:0b:74:2c:a7:47:e4:7e:7b:e6:ea:07: d8:b9:be:1c:2c:81:5c:72:44:31:68:80:20:df:2f:5c:11:5a: d7:8d:c1:17 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUF81vU0dbFLuHKxU9zGIvxKwYfo0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTIzMVoX DTI3MDUwMTIxMTczMVowMzExMC8GA1UEAxMoNjQxNjlEN0NBNDJFMjVCMTI5MjEw Q0IyMjQxM0Q3Q0NCMDA1QkI0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANEviAeYRgiWufIGcGlky2qjA3JMr+DtW/SMNmg81C32n0L4LSesBqogVWb2 6DJXIX8z5dTqnSQiozmEWVYeYgcRmabGnSt9ZixG5KD+xJwYEQYD0pvDzx9xes+d aZ0VUIHWUiNSZ/s+gFjbB8uW7s9cADgHfaVlWe/2F8KnLvbrN/3st7za36mblxR8 /oOy0w8WDMFYTu3dSXx7nTzFElYgoTnXcKHu8fChhSfKk5tXg3VaEhcwJMGZpbYV /jtHr6Ws/6+xq4sUoY+0zKY2Jsuyx8ZmNCxVTBDUWNOCofco3MJWD11lS2V6PJ+D PJfRK/2EotDN4rRMfsvekmmg4qsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRkFp18 pC4lsSkhDLIkE9fMsAW7QjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ/UaMA0GCSqGSIb3DQEBCwUAA4IBAQAkvcqJdZj9+aVh3bGjxWkH+GgB KEBV5NRKIcdFzTmpXv1bAr+w3rf4qckJASQl/d+aFTT6fieA+q7qwPCeLSGvfXIf VsKJjZV6HpAp56unHwAIUBRwziEzWOl+9dEmsyf2wxkMyTp/A23Rf/d5x6QPX3bI /WO/+AQZphKIHwqubhkEZgKJ8eLTMiLYcbrMOGPZ9pl2jb+U4b4I2qRuFRUQobD8 vEFQaBL71LI/Ho53dIcZhishKKzRZIwvl95bRsrDhcarmshW8u5AoDHEmqyCVH0N vTZQTxXQtGoHRiwMC3Qsp0fkfnvm6gfYub4cLIFcckQxaIAg3y9cEVrXjcEX -----END CERTIFICATE-----Generated at Sun May 3 00:40:39 2026 by rpki-client