$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139955.roa File: AS139955.roa (raw, json) Hash identifier: dmcftRI7Y7uWpVnjsRy+NBsMuZ1WyWskMZ5WM09xNF0= Subject key identifier: 4E:DB:B6:CB:71:96:6D:72:72:BC:BB:F2:DD:C8:C8:D2:4B:F4:41:F4 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 21B5372F89BCBED47E01435BEF3C60E0CFCB148E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139955.roa Signing time: Sat 02 May 2026 21:34:55 +0000 ROA not before: Sat 02 May 2026 21:29:55 +0000 ROA not after: Sat 01 May 2027 21:34:55 +0000 asID: 139955 IP address blocks: 103.53.28.0/24 maxlen: 24 103.53.29.0/24 maxlen: 24 2405:b340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b5:37:2f:89:bc:be:d4:7e:01:43:5b:ef:3c:60:e0:cf:cb:14:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:29:55 2026 GMT Not After : May 1 21:34:55 2027 GMT Subject: CN=4EDBB6CB71966D7272BCBBF2DDC8C8D24BF441F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:54:76:3c:3c:5e:da:13:8e:47:3a:26:81: 8b:b6:e9:97:e6:2a:96:dc:a5:e1:fd:46:73:20:26: 88:9e:19:2c:be:e6:ad:34:4a:2e:c9:f8:94:08:be: e1:2b:e6:73:ca:39:e7:3b:05:79:91:b2:67:fa:64: 27:39:bb:0c:5b:b8:fa:ec:07:0d:55:ee:b2:9e:71: ba:38:c3:41:61:ec:1c:2d:a8:65:06:3d:a9:b2:98: d7:36:af:e5:5e:4d:5a:87:f0:60:d0:f0:eb:26:ea: 72:2d:58:68:82:7a:01:7d:d5:24:5c:5a:47:ea:c8: 59:b8:bc:4c:f4:53:36:68:06:59:e8:eb:0a:b9:50: 57:00:31:24:28:59:f1:ae:02:01:d3:66:df:4c:93: c4:3c:25:85:2a:86:9d:9b:c7:84:df:bc:0d:6f:8b: 72:bf:19:ef:7b:81:93:a1:e4:1d:7e:0b:78:06:92: ba:32:73:94:d1:cc:d2:3b:49:26:ad:36:1d:85:64: d6:d8:1c:54:6a:fb:8c:16:54:b6:e4:60:0f:6c:77: 9d:52:c2:8f:2f:6d:0b:6f:40:6f:ba:34:91:3f:a6: 44:49:d1:62:d2:a0:c6:59:86:06:44:51:63:a2:b5: 5e:e1:39:6c:df:ce:a8:94:b3:b2:a6:b3:74:3c:73: 88:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DB:B6:CB:71:96:6D:72:72:BC:BB:F2:DD:C8:C8:D2:4B:F4:41:F4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139955.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.53.28.0/23 IPv6: 2405:b340::/32 Signature Algorithm: sha256WithRSAEncryption 42:69:7c:0b:db:96:d3:e5:fe:19:f4:7a:b3:6a:a0:66:71:13: 19:b6:fe:eb:6a:63:64:88:19:44:9c:79:d8:58:86:bb:38:f5: a4:34:6b:4a:cf:16:49:17:c2:a6:74:ec:46:f1:92:ee:5c:41: 20:7b:9d:6c:7e:01:75:b2:c5:ff:9f:a0:c7:57:d8:94:e7:e4: 45:16:25:38:3d:47:63:59:a1:3f:8d:07:d1:44:47:08:32:fa: 82:f7:60:f2:4b:58:38:f3:02:68:60:06:ce:2d:ed:3a:14:8c: 5a:13:aa:6e:a5:1d:e4:d6:a0:15:e7:a1:4a:e0:e3:28:6f:bb: 35:5a:9a:23:f6:5f:d4:be:93:e3:9d:97:ef:86:6d:8e:64:67: 82:f0:32:6c:6d:3e:07:c7:2b:c6:13:ae:aa:61:7e:7c:9b:7b: 50:9a:17:a8:e2:6e:d4:ae:10:c1:58:6a:80:43:cf:6d:4b:ec: cb:0f:d6:de:a9:5c:da:b7:f3:78:c5:6d:75:2a:8f:57:f9:52: aa:30:99:3a:c0:e3:12:07:e8:b4:53:e6:1a:2a:50:e8:76:b6: 7c:2f:ad:ab:ef:00:ff:b8:d0:23:c9:1d:19:a9:b4:e5:39:8d: 24:75:f7:2a:aa:ae:0e:f7:19:7a:98:1d:22:de:55:b0:f0:61: 6a:91:d9:7c -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUIbU3L4m8vtR+AUNb7zxg4M/LFI4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjk1NVoX DTI3MDUwMTIxMzQ1NVowMzExMC8GA1UEAxMoNEVEQkI2Q0I3MTk2NkQ3MjcyQkNC QkYyRERDOEM4RDI0QkY0NDFGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHKVHY8PF7aE45HOiaBi7bpl+Yqltyl4f1GcyAmiJ4ZLL7mrTRKLsn4lAi+ 4Svmc8o55zsFeZGyZ/pkJzm7DFu4+uwHDVXusp5xujjDQWHsHC2oZQY9qbKY1zav 5V5NWofwYNDw6ybqci1YaIJ6AX3VJFxaR+rIWbi8TPRTNmgGWejrCrlQVwAxJChZ 8a4CAdNm30yTxDwlhSqGnZvHhN+8DW+Lcr8Z73uBk6HkHX4LeAaSujJzlNHM0jtJ Jq02HYVk1tgcVGr7jBZUtuRgD2x3nVLCjy9tC29Ab7o0kT+mREnRYtKgxlmGBkRR Y6K1XuE5bN/OqJSzsqazdDxziGUCAwEAAaOCAdswggHXMB0GA1UdDgQWBBRO27bL cZZtcnK8u/LdyMjSS/RB9DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTU1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQBZzUcMA0EAgACMAcDBQAkBbNAMA0GCSqGSIb3DQEBCwUAA4IBAQBCaXwL 25bT5f4Z9HqzaqBmcRMZtv7ramNkiBlEnHnYWIa7OPWkNGtKzxZJF8KmdOxG8ZLu XEEge51sfgF1ssX/n6DHV9iU5+RFFiU4PUdjWaE/jQfRREcIMvqC92DyS1g48wJo YAbOLe06FIxaE6pupR3k1qAV56FK4OMob7s1Wpoj9l/UvpPjnZfvhm2OZGeC8DJs bT4HxyvGE66qYX58m3tQmheo4m7UrhDBWGqAQ89tS+zLD9beqVzat/N4xW11Ko9X +VKqMJk6wOMSB+i0U+YaKlDodrZ8L62r7wD/uNAjyR0ZqbTlOY0kdfcqqq4O9xl6 mB0i3lWw8GFqkdl8 -----END CERTIFICATE-----Generated at Sun May 3 01:44:04 2026 by rpki-client