$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139957.roa File: AS139957.roa (raw, json) Hash identifier: uuNn/ndbzTOAeqW0cTbS9jgLEhByR+udUo7oeMOWnaU= Subject key identifier: 5E:42:18:D8:74:47:B4:7C:E2:4B:F2:60:40:B6:FB:7D:AE:B2:76:08 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 695155F341AD72F382C123FE8A88D899EEB370D2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139957.roa Signing time: Sat 02 May 2026 21:07:28 +0000 ROA not before: Sat 02 May 2026 21:02:28 +0000 ROA not after: Sat 01 May 2027 21:07:28 +0000 asID: 139957 IP address blocks: 103.145.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:51:55:f3:41:ad:72:f3:82:c1:23:fe:8a:88:d8:99:ee:b3:70:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:02:28 2026 GMT Not After : May 1 21:07:28 2027 GMT Subject: CN=5E4218D87447B47CE24BF26040B6FB7DAEB27608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:98:c9:3c:72:4e:81:69:dd:75:d3:9e:f6:19: 87:6f:93:2e:4d:bb:dc:09:18:61:98:0c:bc:1d:cf: c5:13:15:c6:49:7a:5c:dc:6e:97:22:02:12:89:b5: ac:a7:41:c2:a9:05:4f:b3:b9:c2:8b:30:70:96:c8: 1a:c3:c1:83:7c:51:6e:ed:17:53:77:6a:7a:4e:fa: d4:af:d9:0a:23:18:16:a6:d5:d3:14:9c:34:c1:71: b5:67:04:e9:41:dc:e4:dd:46:d9:d9:37:fb:77:f5: 57:0a:8a:75:2a:65:73:93:f6:5f:7c:1a:32:cc:f7: 81:9c:03:92:8f:af:4b:59:dc:43:4a:26:33:72:67: 4a:bf:00:17:47:39:a9:ac:9b:00:30:64:0a:7d:d5: b2:76:21:53:00:b7:49:16:6c:27:ba:74:09:01:ec: cf:47:78:00:74:77:21:7c:9d:98:4f:d3:69:8e:af: 1d:fc:f8:5f:f5:a7:1a:1c:6e:bf:0e:f3:03:da:87: d6:77:44:06:31:4e:3a:9c:3e:03:84:fd:75:24:c7: 97:ed:c8:d7:e0:16:7f:cc:47:5b:cd:63:c6:6a:83: 55:4e:e1:d1:03:8c:e6:9b:dc:f2:90:d6:6e:f7:f2: a2:ed:cd:b0:bc:51:4f:d0:e6:0c:5c:bb:08:a3:3e: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:42:18:D8:74:47:B4:7C:E2:4B:F2:60:40:B6:FB:7D:AE:B2:76:08 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139957.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.46.0/23 Signature Algorithm: sha256WithRSAEncryption 31:e1:8b:b5:a9:6e:de:a1:10:22:f6:74:fe:63:27:07:9e:90: ce:99:6c:6a:19:d9:24:da:8e:45:91:c9:20:fc:15:85:39:4f: 8e:c8:27:7e:64:b3:e1:9f:57:40:b2:ef:12:45:fd:8e:af:d9: dc:97:e2:fd:3a:d3:a4:c0:df:33:78:8d:fe:bb:85:81:79:32: 49:27:a7:e1:ae:0f:5c:fb:0f:6d:c0:b4:2e:e7:f2:6d:2e:c0: 88:73:bc:96:73:52:5f:4c:e4:e7:72:96:05:1c:08:71:d2:68: e1:51:cb:6c:02:63:fd:1f:62:e6:ca:ef:1a:f3:ea:c8:e7:8a: 1a:a9:1f:77:ed:bd:91:37:2c:33:47:80:33:0b:a0:a3:6d:44: 17:73:20:f5:e2:e2:45:c6:33:95:16:7e:92:44:5e:55:0c:80: af:fe:eb:06:bb:18:67:ed:b1:93:ab:d1:c4:03:d1:7b:2f:be: 58:47:6c:75:4f:62:81:2d:cc:67:dc:ca:68:62:1b:75:36:36: db:2d:fe:22:6e:d6:6b:8f:5c:9f:ea:9f:d0:4e:5e:d9:33:57: c6:d9:ca:9e:23:3a:e8:7c:00:e4:8e:1d:9c:d5:6b:c5:6b:92: e8:d2:ff:31:d0:f2:71:e2:5c:41:a8:e9:d3:de:bf:8e:93:39: c1:08:36:d8 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUaVFV80GtcvOCwSP+iojYme6zcNIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDIyOFoX DTI3MDUwMTIxMDcyOFowMzExMC8GA1UEAxMoNUU0MjE4RDg3NDQ3QjQ3Q0UyNEJG MjYwNDBCNkZCN0RBRUIyNzYwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANmYyTxyToFp3XXTnvYZh2+TLk273AkYYZgMvB3PxRMVxkl6XNxulyICEom1 rKdBwqkFT7O5woswcJbIGsPBg3xRbu0XU3dqek761K/ZCiMYFqbV0xScNMFxtWcE 6UHc5N1G2dk3+3f1VwqKdSplc5P2X3waMsz3gZwDko+vS1ncQ0omM3JnSr8AF0c5 qaybADBkCn3VsnYhUwC3SRZsJ7p0CQHsz0d4AHR3IXydmE/TaY6vHfz4X/WnGhxu vw7zA9qH1ndEBjFOOpw+A4T9dSTHl+3I1+AWf8xHW81jxmqDVU7h0QOM5pvc8pDW bvfyou3NsLxRT9DmDFy7CKM+VDECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBReQhjY dEe0fOJL8mBAtvt9rrJ2CDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTU3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ5EuMA0GCSqGSIb3DQEBCwUAA4IBAQAx4Yu1qW7eoRAi9nT+YycHnpDO mWxqGdkk2o5Fkckg/BWFOU+OyCd+ZLPhn1dAsu8SRf2Or9ncl+L9OtOkwN8zeI3+ u4WBeTJJJ6fhrg9c+w9twLQu5/JtLsCIc7yWc1JfTOTncpYFHAhx0mjhUctsAmP9 H2Lmyu8a8+rI54oaqR937b2RNywzR4AzC6CjbUQXcyD14uJFxjOVFn6SRF5VDICv /usGuxhn7bGTq9HEA9F7L75YR2x1T2KBLcxn3MpoYht1NjbbLf4ibtZrj1yf6p/Q Tl7ZM1fG2cqeIzrofADkjh2c1WvFa5Lo0v8x0PJx4lxBqOnT3r+OkznBCDbY -----END CERTIFICATE-----Generated at Sun May 3 00:41:55 2026 by rpki-client