$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139967.roa File: AS139967.roa (raw, json) Hash identifier: GByCI+E+FWXy/NOKSgk/5ZDRoqM10WdWNg0x7hDUOR4= Subject key identifier: 84:05:7E:1E:AC:3C:F5:F1:A5:50:FD:5C:94:B0:E7:B5:DD:11:27:13 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 76890A1ACC6612D22EB60464F64B314DFE32288A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139967.roa Signing time: Sat 02 May 2026 09:20:07 +0000 ROA not before: Sat 02 May 2026 09:15:07 +0000 ROA not after: Sat 01 May 2027 09:20:07 +0000 asID: 139967 IP address blocks: 103.166.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:89:0a:1a:cc:66:12:d2:2e:b6:04:64:f6:4b:31:4d:fe:32:28:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:07 2026 GMT Not After : May 1 09:20:07 2027 GMT Subject: CN=84057E1EAC3CF5F1A550FD5C94B0E7B5DD112713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:11:8e:04:11:e5:68:64:78:2c:1e:de:c0:36: 83:0f:e0:bf:a9:ed:af:9b:d8:4a:fe:f2:7c:26:96: cd:ea:2b:d2:5f:8d:f5:0f:2b:57:c0:6c:86:2c:09: cf:54:15:e5:28:65:47:85:c7:64:7d:62:0b:29:05: bb:ce:df:6e:fc:ef:a3:83:2e:d9:77:6f:fd:7d:74: 68:db:7e:15:66:aa:16:56:01:ae:b8:5f:d0:ad:6e: d0:3e:f9:c7:3f:22:e3:dd:e3:eb:ad:9d:ad:b4:6a: 19:df:ec:7a:e3:aa:30:92:96:6c:83:a7:16:eb:81: 2d:4e:c4:81:5a:7d:2b:6c:5e:c2:40:df:d2:31:2b: ad:5c:ea:a5:65:b3:c0:4a:3f:b6:e5:ea:88:72:bb: a7:1f:4a:b4:f8:31:5d:fe:c3:db:e7:4a:b4:3a:a5: b9:3f:41:48:39:b6:e5:da:f4:63:a9:9f:8d:0a:12: ce:f5:38:59:31:7d:b9:9b:a1:e6:a4:3d:8a:77:d8: f6:22:d7:11:91:23:9c:ec:f5:ab:ad:8c:8e:e6:99: d0:cd:a1:26:cc:f4:5b:85:86:88:09:f8:3c:29:52: 27:ce:7b:22:55:f3:dd:6c:e8:5c:e2:f5:9e:be:eb: 8b:c5:be:78:e7:4f:f8:7a:76:82:db:c0:de:26:d1: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:05:7E:1E:AC:3C:F5:F1:A5:50:FD:5C:94:B0:E7:B5:DD:11:27:13 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139967.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.11.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:3a:e7:ae:43:6f:73:79:b5:69:60:53:a9:01:75:85:a6:d2: 3e:7a:ab:7a:c6:83:c5:7a:79:3f:13:55:49:34:9b:63:0c:c9: 9c:43:ec:3b:c2:6f:67:90:40:c8:8b:ac:99:1a:60:ea:97:6d: 94:e0:6b:e9:be:cc:ba:64:81:c9:3f:f7:1d:1d:e4:f1:25:f4: c1:43:9d:85:67:2a:3f:2b:5b:9f:f4:1e:d7:50:f9:6e:d6:80: bd:33:a1:b5:66:55:e5:d0:eb:ab:28:ae:c4:06:9a:fb:5a:58: 2f:ac:7f:81:6d:e9:c0:f6:59:fe:49:00:d7:84:b5:b7:14:fd: 43:76:70:51:9b:6a:5c:21:f5:71:0f:b4:a0:16:d6:90:3e:33: ce:81:47:23:f4:3d:39:2a:00:72:c0:ec:bf:d2:88:f9:ff:07: ae:36:94:e2:09:b9:ea:02:31:1d:7b:6f:84:a7:e6:ed:a3:90: 6b:dc:3a:6a:cb:79:dd:92:57:fd:c6:57:17:16:a5:db:a8:26: 9a:8e:d7:a2:30:08:6a:c0:d4:70:3e:14:0f:e6:dd:01:42:5f: 12:b0:68:da:77:b1:3d:cd:07:67:6b:13:76:9c:08:2a:f7:13: 28:05:44:05:f8:0e:20:b6:bc:d2:93:79:9c:7c:9e:bd:6f:66: 06:e3:a5:83 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUdokKGsxmEtIutgRk9ksxTf4yKIowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUwN1oX DTI3MDUwMTA5MjAwN1owMzExMC8GA1UEAxMoODQwNTdFMUVBQzNDRjVGMUE1NTBG RDVDOTRCMEU3QjVERDExMjcxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKARjgQR5WhkeCwe3sA2gw/gv6ntr5vYSv7yfCaWzeor0l+N9Q8rV8BshiwJ z1QV5ShlR4XHZH1iCykFu87fbvzvo4Mu2Xdv/X10aNt+FWaqFlYBrrhf0K1u0D75 xz8i493j662drbRqGd/seuOqMJKWbIOnFuuBLU7EgVp9K2xewkDf0jErrVzqpWWz wEo/tuXqiHK7px9KtPgxXf7D2+dKtDqluT9BSDm25dr0Y6mfjQoSzvU4WTF9uZuh 5qQ9infY9iLXEZEjnOz1q62MjuaZ0M2hJsz0W4WGiAn4PClSJ857IlXz3WzoXOL1 nr7ri8W+eOdP+Hp2gtvA3ibRh1kCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSEBX4e rDz18aVQ/VyUsOe13REnEzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTY3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6YLMA0GCSqGSIb3DQEBCwUAA4IBAQALOueuQ29zebVpYFOpAXWFptI+ eqt6xoPFenk/E1VJNJtjDMmcQ+w7wm9nkEDIi6yZGmDql22U4Gvpvsy6ZIHJP/cd HeTxJfTBQ52FZyo/K1uf9B7XUPlu1oC9M6G1ZlXl0OurKK7EBpr7WlgvrH+BbenA 9ln+SQDXhLW3FP1DdnBRm2pcIfVxD7SgFtaQPjPOgUcj9D05KgBywOy/0oj5/weu NpTiCbnqAjEde2+Ep+bto5Br3Dpqy3ndklf9xlcXFqXbqCaajteiMAhqwNRwPhQP 5t0BQl8SsGjad7E9zQdnaxN2nAgq9xMoBUQF+A4gtrzSk3mcfJ69b2YG46WD -----END CERTIFICATE-----Generated at Sun May 3 00:40:38 2026 by rpki-client