$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139983.roa File: AS139983.roa (raw, json) Hash identifier: MMxH9icVLT2caTY/boy2g9t3CGiBD5Y0Ujomy/3qnZA= Subject key identifier: 51:61:8E:84:66:7F:19:C3:A1:2D:98:FE:67:2B:20:F3:F6:6D:91:F1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0EA416D91F368DA2623361EA0CC9F2F3F7A3A3CB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139983.roa Signing time: Sat 02 May 2026 21:35:02 +0000 ROA not before: Sat 02 May 2026 21:30:02 +0000 ROA not after: Sat 01 May 2027 21:35:02 +0000 asID: 139983 IP address blocks: 103.148.48.0/23 maxlen: 24 2405:cb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a4:16:d9:1f:36:8d:a2:62:33:61:ea:0c:c9:f2:f3:f7:a3:a3:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:30:02 2026 GMT Not After : May 1 21:35:02 2027 GMT Subject: CN=51618E84667F19C3A12D98FE672B20F3F66D91F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:e6:6e:a9:f6:9b:3d:b7:d6:40:d3:fa:e5: 68:52:7e:c7:07:7a:e7:08:75:56:30:55:08:5a:c1: f7:6b:f8:a6:76:7e:ea:ba:34:16:6c:82:b5:20:5c: 3c:db:6b:b9:af:cb:cc:f4:82:04:03:8f:ad:9c:51: bb:d1:51:5a:49:11:88:b3:da:c7:5e:ec:6f:88:0b: c7:0f:24:6b:15:d1:35:f0:6d:0d:df:c0:c4:a4:48: e9:d4:05:b9:a7:cc:8d:1f:df:11:aa:bd:5d:bd:40: e6:b0:83:a2:0f:61:c6:0e:f8:d7:5e:17:e3:2e:e8: c5:d4:6f:a7:76:f4:44:3a:7c:93:d2:39:5a:e5:1e: 6a:4b:aa:68:1a:82:82:cb:85:52:a8:32:66:9c:f6: 89:13:2e:5a:49:db:75:3c:f5:87:87:3c:85:a6:fb: 8d:06:6c:ae:5e:ef:ea:68:3c:36:e1:97:cb:a7:84: 49:7a:2b:d7:90:41:79:db:6c:ef:c1:06:47:a5:4d: ff:de:ea:91:23:6e:e3:66:87:a6:fa:2b:fd:4a:af: 3e:fe:1b:8a:7e:06:21:ce:c1:aa:8d:99:3f:05:b4: 16:0c:14:94:8b:94:ec:95:6d:28:77:80:42:63:1c: 6a:8b:08:b7:a6:44:b1:c0:5f:c0:a4:de:e3:94:7c: 38:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:61:8E:84:66:7F:19:C3:A1:2D:98:FE:67:2B:20:F3:F6:6D:91:F1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139983.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.48.0/23 IPv6: 2405:cb40::/32 Signature Algorithm: sha256WithRSAEncryption 20:4d:05:ce:cc:5d:60:25:42:fa:4d:e2:4a:73:4e:6e:99:f1: b6:a5:21:7d:93:c7:b9:64:99:e0:25:27:b0:1f:33:39:53:fb: 97:f5:31:7b:1a:1e:79:3c:c6:98:d9:d0:eb:4e:bc:ec:c1:eb: 1b:54:d5:5f:14:4e:17:6b:37:36:6c:2f:8c:6d:86:4f:ba:b8: e7:7f:84:31:3c:43:06:ee:38:1f:e6:ed:43:28:c8:bc:e4:5b: 67:6f:42:6c:14:93:04:4d:d4:9a:cc:08:b3:5e:54:d4:28:a8: d1:f4:1e:41:96:c9:83:68:e5:6c:ac:2f:0c:7d:e0:5c:c8:1b: ad:47:f1:05:3d:ed:12:ba:11:59:80:f5:4a:e3:8a:21:df:cc: c5:b5:7c:10:13:3b:3e:1e:d0:a9:25:69:ca:89:34:4a:73:ed: ea:f7:ca:68:0a:f9:83:1b:30:cc:a5:15:8d:b3:66:f4:91:fc: 0e:97:24:57:a9:39:ff:c2:c7:27:03:88:13:7a:99:52:1b:32: 7b:ff:11:6e:0f:a5:76:ab:67:8b:75:a5:6f:6e:c3:db:bb:d9: 44:64:03:3c:ed:51:55:17:a8:ff:62:7c:87:ef:a2:ab:f1:79: e9:39:55:8e:7a:45:4c:f5:6d:33:0a:a6:9a:e1:e8:ca:9c:a9: ad:9a:ae:88 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUDqQW2R82jaJiM2HqDMny8/ejo8swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzAwMloX DTI3MDUwMTIxMzUwMlowMzExMC8GA1UEAxMoNTE2MThFODQ2NjdGMTlDM0ExMkQ5 OEZFNjcyQjIwRjNGNjZEOTFGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4Q5m6p9ps9t9ZA0/rlaFJ+xwd65wh1VjBVCFrB92v4pnZ+6ro0FmyCtSBc PNtrua/LzPSCBAOPrZxRu9FRWkkRiLPax17sb4gLxw8kaxXRNfBtDd/AxKRI6dQF uafMjR/fEaq9Xb1A5rCDog9hxg74114X4y7oxdRvp3b0RDp8k9I5WuUeakuqaBqC gsuFUqgyZpz2iRMuWknbdTz1h4c8hab7jQZsrl7v6mg8NuGXy6eESXor15BBedts 78EGR6VN/97qkSNu42aHpvor/UqvPv4bin4GIc7Bqo2ZPwW0FgwUlIuU7JVtKHeA QmMcaosIt6ZEscBfwKTe45R8OL0CAwEAAaOCAdswggHXMB0GA1UdDgQWBBRRYY6E Zn8Zw6EtmP5nKyDz9m2R8TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTgzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQBZ5QwMA0EAgACMAcDBQAkBctAMA0GCSqGSIb3DQEBCwUAA4IBAQAgTQXO zF1gJUL6TeJKc05umfG2pSF9k8e5ZJngJSewHzM5U/uX9TF7Gh55PMaY2dDrTrzs wesbVNVfFE4Xazc2bC+MbYZPurjnf4QxPEMG7jgf5u1DKMi85Ftnb0JsFJMETdSa zAizXlTUKKjR9B5BlsmDaOVsrC8MfeBcyButR/EFPe0SuhFZgPVK44oh38zFtXwQ Ezs+HtCpJWnKiTRKc+3q98poCvmDGzDMpRWNs2b0kfwOlyRXqTn/wscnA4gTeplS GzJ7/xFuD6V2q2eLdaVvbsPbu9lEZAM87VFVF6j/YnyH76Kr8XnpOVWOekVM9W0z Cqaa4ejKnKmtmq6I -----END CERTIFICATE-----Generated at Sun May 3 01:41:17 2026 by rpki-client