$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139984.roa File: AS139984.roa (raw, json) Hash identifier: PIchmG5wdCrnOPeiuUipV0yoLYwInZlcyE23ewI6ddI= Subject key identifier: 46:61:9C:EA:EF:F1:AA:AF:34:54:34:ED:45:3C:26:25:6B:A1:B5:68 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 02EE5847CD51A23DB66317009BCBF7CF8EDD86A4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139984.roa Signing time: Sat 02 May 2026 21:07:50 +0000 ROA not before: Sat 02 May 2026 21:02:50 +0000 ROA not after: Sat 01 May 2027 21:07:50 +0000 asID: 139984 IP address blocks: 103.146.26.0/23 maxlen: 24 2405:9040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ee:58:47:cd:51:a2:3d:b6:63:17:00:9b:cb:f7:cf:8e:dd:86:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:02:50 2026 GMT Not After : May 1 21:07:50 2027 GMT Subject: CN=46619CEAEFF1AAAF345434ED453C26256BA1B568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e1:cc:91:d2:fb:93:6e:1d:e9:77:f8:4d:97: be:e6:d8:f8:40:b0:16:a7:67:50:85:7c:f4:62:a2: 6b:d2:02:41:4e:a4:f8:0f:c5:40:8d:ac:7f:84:67: 5c:91:fc:0c:c7:aa:32:a6:a4:ff:39:af:8d:74:a0: e1:fb:06:81:52:ec:6d:e2:aa:48:05:09:f9:ab:5d: b0:d7:b1:d3:10:22:25:2a:56:ab:e7:86:0a:5a:41: cf:95:f5:f2:7c:3b:05:6f:c5:6a:58:2f:2b:92:d3: 5c:c4:d3:cd:e1:c8:78:d8:98:84:4a:ea:77:bb:8e: 65:a1:73:92:94:30:9a:44:be:29:cb:0e:c8:dd:a7: 8a:c2:c9:a5:ea:99:6a:7c:0f:4b:6c:fa:69:8f:60: a5:46:a5:8b:28:60:a7:3f:3c:7f:c7:3e:7e:20:6a: 03:81:9c:e5:6f:b4:6e:bf:97:e7:78:fc:c9:7a:51: 50:b8:eb:36:d5:0c:00:76:35:d5:0e:07:97:97:19: 7e:52:c5:31:94:29:ae:55:86:51:bd:e5:a3:81:bd: fb:38:4f:cc:bd:b7:b9:0d:91:6e:5a:fd:e1:be:98: 33:8d:6b:60:cb:82:65:33:f4:bf:6d:cf:dd:f9:56: 67:11:f6:e9:07:bd:dc:48:93:96:68:45:0b:50:5d: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:61:9C:EA:EF:F1:AA:AF:34:54:34:ED:45:3C:26:25:6B:A1:B5:68 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.26.0/23 IPv6: 2405:9040::/32 Signature Algorithm: sha256WithRSAEncryption 04:9e:30:89:09:26:ae:da:86:94:c6:60:ef:07:63:b5:aa:de: 43:d2:44:a6:fa:06:68:68:49:16:5f:f5:05:a3:36:87:4b:7e: 49:63:ac:87:42:ce:27:45:0b:b1:ac:d0:75:b3:c7:bb:36:13: 1f:0d:04:3e:f2:aa:a3:ff:08:93:a2:d4:9e:e1:d9:34:07:64: f6:3c:db:86:ff:b7:89:ed:fb:cf:d0:ff:c5:86:f7:45:d7:4a: 94:20:98:e4:4a:04:71:15:75:f8:39:ff:46:1d:a5:4e:be:d9: 98:cf:a3:9b:65:47:ba:42:57:f7:b4:c5:b1:cb:ad:89:fe:5f: 33:a5:3b:42:fc:9b:58:e3:f9:e0:2a:71:c5:f8:14:d9:98:04: 7c:c5:4a:f0:06:75:28:4f:9a:6d:8e:c5:9c:f4:53:13:fd:d2: 05:77:ef:43:88:86:37:26:0d:ba:69:24:84:06:65:1a:37:5c: f3:56:b6:93:d5:61:fe:46:f9:85:f9:24:6c:e3:ff:cd:2f:42: b2:63:ef:d7:90:0f:1d:c8:d5:05:57:de:ac:8d:2e:cb:67:05: aa:34:42:28:be:35:ad:50:b1:d7:93:39:9b:8e:9e:8b:f1:6c: 8b:df:3c:ad:51:16:13:36:ac:ea:80:3f:32:b3:4f:2e:ca:d0: 95:1c:ab:fe -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUAu5YR81Roj22YxcAm8v3z47dhqQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDI1MFoX DTI3MDUwMTIxMDc1MFowMzExMC8GA1UEAxMoNDY2MTlDRUFFRkYxQUFBRjM0NTQz NEVENDUzQzI2MjU2QkExQjU2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKDhzJHS+5NuHel3+E2XvubY+ECwFqdnUIV89GKia9ICQU6k+A/FQI2sf4Rn XJH8DMeqMqak/zmvjXSg4fsGgVLsbeKqSAUJ+atdsNex0xAiJSpWq+eGClpBz5X1 8nw7BW/FalgvK5LTXMTTzeHIeNiYhErqd7uOZaFzkpQwmkS+KcsOyN2nisLJpeqZ anwPS2z6aY9gpUaliyhgpz88f8c+fiBqA4Gc5W+0br+X53j8yXpRULjrNtUMAHY1 1Q4Hl5cZflLFMZQprlWGUb3lo4G9+zhPzL23uQ2Rblr94b6YM41rYMuCZTP0v23P 3flWZxH26Qe93EiTlmhFC1BdOB8CAwEAAaOCAdswggHXMB0GA1UdDgQWBBRGYZzq 7/GqrzRUNO1FPCYla6G1aDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTg0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQBZ5IaMA0EAgACMAcDBQAkBZBAMA0GCSqGSIb3DQEBCwUAA4IBAQAEnjCJ CSau2oaUxmDvB2O1qt5D0kSm+gZoaEkWX/UFozaHS35JY6yHQs4nRQuxrNB1s8e7 NhMfDQQ+8qqj/wiTotSe4dk0B2T2PNuG/7eJ7fvP0P/FhvdF10qUIJjkSgRxFXX4 Of9GHaVOvtmYz6ObZUe6Qlf3tMWxy62J/l8zpTtC/JtY4/ngKnHF+BTZmAR8xUrw BnUoT5ptjsWc9FMT/dIFd+9DiIY3Jg26aSSEBmUaN1zzVraT1WH+RvmF+SRs4//N L0KyY+/XkA8dyNUFV96sjS7LZwWqNEIovjWtULHXkzmbjp6L8WyL3zytURYTNqzq gD8ys08uytCVHKv+ -----END CERTIFICATE-----Generated at Sun May 3 00:40:35 2026 by rpki-client