$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139995.roa File: AS139995.roa (raw, json) Hash identifier: J9MYsy1jpsBh8ozUnLB7NmVUNBip173uVi0V7TlM/t0= Subject key identifier: 66:C0:CD:9B:87:E8:46:00:52:C3:64:FB:CA:DE:D1:F6:61:90:10:AB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 72E0CF0743E28AD92D21E1FE5F38880A65EA83E5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139995.roa Signing time: Sat 02 May 2026 09:25:38 +0000 ROA not before: Sat 02 May 2026 09:20:38 +0000 ROA not after: Sat 01 May 2027 09:25:38 +0000 asID: 139995 IP address blocks: 103.148.192.0/23 maxlen: 24 2001:df2:e580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e0:cf:07:43:e2:8a:d9:2d:21:e1:fe:5f:38:88:0a:65:ea:83:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:38 2026 GMT Not After : May 1 09:25:38 2027 GMT Subject: CN=66C0CD9B87E8460052C364FBCADED1F6619010AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:43:4d:5b:1b:f5:9f:76:ee:c6:a5:c0:f8: 22:b1:81:b7:62:6a:0e:cb:53:7a:a0:68:be:82:a6: f2:b2:20:46:a9:26:9e:ba:aa:e0:47:ba:b4:89:cf: a5:d1:6f:9f:2d:11:e4:68:b7:38:f6:2e:af:ea:de: 0e:1d:93:9c:0d:fc:0e:08:d9:ef:7b:bf:22:ae:6b: 1d:e1:30:89:b0:5b:cf:87:ce:af:99:87:0f:36:b6: b6:e0:6a:b0:cb:d8:4e:7b:e0:ed:e0:8f:be:b9:62: e6:d2:aa:1d:d0:6c:6c:91:fc:c6:2c:e5:9d:82:6f: bb:e1:e5:6a:fb:8a:eb:62:5a:cc:fd:91:1d:c6:7e: ec:cf:21:a5:af:b8:3d:f0:97:44:9b:8d:ad:2f:6a: 30:32:3e:9a:68:79:7a:36:e7:60:29:8b:e0:14:3d: 65:44:6f:66:f0:10:74:6a:b4:24:a8:f1:64:c3:60: d0:67:b9:be:14:0f:64:56:3b:25:d9:56:77:f8:15: 1f:6c:84:a7:1b:bb:cd:26:44:43:f6:fa:d8:a4:62: b8:10:1b:85:3c:20:0e:5a:ed:2b:d9:57:87:47:d4: b6:e2:d5:02:71:e5:3b:49:1b:25:3f:84:c8:6d:63: 18:b0:dd:91:40:c9:0f:08:50:d7:4a:d9:9c:95:48: 17:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C0:CD:9B:87:E8:46:00:52:C3:64:FB:CA:DE:D1:F6:61:90:10:AB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139995.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.192.0/23 IPv6: 2001:df2:e580::/48 Signature Algorithm: sha256WithRSAEncryption 98:3d:ea:02:e8:10:3f:bf:67:cf:2a:31:df:0a:dc:36:1b:41: e4:fd:9c:82:6d:70:19:4a:94:da:44:b8:57:aa:7f:c0:12:62: 73:17:83:ef:73:92:40:b8:72:93:e1:05:b6:d7:55:fa:59:e2: e4:7f:26:db:8e:fa:4b:7b:03:3f:17:a4:7c:58:01:f9:3d:01: a2:e9:19:de:67:46:aa:15:f7:6b:11:fd:3b:67:78:fe:21:18: 05:e3:fd:9b:4a:26:53:1c:f3:dd:84:b3:1d:c6:b9:14:9e:e8: 78:2e:cf:87:5b:25:82:95:8f:91:1f:f4:c3:eb:09:fc:82:c9: 84:8e:c0:b8:36:fe:61:74:d5:ff:af:40:23:26:fe:06:e1:b0: 11:62:47:dc:0f:8c:46:04:7f:a3:86:11:33:c8:b9:92:dd:83: f8:c4:34:bc:21:4c:2a:e6:4e:92:4a:72:df:5a:06:38:88:ee: bf:a9:b7:4e:31:0d:be:ae:e8:62:05:d2:35:7b:47:6e:d2:71: 51:35:dc:ff:cb:e3:43:44:54:e8:3e:70:ab:8d:1c:82:d1:22: 0e:43:83:3f:71:ec:c0:4c:f8:75:18:81:6a:76:4f:b2:d6:4d: 9b:5f:43:f8:dd:27:3f:9c:f9:c3:b0:7c:ee:d7:98:70:81:f3: 9a:a3:fe:a5 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUcuDPB0PiitktIeH+XziICmXqg+UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjAzOFoX DTI3MDUwMTA5MjUzOFowMzExMC8GA1UEAxMoNjZDMENEOUI4N0U4NDYwMDUyQzM2 NEZCQ0FERUQxRjY2MTkwMTBBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4FQ01bG/Wfdu7GpcD4IrGBt2JqDstTeqBovoKm8rIgRqkmnrqq4Ee6tInP pdFvny0R5Gi3OPYur+reDh2TnA38DgjZ73u/Iq5rHeEwibBbz4fOr5mHDza2tuBq sMvYTnvg7eCPvrli5tKqHdBsbJH8xizlnYJvu+HlavuK62JazP2RHcZ+7M8hpa+4 PfCXRJuNrS9qMDI+mmh5ejbnYCmL4BQ9ZURvZvAQdGq0JKjxZMNg0Ge5vhQPZFY7 JdlWd/gVH2yEpxu7zSZEQ/b62KRiuBAbhTwgDlrtK9lXh0fUtuLVAnHlO0kbJT+E yG1jGLDdkUDJDwhQ10rZnJVIFz0CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRmwM2b h+hGAFLDZPvK3tH2YZAQqzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTk1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ5TAMA8EAgACMAkDBwAgAQ3y5YAwDQYJKoZIhvcNAQELBQADggEBAJg9 6gLoED+/Z88qMd8K3DYbQeT9nIJtcBlKlNpEuFeqf8ASYnMXg+9zkkC4cpPhBbbX VfpZ4uR/JtuO+kt7Az8XpHxYAfk9AaLpGd5nRqoV92sR/TtneP4hGAXj/ZtKJlMc 892Esx3GuRSe6Hguz4dbJYKVj5Ef9MPrCfyCyYSOwLg2/mF01f+vQCMm/gbhsBFi R9wPjEYEf6OGETPIuZLdg/jENLwhTCrmTpJKct9aBjiI7r+pt04xDb6u6GIF0jV7 R27ScVE13P/L40NEVOg+cKuNHILRIg5Dgz9x7MBM+HUYgWp2T7LWTZtfQ/jdJz+c +cOwfO7XmHCB85qj/qU= -----END CERTIFICATE-----Generated at Sun May 3 00:40:42 2026 by rpki-client