$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140029.roa File: AS140029.roa (raw, json) Hash identifier: jk6DfOqoeuJ9kommCV7Pq6hhsqFy/cnBs6yWXIkvZdU= Subject key identifier: BC:33:C1:65:1D:23:45:4E:2A:BE:25:B3:9D:49:E6:E6:ED:BA:3D:6D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 237C4783B2866945E6AF8058B1EAA693E9CC82DE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140029.roa Signing time: Sat 02 May 2026 21:08:54 +0000 ROA not before: Sat 02 May 2026 21:03:54 +0000 ROA not after: Sat 01 May 2027 21:08:54 +0000 asID: 140029 IP address blocks: 103.149.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7c:47:83:b2:86:69:45:e6:af:80:58:b1:ea:a6:93:e9:cc:82:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:03:54 2026 GMT Not After : May 1 21:08:54 2027 GMT Subject: CN=BC33C1651D23454E2ABE25B39D49E6E6EDBA3D6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c5:c2:98:30:bd:1a:dc:76:40:90:ba:8c:ea: b7:75:c5:02:78:9b:70:81:be:fa:11:ce:64:aa:a5: aa:18:1a:9c:25:1b:6f:66:9c:57:ec:56:6f:f4:97: 63:1a:02:2f:58:ee:69:27:98:89:68:53:6c:c7:60: 49:aa:1d:fe:70:96:b7:f5:07:a9:44:8b:86:1a:45: 93:ae:1d:95:6d:d4:19:27:0e:2b:16:d0:61:c0:e0: 3f:7b:0a:11:3c:ac:98:20:c1:83:ad:b3:a3:8c:b2: 1a:ec:79:b5:33:a6:87:f2:7c:36:6b:90:65:99:ec: bf:32:12:c1:7e:74:8e:da:e6:a1:0d:3f:0a:a5:9b: 9f:71:98:e6:30:5b:2c:df:e7:43:ef:74:82:4e:bb: 01:66:57:bb:14:07:d9:70:cc:0e:29:16:89:2a:13: a2:2b:31:26:bb:91:90:79:8e:c0:f7:ad:c5:43:65: 10:0b:6d:a1:ad:e7:c9:e7:a0:1a:34:f0:cc:d3:51: 8d:4e:d6:8e:87:9f:cb:ef:37:35:d2:76:e2:5c:ff: d7:fb:b0:34:aa:b5:5c:46:00:82:1a:15:7c:97:56: 95:c1:d1:e8:be:26:36:17:8f:ab:39:a2:de:6b:28: 79:c1:89:30:92:84:84:69:2c:35:94:86:26:3c:ac: 1b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:33:C1:65:1D:23:45:4E:2A:BE:25:B3:9D:49:E6:E6:ED:BA:3D:6D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.208.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:fd:ba:4e:2d:ac:60:c4:3f:5a:86:26:a1:ae:21:e3:09:6b: e7:b7:f3:3c:02:1f:86:1e:b9:98:76:39:bc:61:76:b5:b4:dd: ff:17:5c:29:4a:8e:34:f2:1d:6e:1f:3f:87:3b:ce:a2:6a:d5: dd:ad:9d:b0:4f:26:15:9f:db:5b:61:6b:d1:e3:46:91:1e:54: 64:3d:f4:ec:f1:e6:7d:cf:be:c2:6f:16:a0:e7:4a:d9:97:37: da:08:d5:f2:38:50:3c:07:cc:55:95:f8:9f:a6:70:50:56:9c: e5:e5:b0:b6:0e:1c:4f:0d:91:55:1e:2b:5b:31:3d:14:c5:6b: cf:b1:c7:fc:d2:e8:ed:51:42:a2:4a:a3:d6:35:dd:bf:1f:fc: 5c:9e:17:5b:9c:8a:36:b3:d9:93:72:ba:fa:d8:ee:2d:7a:b4: d3:97:6d:e9:aa:45:c4:51:30:03:ed:c5:fd:12:d9:4a:53:99: bf:b3:ee:83:57:a1:44:ad:d7:65:61:b3:b3:10:64:79:21:a1: ec:08:3a:a8:58:f6:b8:f5:a3:9f:ef:1a:14:8e:b2:fd:f3:b9: 73:45:28:eb:6a:a5:7d:ee:7a:51:5c:97:0b:b6:18:05:90:44: 8b:81:0d:49:c4:d7:97:40:1b:a0:fb:00:49:64:e9:64:2a:fb: 94:c8:de:97 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUI3xHg7KGaUXmr4BYseqmk+nMgt4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDM1NFoX DTI3MDUwMTIxMDg1NFowMzExMC8GA1UEAxMoQkMzM0MxNjUxRDIzNDU0RTJBQkUy NUIzOUQ0OUU2RTZFREJBM0Q2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJDFwpgwvRrcdkCQuozqt3XFAnibcIG++hHOZKqlqhganCUbb2acV+xWb/SX YxoCL1juaSeYiWhTbMdgSaod/nCWt/UHqUSLhhpFk64dlW3UGScOKxbQYcDgP3sK ETysmCDBg62zo4yyGux5tTOmh/J8NmuQZZnsvzISwX50jtrmoQ0/CqWbn3GY5jBb LN/nQ+90gk67AWZXuxQH2XDMDikWiSoToisxJruRkHmOwPetxUNlEAttoa3nyeeg GjTwzNNRjU7Wjoefy+83NdJ24lz/1/uwNKq1XEYAghoVfJdWlcHR6L4mNhePqzmi 3msoecGJMJKEhGksNZSGJjysGzMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS8M8Fl HSNFTiq+JbOdSebm7bo9bTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwMDI5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ5XQMA0GCSqGSIb3DQEBCwUAA4IBAQAK/bpOLaxgxD9ahiahriHjCWvn t/M8Ah+GHrmYdjm8YXa1tN3/F1wpSo408h1uHz+HO86iatXdrZ2wTyYVn9tbYWvR 40aRHlRkPfTs8eZ9z77Cbxag50rZlzfaCNXyOFA8B8xVlfifpnBQVpzl5bC2DhxP DZFVHitbMT0UxWvPscf80ujtUUKiSqPWNd2/H/xcnhdbnIo2s9mTcrr62O4terTT l23pqkXEUTAD7cX9EtlKU5m/s+6DV6FErddlYbOzEGR5IaHsCDqoWPa49aOf7xoU jrL987lzRSjraqV97npRXJcLthgFkESLgQ1JxNeXQBug+wBJZOlkKvuUyN6X -----END CERTIFICATE-----Generated at Sun May 3 01:44:44 2026 by rpki-client