$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140390.roa File: AS140390.roa (raw, json) Hash identifier: wdxkw735oQ5g5Fl16Bmo8B2WHPQfhudk3YQWsITIvF4= Subject key identifier: 50:2C:BE:27:58:76:94:09:A1:2B:11:2C:29:D6:19:17:C9:D1:2D:BF Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1C96B1E774FADDF83A1C9346171549F9FACD7878 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140390.roa Signing time: Sat 02 May 2026 16:09:27 +0000 ROA not before: Sat 02 May 2026 16:04:27 +0000 ROA not after: Sat 01 May 2027 16:09:27 +0000 asID: 140390 IP address blocks: 103.150.32.0/23 maxlen: 24 2405:fa40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:96:b1:e7:74:fa:dd:f8:3a:1c:93:46:17:15:49:f9:fa:cd:78:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 16:04:27 2026 GMT Not After : May 1 16:09:27 2027 GMT Subject: CN=502CBE2758769409A12B112C29D61917C9D12DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:92:22:b1:5b:88:27:f7:49:0b:95:34:d8: 98:21:9b:57:13:8a:8c:13:e1:a3:af:2b:68:87:2d: d4:b3:f8:45:ff:57:13:af:54:8c:87:d3:62:b8:6e: f1:c7:ed:97:01:05:79:fc:57:ca:db:bb:07:52:ee: 05:f8:a7:88:a7:37:a6:20:20:09:35:5b:e9:ea:5c: b3:f5:ee:94:3c:46:71:f9:f1:2a:99:02:88:ef:22: c0:0c:2c:a5:db:f2:c8:ee:4b:79:c3:c3:69:6f:04: 61:f2:50:5a:6f:35:60:d1:ab:49:99:f3:a2:41:8b: 5c:b1:b6:35:92:ea:6d:55:84:86:20:72:ec:b1:90: ed:43:78:10:3f:80:e3:bf:d2:72:04:73:5a:2f:d9: bc:cd:fa:46:94:36:92:48:5c:01:56:6a:4c:fd:b8: eb:f0:ad:d3:28:aa:a7:10:bf:47:75:82:a4:65:ed: b4:25:69:28:74:ac:a2:3b:f1:ec:82:70:7f:8a:72: 23:02:cd:93:e9:da:3d:88:2f:f6:6a:ad:b4:9d:17: 06:6a:fb:b4:80:03:a5:cb:f7:7c:99:21:67:7b:80: cf:5d:3a:67:2e:ab:7d:11:ab:40:13:e6:50:9d:72: f9:de:7a:67:64:79:58:6a:dd:3c:c1:fb:f4:a7:8b: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2C:BE:27:58:76:94:09:A1:2B:11:2C:29:D6:19:17:C9:D1:2D:BF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140390.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.32.0/23 IPv6: 2405:fa40::/32 Signature Algorithm: sha256WithRSAEncryption 22:6b:4e:78:98:1c:96:a9:f9:f3:a3:9b:8d:98:de:ff:a1:19: 09:aa:06:c3:43:ef:15:4e:99:9b:5d:9b:7e:8b:cc:48:c2:bc: fd:1c:56:a8:6b:0d:14:c2:2f:9e:46:1e:9e:91:ec:bb:8a:bd: 57:62:a8:d7:e6:f2:53:4f:fc:96:e2:fc:d9:c5:e5:41:69:65: 82:69:f6:5e:e2:ab:24:5c:42:78:74:26:cc:c3:60:b0:eb:41: e1:9a:25:14:bb:3b:47:23:bf:bf:86:ae:97:83:f3:7e:30:8c: 23:8c:b1:f5:a2:83:e3:4f:f3:2d:48:fc:30:f8:3a:8c:45:65: 35:26:31:58:81:43:56:d9:a6:3d:92:2d:60:ca:ac:c9:c3:d0: 1d:5d:60:8d:9e:35:df:a7:3e:9f:36:4e:44:a4:82:38:0d:74: b5:2e:b0:d3:51:c5:fb:a7:a9:04:d4:eb:3c:95:d4:95:4b:23: 46:d3:8a:a5:95:7b:11:d9:aa:2f:34:e0:96:ee:36:0c:61:42: aa:b1:e1:43:50:95:58:80:5d:bb:5a:ea:be:42:e4:a7:c2:a1: c3:97:91:e3:92:d4:5c:49:4a:fd:07:10:34:6c:c7:0b:03:e5: 61:7f:38:31:48:03:d4:1f:e6:58:80:ef:85:c7:19:65:a1:e2: 5f:d8:d8:44 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUHJax53T63fg6HJNGFxVJ+frNeHgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE2MDQyN1oX DTI3MDUwMTE2MDkyN1owMzExMC8GA1UEAxMoNTAyQ0JFMjc1ODc2OTQwOUExMkIx MTJDMjlENjE5MTdDOUQxMkRCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmJkiKxW4gn90kLlTTYmCGbVxOKjBPho68raIct1LP4Rf9XE69UjIfTYrhu 8cftlwEFefxXytu7B1LuBfiniKc3piAgCTVb6epcs/XulDxGcfnxKpkCiO8iwAws pdvyyO5LecPDaW8EYfJQWm81YNGrSZnzokGLXLG2NZLqbVWEhiBy7LGQ7UN4ED+A 47/ScgRzWi/ZvM36RpQ2kkhcAVZqTP246/Ct0yiqpxC/R3WCpGXttCVpKHSsojvx 7IJwf4pyIwLNk+naPYgv9mqttJ0XBmr7tIADpcv3fJkhZ3uAz106Zy6rfRGrQBPm UJ1y+d56Z2R5WGrdPMH79KeLvacCAwEAAaOCAdswggHXMB0GA1UdDgQWBBRQLL4n WHaUCaErESwp1hkXydEtvzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwMzkwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQBZ5YgMA0EAgACMAcDBQAkBfpAMA0GCSqGSIb3DQEBCwUAA4IBAQAia054 mByWqfnzo5uNmN7/oRkJqgbDQ+8VTpmbXZt+i8xIwrz9HFaoaw0Uwi+eRh6ekey7 ir1XYqjX5vJTT/yW4vzZxeVBaWWCafZe4qskXEJ4dCbMw2Cw60HhmiUUuztHI7+/ hq6Xg/N+MIwjjLH1ooPjT/MtSPww+DqMRWU1JjFYgUNW2aY9ki1gyqzJw9AdXWCN njXfpz6fNk5EpII4DXS1LrDTUcX7p6kE1Os8ldSVSyNG04qllXsR2aovNOCW7jYM YUKqseFDUJVYgF27Wuq+QuSnwqHDl5HjktRcSUr9BxA0bMcLA+VhfzgxSAPUH+ZY gO+FxxlloeJf2NhE -----END CERTIFICATE-----Generated at Sun May 3 01:44:41 2026 by rpki-client