$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140401.roa File: AS140401.roa (raw, json) Hash identifier: iYvx0E+qwLFqaVwiXvdOyRan3VWH1XXa8dmF9tGPAp0= Subject key identifier: E5:93:0C:28:8B:96:0D:BE:02:81:30:BE:1A:5F:0D:8B:26:41:43:B9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 55D97B35745E4F858196F6E7ABE45955C644C293 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140401.roa Signing time: Sat 02 May 2026 09:20:48 +0000 ROA not before: Sat 02 May 2026 09:15:48 +0000 ROA not after: Sat 01 May 2027 09:20:48 +0000 asID: 140401 IP address blocks: 103.184.54.0/23 maxlen: 24 103.187.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d9:7b:35:74:5e:4f:85:81:96:f6:e7:ab:e4:59:55:c6:44:c2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:48 2026 GMT Not After : May 1 09:20:48 2027 GMT Subject: CN=E5930C288B960DBE028130BE1A5F0D8B264143B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:a8:48:17:a5:10:aa:f1:eb:38:0d:53:45: 53:1b:67:92:0f:4d:0d:a6:99:6f:54:bd:b5:bd:51: dc:ad:f0:74:5d:7d:00:f3:17:dc:b8:d1:90:65:d3: f0:6a:4f:ed:22:2f:0a:3b:81:24:10:8b:88:28:e7: 81:70:42:e6:60:d6:aa:65:d6:8c:d6:fb:ea:f9:a4: 1c:25:1f:c9:60:31:8f:3b:c7:7a:b2:c0:27:ce:d2: d1:dc:27:87:65:4f:2e:52:ca:4d:84:04:1d:24:79: e1:d6:cc:00:0e:f9:20:f3:e8:b0:da:41:9c:eb:e8: 1f:d6:ea:eb:09:ef:70:8c:a0:22:fe:36:9f:72:dd: a2:e0:3d:f6:a8:00:8f:23:d2:8c:33:f6:b1:43:d4: 1b:3e:10:f9:d5:89:a6:4c:37:fb:c8:ee:d9:28:4a: 33:03:f2:fa:13:e5:1c:5d:2b:35:8a:46:98:0d:f0: a0:df:71:09:06:aa:be:d1:fa:59:35:8d:bd:73:2f: 84:75:74:34:bd:f6:23:3a:e1:35:a5:08:4a:27:4b: 1d:8b:cc:f8:ed:65:98:d4:f9:3b:45:fb:0a:0b:36: ac:e4:f2:9a:23:cd:1a:be:91:a1:36:f8:e0:84:a2: c6:c6:81:3c:41:82:03:b1:4b:e4:fa:9f:07:29:ad: 96:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:93:0C:28:8B:96:0D:BE:02:81:30:BE:1A:5F:0D:8B:26:41:43:B9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.54.0/23 103.187.116.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:3e:f2:9e:c2:8c:30:39:9f:1d:aa:f0:3c:fe:4f:46:e1:d3: ab:d4:f7:66:2a:1a:42:dc:40:94:36:1d:2c:e8:8f:e9:ad:83: 50:fb:12:8a:cb:e8:fe:da:56:1b:53:7f:3f:62:1b:22:24:cb: a8:f1:25:ea:32:15:e4:de:87:b8:8c:46:82:ac:17:09:41:db: 6b:80:c5:88:8c:b5:e5:99:b8:ea:26:67:c7:7c:a0:7c:48:28: ea:4e:8b:79:7c:28:cd:f3:4f:a3:28:82:46:fb:f9:9b:01:24: 5a:f1:dd:ba:f3:42:3c:7a:90:c5:92:f7:6c:9e:25:30:be:12: c6:64:86:8d:46:05:86:d7:05:01:00:28:eb:86:ee:41:02:94: e7:14:c2:59:c9:b0:e4:af:95:be:f4:d5:d6:2e:33:d3:03:e7: 36:24:fc:32:1b:24:4b:bb:c3:15:4e:98:d2:1e:ce:e7:bd:b5: bb:43:fb:54:64:03:7d:98:d0:48:f0:81:0a:e3:70:a9:a4:3e: 57:7d:57:5a:0c:45:5a:66:62:bd:7b:7a:53:51:01:85:a2:f9: db:ca:3a:ee:be:ee:cc:80:af:60:4f:1f:15:79:aa:7c:35:15: 13:b4:e4:65:5c:66:95:f0:a8:64:2f:98:25:eb:62:e1:ee:44: 68:19:61:15 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUVdl7NXReT4WBlvbnq+RZVcZEwpMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTU0OFoX DTI3MDUwMTA5MjA0OFowMzExMC8GA1UEAxMoRTU5MzBDMjg4Qjk2MERCRTAyODEz MEJFMUE1RjBEOEIyNjQxNDNCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALo7qEgXpRCq8es4DVNFUxtnkg9NDaaZb1S9tb1R3K3wdF19APMX3LjRkGXT 8GpP7SIvCjuBJBCLiCjngXBC5mDWqmXWjNb76vmkHCUfyWAxjzvHerLAJ87S0dwn h2VPLlLKTYQEHSR54dbMAA75IPPosNpBnOvoH9bq6wnvcIygIv42n3LdouA99qgA jyPSjDP2sUPUGz4Q+dWJpkw3+8ju2ShKMwPy+hPlHF0rNYpGmA3woN9xCQaqvtH6 WTWNvXMvhHV0NL32IzrhNaUISidLHYvM+O1lmNT5O0X7Cgs2rOTymiPNGr6RoTb4 4ISixsaBPEGCA7FL5PqfBymtllUCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBTlkwwo i5YNvgKBML4aXw2LJkFDuTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDAxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQBZ7g2AwQBZ7t0MA0GCSqGSIb3DQEBCwUAA4IBAQCNPvKewowwOZ8dqvA8 /k9G4dOr1PdmKhpC3ECUNh0s6I/prYNQ+xKKy+j+2lYbU38/YhsiJMuo8SXqMhXk 3oe4jEaCrBcJQdtrgMWIjLXlmbjqJmfHfKB8SCjqTot5fCjN80+jKIJG+/mbASRa 8d2680I8epDFkvdsniUwvhLGZIaNRgWG1wUBACjrhu5BApTnFMJZybDkr5W+9NXW LjPTA+c2JPwyGyRLu8MVTpjSHs7nvbW7Q/tUZAN9mNBI8IEK43CppD5XfVdaDEVa ZmK9e3pTUQGFovnbyjruvu7MgK9gTx8Veap8NRUTtORlXGaV8KhkL5gl62Lh7kRo GWEV -----END CERTIFICATE-----Generated at Sun May 3 01:44:04 2026 by rpki-client