$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140407.roa File: AS140407.roa (raw, json) Hash identifier: Q9WUDt0lTkzPxpHUaklw/gAJPx7ZG3puct7d9+QXGRE= Subject key identifier: 2C:8B:89:83:EB:8A:C5:5B:ED:13:8A:A8:15:ED:26:A1:12:1A:C8:D5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0CCF5CB10E17F76DB2B5501554D59CE1CB9947AB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140407.roa Signing time: Sat 02 May 2026 16:23:38 +0000 ROA not before: Sat 02 May 2026 16:18:38 +0000 ROA not after: Sat 01 May 2027 16:23:38 +0000 asID: 140407 IP address blocks: 103.166.234.0/24 maxlen: 24 2001:df1:3fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cf:5c:b1:0e:17:f7:6d:b2:b5:50:15:54:d5:9c:e1:cb:99:47:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 16:18:38 2026 GMT Not After : May 1 16:23:38 2027 GMT Subject: CN=2C8B8983EB8AC55BED138AA815ED26A1121AC8D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:c7:89:29:11:5a:0d:5c:97:e2:18:eb:45: 7f:1b:01:e7:14:a7:b0:07:e1:71:b6:33:e1:c2:0f: e2:23:ec:da:9e:55:3f:34:3e:e9:a7:98:3e:b3:53: 8c:7d:f2:dc:5f:59:c9:a7:1a:95:33:99:11:e3:14: b9:85:11:6f:66:66:5b:d1:41:f5:3e:cc:bf:ed:78: 2c:12:25:df:a0:9e:1d:3a:d2:a3:11:fc:f2:0a:b9: 98:e6:a0:c6:b2:6e:93:8e:66:41:78:49:6d:5f:96: 62:97:73:8d:30:9c:da:ec:b9:c7:8d:cd:01:49:20: 79:12:d5:2b:13:3c:57:0c:1c:05:ff:ae:3e:7f:3e: 29:c9:3c:02:31:28:4c:8e:53:9b:f4:37:dd:a9:d8: 6b:a1:38:26:bd:f0:09:4e:32:98:fe:14:b3:5b:b0: a7:91:04:05:da:46:93:b5:38:6e:80:58:1b:8b:78: 74:a8:1d:8d:dc:18:58:f0:71:bc:be:b9:fc:5d:ea: 0f:f8:85:43:fc:c5:64:7f:86:b5:6e:d3:e1:34:6e: 84:06:0a:52:86:46:67:40:3a:6a:75:37:ef:32:33: b9:f5:d8:9f:bb:8d:a4:f5:af:4f:ef:f9:cb:9e:fd: b8:4e:e1:fb:4e:57:a7:af:b6:7c:e6:f7:cc:32:54: 03:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8B:89:83:EB:8A:C5:5B:ED:13:8A:A8:15:ED:26:A1:12:1A:C8:D5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140407.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.234.0/24 IPv6: 2001:df1:3fc0::/48 Signature Algorithm: sha256WithRSAEncryption 15:75:da:b2:51:4b:37:fa:ad:af:0d:35:37:c4:cd:6d:92:6b: 6e:75:a0:05:a3:cc:10:d8:10:5a:b6:72:de:62:70:88:cf:21: 03:19:a0:5e:1f:b9:1b:81:be:e4:0f:1d:e9:90:b3:1d:e4:e6: 1a:99:9a:53:6a:e4:2b:43:bb:ca:b7:23:c7:04:d8:c5:45:08: d6:a9:71:50:a2:ab:7c:58:fc:2b:31:27:fd:77:f4:29:83:63: 4e:42:b6:26:70:2f:dd:69:3a:b6:34:c4:9e:68:69:c1:00:c0: e9:41:56:3e:33:97:41:d0:2b:3d:67:7c:4a:28:e3:bd:f3:ec: e6:7a:ec:06:fb:5a:f5:45:a4:e0:b2:65:5a:10:29:71:03:23: 4f:bc:7e:c1:23:d0:74:78:17:4e:ec:a8:e6:58:86:1b:92:bb: c6:f0:2f:11:ed:cb:e6:22:1d:95:82:3b:31:85:c2:a3:a2:2c: 2e:7d:34:47:f5:b0:9c:0e:66:9e:03:7b:e2:42:21:f9:28:1d: d5:77:06:09:6b:28:dc:8b:b6:6a:8e:59:24:22:b8:1f:5c:fc: 3b:ff:42:6a:71:b7:ad:4a:80:c5:4c:3a:de:20:7b:ed:dd:06: b6:3a:04:5e:29:c3:48:14:9f:f7:87:c9:5f:01:17:a1:18:ce: 75:28:7b:ef -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUDM9csQ4X922ytVAVVNWc4cuZR6swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE2MTgzOFoX DTI3MDUwMTE2MjMzOFowMzExMC8GA1UEAxMoMkM4Qjg5ODNFQjhBQzU1QkVEMTM4 QUE4MTVFRDI2QTExMjFBQzhENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALb5x4kpEVoNXJfiGOtFfxsB5xSnsAfhcbYz4cIP4iPs2p5VPzQ+6aeYPrNT jH3y3F9ZyacalTOZEeMUuYURb2ZmW9FB9T7Mv+14LBIl36CeHTrSoxH88gq5mOag xrJuk45mQXhJbV+WYpdzjTCc2uy5x43NAUkgeRLVKxM8VwwcBf+uPn8+Kck8AjEo TI5Tm/Q33anYa6E4Jr3wCU4ymP4Us1uwp5EEBdpGk7U4boBYG4t4dKgdjdwYWPBx vL65/F3qD/iFQ/zFZH+GtW7T4TRuhAYKUoZGZ0A6anU37zIzufXYn7uNpPWvT+/5 y579uE7h+05Xp6+2fOb3zDJUA8ECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQsi4mD 64rFW+0TiqgV7SahEhrI1TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDA3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ6bqMA8EAgACMAkDBwAgAQ3xP8AwDQYJKoZIhvcNAQELBQADggEBABV1 2rJRSzf6ra8NNTfEzW2Sa251oAWjzBDYEFq2ct5icIjPIQMZoF4fuRuBvuQPHemQ sx3k5hqZmlNq5CtDu8q3I8cE2MVFCNapcVCiq3xY/CsxJ/139CmDY05CtiZwL91p OrY0xJ5oacEAwOlBVj4zl0HQKz1nfEoo473z7OZ67Ab7WvVFpOCyZVoQKXEDI0+8 fsEj0HR4F07sqOZYhhuSu8bwLxHty+YiHZWCOzGFwqOiLC59NEf1sJwOZp4De+JC IfkoHdV3BglrKNyLtmqOWSQiuB9c/Dv/Qmpxt61KgMVMOt4ge+3dBrY6BF4pw0gU n/eHyV8BF6EYznUoe+8= -----END CERTIFICATE-----Generated at Sun May 3 00:40:28 2026 by rpki-client