$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140416.roa File: AS140416.roa (raw, json) Hash identifier: +0FWkycRGsavMzNQTApjvUQh9kQn1mkSMJVy2SB923Q= Subject key identifier: E0:70:A9:9F:12:FF:2E:24:9A:6B:46:B2:67:95:BD:78:51:AC:3C:E2 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2331213E5D75342F0786F7981D9F635CFE1C838C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140416.roa Signing time: Sat 02 May 2026 21:08:35 +0000 ROA not before: Sat 02 May 2026 21:03:35 +0000 ROA not after: Sat 01 May 2027 21:08:35 +0000 asID: 140416 IP address blocks: 103.148.86.0/23 maxlen: 24 2001:df2:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:31:21:3e:5d:75:34:2f:07:86:f7:98:1d:9f:63:5c:fe:1c:83:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:03:35 2026 GMT Not After : May 1 21:08:35 2027 GMT Subject: CN=E070A99F12FF2E249A6B46B26795BD7851AC3CE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:6b:e0:00:59:5a:d4:a3:2b:c8:5a:82:1c: e8:28:9a:87:be:8a:e7:dc:ce:da:2f:77:b0:db:3d: 86:6d:dd:ca:1a:14:58:e9:9c:b0:6b:d5:42:2e:40: 3b:b2:26:a0:1d:f3:48:1a:2b:bf:55:af:a9:cb:c6: 2c:3e:55:da:ab:9a:01:b4:b2:e6:33:9d:2b:b3:6f: 17:6a:41:82:dd:9b:8d:53:2b:b7:a1:3a:fa:86:ea: 4c:34:20:bd:ae:f1:58:84:93:c8:3a:66:8c:9a:2b: 53:97:e7:42:1b:6c:fe:fb:76:59:e3:b8:5b:3f:83: 19:14:e2:fd:00:55:29:4b:b8:c1:ee:ea:8b:70:c6: d4:05:30:ed:eb:dd:fd:94:62:08:fe:4a:7a:52:c9: 1f:c7:dc:8e:53:92:21:ff:32:0f:fa:f4:3a:16:99: 83:d9:57:e7:e7:5a:18:51:8c:90:db:6f:74:d2:65: 2e:58:85:fc:b2:32:8d:6a:ad:c4:33:f6:85:b1:25: 8b:b2:59:16:ab:a5:1b:40:57:9b:01:cb:c9:15:30: 10:e0:49:b8:0b:9f:b0:60:43:8d:f9:2d:50:6a:0a: f0:ca:5f:87:cc:ed:e0:0e:58:d9:21:97:7d:02:ec: 3d:26:97:2b:64:9d:78:c0:a2:f6:e3:d6:5c:15:e9: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:70:A9:9F:12:FF:2E:24:9A:6B:46:B2:67:95:BD:78:51:AC:3C:E2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140416.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.86.0/23 IPv6: 2001:df2:c880::/48 Signature Algorithm: sha256WithRSAEncryption 6c:47:1b:c5:02:1b:9b:0e:f1:8d:0e:ff:6d:5a:e7:11:53:87: ca:c8:2f:15:f4:ac:db:ed:db:2a:55:e8:65:4b:de:46:bd:b6: ad:f6:6d:e1:b8:1d:89:8b:69:81:cd:8a:0c:41:bf:30:aa:37: de:d7:1e:df:90:64:4d:b6:e4:af:39:4b:e1:14:ae:05:6a:af: a5:6f:60:8a:e2:ae:1f:0b:03:d2:ed:8b:09:86:f9:27:eb:5c: 88:af:d2:8a:8f:b6:8c:aa:e4:36:d3:07:20:ff:c9:a7:f8:46: d1:d4:94:13:ed:3f:6d:c1:ca:7e:5d:88:0c:a2:db:98:72:df: c7:9c:11:08:e4:80:b4:60:d0:04:99:a8:7f:3e:80:37:41:48: 3a:ae:f8:e7:3b:1b:7a:45:f1:21:42:69:ff:63:6d:df:e3:24: 4a:9f:88:61:b7:3f:1f:6f:87:55:97:ae:80:9c:71:eb:b6:7e: 17:9c:ec:2a:c5:e4:31:ed:0f:a4:8b:bd:e1:f4:96:eb:8f:ad: 4c:a9:b5:c6:cf:7a:0c:e2:0b:78:7b:50:df:fa:b8:8d:d5:8f: 8a:90:b8:1f:c1:f9:2b:58:12:44:cc:66:d3:bc:92:36:df:bc: 60:ea:ea:d8:77:3c:da:93:0c:d4:78:c7:10:7a:b9:09:d4:85: 2d:7f:6d:5b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUIzEhPl11NC8HhveYHZ9jXP4cg4wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDMzNVoX DTI3MDUwMTIxMDgzNVowMzExMC8GA1UEAxMoRTA3MEE5OUYxMkZGMkUyNDlBNkI0 NkIyNjc5NUJENzg1MUFDM0NFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI5Da+AAWVrUoyvIWoIc6Ciah76K59zO2i93sNs9hm3dyhoUWOmcsGvVQi5A O7ImoB3zSBorv1WvqcvGLD5V2quaAbSy5jOdK7NvF2pBgt2bjVMrt6E6+obqTDQg va7xWISTyDpmjJorU5fnQhts/vt2WeO4Wz+DGRTi/QBVKUu4we7qi3DG1AUw7evd /ZRiCP5KelLJH8fcjlOSIf8yD/r0OhaZg9lX5+daGFGMkNtvdNJlLliF/LIyjWqt xDP2hbEli7JZFqulG0BXmwHLyRUwEOBJuAufsGBDjfktUGoK8Mpfh8zt4A5Y2SGX fQLsPSaXK2SdeMCi9uPWXBXpddkCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTgcKmf Ev8uJJprRrJnlb14Uaw84jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDE2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ5RWMA8EAgACMAkDBwAgAQ3yyIAwDQYJKoZIhvcNAQELBQADggEBAGxH G8UCG5sO8Y0O/21a5xFTh8rILxX0rNvt2ypV6GVL3ka9tq32beG4HYmLaYHNigxB vzCqN97XHt+QZE225K85S+EUrgVqr6VvYIrirh8LA9LtiwmG+SfrXIiv0oqPtoyq 5DbTByD/yaf4RtHUlBPtP23Byn5diAyi25hy38ecEQjkgLRg0ASZqH8+gDdBSDqu +Oc7G3pF8SFCaf9jbd/jJEqfiGG3Px9vh1WXroCcceu2fhec7CrF5DHtD6SLveH0 luuPrUyptcbPegziC3h7UN/6uI3Vj4qQuB/B+StYEkTMZtO8kjbfvGDq6th3PNqT DNR4xxB6uQnUhS1/bVs= -----END CERTIFICATE-----Generated at Sun May 3 01:44:54 2026 by rpki-client