$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140421.roa File: AS140421.roa (raw, json) Hash identifier: qPr/4PiDV/1YBZhAGw9VijgkNXky4bvljd6LQpD9g5Y= Subject key identifier: E8:D0:E1:DA:14:EC:8B:2A:90:4E:9F:D2:5E:2E:C9:D0:A3:33:CB:0E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0812CEAC9391B15816F928CB8CB8B1538DB38E3B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140421.roa Signing time: Sat 02 May 2026 21:08:37 +0000 ROA not before: Sat 02 May 2026 21:03:37 +0000 ROA not after: Sat 01 May 2027 21:08:37 +0000 asID: 140421 IP address blocks: 103.148.88.0/23 maxlen: 24 144.48.12.0/24 maxlen: 24 2001:df2:c980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:12:ce:ac:93:91:b1:58:16:f9:28:cb:8c:b8:b1:53:8d:b3:8e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:03:37 2026 GMT Not After : May 1 21:08:37 2027 GMT Subject: CN=E8D0E1DA14EC8B2A904E9FD25E2EC9D0A333CB0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:74:98:e5:b5:75:7b:f8:ed:55:c8:f2:1e:07: 6f:ef:b7:11:21:dd:c9:85:ef:f5:10:6a:3f:54:88: d8:cf:72:39:5a:f4:51:27:ec:a3:06:3a:67:a4:1b: 7a:f3:22:5f:f6:6f:34:94:3b:37:39:fd:19:a8:5e: fc:eb:75:d3:b9:6f:02:13:38:b5:74:19:1d:76:97: 81:98:6e:81:9f:cc:66:72:9a:60:ac:08:74:c4:af: 08:bc:2a:6d:1b:3e:a8:bd:14:43:70:e2:05:17:98: 6f:4f:e9:6a:39:74:9b:97:95:4e:17:e2:58:55:7e: f9:42:af:63:16:e3:50:6e:c0:e5:9f:7f:21:d8:4e: b0:bf:d2:ff:81:a1:c7:77:ec:46:23:60:38:ab:09: 71:79:2a:af:af:1d:cb:df:a5:09:e1:2e:db:11:cb: 5a:a9:5f:9e:9a:e5:4b:ee:53:23:d9:a7:6b:ba:9c: 90:bb:f1:43:b8:3d:c1:35:0e:41:59:d2:4c:fa:fb: 1e:3c:82:9c:2e:c2:fc:37:9c:96:24:01:57:7b:2e: 3a:81:2e:bf:27:a0:c8:72:6c:09:b5:51:29:41:f0: 4f:87:5f:2e:30:aa:60:62:57:59:58:6f:b8:01:24: 6a:55:d1:07:bb:5e:c7:28:05:ac:73:a4:d3:6a:9c: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D0:E1:DA:14:EC:8B:2A:90:4E:9F:D2:5E:2E:C9:D0:A3:33:CB:0E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140421.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.88.0/23 144.48.12.0/24 IPv6: 2001:df2:c980::/48 Signature Algorithm: sha256WithRSAEncryption 7f:79:96:ee:4b:8b:b7:ab:45:27:4c:21:be:c6:99:56:6d:40: 43:67:51:ab:49:1c:db:0e:90:02:e3:c8:c4:f1:34:72:37:46: 56:31:fa:5f:51:92:31:00:c0:d5:ab:14:d3:be:0e:5e:d1:aa: a5:83:98:97:c7:3c:00:32:32:b2:6a:55:3c:ed:b4:c5:51:93: ed:a1:27:11:f0:20:06:9c:c2:ed:42:e5:07:e0:59:f9:73:7d: 29:fa:15:a3:a7:96:6c:60:bf:50:ce:5a:c6:9c:02:5c:25:fa: 78:b9:d4:03:96:5c:6f:dd:97:a7:d8:bb:ec:82:f3:be:78:4c: 28:f5:82:af:74:73:6f:58:60:c5:8b:4c:73:1b:ea:f2:80:5a: da:56:af:77:bf:03:b1:44:06:1a:58:fc:93:fb:dc:b6:e8:38: 65:a0:d8:d5:e7:19:52:aa:84:da:18:d7:73:d1:8e:44:13:17: 9b:94:75:aa:38:9a:ec:ab:60:a1:4b:5a:6b:64:7d:4c:b7:52: c2:46:15:a0:47:be:94:6d:4b:89:44:45:bd:00:60:22:bd:7b: a0:cf:53:d6:09:d5:e0:ad:ff:4b:5e:76:84:39:a0:26:c2:bc: 96:da:74:48:eb:cf:43:42:e8:c2:b9:85:45:a0:1e:41:53:51: 4c:12:46:1d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUCBLOrJORsVgW+SjLjLixU42zjjswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDMzN1oX DTI3MDUwMTIxMDgzN1owMzExMC8GA1UEAxMoRThEMEUxREExNEVDOEIyQTkwNEU5 RkQyNUUyRUM5RDBBMzMzQ0IwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJZ0mOW1dXv47VXI8h4Hb++3ESHdyYXv9RBqP1SI2M9yOVr0USfsowY6Z6Qb evMiX/ZvNJQ7Nzn9Gahe/Ot107lvAhM4tXQZHXaXgZhugZ/MZnKaYKwIdMSvCLwq bRs+qL0UQ3DiBReYb0/pajl0m5eVThfiWFV++UKvYxbjUG7A5Z9/IdhOsL/S/4Gh x3fsRiNgOKsJcXkqr68dy9+lCeEu2xHLWqlfnprlS+5TI9mna7qckLvxQ7g9wTUO QVnSTPr7HjyCnC7C/DecliQBV3suOoEuvyegyHJsCbVRKUHwT4dfLjCqYGJXWVhv uAEkalXRB7texygFrHOk02qcMb0CAwEAAaOCAeMwggHfMB0GA1UdDgQWBBTo0OHa FOyLKpBOn9JeLsnQozPLDjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIA ATAMAwQBZ5RYAwQAkDAMMA8EAgACMAkDBwAgAQ3yyYAwDQYJKoZIhvcNAQELBQAD ggEBAH95lu5Li7erRSdMIb7GmVZtQENnUatJHNsOkALjyMTxNHI3RlYx+l9RkjEA wNWrFNO+Dl7RqqWDmJfHPAAyMrJqVTzttMVRk+2hJxHwIAacwu1C5QfgWflzfSn6 FaOnlmxgv1DOWsacAlwl+ni51AOWXG/dl6fYu+yC8754TCj1gq90c29YYMWLTHMb 6vKAWtpWr3e/A7FEBhpY/JP73LboOGWg2NXnGVKqhNoY13PRjkQTF5uUdao4muyr YKFLWmtkfUy3UsJGFaBHvpRtS4lERb0AYCK9e6DPU9YJ1eCt/0tedoQ5oCbCvJba dEjrz0NC6MK5hUWgHkFTUUwSRh0= -----END CERTIFICATE-----Generated at Sun May 3 00:42:33 2026 by rpki-client