$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140423.roa File: AS140423.roa (raw, json) Hash identifier: iJDJe5mSgaD2BAwt83b4PhxkMOVyvPo8hPHDIAAaMbo= Subject key identifier: 91:54:13:75:18:35:BE:41:3F:6F:E3:5C:D4:7C:48:BC:EC:2E:DE:E1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1FBDFE2B9ED981E9D0DD579560737A77DBB5F440 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140423.roa Signing time: Sat 02 May 2026 21:25:12 +0000 ROA not before: Sat 02 May 2026 21:20:12 +0000 ROA not after: Sat 01 May 2027 21:25:12 +0000 asID: 140423 IP address blocks: 2001:df1:70c0::/48 maxlen: 48 2001:df1:7140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bd:fe:2b:9e:d9:81:e9:d0:dd:57:95:60:73:7a:77:db:b5:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:20:12 2026 GMT Not After : May 1 21:25:12 2027 GMT Subject: CN=915413751835BE413F6FE35CD47C48BCEC2EDEE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:70:f4:93:dc:1d:89:fe:73:ee:b0:bf:04:b4: 1a:ae:39:5f:2b:db:58:ab:12:19:7a:89:ba:30:66: 8e:a7:cf:51:aa:b0:6a:d7:3b:3a:7e:49:88:42:33: 3d:ad:e3:bd:e8:5e:99:1d:8d:23:f1:7e:d5:dd:62: ca:53:5e:f1:92:a4:ae:d8:6e:97:cb:9d:53:4c:93: 53:f2:68:51:d5:30:7b:db:b7:00:2e:9a:e9:6c:b5: 9a:e0:0d:1a:1e:2a:34:e4:15:c2:92:69:0b:32:03: 74:ac:eb:a9:a4:b4:95:55:b9:4a:f6:62:78:9c:38: 54:0e:ff:e1:a0:04:00:d4:86:2b:41:ce:75:79:06: f2:42:69:e1:d6:96:9f:ab:f8:ea:7b:49:32:05:52: 74:a7:a2:e7:9f:b4:cc:1e:ff:6d:4f:44:ca:c0:af: 6a:3b:d4:27:08:1d:56:18:af:eb:1d:2f:fb:13:9a: 63:aa:7a:02:6f:4a:cb:5c:2a:5e:97:17:ea:c8:8b: 73:bd:46:6b:77:f7:6c:86:68:e0:61:90:39:d6:56: 08:55:29:3a:98:6e:c9:4c:ad:b3:1e:9d:45:19:5f: a7:01:23:2c:f7:39:36:e3:8b:61:aa:88:ec:54:2a: cb:8a:44:c8:54:ea:37:8e:b9:7a:c5:02:92:1c:89: c8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:54:13:75:18:35:BE:41:3F:6F:E3:5C:D4:7C:48:BC:EC:2E:DE:E1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:70c0::/48 2001:df1:7140::/48 Signature Algorithm: sha256WithRSAEncryption 0d:27:07:5a:ae:bb:14:27:97:2c:ba:a2:fb:e5:a4:81:58:e0: 96:77:a5:81:a0:de:d2:37:14:61:aa:f1:ce:6a:06:b1:df:f0: e1:3c:4f:a4:f2:57:38:04:90:77:b6:3e:30:48:1e:d2:d7:94: d6:5f:93:c7:54:13:b2:b8:f5:31:62:b4:3b:ef:46:f0:a5:c8: 25:24:68:45:0e:f2:b2:f1:82:9b:cf:89:0b:ef:82:f3:b0:56: cd:e8:e0:48:dc:e9:33:85:13:37:11:aa:7e:8e:58:5e:e3:a0: d1:9c:a8:2b:75:22:b1:c9:81:14:e1:cd:a4:45:f7:4a:ed:c4: b3:6f:ee:b6:f3:78:59:43:bd:03:e1:55:9d:16:f3:d2:06:6f: 94:7b:6c:69:0d:15:87:26:5b:b6:af:0c:1b:33:eb:e9:a1:53: 35:7f:e8:92:d2:5f:80:20:cf:83:de:62:11:6b:2d:13:c3:35: aa:60:23:76:89:8b:ee:a0:50:a5:3e:09:a7:aa:d7:5c:e4:05: 64:63:52:cc:d9:4b:28:ad:00:a9:5d:f8:59:22:de:29:df:21: 53:d5:7b:78:5e:2c:2c:d8:e9:a5:91:78:5f:e2:09:37:9a:32: 1b:fa:d6:d3:8f:7d:37:c9:b5:03:eb:bc:77:7c:bd:4e:0e:0c: 4a:ee:4a:ea -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUH73+K57ZgenQ3VeVYHN6d9u19EAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjAxMloX DTI3MDUwMTIxMjUxMlowMzExMC8GA1UEAxMoOTE1NDEzNzUxODM1QkU0MTNGNkZF MzVDRDQ3QzQ4QkNFQzJFREVFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIhw9JPcHYn+c+6wvwS0Gq45XyvbWKsSGXqJujBmjqfPUaqwatc7On5JiEIz Pa3jvehemR2NI/F+1d1iylNe8ZKkrthul8udU0yTU/JoUdUwe9u3AC6a6Wy1muAN Gh4qNOQVwpJpCzIDdKzrqaS0lVW5SvZieJw4VA7/4aAEANSGK0HOdXkG8kJp4daW n6v46ntJMgVSdKei55+0zB7/bU9EysCvajvUJwgdVhiv6x0v+xOaY6p6Am9Ky1wq XpcX6siLc71Ga3f3bIZo4GGQOdZWCFUpOphuyUytsx6dRRlfpwEjLPc5NuOLYaqI 7FQqy4pEyFTqN465esUCkhyJyA8CAwEAAaOCAdgwggHUMB0GA1UdDgQWBBSRVBN1 GDW+QT9v41zUfEi87C7e4TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIA AjASAwcAIAEN8XDAAwcAIAEN8XFAMA0GCSqGSIb3DQEBCwUAA4IBAQANJwdarrsU J5csuqL75aSBWOCWd6WBoN7SNxRhqvHOagax3/DhPE+k8lc4BJB3tj4wSB7S15TW X5PHVBOyuPUxYrQ770bwpcglJGhFDvKy8YKbz4kL74LzsFbN6OBI3OkzhRM3Eap+ jlhe46DRnKgrdSKxyYEU4c2kRfdK7cSzb+6283hZQ70D4VWdFvPSBm+Ue2xpDRWH Jlu2rwwbM+vpoVM1f+iS0l+AIM+D3mIRay0TwzWqYCN2iYvuoFClPgmnqtdc5AVk Y1LM2UsorQCpXfhZIt4p3yFT1Xt4Xiws2OmlkXhf4gk3mjIb+tbTj303ybUD67x3 fL1ODgxK7krq -----END CERTIFICATE-----Generated at Sun May 3 01:44:53 2026 by rpki-client