$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140436.roa File: AS140436.roa (raw, json) Hash identifier: 0N3QL/BVb81lUXJ/pOCR8isVJ0AxKW/D0O0Js1raWCY= Subject key identifier: 77:4E:01:BB:22:D7:5F:71:4A:D1:76:A7:01:48:17:AE:43:66:5A:F6 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5D289ED30613BF1D52D2CFBAB981E3A6BF841142 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140436.roa Signing time: Sat 02 May 2026 21:10:25 +0000 ROA not before: Sat 02 May 2026 21:05:25 +0000 ROA not after: Sat 01 May 2027 21:10:25 +0000 asID: 140436 IP address blocks: 103.151.71.0/24 maxlen: 24 2001:df3:af80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:28:9e:d3:06:13:bf:1d:52:d2:cf:ba:b9:81:e3:a6:bf:84:11:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:05:25 2026 GMT Not After : May 1 21:10:25 2027 GMT Subject: CN=774E01BB22D75F714AD176A7014817AE43665AF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e2:9e:a1:80:81:69:f8:03:b3:72:7a:e2:2a: 43:f3:80:b7:b8:e3:8d:1d:b1:93:1b:53:99:2d:b3: fb:65:77:db:94:3d:53:0d:97:1b:a1:3a:3d:21:60: f2:26:68:5a:2c:f3:b0:9f:a2:94:af:ca:de:7e:cf: dc:f4:50:42:7a:15:fb:96:d1:c6:6c:70:7d:e9:b9: 5b:cc:ae:c5:f2:b1:2b:14:46:86:a0:36:95:cf:b3: 93:12:12:b0:3a:f8:ab:aa:6a:2a:e0:6f:f9:8b:63: 01:4a:dd:db:a7:f8:7e:95:f0:18:30:f0:f8:f3:3a: 28:ac:9c:80:c3:21:1d:af:b4:ef:6c:d4:26:4c:d4: 18:0e:0a:7d:ff:c2:ce:dc:12:90:36:ac:9d:b4:47: f2:4a:6d:f4:9f:fc:69:d1:a3:8b:fb:ff:25:b1:d3: 2c:5e:b9:d5:97:d4:77:72:3d:6c:22:6a:13:9f:c4: 8f:c3:34:0c:82:0f:3e:ee:65:f9:10:d8:4d:7c:27: db:fa:96:1d:da:a1:b5:56:4e:58:7d:d4:9a:64:a7: 48:a8:14:15:84:fa:18:97:07:4d:e9:46:84:48:f9: f3:52:9a:7b:ff:72:30:c0:9d:4a:51:d5:6c:5f:f9: 72:05:89:8f:b1:ec:84:93:6c:d8:90:33:28:23:73: 3c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4E:01:BB:22:D7:5F:71:4A:D1:76:A7:01:48:17:AE:43:66:5A:F6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.71.0/24 IPv6: 2001:df3:af80::/48 Signature Algorithm: sha256WithRSAEncryption 67:11:1c:c4:34:ce:3d:b3:30:ef:8a:38:88:7b:ce:e7:ea:8a: 19:c8:26:bd:47:89:6d:1d:7e:42:2c:d2:a0:67:00:64:0f:7e: 51:4a:70:7b:0e:48:95:91:f5:57:5f:59:97:46:c4:3f:c6:eb: e8:4b:a7:ec:af:7d:b5:4f:47:8f:ba:04:52:1e:9a:03:0b:fc: 83:e3:b1:17:73:df:25:3e:3f:64:e2:86:93:4a:f6:60:44:d6: 51:e0:96:1c:03:bb:4d:a8:94:5e:82:53:b1:7e:69:a7:ea:9e: 8a:23:ff:3e:4b:c9:db:40:48:35:d6:12:5c:0d:eb:06:0a:c3: 11:b7:8d:e4:42:5d:1c:13:8e:4b:ca:e1:da:37:1a:0f:c0:5d: 3c:b4:42:ad:e1:43:11:72:f3:d4:bd:c1:e9:f2:d3:3c:a9:fd: 0d:00:79:54:ce:d8:da:2b:f8:7a:c7:84:87:36:a6:16:7f:ba: 6f:19:5d:02:17:ed:60:0f:c3:25:ae:b5:04:49:26:ae:6a:26: 3c:82:05:fa:79:84:25:8d:2a:bb:b2:b3:a7:bc:9c:40:82:56: 16:33:59:a0:d1:85:89:cf:3e:9e:9a:8d:47:ff:67:8c:c5:31: e9:b5:39:3e:2b:1d:5e:ac:5a:4e:5c:b7:6e:e3:b9:6e:fa:99: f6:a0:c7:d3 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUXSie0wYTvx1S0s+6uYHjpr+EEUIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDUyNVoX DTI3MDUwMTIxMTAyNVowMzExMC8GA1UEAxMoNzc0RTAxQkIyMkQ3NUY3MTRBRDE3 NkE3MDE0ODE3QUU0MzY2NUFGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfinqGAgWn4A7NyeuIqQ/OAt7jjjR2xkxtTmS2z+2V325Q9Uw2XG6E6PSFg 8iZoWizzsJ+ilK/K3n7P3PRQQnoV+5bRxmxwfem5W8yuxfKxKxRGhqA2lc+zkxIS sDr4q6pqKuBv+YtjAUrd26f4fpXwGDDw+PM6KKycgMMhHa+072zUJkzUGA4Kff/C ztwSkDasnbRH8kpt9J/8adGji/v/JbHTLF651ZfUd3I9bCJqE5/Ej8M0DIIPPu5l +RDYTXwn2/qWHdqhtVZOWH3UmmSnSKgUFYT6GJcHTelGhEj581Kae/9yMMCdSlHV bF/5cgWJj7HshJNs2JAzKCNzPO0CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBR3TgG7 ItdfcUrRdqcBSBeuQ2Za9jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ5dHMA8EAgACMAkDBwAgAQ3zr4AwDQYJKoZIhvcNAQELBQADggEBAGcR HMQ0zj2zMO+KOIh7zufqihnIJr1HiW0dfkIs0qBnAGQPflFKcHsOSJWR9VdfWZdG xD/G6+hLp+yvfbVPR4+6BFIemgML/IPjsRdz3yU+P2TihpNK9mBE1lHglhwDu02o lF6CU7F+aafqnooj/z5LydtASDXWElwN6wYKwxG3jeRCXRwTjkvK4do3Gg/AXTy0 Qq3hQxFy89S9weny0zyp/Q0AeVTO2Nor+HrHhIc2phZ/um8ZXQIX7WAPwyWutQRJ Jq5qJjyCBfp5hCWNKruys6e8nECCVhYzWaDRhYnPPp6ajUf/Z4zFMem1OT4rHV6s Wk5ct27juW76mfagx9M= -----END CERTIFICATE-----Generated at Sun May 3 01:44:44 2026 by rpki-client