$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140457.roa File: AS140457.roa (raw, json) Hash identifier: 1XXXK2CuGC+xXeC9vjQlhSGEp77WTDzOoNEzc0sx2c4= Subject key identifier: 94:81:0F:74:31:97:32:E9:AE:9F:C4:BD:48:C1:76:62:EF:B2:DC:D2 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3BAEC743C938ABAE075DCEE80617BB2DE1A57DF9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140457.roa Signing time: Sat 02 May 2026 21:35:06 +0000 ROA not before: Sat 02 May 2026 21:30:06 +0000 ROA not after: Sat 01 May 2027 21:35:06 +0000 asID: 140457 IP address blocks: 2406:3fc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ae:c7:43:c9:38:ab:ae:07:5d:ce:e8:06:17:bb:2d:e1:a5:7d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:30:06 2026 GMT Not After : May 1 21:35:06 2027 GMT Subject: CN=94810F74319732E9AE9FC4BD48C17662EFB2DCD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:06:c9:5b:aa:5d:a6:1e:67:85:ed:23:9d: 09:9a:f5:6b:6a:81:c2:c4:59:20:61:35:3e:dd:cc: a4:05:bd:cd:3b:0c:56:e6:c8:b2:c1:55:f1:bf:c4: 56:1b:45:4c:56:3f:ff:45:3d:69:e6:97:9f:a5:89: 39:48:11:b4:21:42:ca:33:e2:9f:45:59:00:2a:e7: f1:ba:b5:c2:ba:53:04:c2:5b:3c:c0:2d:77:fd:ae: 90:0e:cd:ea:08:2f:c6:48:9d:a4:eb:dd:04:63:5b: 05:fd:ed:5b:18:ff:1f:d9:d1:b4:b7:27:90:46:08: d2:d8:6a:1f:ff:96:7f:44:57:92:fe:52:dc:9f:71: ff:e4:58:e4:57:a1:56:6a:32:21:3d:9b:3a:38:1c: 52:af:09:e9:01:2b:2e:8a:58:7c:7e:04:49:07:d1: c1:7e:00:32:ef:1d:43:1d:75:76:d7:9f:31:c9:e2: a3:60:e5:58:0d:23:37:d4:9a:d9:2d:7e:0e:69:40: f2:c0:9e:e2:c5:6a:39:6c:47:f0:4d:61:1d:e1:89: f9:ac:e3:61:fa:c0:4f:77:39:39:eb:4f:bf:fa:40: 06:d3:46:65:af:96:5b:c7:de:30:80:89:0d:01:ab: 1b:f8:cf:69:dc:45:f1:f1:72:c6:61:42:56:91:19: 5e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:81:0F:74:31:97:32:E9:AE:9F:C4:BD:48:C1:76:62:EF:B2:DC:D2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140457.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3fc0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:79:a9:92:9b:5e:e3:0b:ad:39:be:77:04:3a:ff:8e:48:61: d6:d2:ba:d3:93:96:26:6b:49:0a:98:14:75:2d:43:70:41:a0: ca:ac:2d:b5:5a:b0:85:b4:95:e1:77:b6:8f:7e:34:79:93:74: 4e:27:03:1d:01:7a:41:b3:6d:57:e2:58:52:70:04:af:1b:46: bf:c0:e6:ff:dc:ce:dc:b9:15:73:26:c9:7b:aa:06:11:6a:53: 19:d5:02:75:42:3b:d7:9b:a3:4b:2f:72:ef:a8:75:44:14:4b: 6f:8d:9f:e0:fb:14:b5:b1:68:50:fc:46:90:16:75:d6:eb:34: 9d:2d:fc:95:6c:32:aa:dc:bf:c0:04:07:d7:6c:08:81:a1:c4: 51:9d:fc:ab:a9:af:7a:05:84:08:30:c6:fe:f2:09:3b:9a:61: 8f:6f:8b:0b:d7:bc:bc:dd:de:27:3e:a6:77:74:2c:3c:2e:c2: 36:f2:b7:61:38:c6:3d:da:e6:73:81:69:26:84:83:f3:ea:10: 0c:82:e8:0d:f2:63:66:53:76:37:69:be:aa:1c:57:0b:d3:e2: e7:13:28:f7:c9:bc:1e:a8:7f:18:9e:a0:c7:74:66:81:d9:8d: 5b:0e:35:11:23:2a:7a:b0:fc:3e:ff:74:46:dd:bd:f9:77:4e: d5:fe:7e:49 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUO67HQ8k4q64HXc7oBhe7LeGlffkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzAwNloX DTI3MDUwMTIxMzUwNlowMzExMC8GA1UEAxMoOTQ4MTBGNzQzMTk3MzJFOUFFOUZD NEJENDhDMTc2NjJFRkIyRENEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbuBslbql2mHmeF7SOdCZr1a2qBwsRZIGE1Pt3MpAW9zTsMVubIssFV8b/E VhtFTFY//0U9aeaXn6WJOUgRtCFCyjPin0VZACrn8bq1wrpTBMJbPMAtd/2ukA7N 6ggvxkidpOvdBGNbBf3tWxj/H9nRtLcnkEYI0thqH/+Wf0RXkv5S3J9x/+RY5Feh VmoyIT2bOjgcUq8J6QErLopYfH4ESQfRwX4AMu8dQx11dtefMcnio2DlWA0jN9Sa 2S1+DmlA8sCe4sVqOWxH8E1hHeGJ+azjYfrAT3c5OetPv/pABtNGZa+WW8feMICJ DQGrG/jPadxF8fFyxmFCVpEZXj0CAwEAAaOCAc0wggHJMB0GA1UdDgQWBBSUgQ90 MZcy6a6fxL1IwXZi77Lc0jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDU3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAY/wDANBgkqhkiG9w0BAQsFAAOCAQEAPXmpkpte4wutOb53BDr/jkhh 1tK605OWJmtJCpgUdS1DcEGgyqwttVqwhbSV4Xe2j340eZN0TicDHQF6QbNtV+JY UnAErxtGv8Dm/9zO3LkVcybJe6oGEWpTGdUCdUI715ujSy9y76h1RBRLb42f4PsU tbFoUPxGkBZ11us0nS38lWwyqty/wAQH12wIgaHEUZ38q6mvegWECDDG/vIJO5ph j2+LC9e8vN3eJz6md3QsPC7CNvK3YTjGPdrmc4FpJoSD8+oQDILoDfJjZlN2N2m+ qhxXC9Pi5xMo98m8Hqh/GJ6gx3RmgdmNWw41ESMqerD8Pv90Rt29+XdO1f5+SQ== -----END CERTIFICATE-----Generated at Sun May 3 01:44:01 2026 by rpki-client