$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140459.roa File: AS140459.roa (raw, json) Hash identifier: +0qf0uhNFCQQUGenx6HyfDvjubONUnuNyH/rkzSKj74= Subject key identifier: 4B:4C:C0:7E:97:95:5D:41:DD:1F:8D:8F:AC:96:BA:71:28:38:18:29 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6FB3CA0CA0B07596D767A375297A36C977270AD6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140459.roa Signing time: Sat 02 May 2026 17:42:03 +0000 ROA not before: Sat 02 May 2026 17:37:03 +0000 ROA not after: Sat 01 May 2027 17:42:03 +0000 asID: 140459 IP address blocks: 103.153.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b3:ca:0c:a0:b0:75:96:d7:67:a3:75:29:7a:36:c9:77:27:0a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 17:37:03 2026 GMT Not After : May 1 17:42:03 2027 GMT Subject: CN=4B4CC07E97955D41DD1F8D8FAC96BA7128381829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:7b:34:a8:aa:bc:42:db:4b:e7:3d:54:3a: ff:6a:9f:75:78:d0:de:b7:6e:8e:f1:31:9f:30:73: eb:79:0a:54:34:ea:52:2e:fb:c3:d8:c9:2f:54:da: cb:3f:ab:e4:51:01:08:0b:1a:25:4f:7a:fe:3b:5f: aa:f8:76:82:3b:0e:7d:e3:ef:fd:9b:ea:1d:bc:94: 30:51:48:08:4e:ef:84:a8:35:0a:f4:a0:88:ed:d4: a6:a3:98:b6:83:af:c9:f6:a3:ef:d8:86:05:aa:57: 98:ff:ed:fc:60:6b:c6:eb:37:75:9f:38:dd:f8:bd: ea:b2:7e:7b:2d:52:ab:59:44:6c:d5:96:88:e3:ac: fc:93:b8:aa:91:39:37:c3:60:65:f9:32:89:27:53: 81:7e:39:ca:86:1b:8b:44:cb:b0:59:7e:b5:40:2b: e0:74:2d:ff:82:ea:46:bd:92:42:1a:c2:ce:fb:5c: 9d:19:41:d8:c0:d6:2e:f6:22:b2:63:2c:6c:2a:70: 50:9a:d9:bd:bb:e6:2d:6c:9c:a1:20:a8:78:a3:e1: 89:4c:36:5e:66:75:a6:ca:a2:d8:be:f4:98:33:2a: 56:96:21:4f:0d:aa:8b:8c:48:51:ea:b7:32:db:a4: 74:f2:2a:03:90:f1:44:c3:f7:11:d9:f8:34:d9:52: ef:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4C:C0:7E:97:95:5D:41:DD:1F:8D:8F:AC:96:BA:71:28:38:18:29 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140459.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.82.0/23 Signature Algorithm: sha256WithRSAEncryption 40:6b:1e:17:4b:87:b4:ac:fd:8a:18:19:19:77:26:69:a0:9d: 15:a0:89:0a:fd:29:18:c4:2f:09:07:c8:e0:ae:09:88:03:e4: f4:62:65:4c:ad:22:11:84:38:50:31:dc:ca:0a:f1:d2:49:3c: 87:5d:55:44:89:8b:f4:59:15:d5:9d:c6:3c:55:20:84:a9:81: c8:92:97:2c:8a:0f:d0:cf:b0:5c:f4:bf:e7:8f:28:4d:74:2c: b2:54:1f:4f:cc:25:6b:fb:fb:c0:9a:bb:ef:5c:8b:2b:98:a2: c9:75:7b:51:9e:d9:46:0b:0b:5a:d3:e8:bf:37:41:47:86:2d: c2:5b:2c:4d:9d:2f:74:99:8c:da:d4:c1:d8:ef:7e:92:0e:88: 75:af:70:44:1f:8d:4e:ca:ad:a5:b0:22:57:28:f8:73:16:88: 31:2e:7f:35:0c:df:9c:80:b6:e2:68:7f:72:50:14:e2:99:f3: 0f:b8:f2:73:37:0d:eb:7d:9c:fb:14:40:78:1c:8f:bc:bb:b9: 52:65:10:97:ab:11:6f:9c:00:84:15:fe:a9:38:d0:e1:69:8a: 59:ac:ca:07:62:3e:6d:24:ec:3f:3a:d3:68:28:6a:f5:ec:06: bb:2f:68:4b:41:c9:83:3f:45:b7:40:4c:45:95:00:78:32:79: 14:97:28:b6 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUb7PKDKCwdZbXZ6N1KXo2yXcnCtYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE3MzcwM1oX DTI3MDUwMTE3NDIwM1owMzExMC8GA1UEAxMoNEI0Q0MwN0U5Nzk1NUQ0MUREMUY4 RDhGQUM5NkJBNzEyODM4MTgyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6QezSoqrxC20vnPVQ6/2qfdXjQ3rdujvExnzBz63kKVDTqUi77w9jJL1Ta yz+r5FEBCAsaJU96/jtfqvh2gjsOfePv/ZvqHbyUMFFICE7vhKg1CvSgiO3UpqOY toOvyfaj79iGBapXmP/t/GBrxus3dZ843fi96rJ+ey1Sq1lEbNWWiOOs/JO4qpE5 N8NgZfkyiSdTgX45yoYbi0TLsFl+tUAr4HQt/4LqRr2SQhrCzvtcnRlB2MDWLvYi smMsbCpwUJrZvbvmLWycoSCoeKPhiUw2XmZ1psqi2L70mDMqVpYhTw2qi4xIUeq3 MtukdPIqA5DxRMP3Edn4NNlS788CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRLTMB+ l5VdQd0fjY+slrpxKDgYKTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDU5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ5lSMA0GCSqGSIb3DQEBCwUAA4IBAQBAax4XS4e0rP2KGBkZdyZpoJ0V oIkK/SkYxC8JB8jgrgmIA+T0YmVMrSIRhDhQMdzKCvHSSTyHXVVEiYv0WRXVncY8 VSCEqYHIkpcsig/Qz7Bc9L/njyhNdCyyVB9PzCVr+/vAmrvvXIsrmKLJdXtRntlG Cwta0+i/N0FHhi3CWyxNnS90mYza1MHY736SDoh1r3BEH41Oyq2lsCJXKPhzFogx Ln81DN+cgLbiaH9yUBTimfMPuPJzNw3rfZz7FEB4HI+8u7lSZRCXqxFvnACEFf6p ONDhaYpZrMoHYj5tJOw/OtNoKGr17Aa7L2hLQcmDP0W3QExFlQB4MnkUlyi2 -----END CERTIFICATE-----Generated at Sun May 3 00:39:47 2026 by rpki-client