
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140460.roa
File: AS140460.roa (raw, json)
Hash identifier: ZkHWS8rkJl1j7utg8EBP4FYHC6bH+tKh3LFm1TV1zQE=
Subject key identifier: 90:24:49:66:D6:25:08:63:1E:D1:EA:D4:5D:8A:7C:C1:99:48:26:78
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 6149809C1227DD4593D9C6538BB5AA4A93BDA394
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140460.roa
Signing time: Sat 02 May 2026 21:35:08 +0000
ROA not before: Sat 02 May 2026 21:30:08 +0000
ROA not after: Sat 01 May 2027 21:35:08 +0000
asID: 140460
IP address blocks: 2406:41c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 03:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:49:80:9c:12:27:dd:45:93:d9:c6:53:8b:b5:aa:4a:93:bd:a3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:30:08 2026 GMT
Not After : May 1 21:35:08 2027 GMT
Subject: CN=90244966D62508631ED1EAD45D8A7CC199482678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:14:25:4d:70:92:fe:be:18:e8:fc:10:3c:
63:76:ee:f9:df:6e:1b:b7:e9:65:bf:44:aa:52:f7:
3c:26:ba:e2:81:fc:97:39:0e:4a:c7:77:4c:22:6f:
05:c9:31:36:b9:37:9d:06:56:fe:a4:39:fa:ab:34:
9a:a4:06:66:92:3c:30:0c:96:82:2c:b8:23:52:f1:
4e:99:0f:fd:1b:33:a0:c7:a6:dd:d8:92:38:7d:ca:
31:cc:fd:8c:5d:6e:bc:bd:d3:dc:61:8e:1c:e5:5e:
39:6a:a0:d0:56:39:db:69:8c:98:81:0b:43:d6:75:
9e:d3:fd:f5:a8:d9:d8:67:3a:b2:ce:2c:14:f8:2c:
09:b5:5b:67:ef:db:79:73:27:61:8b:2a:05:5c:36:
8d:90:32:c4:f8:f4:b1:af:c0:4a:2f:d5:78:cf:fb:
3d:fc:08:f8:4c:d5:a8:93:d5:5a:5f:74:9b:46:46:
cf:91:13:0b:7f:52:6b:ae:01:b7:0f:66:b0:b8:bb:
05:59:37:56:f0:e2:54:3b:f1:33:c0:1b:80:7c:0c:
8f:f5:26:9e:52:8a:4e:e9:90:c2:3e:e2:b0:0e:43:
ab:b8:90:56:36:0f:b5:50:6c:80:74:66:d5:13:27:
47:0a:68:3c:6e:39:e6:4c:96:6b:9b:60:7d:87:ef:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:24:49:66:D6:25:08:63:1E:D1:EA:D4:5D:8A:7C:C1:99:48:26:78
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140460.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:41c0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:0b:24:b4:47:1a:36:18:28:ee:8f:41:14:98:7a:65:bf:54:
a5:9b:3a:4d:34:97:48:46:bc:99:42:55:0a:f2:18:1a:f6:2b:
a9:da:59:f3:d9:c4:5f:50:f2:6c:51:7c:cd:70:52:65:e6:af:
15:be:7f:2c:d7:c7:2e:2b:40:3a:ec:ba:ad:c2:0f:dd:55:c1:
22:84:19:77:38:2b:57:db:bc:2a:68:c6:a1:5a:68:24:61:00:
a0:3b:ac:ff:bf:bf:ec:ae:8a:af:83:80:42:79:c9:a0:2c:72:
cd:10:eb:14:48:0f:93:6d:4d:dc:57:88:53:69:af:a2:88:85:
ac:05:0e:8e:e2:b0:d5:73:71:c4:87:3c:9b:81:f2:6e:08:0b:
b9:a4:f4:fe:08:4f:d0:48:6e:1c:13:23:c3:bc:f3:f6:c9:f5:
fc:97:a2:e1:b6:e4:a7:a2:1f:d6:ea:ea:9c:f8:69:2e:69:39:
1d:b0:93:7f:40:15:50:04:70:ad:9f:08:b2:fa:60:00:5f:f8:
53:ce:88:67:74:53:88:3d:a1:cc:c6:4c:9a:1c:aa:bb:72:f1:
cd:7f:95:03:e3:41:54:3c:b9:aa:ce:71:e6:5b:d3:11:5e:0d:
39:a1:b0:4a:5d:9e:cd:11:c2:86:a9:a8:ff:11:03:a3:cd:51:
82:c2:fa:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 3 01:44:39 2026 by rpki-client