$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140470.roa File: AS140470.roa (raw, json) Hash identifier: lkT9ACl3OAy/Wnm0ziiyBizKAE4pDTzzByzCeQhZPI4= Subject key identifier: 6F:69:04:44:EA:BE:E4:F9:B3:4F:F8:38:03:0C:D6:FF:E9:B9:69:30 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1500F136C5F63052F9ADF80B18072FBC5A7C6DF0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140470.roa Signing time: Sat 02 May 2026 21:36:43 +0000 ROA not before: Sat 02 May 2026 21:31:43 +0000 ROA not after: Sat 01 May 2027 21:36:43 +0000 asID: 140470 IP address blocks: 2407:f340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:00:f1:36:c5:f6:30:52:f9:ad:f8:0b:18:07:2f:bc:5a:7c:6d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:31:43 2026 GMT Not After : May 1 21:36:43 2027 GMT Subject: CN=6F690444EABEE4F9B34FF838030CD6FFE9B96930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:aa:0e:97:1b:ad:a2:56:c8:db:62:12:72: 6e:c8:8a:f9:88:51:2e:fc:a4:5a:40:04:c0:db:bd: 5b:f2:46:0c:dc:8f:80:17:7f:10:fe:6f:ba:2b:b2: 54:49:a8:4b:7d:1f:09:c0:cf:60:28:81:b4:6c:98: b6:75:58:9e:25:d1:c4:b1:3b:91:f3:30:3b:1b:34: 36:dd:99:8b:f1:79:a9:dc:4a:c9:30:a7:1d:01:36: 59:a2:46:ad:7c:28:30:aa:4d:78:54:53:04:ea:df: a5:d3:8b:90:0e:26:5f:ff:16:12:c1:7a:83:d5:ce: 47:c0:27:4b:ad:1d:fb:a5:9c:e6:f9:31:a3:26:8d: 86:58:4e:21:52:f5:c8:2c:75:d2:7c:09:24:98:4f: a6:d6:c0:13:06:40:41:b5:8b:14:4e:1e:e5:3b:e8: 27:ca:66:59:38:61:74:6d:f8:49:1a:7c:4c:2b:e6: a3:e1:49:97:be:90:29:37:fb:1d:99:92:ae:02:d8: 67:10:51:8f:51:6c:c5:1b:77:3c:34:28:08:f4:8a: 52:26:ce:4d:a7:1a:9e:e6:0f:95:56:36:91:c8:cd: b8:76:e8:84:2d:22:d0:4e:b5:78:58:44:5a:8f:ee: d7:9c:01:77:4d:8d:6e:84:cc:5c:c3:08:6b:ab:2d: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:69:04:44:EA:BE:E4:F9:B3:4F:F8:38:03:0C:D6:FF:E9:B9:69:30 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140470.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:f340::/32 Signature Algorithm: sha256WithRSAEncryption 89:52:01:7e:d4:78:e3:e4:31:20:da:7e:94:af:27:ec:32:ef: 86:7f:b0:53:de:5d:62:96:89:53:e9:3d:43:b1:65:05:fd:f2: b9:cd:d5:e0:62:e4:ba:3b:86:43:a2:02:28:db:f6:5a:76:02: 4f:2a:ea:9f:6b:eb:bd:90:12:3f:d9:75:46:d5:bb:68:f7:24: 5f:c3:3c:0e:78:bc:9d:72:1a:67:e5:05:66:c5:f1:86:10:25: e4:69:89:65:b5:d4:f5:bf:19:e9:6b:a6:0f:3c:ba:9f:99:24: 76:04:13:b9:fd:4c:99:f8:61:01:50:6f:64:5b:eb:27:1d:d8: 84:14:77:22:73:6e:66:55:a8:05:aa:29:9d:8e:25:63:10:5e: f6:0c:f6:06:53:36:be:99:bd:5f:d5:46:2b:b9:fa:90:b4:6e: e2:50:f0:10:36:fc:b4:02:6a:24:9d:f9:65:ff:94:a9:bd:47: 59:3a:68:84:8e:72:c5:e7:52:bd:8b:df:21:f1:0a:4f:8a:69: 80:45:28:f4:fb:c1:54:5a:8a:5f:c2:a0:a0:ca:53:f7:47:58: ff:2b:7f:83:c6:16:f8:59:66:8b:48:62:29:3e:57:7b:8a:20: 41:16:c9:29:38:b5:16:08:9f:ab:2f:b0:be:57:3c:e9:b0:15: 5f:bb:e4:e5 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUFQDxNsX2MFL5rfgLGAcvvFp8bfAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzE0M1oX DTI3MDUwMTIxMzY0M1owMzExMC8GA1UEAxMoNkY2OTA0NDRFQUJFRTRGOUIzNEZG ODM4MDMwQ0Q2RkZFOUI5NjkzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxlqg6XG62iVsjbYhJybsiK+YhRLvykWkAEwNu9W/JGDNyPgBd/EP5vuiuy VEmoS30fCcDPYCiBtGyYtnVYniXRxLE7kfMwOxs0Nt2Zi/F5qdxKyTCnHQE2WaJG rXwoMKpNeFRTBOrfpdOLkA4mX/8WEsF6g9XOR8AnS60d+6Wc5vkxoyaNhlhOIVL1 yCx10nwJJJhPptbAEwZAQbWLFE4e5TvoJ8pmWThhdG34SRp8TCvmo+FJl76QKTf7 HZmSrgLYZxBRj1FsxRt3PDQoCPSKUibOTacanuYPlVY2kcjNuHbohC0i0E61eFhE Wo/u15wBd02NboTMXMMIa6st3/ECAwEAAaOCAc0wggHJMB0GA1UdDgQWBBRvaQRE 6r7k+bNP+DgDDNb/6blpMDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDcwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAfzQDANBgkqhkiG9w0BAQsFAAOCAQEAiVIBftR44+QxINp+lK8n7DLv hn+wU95dYpaJU+k9Q7FlBf3yuc3V4GLkujuGQ6ICKNv2WnYCTyrqn2vrvZASP9l1 RtW7aPckX8M8Dni8nXIaZ+UFZsXxhhAl5GmJZbXU9b8Z6WumDzy6n5kkdgQTuf1M mfhhAVBvZFvrJx3YhBR3InNuZlWoBaopnY4lYxBe9gz2BlM2vpm9X9VGK7n6kLRu 4lDwEDb8tAJqJJ35Zf+Uqb1HWTpohI5yxedSvYvfIfEKT4ppgEUo9PvBVFqKX8Kg oMpT90dY/yt/g8YW+Flmi0hiKT5Xe4ogQRbJKTi1Fgifqy+wvlc86bAVX7vk5Q== -----END CERTIFICATE-----Generated at Sun May 3 01:44:52 2026 by rpki-client