$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140472.roa File: AS140472.roa (raw, json) Hash identifier: rht9Zfztq9oFdXvDKy9yZ8LtyWpt6DgYZHLtkulGxdE= Subject key identifier: D8:FE:50:BD:1A:84:89:19:EB:79:5A:6F:1B:63:78:DE:99:73:8F:08 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5D78E43B5AA816748F7A141ACE78302B741F63DE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140472.roa Signing time: Sat 02 May 2026 08:35:53 +0000 ROA not before: Sat 02 May 2026 08:30:53 +0000 ROA not after: Sat 01 May 2027 08:35:53 +0000 asID: 140472 IP address blocks: 103.153.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:78:e4:3b:5a:a8:16:74:8f:7a:14:1a:ce:78:30:2b:74:1f:63:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:53 2026 GMT Not After : May 1 08:35:53 2027 GMT Subject: CN=D8FE50BD1A848919EB795A6F1B6378DE99738F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f6:9e:4a:26:41:ff:c0:24:64:4a:04:36:c9: 85:eb:e5:22:0b:e1:11:6c:2b:28:55:56:5e:a6:0f: ab:d3:9a:3c:0b:ee:bb:62:96:bd:2f:f6:a9:a3:01: 06:75:ee:43:08:2d:ec:8a:98:61:0f:d2:2a:0f:73: 2b:e7:c3:b9:c1:17:1d:c8:20:fc:90:03:29:c2:ff: f6:cf:c7:f9:8b:1a:be:5d:41:ef:88:02:11:33:72: fc:fb:bb:d3:56:52:23:7a:f2:da:83:f7:ee:17:c4: ca:8e:6b:12:5f:ca:29:cb:51:74:44:1e:2c:4a:c1: e9:e0:9f:7b:c8:bd:82:27:db:a9:3f:ea:88:e3:68: 37:c2:bb:0f:b2:c7:b7:59:77:6b:ff:42:d7:16:63: 5f:d9:18:57:f9:f3:40:9c:74:a8:e7:22:f3:54:71: b9:85:c0:cc:bc:da:01:05:c5:08:6d:b5:7a:ee:97: 2d:29:de:c8:f1:b0:29:56:55:c5:d2:01:23:61:75: a9:78:b0:73:1f:df:19:af:2a:0a:9c:ff:2d:56:64: e7:10:b3:47:bf:1a:ff:38:39:31:d9:1f:40:ed:73: 56:07:dc:43:13:cd:f3:9d:0d:52:af:50:de:33:bc: a4:31:18:c2:77:e3:db:03:9e:eb:16:5c:90:42:93: 5b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FE:50:BD:1A:84:89:19:EB:79:5A:6F:1B:63:78:DE:99:73:8F:08 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140472.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.192.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:b8:17:9f:6c:bd:61:c1:33:40:7e:34:62:50:ab:a7:6d:7f: 82:63:f5:d9:0e:ff:25:5e:3b:42:17:21:b2:4d:67:a7:f1:62: dc:dc:38:5f:5d:77:32:92:bf:a4:d6:11:eb:a9:a7:bd:0d:26: 30:2d:ec:8f:c5:40:69:c8:d1:8c:b9:39:85:23:60:02:43:4a: 8f:19:e4:a0:9f:ba:90:6a:22:d5:a5:1a:bf:53:00:f1:da:9c: dc:ec:78:28:b9:cf:d8:ff:e4:59:e3:60:2f:78:b9:78:9c:cf: c7:3c:b7:70:b0:bd:4d:d2:e0:14:a6:7a:24:63:18:22:0b:58: dc:8a:3f:74:6e:80:53:7d:25:10:63:b1:28:4d:ef:f5:a3:ee: 6d:09:40:8d:86:3d:15:b1:1c:af:e4:ae:3f:53:e7:c7:82:68: 38:56:d6:95:69:79:14:59:3f:fd:ea:21:ad:8e:77:ef:ac:78: b0:26:ef:6e:e6:fd:0f:a2:09:4d:f0:39:23:15:f4:d4:1d:2f: d0:17:c3:5b:76:7c:5e:6f:ae:e6:55:db:c8:4a:90:cd:80:eb: 72:c8:e9:00:5c:93:f8:e7:ae:b7:9f:de:7f:bc:8d:7c:d8:d2: 8c:39:0b:6f:6f:9b:61:b6:58:fc:a1:95:32:c3:4a:de:0e:06: 15:3d:47:93 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUXXjkO1qoFnSPehQazngwK3QfY94wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzA1M1oX DTI3MDUwMTA4MzU1M1owMzExMC8GA1UEAxMoRDhGRTUwQkQxQTg0ODkxOUVCNzk1 QTZGMUI2Mzc4REU5OTczOEYwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALn2nkomQf/AJGRKBDbJhevlIgvhEWwrKFVWXqYPq9OaPAvuu2KWvS/2qaMB BnXuQwgt7IqYYQ/SKg9zK+fDucEXHcgg/JADKcL/9s/H+Ysavl1B74gCETNy/Pu7 01ZSI3ry2oP37hfEyo5rEl/KKctRdEQeLErB6eCfe8i9gifbqT/qiONoN8K7D7LH t1l3a/9C1xZjX9kYV/nzQJx0qOci81RxuYXAzLzaAQXFCG21eu6XLSneyPGwKVZV xdIBI2F1qXiwcx/fGa8qCpz/LVZk5xCzR78a/zg5MdkfQO1zVgfcQxPN850NUq9Q 3jO8pDEYwnfj2wOe6xZckEKTWwECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTY/lC9 GoSJGet5Wm8bY3jemXOPCDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDcyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ5nAMA0GCSqGSIb3DQEBCwUAA4IBAQA+uBefbL1hwTNAfjRiUKunbX+C Y/XZDv8lXjtCFyGyTWen8WLc3DhfXXcykr+k1hHrqae9DSYwLeyPxUBpyNGMuTmF I2ACQ0qPGeSgn7qQaiLVpRq/UwDx2pzc7Hgouc/Y/+RZ42AveLl4nM/HPLdwsL1N 0uAUpnokYxgiC1jcij90boBTfSUQY7EoTe/1o+5tCUCNhj0VsRyv5K4/U+fHgmg4 VtaVaXkUWT/96iGtjnfvrHiwJu9u5v0PoglN8DkjFfTUHS/QF8Nbdnxeb67mVdvI SpDNgOtyyOkAXJP45663n95/vI182NKMOQtvb5thtlj8oZUyw0reDgYVPUeT -----END CERTIFICATE-----Generated at Sun May 3 00:40:34 2026 by rpki-client