$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140476.roa File: AS140476.roa (raw, json) Hash identifier: aTYkk71j3PLDfXTjVwbor12azPE69E4N6F8aQCU+ufA= Subject key identifier: B3:89:9B:A7:32:CF:58:AD:11:CD:7C:FD:47:C2:03:55:F6:EB:A3:09 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3506258B5298A9B7986DE782D1D61DA98B411DBE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140476.roa Signing time: Sat 02 May 2026 21:10:50 +0000 ROA not before: Sat 02 May 2026 21:05:50 +0000 ROA not after: Sat 01 May 2027 21:10:50 +0000 asID: 140476 IP address blocks: 103.153.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:06:25:8b:52:98:a9:b7:98:6d:e7:82:d1:d6:1d:a9:8b:41:1d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:05:50 2026 GMT Not After : May 1 21:10:50 2027 GMT Subject: CN=B3899BA732CF58AD11CD7CFD47C20355F6EBA309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f3:cb:49:4c:11:eb:03:7a:2f:95:01:db:22: 6f:87:d2:a2:12:3c:09:5b:ce:2a:29:95:d2:67:03: fd:f6:30:e1:27:e5:79:01:6a:c9:2d:3c:7a:28:05: 59:a4:ea:5d:23:37:81:19:13:1d:c3:3a:23:13:e6: e9:0c:93:95:6e:de:09:1c:5c:27:04:78:9f:14:38: e9:58:e9:2c:3b:5d:22:fe:ae:4f:16:96:9f:b0:a8: e5:ef:5e:05:2f:41:9d:d4:4b:79:c1:55:fa:ef:73: c7:d6:a8:67:f9:93:66:a2:f0:ab:d3:85:0e:1a:8d: b8:e8:2f:d8:f9:77:c2:a1:f9:8f:c3:eb:9e:a5:d4: cf:59:3b:ce:90:17:4e:6b:18:cf:57:a9:9b:71:6b: 92:68:72:30:4c:61:7c:67:91:1b:a0:6c:e4:5f:67: 08:c3:5e:f3:78:f8:4f:b8:c6:e1:0e:05:9f:c8:9b: 56:e2:bb:ee:a4:3d:9b:19:71:5b:17:27:37:f5:7c: 54:61:e1:8d:28:15:19:75:3e:3e:71:6e:f0:19:ee: 15:a6:56:50:c3:a4:ba:a8:c1:23:83:e6:5d:f8:68: 00:d5:5e:4b:5e:18:8f:67:b8:b5:7b:26:e5:00:8f: 8a:03:2a:72:f6:24:ef:f3:c2:8c:6f:ae:87:c9:21: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:89:9B:A7:32:CF:58:AD:11:CD:7C:FD:47:C2:03:55:F6:EB:A3:09 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140476.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.248.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:7e:31:90:fd:aa:57:f5:6c:9d:a7:dc:a7:08:97:d2:b0:ea: 26:71:6c:f1:81:70:fa:c8:1c:a6:04:76:5c:40:f9:9b:b9:f1: 3f:23:84:08:d3:fe:a2:c8:50:42:4a:88:76:e7:51:b8:26:b4: 70:cd:1d:f4:6f:32:83:fc:f5:5a:bb:64:ae:5b:95:0a:b2:64: b6:f1:ed:c5:63:35:cc:88:49:ed:7a:8d:3c:4a:0c:6c:0b:74: b9:d9:a2:c1:66:e0:bb:24:89:03:c2:4d:e4:5f:09:13:f1:84: 0b:9a:c2:7f:56:94:a1:86:dd:38:c5:da:00:f9:28:39:da:0c: b4:56:92:45:29:07:11:b3:ab:e0:77:31:07:2b:98:b4:bc:f8: 76:0e:98:bd:2b:5f:2c:aa:e2:ca:94:5d:e0:58:b5:fd:bf:c8: 5c:c0:75:af:da:1b:f8:39:20:2f:3f:bf:d3:bd:25:1d:a3:c3: 24:ba:68:25:15:db:f6:ee:5f:7e:50:eb:56:2a:5e:2b:8e:c9: 16:7a:0c:59:67:5d:cd:32:66:83:de:93:67:8c:04:c5:29:c0: c9:e0:cc:f8:fd:46:ca:13:b0:f0:d7:a7:72:34:f9:3b:f4:96: 49:91:ff:9a:e9:03:6d:00:46:9a:9c:4d:d4:c7:b2:0e:7e:a7: 46:d9:2e:49 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUNQYli1KYqbeYbeeC0dYdqYtBHb4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDU1MFoX DTI3MDUwMTIxMTA1MFowMzExMC8GA1UEAxMoQjM4OTlCQTczMkNGNThBRDExQ0Q3 Q0ZENDdDMjAzNTVGNkVCQTMwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTzy0lMEesDei+VAdsib4fSohI8CVvOKimV0mcD/fYw4SfleQFqyS08eigF WaTqXSM3gRkTHcM6IxPm6QyTlW7eCRxcJwR4nxQ46VjpLDtdIv6uTxaWn7Co5e9e BS9BndRLecFV+u9zx9aoZ/mTZqLwq9OFDhqNuOgv2Pl3wqH5j8PrnqXUz1k7zpAX TmsYz1epm3FrkmhyMExhfGeRG6Bs5F9nCMNe83j4T7jG4Q4Fn8ibVuK77qQ9mxlx WxcnN/V8VGHhjSgVGXU+PnFu8BnuFaZWUMOkuqjBI4PmXfhoANVeS14Yj2e4tXsm 5QCPigMqcvYk7/PCjG+uh8khDR0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSziZun Ms9YrRHNfP1HwgNV9uujCTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDc2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ5n4MA0GCSqGSIb3DQEBCwUAA4IBAQBrfjGQ/apX9Wydp9ynCJfSsOom cWzxgXD6yBymBHZcQPmbufE/I4QI0/6iyFBCSoh251G4JrRwzR30bzKD/PVau2Su W5UKsmS28e3FYzXMiEnteo08SgxsC3S52aLBZuC7JIkDwk3kXwkT8YQLmsJ/VpSh ht04xdoA+Sg52gy0VpJFKQcRs6vgdzEHK5i0vPh2Dpi9K18squLKlF3gWLX9v8hc wHWv2hv4OSAvP7/TvSUdo8MkumglFdv27l9+UOtWKl4rjskWegxZZ13NMmaD3pNn jATFKcDJ4Mz4/UbKE7Dw16dyNPk79JZJkf+a6QNtAEaanE3Ux7IOfqdG2S5J -----END CERTIFICATE-----Generated at Sun May 3 00:40:30 2026 by rpki-client