
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140479.roa
File: AS140479.roa (raw, json)
Hash identifier: HNTglcZO8jykXuofzWr5DLXYyKfkI5tJfQkWjhMEtFI=
Subject key identifier: 9B:46:B3:8C:09:6D:8A:37:4C:7B:8C:1C:87:AD:E9:71:C5:AD:50:68
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 59271FC708A080A1AF64338A9CE2BA35869E4999
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140479.roa
Signing time: Sat 02 May 2026 21:12:48 +0000
ROA not before: Sat 02 May 2026 21:07:48 +0000
ROA not after: Sat 01 May 2027 21:12:48 +0000
asID: 140479
IP address blocks: 103.154.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:27:1f:c7:08:a0:80:a1:af:64:33:8a:9c:e2:ba:35:86:9e:49:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:07:48 2026 GMT
Not After : May 1 21:12:48 2027 GMT
Subject: CN=9B46B38C096D8A374C7B8C1C87ADE971C5AD5068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:cd:b0:e8:00:a7:36:d1:30:70:b2:5a:01:
74:c2:38:a8:2a:a7:b9:ad:da:2c:15:e3:59:48:5e:
b2:02:c0:28:01:a0:d2:89:ae:21:a5:e0:c4:31:d2:
b4:55:55:2c:77:86:15:ea:53:27:9c:9c:db:f8:e7:
0e:08:65:49:89:32:a3:ba:3f:b5:a4:7e:a9:1e:ec:
13:38:b0:b1:01:31:66:f0:03:7f:9d:bb:3c:08:1d:
0e:e7:27:1b:95:06:0d:bc:53:ed:03:46:57:b9:67:
7f:2c:30:ac:ed:b2:73:a2:13:79:4f:ae:38:f0:52:
b8:68:06:05:79:64:f4:54:c0:ba:0f:81:81:26:c3:
88:bc:9d:41:73:4b:46:0f:6b:73:2a:ea:bf:3e:ff:
48:ff:ff:75:b9:12:28:bf:e3:41:80:b1:2c:1d:89:
6c:bd:5d:8d:b2:04:65:ca:a1:fb:af:63:b6:9e:df:
41:5c:3f:c8:16:74:31:a9:0d:16:fa:64:6f:31:e5:
f1:76:1c:99:fb:3a:25:03:49:25:52:e9:10:44:a7:
bf:36:90:6c:f2:37:f4:43:3e:ad:0d:f0:4a:f6:7b:
61:53:da:05:c5:f5:18:3c:b8:a4:09:ce:e7:1f:4c:
00:2c:81:60:06:ef:cb:2a:9b:9c:7e:a2:a5:49:9a:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:46:B3:8C:09:6D:8A:37:4C:7B:8C:1C:87:AD:E9:71:C5:AD:50:68
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140479.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.52.0/23
Signature Algorithm: sha256WithRSAEncryption
81:50:93:6d:fc:2d:9b:7b:e8:e2:04:2e:98:51:d1:97:f5:b5:
66:2a:95:58:4f:c8:57:94:0c:8c:b2:3d:aa:6a:27:98:ee:5e:
5b:a4:67:50:a5:54:52:68:09:b8:cf:77:16:65:98:d7:a7:6b:
c5:b7:71:18:ec:a5:6a:cd:94:a4:80:81:a7:3e:71:de:85:b5:
d6:fd:b0:b1:0e:27:a3:41:6f:97:46:f8:d5:50:46:31:08:a2:
a4:dc:7d:ec:24:81:ce:78:33:33:ec:f3:6c:3c:46:6c:a6:0e:
25:3a:0c:9d:ef:1d:e4:92:aa:91:00:4a:2a:ce:1c:73:60:14:
e3:b4:15:11:fa:62:b0:7e:33:52:98:0f:4f:56:e5:38:fe:2c:
7f:dc:10:a2:8c:1d:03:c5:fd:5c:b4:2f:8d:3f:f3:7f:4d:f0:
0b:3b:d1:55:09:a2:06:48:61:0e:20:66:83:4d:4a:b5:47:a2:
15:74:d8:0b:c8:54:ca:e9:48:06:57:e1:36:40:5b:bb:67:fe:
b1:e0:b4:a4:df:db:cb:23:de:ce:86:4d:dc:d3:34:0e:27:df:
e9:ae:cc:91:66:88:7a:0e:0b:82:3e:ab:b1:dc:2f:08:b2:1f:
96:48:26:b2:72:5c:85:0b:b0:8e:23:11:72:6e:75:06:3c:07:
a0:e7:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:41:57 2026 by rpki-client