$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140481.roa File: AS140481.roa (raw, json) Hash identifier: Ep7K1s96DTTuyvx3QjVIhwc5kPL8qfxH7eUNod37bGw= Subject key identifier: A2:5F:CA:12:FE:94:70:6E:11:98:0F:4D:EF:D3:DE:65:6D:30:C3:27 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 141D89B502C0F69216E9207BD9E36C8754D5C1EB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140481.roa Signing time: Sat 02 May 2026 21:35:26 +0000 ROA not before: Sat 02 May 2026 21:30:26 +0000 ROA not after: Sat 01 May 2027 21:35:26 +0000 asID: 140481 IP address blocks: 103.154.76.0/23 maxlen: 24 2406:55c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1d:89:b5:02:c0:f6:92:16:e9:20:7b:d9:e3:6c:87:54:d5:c1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:30:26 2026 GMT Not After : May 1 21:35:26 2027 GMT Subject: CN=A25FCA12FE94706E11980F4DEFD3DE656D30C327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:1a:07:18:7e:5d:8a:64:8c:44:37:97:5d: c1:35:ad:af:60:9d:59:f2:b1:29:5a:1b:2a:46:8f: 71:07:86:94:64:7c:83:38:f6:30:2e:7e:f8:ed:34: a6:3a:27:32:72:c2:1e:bc:df:3d:c9:a5:d2:d5:50: b8:1e:10:63:84:c8:28:39:a0:00:9c:25:ce:9b:1e: cd:28:22:a8:0f:1b:51:42:e0:71:61:80:3b:b7:b1: 46:d9:4b:e4:18:2d:2f:3f:16:a8:bc:d2:a1:66:20: 06:eb:f0:3a:12:72:b3:30:9d:d2:b2:e6:76:b4:a4: 5c:4c:3c:f5:fb:4b:21:ec:2f:ae:82:96:dd:d1:42: 19:5d:59:2a:a2:b0:21:1b:72:ba:df:2c:1f:c8:58: 90:1d:41:66:8b:c4:36:c5:b8:4f:2c:99:8e:84:36: fc:80:91:af:eb:f1:48:e1:e1:38:da:9b:7d:30:8a: 51:15:2d:3d:d7:68:82:96:33:ee:05:60:87:33:99: 85:da:53:7c:0e:9d:18:ab:9b:bf:70:50:97:ee:d9: fb:2d:01:6c:4d:00:55:91:d3:8a:7f:e4:0b:0b:25: 07:ba:e0:e7:6a:9b:fb:71:e4:35:f6:34:ce:eb:33: fb:4c:55:96:34:a0:b4:84:7c:d6:76:bb:43:9a:40: c2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5F:CA:12:FE:94:70:6E:11:98:0F:4D:EF:D3:DE:65:6D:30:C3:27 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140481.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.76.0/23 IPv6: 2406:55c0::/32 Signature Algorithm: sha256WithRSAEncryption 8a:78:53:1c:33:c8:6a:1f:f8:d4:b8:c3:30:85:47:13:c8:8c: f5:81:a8:bc:c9:ae:83:ae:d0:43:a0:ce:85:da:74:a9:b4:c3: 2b:84:fd:0c:1f:cb:df:f9:1c:d3:0e:1a:07:9a:2d:a3:3e:8e: 33:87:50:be:a9:a3:d0:72:f1:27:7c:cb:45:82:56:79:0b:1a: e7:8d:6e:fb:43:47:2a:7c:b3:12:65:dd:2a:0e:aa:24:62:64: 4c:13:f1:e1:ad:26:cc:3e:83:2b:ca:fc:91:9c:5e:3d:04:dd: 11:e1:f7:a2:e6:87:34:bf:fb:73:f5:49:e2:33:de:90:d8:75: d1:44:32:17:0d:20:01:83:05:4b:45:3f:0b:12:fa:5a:55:69: 1c:08:81:d3:f6:e3:b1:b6:65:af:d3:73:24:75:1d:1f:12:6d: 95:ef:37:1a:d3:bc:86:04:19:d7:92:95:30:68:6f:65:73:3e: 11:da:c5:76:af:d1:96:7b:ba:ea:fd:06:37:36:fb:ec:3e:32: d2:80:26:51:49:cb:3b:c9:b4:98:21:0c:3c:c6:f1:7d:3d:c7: 4b:1b:10:09:3a:7a:d5:f8:19:e6:52:ec:b4:a3:ad:76:9c:00: 9f:91:75:32:e8:bd:6d:01:8d:72:39:aa:b4:f8:82:74:2a:7a: a3:4c:07:16 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUFB2JtQLA9pIW6SB72eNsh1TVweswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzAyNloX DTI3MDUwMTIxMzUyNlowMzExMC8GA1UEAxMoQTI1RkNBMTJGRTk0NzA2RTExOTgw RjRERUZEM0RFNjU2RDMwQzMyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrOGgcYfl2KZIxEN5ddwTWtr2CdWfKxKVobKkaPcQeGlGR8gzj2MC5++O00 pjonMnLCHrzfPcml0tVQuB4QY4TIKDmgAJwlzpsezSgiqA8bUULgcWGAO7exRtlL 5BgtLz8WqLzSoWYgBuvwOhJyszCd0rLmdrSkXEw89ftLIewvroKW3dFCGV1ZKqKw IRtyut8sH8hYkB1BZovENsW4TyyZjoQ2/ICRr+vxSOHhONqbfTCKURUtPddogpYz 7gVghzOZhdpTfA6dGKubv3BQl+7Z+y0BbE0AVZHTin/kCwslB7rg52qb+3HkNfY0 zusz+0xVljSgtIR81na7Q5pAwncCAwEAAaOCAdswggHXMB0GA1UdDgQWBBSiX8oS /pRwbhGYD03v095lbTDDJzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDgxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQBZ5pMMA0EAgACMAcDBQAkBlXAMA0GCSqGSIb3DQEBCwUAA4IBAQCKeFMc M8hqH/jUuMMwhUcTyIz1gai8ya6DrtBDoM6F2nSptMMrhP0MH8vf+RzTDhoHmi2j Po4zh1C+qaPQcvEnfMtFglZ5CxrnjW77Q0cqfLMSZd0qDqokYmRME/HhrSbMPoMr yvyRnF49BN0R4fei5oc0v/tz9UniM96Q2HXRRDIXDSABgwVLRT8LEvpaVWkcCIHT 9uOxtmWv03MkdR0fEm2V7zca07yGBBnXkpUwaG9lcz4R2sV2r9GWe7rq/QY3Nvvs PjLSgCZRScs7ybSYIQw8xvF9PcdLGxAJOnrV+BnmUuy0o612nACfkXUy6L1tAY1y Oaq0+IJ0KnqjTAcW -----END CERTIFICATE-----Generated at Sun May 3 00:39:43 2026 by rpki-client