$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS139994.roa File: AS139994.roa (raw, json) Hash identifier: G9jUsHOqGF8GyMe4d4F0m9p9Wpq1ELwFCpA8Pkmrzks= Subject key identifier: E3:C9:FF:EB:9B:12:31:F5:12:D0:B6:3D:73:D1:5E:6E:66:6F:4E:86 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 4A10BC22EEAD17A741E7F6D500270C24EF215381 Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS139994.roa Signing time: Sun 03 May 2026 02:31:46 +0000 ROA not before: Sun 03 May 2026 02:26:46 +0000 ROA not after: Sun 02 May 2027 02:31:46 +0000 asID: 139994 IP address blocks: 140.213.1.0/24 maxlen: 24 140.213.3.0/24 maxlen: 24 140.213.8.0/24 maxlen: 24 140.213.10.0/24 maxlen: 24 140.213.12.0/24 maxlen: 24 140.213.94.0/24 maxlen: 24 140.213.95.0/24 maxlen: 24 140.213.118.0/24 maxlen: 24 140.213.186.0/24 maxlen: 24 140.213.187.0/24 maxlen: 24 140.213.188.0/24 maxlen: 24 140.213.190.0/24 maxlen: 24 140.213.192.0/24 maxlen: 24 140.213.193.0/24 maxlen: 24 140.213.194.0/24 maxlen: 24 140.213.195.0/24 maxlen: 24 140.213.196.0/24 maxlen: 24 140.213.197.0/24 maxlen: 24 140.213.198.0/24 maxlen: 24 140.213.199.0/24 maxlen: 24 140.213.200.0/24 maxlen: 24 140.213.201.0/24 maxlen: 24 140.213.202.0/24 maxlen: 24 140.213.203.0/24 maxlen: 24 140.213.210.0/24 maxlen: 24 140.213.212.0/24 maxlen: 24 140.213.213.0/24 maxlen: 24 140.213.214.0/24 maxlen: 24 140.213.215.0/24 maxlen: 24 140.213.216.0/24 maxlen: 24 140.213.217.0/24 maxlen: 24 140.213.234.0/24 maxlen: 24 140.213.235.0/24 maxlen: 24 140.213.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:10:bc:22:ee:ad:17:a7:41:e7:f6:d5:00:27:0c:24:ef:21:53:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: May 3 02:26:46 2026 GMT Not After : May 2 02:31:46 2027 GMT Subject: CN=E3C9FFEB9B1231F512D0B63D73D15E6E666F4E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:08:66:f2:6a:0a:9e:41:75:cc:9a:90:80:66: f6:81:72:f0:d1:a7:3e:7c:55:26:a3:86:c0:8d:1d: d6:91:6d:71:c0:11:ee:7d:21:fa:96:0a:35:a6:91: 37:fa:53:2c:08:0e:77:7d:13:6a:c9:87:8c:7f:f8: fa:95:39:2e:01:00:dc:57:b1:6a:0c:05:61:7a:26: 87:42:b7:a4:d7:0e:69:40:75:46:18:7b:aa:d6:91: 70:9f:4e:d3:44:48:9d:33:0b:8f:62:d4:fb:f8:d8: 00:b8:47:7b:ff:9d:b8:a0:00:f1:14:53:df:b4:16: 0d:88:58:d7:ce:90:0a:3f:d1:74:d2:97:24:f5:f3: cc:e1:ed:44:b9:e6:0c:48:38:a5:b2:2c:2c:63:55: 9b:a3:03:80:ba:40:48:a6:56:fa:42:aa:ab:9e:1b: 70:14:a3:e6:f5:27:a1:80:1b:0b:57:9f:c2:c7:dc: 08:ed:ec:f4:f5:f7:15:af:53:08:95:f5:96:3e:e2: 3b:7c:3c:c3:00:a1:8a:5a:14:17:d2:e2:6a:32:36: 4a:73:1f:49:63:3e:8a:39:24:aa:8d:61:07:87:a2: c7:ff:6b:a8:3a:a7:e2:50:ef:49:8b:41:c2:a2:dd: 81:f5:91:72:7c:94:56:70:50:94:33:6c:81:5d:1b: 1a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C9:FF:EB:9B:12:31:F5:12:D0:B6:3D:73:D1:5E:6E:66:6F:4E:86 X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS139994.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.213.1.0/24 140.213.3.0/24 140.213.8.0/24 140.213.10.0/24 140.213.12.0/24 140.213.94.0/23 140.213.118.0/24 140.213.186.0-140.213.188.255 140.213.190.0/24 140.213.192.0-140.213.203.255 140.213.210.0/24 140.213.212.0-140.213.217.255 140.213.234.0-140.213.236.255 Signature Algorithm: sha256WithRSAEncryption 54:98:d6:f4:08:b8:0a:bd:82:16:a5:d1:19:7d:95:11:39:2a: 1a:81:b5:d1:07:ae:e8:66:93:b2:d2:b9:40:9f:62:46:94:8d: 35:bd:03:38:24:38:9b:24:ae:8e:c2:e7:62:8a:e5:b5:90:9a: 71:9c:fb:1f:5c:a4:a0:55:ea:ec:9d:2c:01:e4:c3:e3:3f:d7: c6:a8:e4:0b:88:68:08:7d:56:a9:26:32:6a:c2:49:b5:71:53: 72:b3:90:c9:a4:a5:95:11:b0:0e:96:fc:6e:be:6a:64:82:92: f4:9b:d7:8a:13:57:0c:59:3e:62:c5:ce:d2:f0:67:1c:7e:8d: af:c8:7e:70:d0:d8:a0:9b:f6:f6:7a:61:e0:fd:1c:c7:30:48: ff:6e:37:a4:69:40:7c:86:e0:ed:f1:59:93:c8:e6:49:3d:30: 0f:38:7d:30:00:29:a4:5b:31:ad:52:f3:13:e6:d2:df:de:8e: 83:2f:1f:36:f7:d8:59:ba:ec:ee:fd:d7:9b:0c:28:45:56:39: d3:35:27:b1:a3:59:ad:34:d4:be:8e:57:69:a4:2c:08:44:3b: d8:1b:d7:76:84:e8:59:6d:d2:4f:e7:d9:af:c1:01:de:d2:c6: 48:32:0d:ef:dc:77:96:e6:fd:3a:f3:a0:9a:34:e7:2e:6e:ce: c6:1f:e7:cb -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUShC8Iu6tF6dB5/bVACcMJO8hU4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjA1MDMwMjI2NDZaFw0yNzA1MDIwMjMxNDZaMDMxMTAvBgNV BAMTKEUzQzlGRkVCOUIxMjMxRjUxMkQwQjYzRDczRDE1RTZFNjY2RjRFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKCGbyagqeQXXMmpCAZvaBcvDR pz58VSajhsCNHdaRbXHAEe59IfqWCjWmkTf6UywIDnd9E2rJh4x/+PqVOS4BANxX sWoMBWF6JodCt6TXDmlAdUYYe6rWkXCfTtNESJ0zC49i1Pv42AC4R3v/nbigAPEU U9+0Fg2IWNfOkAo/0XTSlyT188zh7US55gxIOKWyLCxjVZujA4C6QEimVvpCqque G3AUo+b1J6GAGwtXn8LH3Ajt7PT19xWvUwiV9ZY+4jt8PMMAoYpaFBfS4moyNkpz H0ljPoo5JKqNYQeHosf/a6g6p+JQ70mLQcKi3YH1kXJ8lFZwUJQzbIFdGxr7AgMB AAGjggJoMIICZDAdBgNVHQ4EFgQU48n/65sSMfUS0LY9c9FebmZvToYwHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vcnBr aS1yc3luYy5pZG5pYy5uZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04 ZDdlN2ZjMmMyMjcvMC9BUzEzOTk5NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjCBhwYIKwYBBQUHAQcBAf8EeDB2MHQEAgABMG4DBACM1QEDBACM1QMDBACM 1QgDBACM1QoDBACM1QwDBAGM1V4DBACM1XYwDAMEAYzVugMEAIzVvAMEAIzVvjAM AwQGjNXAAwQCjNXIAwQAjNXSMAwDBAKM1dQDBAGM1dgwDAMEAYzV6gMEAIzV7DAN BgkqhkiG9w0BAQsFAAOCAQEAVJjW9Ai4Cr2CFqXRGX2VETkqGoG10Qeu6GaTstK5 QJ9iRpSNNb0DOCQ4mySujsLnYorltZCacZz7H1ykoFXq7J0sAeTD4z/XxqjkC4ho CH1WqSYyasJJtXFTcrOQyaSllRGwDpb8br5qZIKS9JvXihNXDFk+YsXO0vBnHH6N r8h+cNDYoJv29nph4P0cxzBI/243pGlAfIbg7fFZk8jmST0wDzh9MAAppFsxrVLz E+bS396Ogy8fNvfYWbrs7v3XmwwoRVY50zUnsaNZrTTUvo5XaaQsCEQ72BvXdoTo WW3ST+fZr8EB3tLGSDIN79x3lub9OvOgmjTnLm7Oxh/nyw== -----END CERTIFICATE-----Generated at Wed May 13 00:51:33 2026 by rpki-client