Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS139994.roa
File: AS139994.roa (raw, json)
Hash identifier: 74dcEa20T38ksecVtfXkfysE5cER4mgy2HjTHOnfPLM=
Subject key identifier: 31:F9:CD:9C:3B:CE:04:2E:38:2E:F1:61:73:27:7B:CC:3E:46:5A:17
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 1C8A0497CED2E671540A502E32818A2B47F16C47
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS139994.roa
Signing time: Wed 08 Jul 2026 01:05:26 +0000
ROA not before: Wed 08 Jul 2026 01:00:26 +0000
ROA not after: Wed 07 Jul 2027 01:05:26 +0000
asID: 139994
IP address blocks: 140.213.196.0/24 maxlen: 24
140.213.197.0/24 maxlen: 24
140.213.198.0/24 maxlen: 24
140.213.199.0/24 maxlen: 24
140.213.200.0/24 maxlen: 24
140.213.201.0/24 maxlen: 24
140.213.202.0/24 maxlen: 24
140.213.203.0/24 maxlen: 24
157.85.197.0/24 maxlen: 24
157.85.198.0/24 maxlen: 24
157.85.202.0/24 maxlen: 24
157.85.203.0/24 maxlen: 24
157.85.204.0/24 maxlen: 24
157.85.205.0/24 maxlen: 24
157.85.206.0/24 maxlen: 24
157.85.207.0/24 maxlen: 24
157.85.208.0/24 maxlen: 24
157.85.209.0/24 maxlen: 24
157.85.210.0/24 maxlen: 24
157.85.211.0/24 maxlen: 24
157.85.212.0/24 maxlen: 24
157.85.213.0/24 maxlen: 24
157.85.218.0/24 maxlen: 24
157.85.219.0/24 maxlen: 24
157.85.220.0/24 maxlen: 24
157.85.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:8a:04:97:ce:d2:e6:71:54:0a:50:2e:32:81:8a:2b:47:f1:6c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: Jul 8 01:00:26 2026 GMT
Not After : Jul 7 01:05:26 2027 GMT
Subject: CN=31F9CD9C3BCE042E382EF16173277BCC3E465A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:6e:14:92:c5:12:e6:98:1a:55:b6:73:63:
2e:e1:d5:64:f0:d7:e6:91:2c:a6:e1:88:96:e9:12:
dc:3c:6e:89:4f:f9:da:6b:1d:e2:4e:bb:29:bf:86:
74:d3:c5:1a:30:c6:d3:7f:54:56:1d:c9:9b:9c:fa:
06:0a:f5:c5:90:7f:19:de:eb:90:86:20:d6:2a:c7:
5d:7f:84:79:ef:f6:e4:c1:3f:00:45:31:0e:7b:63:
3f:06:66:40:29:e1:6f:4c:70:0e:f3:0c:fb:61:87:
1b:e7:79:98:c6:c2:33:c0:c4:44:d4:06:e2:46:32:
4a:1d:3c:56:fb:2f:11:f6:84:f3:50:45:28:a1:df:
53:29:b5:87:df:a1:de:71:a0:f9:7f:44:5f:59:ac:
9f:43:36:c2:40:55:58:83:e0:be:2a:29:57:e6:ad:
d0:5d:90:f6:42:df:8a:70:e8:ae:7b:ee:90:03:eb:
4b:2e:4b:1e:64:13:7c:33:26:6a:1f:64:c5:b4:e9:
6a:e4:c5:7c:06:72:0f:08:2c:7d:eb:04:dc:f9:3f:
6f:8c:42:13:df:45:75:cd:92:f5:cf:d2:e4:f3:03:
15:62:fd:d2:c9:aa:d2:85:ff:dd:a3:f1:b4:ab:63:
2a:6b:1e:6d:f4:a2:b4:12:67:36:e9:85:bc:05:85:
50:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F9:CD:9C:3B:CE:04:2E:38:2E:F1:61:73:27:7B:CC:3E:46:5A:17
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS139994.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.196.0-140.213.203.255
157.85.197.0-157.85.198.255
157.85.202.0-157.85.213.255
157.85.218.0-157.85.221.255
Signature Algorithm: sha256WithRSAEncryption
20:9a:b0:29:61:79:c8:e9:3b:e9:16:58:1c:59:8d:8f:69:b4:
9f:62:7e:59:6d:47:4a:3a:04:4d:40:bb:6b:8a:d5:63:3b:ee:
45:7c:76:70:a9:7f:e2:70:2e:ba:a7:08:9c:97:d9:af:df:ba:
01:18:fd:77:a8:02:cd:45:33:fa:d9:86:f3:31:61:c3:42:91:
98:58:ef:b8:b7:d2:de:1d:d5:8d:58:63:42:02:c0:20:78:6a:
e0:e7:c8:65:f0:a4:48:6a:7e:a9:c6:38:9a:6f:29:5f:a7:2a:
6b:68:d0:d0:16:65:fb:40:9a:03:2a:51:a6:a5:cb:22:7d:0f:
38:fd:3a:95:72:83:13:23:7d:a0:19:84:d1:bf:9a:45:1b:a3:
f2:09:6f:28:fc:78:60:86:0d:f6:4d:92:7a:63:74:b2:1b:1c:
84:f6:e3:8f:96:79:ff:d5:52:b5:05:eb:e9:e5:a5:28:2f:dd:
07:a1:72:57:28:f7:f5:6c:f3:42:17:5f:fc:d2:27:a1:e5:ee:
aa:ab:d3:d1:27:59:fe:92:a6:1e:b6:6a:d1:79:3a:38:7b:b3:
52:e5:85:34:b3:00:0b:ef:0a:ec:65:a1:d2:e5:04:3e:ca:4c:
5d:38:94:ba:9c:be:eb:6e:ee:81:6f:b1:d6:0e:76:af:ce:78:
c8:37:2f:8d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUHIoEl87S5nFUClAuMoGKK0fxbEcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0
NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcwODAxMDAyNloX
DTI3MDcwNzAxMDUyNlowMzExMC8GA1UEAxMoMzFGOUNEOUMzQkNFMDQyRTM4MkVG
MTYxNzMyNzdCQ0MzRTQ2NUExNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALYubhSSxRLmmBpVtnNjLuHVZPDX5pEspuGIlukS3DxuiU/52msd4k67Kb+G
dNPFGjDG039UVh3Jm5z6Bgr1xZB/Gd7rkIYg1irHXX+Eee/25ME/AEUxDntjPwZm
QCnhb0xwDvMM+2GHG+d5mMbCM8DERNQG4kYySh08VvsvEfaE81BFKKHfUym1h9+h
3nGg+X9EX1msn0M2wkBVWIPgviopV+at0F2Q9kLfinDornvukAPrSy5LHmQTfDMm
ah9kxbTpauTFfAZyDwgsfesE3Pk/b4xCE99Fdc2S9c/S5PMDFWL90smq0oX/3aPx
tKtjKmsebfSitBJnNumFvAWFUGsCAwEAAaOCAf4wggH6MB0GA1UdDgQWBBQx+c2c
O84ELjgu8WFzJ3vMPkZaFzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT
YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB
NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG
MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz
Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM5OTk0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIA
ATA4MAwDBAKM1cQDBAKM1cgwDAMEAJ1VxQMEAJ1VxjAMAwQBnVXKAwQBnVXUMAwD
BAGdVdoDBAGdVdwwDQYJKoZIhvcNAQELBQADggEBACCasClhecjpO+kWWBxZjY9p
tJ9iflltR0o6BE1Au2uK1WM77kV8dnCpf+JwLrqnCJyX2a/fugEY/XeoAs1FM/rZ
hvMxYcNCkZhY77i30t4d1Y1YY0ICwCB4auDnyGXwpEhqfqnGOJpvKV+nKmto0NAW
ZftAmgMqUaalyyJ9Dzj9OpVygxMjfaAZhNG/mkUbo/IJbyj8eGCGDfZNknpjdLIb
HIT244+Wef/VUrUF6+nlpSgv3Qehclco9/Vs80IXX/zSJ6Hl7qqr09EnWf6Sph62
atF5Ojh7s1LlhTSzAAvvCuxlodLlBD7KTF04lLqcvutu7oFvsdYOdq/OeMg3L40=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:05:19 2026 by rpki-client