$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS140066.roa File: AS140066.roa (raw, json) Hash identifier: CGDolvsTLWroNh40XL8hOLw5lSWdOEk4blOS5f94ZTU= Subject key identifier: 65:21:7C:D8:E4:C9:FE:E9:0C:16:8E:0F:39:52:9E:82:DE:55:41:08 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 1F8C3CF76DBD89F921861DE006E70F986AE13CFD Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS140066.roa Signing time: Thu 09 Jul 2026 02:45:06 +0000 ROA not before: Thu 09 Jul 2026 02:40:06 +0000 ROA not after: Thu 08 Jul 2027 02:45:06 +0000 asID: 140066 IP address blocks: 160.236.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8c:3c:f7:6d:bd:89:f9:21:86:1d:e0:06:e7:0f:98:6a:e1:3c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 9 02:40:06 2026 GMT Not After : Jul 8 02:45:06 2027 GMT Subject: CN=65217CD8E4C9FEE90C168E0F39529E82DE554108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:63:5e:b1:7a:97:e5:7c:8c:07:98:ae:b8: e8:a1:c1:4c:3e:07:55:9b:c3:b8:c9:95:c7:96:5b: e5:d4:4b:a0:cf:cb:0d:bb:0b:ee:a4:e1:87:77:3e: 89:e1:0b:21:ac:31:74:f0:e0:e1:d9:9b:1a:51:09: 07:28:f9:a8:81:b3:42:dd:7f:fd:75:03:29:8b:a2: 1f:08:8f:7b:e0:f5:24:0c:2b:48:68:da:c9:d3:69: 7e:de:88:01:2b:d6:00:48:fc:c2:62:12:95:f0:31: 86:98:d0:01:60:9f:6c:43:36:95:19:10:7d:62:1d: 81:ac:23:8a:93:bd:f4:b8:f4:a0:9d:99:e4:85:74: ca:df:18:56:10:0d:d1:d5:ac:21:90:35:0d:2c:5a: f1:d4:62:09:79:8f:11:c0:40:28:e6:72:a5:24:75: 09:59:e5:7f:fb:20:62:02:1c:2f:bd:4b:d0:6b:2c: 31:f5:5f:c3:13:82:4c:74:d0:c8:4c:5c:76:25:8e: a1:de:5e:4f:48:e4:dc:fa:f9:ed:11:92:35:57:55: 53:57:f0:70:ad:51:61:76:ff:d1:d5:ed:03:95:97: 0d:25:a8:73:bb:8b:aa:4e:06:5d:8a:9e:8a:04:5e: 50:e6:9d:3c:ca:a2:9c:a9:d8:86:08:60:3d:c7:90: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:21:7C:D8:E4:C9:FE:E9:0C:16:8E:0F:39:52:9E:82:DE:55:41:08 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS140066.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.28.0/23 Signature Algorithm: sha256WithRSAEncryption 62:81:e1:b6:4d:e0:7b:5a:67:3c:a8:fa:62:16:83:a9:aa:d3: 40:d5:a7:41:fc:27:98:9e:f5:33:4d:f5:b7:39:10:94:f5:cf: 6e:38:3f:07:8b:9a:8f:bc:4b:1e:49:aa:71:60:fc:4e:d6:10: d1:a3:5d:61:2f:c5:f5:a5:86:f8:41:2f:3f:5e:94:c5:be:db: 9d:9d:6f:36:2d:2d:a8:e7:2c:4c:8b:10:5c:2f:49:38:f6:28: 99:5e:70:5a:3d:35:e2:a8:97:70:da:d6:e8:5e:10:ce:6c:6a: 23:63:b3:21:df:ff:42:e0:ca:89:a1:73:86:21:84:b5:05:c3: 1d:5d:c9:65:5e:bc:11:4c:62:5f:46:ee:0a:05:9b:89:29:6c: 87:12:55:0c:59:d7:46:a3:a4:ba:9e:e2:32:5a:b6:58:a1:3c: a7:6c:29:58:c8:39:d3:22:c6:ab:fd:d6:a4:6d:80:8e:dd:4e: f2:6f:fc:32:be:5e:d0:77:d6:d9:69:65:ec:d2:fe:16:68:77: 37:18:a0:e7:35:38:d7:5a:4c:8d:68:ba:4e:f7:1a:9b:a4:f1: 82:5e:02:85:46:bf:8e:cb:30:3c:6d:0a:a7:c2:13:f3:32:c2: 7e:c1:7a:95:fc:fe:b3:c2:18:39:30:88:95:68:c7:19:ba:a7: 5f:f7:f1:d6 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUH4w89229ifkhhh3gBucPmGrhPP0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcwOTAyNDAwNloX DTI3MDcwODAyNDUwNlowMzExMC8GA1UEAxMoNjUyMTdDRDhFNEM5RkVFOTBDMTY4 RTBGMzk1MjlFODJERTU1NDEwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlwY16xepflfIwHmK646KHBTD4HVZvDuMmVx5Zb5dRLoM/LDbsL7qThh3c+ ieELIawxdPDg4dmbGlEJByj5qIGzQt1//XUDKYuiHwiPe+D1JAwrSGjaydNpft6I ASvWAEj8wmISlfAxhpjQAWCfbEM2lRkQfWIdgawjipO99Lj0oJ2Z5IV0yt8YVhAN 0dWsIZA1DSxa8dRiCXmPEcBAKOZypSR1CVnlf/sgYgIcL71L0GssMfVfwxOCTHTQ yExcdiWOod5eT0jk3Pr57RGSNVdVU1fwcK1RYXb/0dXtA5WXDSWoc7uLqk4GXYqe igReUOadPMqinKnYhghgPceQ8YkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRlIXzY 5Mn+6QwWjg85Up6C3lVBCDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQwMDY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoOwcMA0GCSqGSIb3DQEBCwUAA4IBAQBigeG2TeB7Wmc8qPpiFoOpqtNA 1adB/CeYnvUzTfW3ORCU9c9uOD8Hi5qPvEseSapxYPxO1hDRo11hL8X1pYb4QS8/ XpTFvtudnW82LS2o5yxMixBcL0k49iiZXnBaPTXiqJdw2tboXhDObGojY7Mh3/9C 4MqJoXOGIYS1BcMdXcllXrwRTGJfRu4KBZuJKWyHElUMWddGo6S6nuIyWrZYoTyn bClYyDnTIsar/dakbYCO3U7yb/wyvl7Qd9bZaWXs0v4WaHc3GKDnNTjXWkyNaLpO 9xqbpPGCXgKFRr+OyzA8bQqnwhPzMsJ+wXqV/P6zwhg5MIiVaMcZuqdf9/HW -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:21 2026 by rpki-client