$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139981.roa File: AS139981.roa (raw, json) Hash identifier: XvnENeSQd5Nj4Z4Uu1AjfGmDN00IRrA9d8SHW4stiPc= Subject key identifier: 6D:24:62:85:0F:D7:A7:40:0B:10:DF:91:BF:1E:95:91:58:CA:D4:73 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 231E0E69C77E9024B818DCC92DC2CA61C01D7E82 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139981.roa Signing time: Sun 03 May 2026 03:12:49 +0000 ROA not before: Sun 03 May 2026 03:07:49 +0000 ROA not after: Sun 02 May 2027 03:12:49 +0000 asID: 139981 IP address blocks: 103.71.160.0/22 maxlen: 24 103.80.98.0/23 maxlen: 24 103.148.24.0/23 maxlen: 24 202.74.72.0/23 maxlen: 24 2405:c8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1e:0e:69:c7:7e:90:24:b8:18:dc:c9:2d:c2:ca:61:c0:1d:7e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 03:07:49 2026 GMT Not After : May 2 03:12:49 2027 GMT Subject: CN=6D2462850FD7A7400B10DF91BF1E959158CAD473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7b:49:8a:13:54:22:45:98:c7:e6:d6:a6:e5: d7:e1:4f:21:79:f0:39:61:f2:af:e7:fe:bf:7e:db: 6f:88:88:e0:5c:1e:f8:00:24:7b:d8:a1:7a:6c:d8: b4:7c:62:96:56:46:16:08:7b:52:e6:0c:e4:e1:b6: 9c:f8:ba:74:8b:d4:4a:29:8e:f5:56:4c:ad:61:15: e4:f9:da:68:42:80:5c:3a:ff:6b:9a:62:da:cc:8b: 12:db:b5:6b:c5:25:e3:12:4c:12:23:8f:bb:24:33: 3c:ef:53:dc:06:51:66:71:f5:f4:d4:c2:a4:4e:9a: f9:e8:9c:8f:1a:d9:d5:28:3f:18:87:7b:db:f7:23: d0:e7:b5:ae:c1:15:73:95:72:5d:bb:af:46:e0:34: 89:cb:76:9c:3d:cb:ca:5d:5b:94:3d:19:58:0b:25: a1:3f:f2:60:bf:b9:73:36:36:d8:a6:0f:e1:3c:82: 04:72:cf:be:16:4c:a7:2d:04:cb:00:eb:42:b2:b8: 55:bb:40:b1:b4:30:5e:d1:9a:56:f3:26:b1:ad:bc: 47:0f:2d:cd:e2:2c:ae:d7:52:cf:b9:d4:08:3c:5b: d8:27:32:a6:b3:92:aa:5c:35:5b:fe:4a:cc:42:81: 12:54:4a:26:f8:3e:bf:17:08:94:60:20:66:0e:9a: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:24:62:85:0F:D7:A7:40:0B:10:DF:91:BF:1E:95:91:58:CA:D4:73 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139981.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.160.0/22 103.80.98.0/23 103.148.24.0/23 202.74.72.0/23 IPv6: 2405:c8c0::/32 Signature Algorithm: sha256WithRSAEncryption 88:bc:b0:e9:c5:27:db:5d:be:77:49:58:77:f4:83:f8:b9:af: 6d:33:18:67:de:96:a8:c8:e8:b7:b5:c7:96:e7:c7:dd:b2:97: 53:00:6b:a1:99:37:d4:bc:ef:e9:6e:0a:b2:d6:25:ef:79:95: d3:8f:e8:a4:db:08:49:76:55:0c:12:70:43:41:38:90:44:8e: 00:9a:09:55:df:96:52:c1:d9:c2:01:54:09:2c:68:21:8a:77: 8b:70:a2:7a:d2:b8:e5:6f:5c:61:cc:eb:54:6f:e2:39:c5:84: 2f:29:2e:35:e9:b9:5c:6f:4f:64:87:b4:df:6e:78:0d:03:f7: 4a:10:2a:84:a5:84:c2:94:88:ed:23:a2:70:0f:98:56:1b:a0: 84:47:82:86:67:78:a8:60:14:59:de:41:c5:27:09:6e:6d:42: 06:05:0b:fc:8c:df:96:f7:56:74:cb:9b:8e:23:e7:24:81:64: d0:68:53:24:81:ac:02:b2:06:6c:4e:e6:0e:8b:cb:3f:da:bf: b3:c9:a9:73:46:31:cd:97:11:9f:ad:5f:ad:11:2e:c4:51:72: 0a:dc:9d:25:b0:03:f3:88:09:0b:9b:76:79:1b:21:69:32:2b: 3f:69:ac:66:2f:ce:da:b3:72:29:8e:4c:3f:04:0e:7d:a6:bf: ba:61:7e:67 -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgIUIx4Oacd+kCS4GNzJLcLKYcAdfoIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAzMDc0OVoX DTI3MDUwMjAzMTI0OVowMzExMC8GA1UEAxMoNkQyNDYyODUwRkQ3QTc0MDBCMTBE RjkxQkYxRTk1OTE1OENBRDQ3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANd7SYoTVCJFmMfm1qbl1+FPIXnwOWHyr+f+v37bb4iI4Fwe+AAke9ihemzY tHxillZGFgh7UuYM5OG2nPi6dIvUSimO9VZMrWEV5PnaaEKAXDr/a5pi2syLEtu1 a8Ul4xJMEiOPuyQzPO9T3AZRZnH19NTCpE6a+eicjxrZ1Sg/GId72/cj0Oe1rsEV c5VyXbuvRuA0ict2nD3Lyl1blD0ZWAsloT/yYL+5czY22KYP4TyCBHLPvhZMpy0E ywDrQrK4VbtAsbQwXtGaVvMmsa28Rw8tzeIsrtdSz7nUCDxb2CcyprOSqlw1W/5K zEKBElRKJvg+vxcIlGAgZg6aWPsCAwEAAaOCAe0wggHpMB0GA1UdDgQWBBRtJGKF D9enQAsQ35G/HpWRWMrUczAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTgxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIA ATAYAwQCZ0egAwQBZ1BiAwQBZ5QYAwQBykpIMA0EAgACMAcDBQAkBcjAMA0GCSqG SIb3DQEBCwUAA4IBAQCIvLDpxSfbXb53SVh39IP4ua9tMxhn3paoyOi3tceW58fd spdTAGuhmTfUvO/pbgqy1iXveZXTj+ik2whJdlUMEnBDQTiQRI4AmglV35ZSwdnC AVQJLGghineLcKJ60rjlb1xhzOtUb+I5xYQvKS416blcb09kh7TfbngNA/dKECqE pYTClIjtI6JwD5hWG6CER4KGZ3ioYBRZ3kHFJwlubUIGBQv8jN+W91Z0y5uOI+ck gWTQaFMkgawCsgZsTuYOi8s/2r+zyalzRjHNlxGfrV+tES7EUXIK3J0lsAPziAkL m3Z5GyFpMis/aaxmL87as3Ipjkw/BA59pr+6YX5n -----END CERTIFICATE-----Generated at Tue May 12 23:03:47 2026 by rpki-client