$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140423.roa File: AS140423.roa (raw, json) Hash identifier: 9MifpwvoDL+kSePIfh2RxNYE+tzso6jb9MpjUf/Q67o= Subject key identifier: E4:B4:51:71:FF:41:06:B0:D5:30:8C:B8:FE:44:46:C5:D6:8D:DE:3A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 341E9C4DD9C9BD6898ACAE24502EF4CC939945A6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140423.roa Signing time: Sun 03 May 2026 05:55:51 +0000 ROA not before: Sun 03 May 2026 05:50:51 +0000 ROA not after: Sun 02 May 2027 05:55:51 +0000 asID: 140423 IP address blocks: 103.191.60.0/24 maxlen: 24 2001:df1:70c0::/48 maxlen: 48 2001:df1:7140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:1e:9c:4d:d9:c9:bd:68:98:ac:ae:24:50:2e:f4:cc:93:99:45:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 05:50:51 2026 GMT Not After : May 2 05:55:51 2027 GMT Subject: CN=E4B45171FF4106B0D5308CB8FE4446C5D68DDE3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:ac:be:53:9e:78:d7:6c:78:fd:9b:9c:59: 83:50:82:fa:10:cf:d4:52:78:37:12:d8:b5:e6:df: 72:2b:f3:75:8c:36:31:c2:3d:1a:40:2e:7e:38:da: 9c:22:32:c6:0a:9f:f8:2d:79:55:6b:6e:e7:16:9a: fd:cd:50:90:0f:a2:39:75:b9:13:01:f8:07:9f:80: db:29:72:8d:8a:0e:22:0b:69:53:40:de:81:d7:6c: 48:a2:c6:b3:69:15:f1:5e:f5:9a:27:96:60:ac:45: 4c:7d:a2:a7:97:8d:0a:68:a2:09:7d:66:95:8b:0e: 21:2f:fd:87:1e:b2:3a:c2:ee:71:45:8b:64:91:d3: 5e:79:1a:cf:6c:cf:9a:8c:20:5b:34:a0:6b:41:ca: 9d:2f:ec:77:28:1b:4c:a4:a1:ea:3a:f0:dc:1f:eb: 14:33:94:5b:fc:1f:be:60:78:35:69:5f:8b:1d:7b: 66:0e:75:27:6c:0f:37:2a:44:15:53:aa:dd:ca:30: 9f:e7:8d:5f:fc:de:df:55:81:2b:1a:39:cf:2d:5e: e7:3d:0b:46:ad:7d:a4:5e:97:4f:08:67:09:43:42: e6:53:21:9e:ed:52:37:f7:88:7c:44:16:b5:cd:a1: 75:04:02:57:bc:5a:b5:81:67:60:66:6c:b0:6d:53: f8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B4:51:71:FF:41:06:B0:D5:30:8C:B8:FE:44:46:C5:D6:8D:DE:3A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.60.0/24 IPv6: 2001:df1:70c0::/48 2001:df1:7140::/48 Signature Algorithm: sha256WithRSAEncryption 06:1d:ac:3b:6e:43:51:5e:e0:c4:e1:06:6e:ea:28:0a:f1:c4: c2:89:bb:8c:e8:45:24:19:09:66:d7:8e:e1:f2:24:77:57:95: c3:5e:33:7c:5a:62:31:16:c2:71:83:80:26:6a:e4:42:26:45: 4c:0d:38:0a:9c:dd:c0:ea:f2:ad:87:7a:c6:d7:66:6f:de:ad: 3e:29:17:2a:9b:b2:74:b4:53:cf:37:55:a3:43:9b:5e:0a:56: b6:5f:76:f4:f0:b3:84:df:5a:5c:90:09:1f:59:dd:59:99:4a: 69:46:86:c9:f3:aa:c8:44:d6:b2:46:f6:00:ca:37:bb:cd:4f: 8d:a1:76:dc:ed:2d:1b:f4:8a:f6:c1:7b:9e:67:a6:2b:42:2d: c0:a8:65:86:4c:b2:e7:13:7c:e2:87:07:fd:f8:25:88:54:81: a3:8b:99:16:80:11:f4:7b:a5:d0:14:75:36:74:5e:b5:7c:a5: cd:86:4d:69:d6:dd:3f:fa:aa:c4:c8:22:24:da:79:fb:78:1c: ee:74:f5:46:74:0f:a1:9a:79:45:f8:db:aa:14:5d:d7:10:23: 68:29:39:30:3d:da:84:37:4e:26:3b:39:a2:bb:89:57:a0:d5: 1f:63:13:14:62:4a:fd:8b:08:03:c9:6e:ad:c2:9c:d4:d9:d7: e0:0d:18:be -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUNB6cTdnJvWiYrK4kUC70zJOZRaYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA1NTA1MVoX DTI3MDUwMjA1NTU1MVowMzExMC8GA1UEAxMoRTRCNDUxNzFGRjQxMDZCMEQ1MzA4 Q0I4RkU0NDQ2QzVENjhEREUzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgBrL5TnnjXbHj9m5xZg1CC+hDP1FJ4NxLYtebfcivzdYw2McI9GkAufjja nCIyxgqf+C15VWtu5xaa/c1QkA+iOXW5EwH4B5+A2ylyjYoOIgtpU0DegddsSKLG s2kV8V71mieWYKxFTH2ip5eNCmiiCX1mlYsOIS/9hx6yOsLucUWLZJHTXnkaz2zP mowgWzSga0HKnS/sdygbTKSh6jrw3B/rFDOUW/wfvmB4NWlfix17Zg51J2wPNypE FVOq3cown+eNX/ze31WBKxo5zy1e5z0LRq19pF6XTwhnCUNC5lMhnu1SN/eIfEQW tc2hdQQCV7xatYFnYGZssG1T+CMCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBTktFFx /0EGsNUwjLj+REbF1o3eOjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIA ATAGAwQAZ788MBgEAgACMBIDBwAgAQ3xcMADBwAgAQ3xcUAwDQYJKoZIhvcNAQEL BQADggEBAAYdrDtuQ1Fe4MThBm7qKArxxMKJu4zoRSQZCWbXjuHyJHdXlcNeM3xa YjEWwnGDgCZq5EImRUwNOAqc3cDq8q2HesbXZm/erT4pFyqbsnS0U883VaNDm14K VrZfdvTws4TfWlyQCR9Z3VmZSmlGhsnzqshE1rJG9gDKN7vNT42hdtztLRv0ivbB e55npitCLcCoZYZMsucTfOKHB/34JYhUgaOLmRaAEfR7pdAUdTZ0XrV8pc2GTWnW 3T/6qsTIIiTaeft4HO509UZ0D6GaeUX426oUXdcQI2gpOTA92oQ3TiY7OaK7iVeg 1R9jExRiSv2LCAPJbq3CnNTZ1+ANGL4= -----END CERTIFICATE-----Generated at Tue May 12 22:56:44 2026 by rpki-client