$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139838.roa File: AS139838.roa (raw, json) Hash identifier: oan6uBI9fPN4tIPGGczXxO6TMbGzxGTQShliRATkFpk= Subject key identifier: 7D:5B:69:70:E2:FF:D7:1D:E0:55:0A:1E:B0:4A:37:5A:62:F5:2B:37 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7F730B2668536094783FA33ACD1A6E08AA6272DC Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139838.roa Signing time: Fri 13 Feb 2026 06:43:24 +0000 ROA not before: Fri 13 Feb 2026 06:38:24 +0000 ROA not after: Fri 12 Feb 2027 06:43:24 +0000 asID: 139838 IP address blocks: 192.189.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:73:0b:26:68:53:60:94:78:3f:a3:3a:cd:1a:6e:08:aa:62:72:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 13 06:38:24 2026 GMT Not After : Feb 12 06:43:24 2027 GMT Subject: CN=7D5B6970E2FFD71DE0550A1EB04A375A62F52B37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8b:c8:ce:c8:85:06:be:41:7f:49:42:2e:d3: db:25:40:6b:77:a3:ab:70:45:34:f9:fd:f5:10:b6: ba:54:23:03:00:e1:4e:9e:a9:aa:65:ee:40:c8:23: 49:4a:09:da:33:9b:65:f7:f6:62:b5:97:0b:89:f5: cd:e6:94:3b:98:cb:0b:3e:d8:30:6b:b4:09:9e:8a: ee:7a:0a:7d:d6:25:62:c8:cd:09:1d:aa:34:07:a5: 56:e0:fb:5b:55:af:84:4f:91:24:0b:9d:98:65:f3: 20:5c:a2:ae:95:56:fa:9f:1c:ec:f3:71:8d:47:24: 33:88:e0:2f:36:e1:6a:06:40:f5:a6:8a:3b:61:a7: 6f:31:b0:3c:45:fe:a3:22:0c:82:98:f0:60:b0:03: f5:52:e5:8a:9f:f7:84:15:8e:9f:d7:93:d4:7e:00: 79:51:1b:bc:53:a6:6b:c4:3a:05:ee:aa:f2:11:f6: 09:9d:15:0e:c6:d0:54:b7:78:54:aa:12:ad:aa:62: cb:cb:be:98:8e:2d:6c:3f:94:69:7f:27:78:a8:e4: ee:4a:23:7c:ab:c6:4c:80:8e:71:85:75:03:a4:b6: a7:c1:8e:03:79:cc:fb:d5:a8:82:9c:35:91:8b:3e: 41:e1:45:97:1c:1f:e8:8d:01:87:67:a3:0f:87:a5: 6c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5B:69:70:E2:FF:D7:1D:E0:55:0A:1E:B0:4A:37:5A:62:F5:2B:37 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.189.233.0/24 Signature Algorithm: sha256WithRSAEncryption 25:58:3e:14:88:11:de:cf:72:1d:93:fb:ca:55:b3:d6:05:83: e5:11:96:07:12:1c:52:13:57:1c:f2:9c:0f:1a:8d:b6:51:ad: 6a:94:2d:7f:1d:e2:fd:3a:cb:e7:73:6f:9c:72:75:75:1a:fa: b6:15:43:01:83:21:3e:fe:b5:fa:c5:08:94:63:d9:6e:44:ed: 19:cb:76:2a:58:4e:67:66:6f:e9:4e:bc:56:de:3a:37:56:d1: 33:c7:ad:ab:36:1f:0a:24:2e:0b:39:3a:e6:b4:c6:2b:96:a9: e7:37:24:14:0b:9b:8c:6a:79:52:74:87:fa:04:86:15:3c:b3: 54:65:ff:06:28:cd:95:ca:50:6b:fb:2c:85:5a:61:22:10:e8: 6d:fe:a2:a4:cc:5b:45:15:02:03:e2:4e:71:e0:ea:ab:2d:16: 51:6d:f7:c7:ee:a6:44:e7:52:78:80:46:62:6b:0f:cc:c5:4b: 27:91:72:fb:3b:05:d2:58:01:0d:df:59:af:82:44:e7:44:92: b8:14:de:b4:94:3f:26:01:40:25:e7:ef:72:44:ac:ad:e8:e4: ad:af:00:d3:67:06:47:5e:61:f5:95:40:42:13:db:94:26:e2: 5d:63:b3:3a:9f:fb:f1:c2:27:15:45:96:09:74:bd:d1:5f:81: d1:29:cd:ea -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUf3MLJmhTYJR4P6M6zRpuCKpictwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIxMzA2MzgyNFoX DTI3MDIxMjA2NDMyNFowMzExMC8GA1UEAxMoN0Q1QjY5NzBFMkZGRDcxREUwNTUw QTFFQjA0QTM3NUE2MkY1MkIzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWLyM7IhQa+QX9JQi7T2yVAa3ejq3BFNPn99RC2ulQjAwDhTp6pqmXuQMgj SUoJ2jObZff2YrWXC4n1zeaUO5jLCz7YMGu0CZ6K7noKfdYlYsjNCR2qNAelVuD7 W1WvhE+RJAudmGXzIFyirpVW+p8c7PNxjUckM4jgLzbhagZA9aaKO2GnbzGwPEX+ oyIMgpjwYLAD9VLlip/3hBWOn9eT1H4AeVEbvFOma8Q6Be6q8hH2CZ0VDsbQVLd4 VKoSrapiy8u+mI4tbD+UaX8neKjk7kojfKvGTICOcYV1A6S2p8GOA3nM+9Wogpw1 kYs+QeFFlxwf6I0Bh2ejD4elbPUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR9W2lw 4v/XHeBVCh6wSjdaYvUrNzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzOTgzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMC96TANBgkqhkiG9w0BAQsFAAOCAQEAJVg+FIgR3s9yHZP7ylWz 1gWD5RGWBxIcUhNXHPKcDxqNtlGtapQtfx3i/TrL53NvnHJ1dRr6thVDAYMhPv61 +sUIlGPZbkTtGct2KlhOZ2Zv6U68Vt46N1bRM8etqzYfCiQuCzk65rTGK5ap5zck FAubjGp5UnSH+gSGFTyzVGX/BijNlcpQa/sshVphIhDobf6ipMxbRRUCA+JOceDq qy0WUW33x+6mROdSeIBGYmsPzMVLJ5Fy+zsF0lgBDd9Zr4JE50SSuBTetJQ/JgFA JefvckSsrejkra8A02cGR15h9ZVAQhPblCbiXWOzOp/78cInFUWWCXS90V+B0SnN 6g== -----END CERTIFICATE-----Generated at Mon Mar 2 09:34:48 2026 by rpki-client