$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139838.roa File: AS139838.roa (raw, json) Hash identifier: H0bTYD4q7cc2TE4L7gzQLLww4ozuur6nPSeLWu0HP4M= Subject key identifier: AF:73:98:2E:A2:3A:69:6B:F0:42:8C:8A:E3:62:80:0A:46:DD:13:FE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78589CC9F91386425D335C31C10FBC69C077C7B7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139838.roa Signing time: Fri 13 Feb 2026 06:45:05 +0000 ROA not before: Fri 13 Feb 2026 06:40:05 +0000 ROA not after: Fri 12 Feb 2027 06:45:05 +0000 asID: 139838 IP address blocks: 2001:df6:9ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:58:9c:c9:f9:13:86:42:5d:33:5c:31:c1:0f:bc:69:c0:77:c7:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 13 06:40:05 2026 GMT Not After : Feb 12 06:45:05 2027 GMT Subject: CN=AF73982EA23A696BF0428C8AE362800A46DD13FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:21:a2:d6:eb:ae:73:20:bf:a6:a7:53:d9:d3: c4:f6:dd:41:47:ed:00:6b:dd:ca:5e:08:df:ce:0b: 7e:ca:4a:e9:54:17:3b:ac:dd:b5:96:d7:ce:a2:0a: 2e:95:56:c3:f1:2f:14:f7:38:f6:da:f4:16:6c:b6: 81:1a:d6:2c:a5:a0:24:7a:18:25:f2:58:7c:90:4c: f3:4e:4c:d0:f4:7c:16:ff:1d:ef:92:61:9e:4d:83: 40:87:bc:7a:95:2d:c9:63:32:08:ba:fd:28:d1:89: e8:97:3e:3d:c2:73:11:18:c8:e8:a7:11:6f:16:2c: b5:52:5b:b9:f2:e3:e6:29:43:51:b4:64:0b:bf:c7: e3:26:c8:41:3b:06:62:02:6d:cd:4a:78:a8:bc:34: c5:0b:fa:d1:e8:93:07:ba:79:46:3b:df:de:10:f4: 10:ca:37:ee:70:ff:78:e4:24:6b:3d:18:2b:fe:3b: 10:99:66:1b:44:42:a2:54:49:b1:fc:4c:ac:1c:34: 1f:ca:3e:39:72:7f:c9:cd:a7:d8:93:4e:e6:20:6d: d8:72:a0:b1:2d:ac:1a:e8:b4:d2:71:bd:c2:18:d8: 89:f4:d3:f2:bd:00:c5:bf:a4:9f:7f:78:60:2a:ba: e3:99:9a:2e:74:a2:38:e5:f6:20:37:86:13:7b:6c: 79:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:73:98:2E:A2:3A:69:6B:F0:42:8C:8A:E3:62:80:0A:46:DD:13:FE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:9ac0::/48 Signature Algorithm: sha256WithRSAEncryption 05:a8:7b:67:12:f7:b8:d3:be:c5:a0:f9:c8:9c:c2:d7:22:32: f9:4c:a6:e8:60:2b:dd:cb:6a:5f:7b:b8:b0:a1:e8:c7:97:94: 3c:14:d2:26:b8:42:83:bb:16:4d:58:31:39:72:4d:4f:ad:4e: cb:60:11:3c:6b:f1:e2:3b:12:ac:8d:98:07:c3:6b:e6:5c:b7: e4:98:79:89:74:b9:83:b6:e7:9b:70:2a:b8:88:25:87:11:1a: 8b:01:5b:62:b9:a9:25:4b:00:56:5f:74:8c:f7:81:de:de:01: 50:11:2c:ea:9b:91:5c:5f:f8:2b:6a:75:ff:d4:42:25:df:0f: 3e:20:7f:52:13:ae:3f:45:49:26:af:44:97:62:9f:75:44:09: 3d:35:80:df:02:81:e4:09:6a:f0:a0:62:28:63:c7:50:b7:52: 93:ef:aa:33:6f:d2:23:80:c2:1a:98:7d:0c:73:9f:81:e8:92: 55:7f:e3:2a:a9:a0:4b:4e:50:30:05:0d:a0:60:09:8c:50:ba: 40:36:8c:34:2b:b4:2c:1b:91:12:7a:6d:7b:76:95:7e:28:d9: e5:45:1b:79:a5:ce:da:44:b7:02:80:38:f7:52:10:96:29:30: 8f:6a:3d:01:fd:62:52:e0:67:6f:10:04:1a:29:d7:30:bd:ef: 05:8e:0f:9e -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUeFicyfkThkJdM1wxwQ+8acB3x7cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxMzA2NDAwNVoX DTI3MDIxMjA2NDUwNVowMzExMC8GA1UEAxMoQUY3Mzk4MkVBMjNBNjk2QkYwNDI4 QzhBRTM2MjgwMEE0NkREMTNGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQhotbrrnMgv6anU9nTxPbdQUftAGvdyl4I384LfspK6VQXO6zdtZbXzqIK LpVWw/EvFPc49tr0Fmy2gRrWLKWgJHoYJfJYfJBM805M0PR8Fv8d75Jhnk2DQIe8 epUtyWMyCLr9KNGJ6Jc+PcJzERjI6KcRbxYstVJbufLj5ilDUbRkC7/H4ybIQTsG YgJtzUp4qLw0xQv60eiTB7p5Rjvf3hD0EMo37nD/eOQkaz0YK/47EJlmG0RColRJ sfxMrBw0H8o+OXJ/yc2n2JNO5iBt2HKgsS2sGui00nG9whjYifTT8r0Axb+kn394 YCq645maLnSiOOX2IDeGE3tseecCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSvc5gu ojppa/BCjIrjYoAKRt0T/jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTgzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfaawDANBgkqhkiG9w0BAQsFAAOCAQEABah7ZxL3uNO+xaD5 yJzC1yIy+Uym6GAr3ctqX3u4sKHox5eUPBTSJrhCg7sWTVgxOXJNT61Oy2ARPGvx 4jsSrI2YB8Nr5ly35Jh5iXS5g7bnm3AquIglhxEaiwFbYrmpJUsAVl90jPeB3t4B UBEs6puRXF/4K2p1/9RCJd8PPiB/UhOuP0VJJq9El2KfdUQJPTWA3wKB5Alq8KBi KGPHULdSk++qM2/SI4DCGph9DHOfgeiSVX/jKqmgS05QMAUNoGAJjFC6QDaMNCu0 LBuREnpte3aVfijZ5UUbeaXO2kS3AoA491IQlikwj2o9Af1iUuBnbxAEGinXML3v BY4Png== -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:27 2026 by rpki-client