$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS139994.roa File: AS139994.roa (raw, json) Hash identifier: Ke6vWoE71lm7OKWr4VXlPwgKhBgmjc7wRZeLBU0RBHs= Subject key identifier: 16:43:90:81:66:37:6E:66:93:E9:A3:70:78:FF:E5:EB:DD:77:0C:48 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 32A871ED2D8069C4416A4AAE0F3F75EC05478728 Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS139994.roa Signing time: Thu 05 Nov 2026 09:59:09 +0000 ROA not before: Thu 05 Nov 2026 09:54:09 +0000 ROA not after: Thu 04 Nov 2027 09:59:09 +0000 asID: 139994 IP address blocks: 140.213.1.0/24 maxlen: 24 140.213.3.0/24 maxlen: 24 140.213.8.0/24 maxlen: 24 140.213.10.0/24 maxlen: 24 140.213.12.0/24 maxlen: 24 140.213.94.0/24 maxlen: 24 140.213.95.0/24 maxlen: 24 140.213.118.0/24 maxlen: 24 140.213.186.0/24 maxlen: 24 140.213.187.0/24 maxlen: 24 140.213.188.0/24 maxlen: 24 140.213.190.0/24 maxlen: 24 140.213.200.0/24 maxlen: 24 140.213.201.0/24 maxlen: 24 140.213.202.0/24 maxlen: 24 140.213.203.0/24 maxlen: 24 140.213.210.0/24 maxlen: 24 140.213.216.0/24 maxlen: 24 140.213.217.0/24 maxlen: 24 140.213.234.0/24 maxlen: 24 140.213.235.0/24 maxlen: 24 140.213.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 03:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a8:71:ed:2d:80:69:c4:41:6a:4a:ae:0f:3f:75:ec:05:47:87:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: Nov 5 09:54:09 2026 GMT Not After : Nov 4 09:59:09 2027 GMT Subject: CN=1643908166376E6693E9A37078FFE5EBDD770C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d6:23:94:b2:6c:0d:fd:9b:14:ea:17:a2:ce: eb:04:81:ec:16:d8:c5:52:5b:15:16:e1:41:57:16: 16:8f:01:bd:7d:d5:57:4c:be:ef:96:f0:91:f0:c0: b5:3a:a0:c3:67:52:67:c7:18:42:59:f4:f8:b6:19: 58:65:54:cc:ef:87:ad:0a:da:7a:c6:fc:dc:0c:6b: 25:4e:07:37:87:38:e1:e2:89:e7:43:2a:f9:a8:47: 24:26:0d:b2:30:78:cf:1a:31:6b:7c:87:66:0c:94: ff:55:ab:83:08:74:88:25:83:a4:a2:1a:8f:60:f5: 2f:3d:95:9e:f2:4b:5d:54:18:40:a9:18:56:ac:ff: 87:8c:90:d5:7b:a6:3a:36:37:2d:44:76:50:60:6a: 45:5a:ce:57:22:ad:18:95:c1:7e:45:81:b5:c7:db: 67:ce:12:e7:fe:6d:ac:53:3d:8a:0e:c6:ca:b1:65: 72:5e:9a:c1:f0:31:9a:ad:89:ed:c2:58:b8:b7:7a: b7:07:e3:dc:bc:47:8b:f3:e1:fb:6c:8e:e9:72:17: 68:e5:58:ad:c9:4d:a3:7d:d8:d1:6a:d4:ff:db:5e: 03:35:55:a4:15:a9:2e:82:74:3b:54:77:7e:25:8a: ff:4f:3f:38:f5:a6:e6:8f:32:e1:f1:d6:95:55:8b: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:43:90:81:66:37:6E:66:93:E9:A3:70:78:FF:E5:EB:DD:77:0C:48 X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS139994.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.213.1.0/24 140.213.3.0/24 140.213.8.0/24 140.213.10.0/24 140.213.12.0/24 140.213.94.0/23 140.213.118.0/24 140.213.186.0-140.213.188.255 140.213.190.0/24 140.213.200.0/22 140.213.210.0/24 140.213.216.0/23 140.213.234.0-140.213.236.255 Signature Algorithm: sha256WithRSAEncryption 65:0e:ec:52:0a:f9:50:25:23:95:a6:9e:cf:63:2b:65:99:67: bd:6d:b1:c1:08:65:91:21:d5:83:4c:21:bb:a8:89:66:90:02: f2:ec:02:c0:22:76:71:71:dc:68:85:76:7a:a0:0d:2c:e7:f1: 56:70:93:32:9b:06:a4:ff:83:2e:86:09:6f:fe:f0:4f:c2:58: 36:a5:be:cd:67:24:7f:7f:ef:3b:eb:62:7c:1c:11:3e:6c:d9: f4:fb:77:5b:dc:cd:ea:e7:cd:71:d4:e3:39:79:5c:5d:0e:91: aa:48:39:09:e0:65:4d:90:75:c7:8f:ab:7b:15:00:1c:f5:24: 40:a3:d0:0b:b4:5c:9f:4c:a0:7c:40:0d:96:a7:e7:ed:d4:e3: 77:50:9b:40:a6:20:87:fb:28:1c:6b:82:d1:6c:41:12:b3:77: 1e:21:e5:28:9d:4d:55:6c:55:c0:46:55:56:ae:dc:37:a9:3f: 5c:5c:16:70:52:3e:22:ef:5c:ab:ef:5a:10:aa:15:96:a5:ac: b0:cd:82:33:9b:83:c4:27:e9:21:57:04:56:f6:06:58:48:12: be:10:d1:9b:22:80:2d:90:a1:3d:24:7b:69:3d:30:5b:5b:7a: 12:9a:cb:30:82:83:9c:23:49:8e:c6:9e:c2:94:aa:92:dd:1d: 08:e4:1b:2d -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUMqhx7S2AacRBakquDz917AVHhygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjExMDUwOTU0MDlaFw0yNzExMDQwOTU5MDlaMDMxMTAvBgNV BAMTKDE2NDM5MDgxNjYzNzZFNjY5M0U5QTM3MDc4RkZFNUVCREQ3NzBDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1iOUsmwN/ZsU6heizusEgewW 2MVSWxUW4UFXFhaPAb191VdMvu+W8JHwwLU6oMNnUmfHGEJZ9Pi2GVhlVMzvh60K 2nrG/NwMayVOBzeHOOHiiedDKvmoRyQmDbIweM8aMWt8h2YMlP9Vq4MIdIglg6Si Go9g9S89lZ7yS11UGECpGFas/4eMkNV7pjo2Ny1EdlBgakVazlcirRiVwX5FgbXH 22fOEuf+baxTPYoOxsqxZXJemsHwMZqtie3CWLi3ercH49y8R4vz4ftsjulyF2jl WK3JTaN92NFq1P/bXgM1VaQVqS6CdDtUd34liv9PPzj1puaPMuHx1pVVi98lAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUFkOQgWY3bmaT6aNweP/l6913DEgwHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vcnBr aS1yc3luYy5pZG5pYy5uZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04 ZDdlN2ZjMmMyMjcvMC9BUzEzOTk5NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjB3BggrBgEFBQcBBwEB/wRoMGYwZAQCAAEwXgMEAIzVAQMEAIzVAwMEAIzV CAMEAIzVCgMEAIzVDAMEAYzVXgMEAIzVdjAMAwQBjNW6AwQAjNW8AwQAjNW+AwQC jNXIAwQAjNXSAwQBjNXYMAwDBAGM1eoDBACM1ewwDQYJKoZIhvcNAQELBQADggEB AGUO7FIK+VAlI5Wmns9jK2WZZ71tscEIZZEh1YNMIbuoiWaQAvLsAsAidnFx3GiF dnqgDSzn8VZwkzKbBqT/gy6GCW/+8E/CWDalvs1nJH9/7zvrYnwcET5s2fT7d1vc zernzXHU4zl5XF0OkapIOQngZU2QdcePq3sVABz1JECj0Au0XJ9MoHxADZan5+3U 43dQm0CmIIf7KBxrgtFsQRKzdx4h5SidTVVsVcBGVVau3DepP1xcFnBSPiLvXKvv WhCqFZalrLDNgjObg8Qn6SFXBFb2BlhIEr4Q0ZsigC2QoT0ke2k9MFtbehKayzCC g5wjSY7GnsKUqpLdHQjkGy0= -----END CERTIFICATE-----Generated at Sat Nov 7 20:08:12 2026 by rpki-client