$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS140946.roa File: AS140946.roa (raw, json) Hash identifier: oqXv5gQYH/96U/MbeaX4+Y3/LeVXpy5BA84ptgdLjyU= Subject key identifier: 82:00:B5:89:ED:7B:0C:15:B8:D7:6E:44:F3:F0:6B:38:9F:74:5B:7D Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3F59FAD032EB5A989E4B4378CD410737DA90F17E Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS140946.roa Signing time: Mon 18 May 2026 03:45:22 +0000 ROA not before: Mon 18 May 2026 03:40:22 +0000 ROA not after: Mon 17 May 2027 03:45:22 +0000 asID: 140946 IP address blocks: 162.4.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:59:fa:d0:32:eb:5a:98:9e:4b:43:78:cd:41:07:37:da:90:f1:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 18 03:40:22 2026 GMT Not After : May 17 03:45:22 2027 GMT Subject: CN=8200B589ED7B0C15B8D76E44F3F06B389F745B7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:ff:fb:f0:31:26:35:5e:64:76:ec:75:1e: 35:1d:30:d3:bb:42:95:99:86:c4:78:aa:95:75:e6: 45:f1:92:cd:4f:e6:db:d3:59:63:f9:d5:ba:f7:18: ce:b9:af:ca:d3:d1:68:08:7a:99:a6:d0:c6:46:4a: 2b:98:d2:79:d0:5b:cc:05:e8:03:db:7a:bc:b7:e8: 10:8d:06:2d:90:a9:80:3e:be:cc:f8:94:c2:32:cd: 02:d2:ae:75:f6:e7:9a:61:08:76:e4:ab:eb:0f:f5: c2:ae:d3:c0:55:c8:f3:e0:1f:37:50:7d:7c:f5:ff: 98:83:63:ee:02:7d:84:7b:8a:ca:f4:ff:25:8e:ff: 3d:c8:49:ad:5f:48:97:a1:40:0a:4c:26:89:3a:c8: 1b:53:98:ec:22:93:f1:c5:60:20:f3:b0:f7:ab:8b: 6c:4b:ab:62:f7:35:ab:93:32:2a:df:78:d8:d1:b2: d7:01:4d:07:ef:92:80:82:96:22:a1:92:05:3c:b3: fd:2e:06:c7:8a:89:6f:ce:39:32:a8:2f:b3:db:11: 35:95:ee:c3:01:8f:e5:2e:d0:8d:5c:f4:4c:34:2a: 96:9f:48:a1:8d:64:b0:10:2b:35:dd:4f:ab:18:40: 27:61:36:43:62:5b:01:1e:7e:15:ec:d5:9b:9f:e8: 51:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:00:B5:89:ED:7B:0C:15:B8:D7:6E:44:F3:F0:6B:38:9F:74:5B:7D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS140946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.38.0/23 Signature Algorithm: sha256WithRSAEncryption 44:41:80:63:b1:15:e6:16:dd:96:a4:97:33:bf:4a:1b:a8:26: 41:81:46:38:6c:05:bc:d1:07:bb:56:8d:ae:7c:1d:d9:09:1e: c5:06:d9:70:44:26:ef:00:94:9a:f2:bc:14:66:72:4b:dc:7c: b9:89:c5:93:ec:ac:0a:0f:9f:4d:41:14:b7:af:89:f5:37:e8: 7f:38:04:f7:29:83:41:2a:c8:00:a8:ac:2f:eb:85:6f:0c:ed: 38:2d:9d:c8:25:c5:d9:60:c5:2a:d8:9f:8f:5a:92:67:2e:b6: 8c:43:94:a5:52:e4:64:e6:86:bb:3f:de:18:91:82:9a:02:2c: 48:b7:4e:55:b1:d4:aa:11:de:bc:be:5f:1e:39:c1:49:da:98: 4c:40:9a:c3:78:b2:1d:f5:29:32:bf:e0:16:51:6e:f7:b0:54: 9f:a0:54:0f:c4:c4:41:73:58:3f:f7:60:7f:75:3a:fc:43:dc: ad:e5:1e:b3:45:41:b5:9f:43:6b:ba:c9:e3:09:55:d5:ec:10: 9d:40:d0:26:4c:86:2e:d0:eb:b7:ca:4f:e3:b5:54:f9:3f:ec: 73:d5:a9:61:cb:05:f4:b3:dc:02:a6:e8:9a:04:3b:29:3c:64: 49:79:40:f5:84:8f:dc:2a:30:3e:90:72:e5:43:4f:f5:03:28: d7:73:55:32 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUP1n60DLrWpieS0N4zUEHN9qQ8X4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUxODAzNDAyMloX DTI3MDUxNzAzNDUyMlowMzExMC8GA1UEAxMoODIwMEI1ODlFRDdCMEMxNUI4RDc2 RTQ0RjNGMDZCMzg5Rjc0NUI3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHV//vwMSY1XmR27HUeNR0w07tClZmGxHiqlXXmRfGSzU/m29NZY/nVuvcY zrmvytPRaAh6mabQxkZKK5jSedBbzAXoA9t6vLfoEI0GLZCpgD6+zPiUwjLNAtKu dfbnmmEIduSr6w/1wq7TwFXI8+AfN1B9fPX/mINj7gJ9hHuKyvT/JY7/PchJrV9I l6FACkwmiTrIG1OY7CKT8cVgIPOw96uLbEurYvc1q5MyKt942NGy1wFNB++SgIKW IqGSBTyz/S4Gx4qJb845Mqgvs9sRNZXuwwGP5S7QjVz0TDQqlp9IoY1ksBArNd1P qxhAJ2E2Q2JbAR5+FezVm5/oUecCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSCALWJ 7XsMFbjXbkTz8Gs4n3RbfTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQwOTQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBogQmMA0GCSqGSIb3DQEBCwUAA4IBAQBEQYBjsRXmFt2WpJczv0obqCZB gUY4bAW80Qe7Vo2ufB3ZCR7FBtlwRCbvAJSa8rwUZnJL3Hy5icWT7KwKD59NQRS3 r4n1N+h/OAT3KYNBKsgAqKwv64VvDO04LZ3IJcXZYMUq2J+PWpJnLraMQ5SlUuRk 5oa7P94YkYKaAixIt05VsdSqEd68vl8eOcFJ2phMQJrDeLId9Skyv+AWUW73sFSf oFQPxMRBc1g/92B/dTr8Q9yt5R6zRUG1n0NrusnjCVXV7BCdQNAmTIYu0Ou3yk/j tVT5P+xz1alhywX0s9wCpuiaBDspPGRJeUD1hI/cKjA+kHLlQ0/1AyjXc1Uy -----END CERTIFICATE-----Generated at Wed Jun 17 08:47:53 2026 by rpki-client