$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139952.roa File: AS139952.roa (raw, json) Hash identifier: vS+uioLOKu4Qkx7tLvAkPTUsqsQKAPMvdX4IEVdF+/w= Subject key identifier: 0E:FB:42:64:BB:47:C9:34:E6:71:E1:A3:5C:01:32:5D:CD:23:3F:20 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 560CF127B4E09EBFCDF7C821E2064223FED737C7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139952.roa Signing time: Wed 04 Nov 2026 02:46:43 +0000 ROA not before: Wed 04 Nov 2026 02:41:43 +0000 ROA not after: Wed 03 Nov 2027 02:46:43 +0000 asID: 139952 IP address blocks: 103.245.26.0/23 maxlen: 24 2405:b140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0c:f1:27:b4:e0:9e:bf:cd:f7:c8:21:e2:06:42:23:fe:d7:37:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 4 02:41:43 2026 GMT Not After : Nov 3 02:46:43 2027 GMT Subject: CN=0EFB4264BB47C934E671E1A35C01325DCD233F20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:93:7c:22:0e:3e:6c:86:e0:50:3a:47:f4:f1: 68:ee:e0:a8:f5:eb:68:1b:10:96:20:fe:55:5d:b0: cc:85:46:b3:a6:9c:e3:a8:05:f6:ab:0f:3d:dc:95: f9:25:0b:76:a7:a2:70:9b:02:6d:50:02:33:75:78: e4:ab:44:5d:b7:cc:82:1e:f1:93:10:62:de:bb:45: e9:7e:3e:58:35:ea:42:ac:27:ab:f8:2b:82:12:4b: 5c:82:95:a8:09:5a:ad:bb:01:51:18:fd:fb:a0:7d: 8e:bd:9b:46:1c:98:dc:6d:db:2d:b9:cc:c8:4f:05: 4e:29:9c:a2:d3:9c:38:ae:d6:07:13:f1:95:fd:7d: 89:8c:c4:d3:e9:1e:b5:4e:c4:8a:cf:4d:e9:3c:18: c6:ed:37:02:61:e0:a5:cb:82:fb:26:2b:51:ad:ad: 78:5c:f3:44:14:55:b0:0d:76:d6:35:f1:b9:d5:db: 91:9d:fc:e6:07:c7:69:e1:d5:29:48:1b:3c:30:7b: aa:7b:f3:be:a9:48:20:84:80:33:b4:95:ee:91:5a: a0:be:c2:50:7f:c2:17:77:b5:95:bf:21:8c:d1:c8: b2:3d:2c:d1:bd:63:37:91:0b:a1:c1:8d:0e:56:f3: 03:38:fb:a9:a8:75:8c:65:c8:3a:37:c1:3c:c0:91: e8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FB:42:64:BB:47:C9:34:E6:71:E1:A3:5C:01:32:5D:CD:23:3F:20 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139952.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.26.0/23 IPv6: 2405:b140::/32 Signature Algorithm: sha256WithRSAEncryption 68:b1:bc:ae:fc:89:3e:4a:b0:8f:9d:de:67:dc:1f:d4:05:ba: bd:48:10:eb:25:e5:7c:5e:da:56:f2:44:bd:8a:bf:34:5e:0d: ed:ca:43:9c:45:f1:03:4b:24:35:01:8b:94:0e:31:79:23:cf: bb:ca:c6:0b:a6:cb:4f:81:f7:56:b9:1c:4f:19:1a:39:7c:1c: ad:ed:42:50:39:6f:be:f8:ee:ca:ba:e9:f1:e5:7f:3d:52:31: ba:28:02:81:cf:a5:51:c9:9c:f0:52:c5:20:dd:9d:c0:c6:10: f7:66:f2:05:9e:e3:af:32:a9:d0:34:b4:7e:2b:ba:9d:49:5a: 4a:90:5d:85:81:07:00:aa:be:f7:94:a1:21:65:0f:d0:f9:53: 83:8e:b9:ce:a4:58:35:45:0d:c2:e7:6d:e2:91:bd:a4:2f:f1: 05:dc:2b:da:0d:02:9b:ca:50:66:1a:b7:0f:3e:41:76:85:cb: 8f:00:24:53:71:57:74:7c:0a:fc:a8:ca:67:d8:32:84:22:08: 0f:b9:e1:46:cf:21:62:5d:2d:f0:ec:43:3a:00:19:81:26:73: 3e:f0:56:08:e6:1f:91:f6:24:88:7b:78:57:2d:60:d6:3b:50: 22:48:d1:c9:d9:d4:d0:63:ab:5c:9c:39:cc:e1:3e:45:fe:a0: fb:ea:2b:02 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUVgzxJ7Tgnr/N98gh4gZCI/7XN8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwNDAyNDE0M1oX DTI3MTEwMzAyNDY0M1owMzExMC8GA1UEAxMoMEVGQjQyNjRCQjQ3QzkzNEU2NzFF MUEzNUMwMTMyNURDRDIzM0YyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJOTfCIOPmyG4FA6R/TxaO7gqPXraBsQliD+VV2wzIVGs6ac46gF9qsPPdyV +SULdqeicJsCbVACM3V45KtEXbfMgh7xkxBi3rtF6X4+WDXqQqwnq/grghJLXIKV qAlarbsBURj9+6B9jr2bRhyY3G3bLbnMyE8FTimcotOcOK7WBxPxlf19iYzE0+ke tU7Eis9N6TwYxu03AmHgpcuC+yYrUa2teFzzRBRVsA121jXxudXbkZ385gfHaeHV KUgbPDB7qnvzvqlIIISAM7SV7pFaoL7CUH/CF3e1lb8hjNHIsj0s0b1jN5ELocGN DlbzAzj7qah1jGXIOjfBPMCR6DECAwEAAaOCAdswggHXMB0GA1UdDgQWBBQO+0Jk u0fJNOZx4aNcATJdzSM/IDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQBZ/UaMA0EAgACMAcDBQAkBbFAMA0GCSqGSIb3DQEBCwUAA4IBAQBosbyu /Ik+SrCPnd5n3B/UBbq9SBDrJeV8XtpW8kS9ir80Xg3tykOcRfEDSyQ1AYuUDjF5 I8+7ysYLpstPgfdWuRxPGRo5fByt7UJQOW+++O7Kuunx5X89UjG6KAKBz6VRyZzw UsUg3Z3AxhD3ZvIFnuOvMqnQNLR+K7qdSVpKkF2FgQcAqr73lKEhZQ/Q+VODjrnO pFg1RQ3C523ikb2kL/EF3CvaDQKbylBmGrcPPkF2hcuPACRTcVd0fAr8qMpn2DKE IggPueFGzyFiXS3w7EM6ABmBJnM+8FYI5h+R9iSIe3hXLWDWO1AiSNHJ2dTQY6tc nDnM4T5F/qD76isC -----END CERTIFICATE-----Generated at Mon Nov 9 15:28:59 2026 by rpki-client