
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139960.roa
File: AS139960.roa (raw, json)
Hash identifier: 4rTOFOiwASaxBrujm0+VFOaGynoei3t34o0RuFn6INQ=
Subject key identifier: 20:05:30:BF:14:EB:E2:56:8E:F6:5F:67:57:3A:06:3F:C3:7B:72:9F
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 23869071F5EC0C7016FC66E3F1838EFA12E71835
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139960.roa
Signing time: Fri 09 Oct 2026 08:13:20 +0000
ROA not before: Fri 09 Oct 2026 08:08:20 +0000
ROA not after: Fri 08 Oct 2027 08:13:20 +0000
asID: 139960
IP address blocks: 103.147.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 08:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:86:90:71:f5:ec:0c:70:16:fc:66:e3:f1:83:8e:fa:12:e7:18:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Oct 9 08:08:20 2026 GMT
Not After : Oct 8 08:13:20 2027 GMT
Subject: CN=200530BF14EBE2568EF65F67573A063FC37B729F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:28:08:ad:00:fc:20:70:44:83:e0:d9:e5:7e:
3b:1e:39:87:31:20:c5:ad:7c:d7:ab:9d:e3:0a:da:
66:a3:53:22:95:1f:ff:18:e3:ab:d5:46:4e:0e:31:
5f:a0:23:7c:b6:86:be:28:7e:57:f3:5d:25:16:fe:
7e:4d:03:8d:61:1d:27:70:70:20:fd:75:06:fd:7a:
de:cc:04:c9:66:23:9d:6c:42:75:5c:a8:e7:24:b9:
65:3b:0b:e6:b9:c2:d7:7e:17:42:e2:ab:36:45:62:
49:80:8f:ad:56:c9:b5:31:d4:9f:49:3d:6c:fe:03:
38:f3:a1:19:82:4d:04:22:b8:fb:19:47:55:2b:b5:
35:ca:77:f4:5d:af:97:10:b9:37:bf:b2:d1:b8:30:
d8:34:4e:04:7d:b5:1f:6a:4a:c9:61:db:a7:97:cc:
8c:90:2b:be:7c:ab:2d:ff:a3:36:72:2f:7e:63:f8:
ac:20:77:f7:26:1c:9e:d3:90:ed:45:ea:d3:2e:72:
0c:e5:32:ce:01:10:80:73:cd:9c:bf:ba:2f:dd:79:
f5:b7:c5:15:5e:07:ac:00:64:59:41:20:5d:72:61:
c6:12:3e:ce:7b:37:f4:c0:c4:88:f6:cb:b3:e3:12:
ae:ec:6d:4a:3b:b1:3b:23:47:f2:2b:13:d7:66:11:
7e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:05:30:BF:14:EB:E2:56:8E:F6:5F:67:57:3A:06:3F:C3:7B:72:9F
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.91.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c3:99:ce:a6:1b:50:d8:98:c8:59:48:c0:61:4b:c3:7a:cd:
09:49:02:22:a1:3f:91:26:e6:72:00:71:05:02:e8:dd:a7:62:
a5:42:5c:ce:79:b7:ac:a6:1d:57:4f:cb:25:22:fc:7b:31:20:
c8:13:05:9e:76:c6:9e:90:84:ff:00:48:a8:ff:54:95:77:f5:
76:cd:44:74:73:a0:df:34:a4:d7:5e:e3:1a:6a:9c:6b:96:df:
b7:93:e7:fd:2d:f3:1b:75:bb:e9:78:cc:29:d3:96:98:08:c9:
19:e6:5e:e9:ed:94:61:27:34:78:83:0f:96:77:6f:d0:93:ba:
28:a3:0a:b0:cd:8f:75:33:8b:87:0e:cb:f2:db:d8:ba:65:31:
84:b8:82:a2:26:28:fb:68:ca:88:4a:c0:18:e6:18:df:ff:a0:
82:91:86:c0:6b:6d:0d:e7:5a:b8:77:94:98:e3:a1:7c:03:aa:
e6:cf:79:ac:60:13:f5:76:d4:2e:5c:10:59:9f:bd:13:36:aa:
9b:6a:07:02:94:60:30:b1:53:5a:d6:04:43:5d:89:a6:43:3f:
b3:3d:f0:7d:d4:d8:54:f0:19:ae:ba:6d:79:b9:df:99:b9:a2:
2f:69:9e:43:94:63:c4:e3:c7:bb:ef:5c:49:ae:0b:25:92:58:
f8:42:c0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 15:19:31 2026 by rpki-client