$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138830.roa File: AS138830.roa (raw, json) Hash identifier: Up5GiM45d/4fS1aAVeuKwkxCl/vNQVLEl1rUuqMJ2LM= Subject key identifier: AF:19:52:85:4A:3E:13:5C:51:CD:6B:10:0D:D7:81:FD:B1:A4:49:F2 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0EF7D8B23569A1D420286C4967103B81B2E227BB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138830.roa Signing time: Thu 06 Aug 2026 03:05:59 +0000 ROA not before: Thu 06 Aug 2026 03:00:59 +0000 ROA not after: Thu 05 Aug 2027 03:05:59 +0000 asID: 138830 IP address blocks: 103.137.126.0/23 maxlen: 24 2404:b0c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f7:d8:b2:35:69:a1:d4:20:28:6c:49:67:10:3b:81:b2:e2:27:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 6 03:00:59 2026 GMT Not After : Aug 5 03:05:59 2027 GMT Subject: CN=AF1952854A3E135C51CD6B100DD781FDB1A449F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:15:f6:ee:c1:f7:3b:ec:ed:7f:ec:66:1e: 0c:fc:ec:e8:8a:d1:e6:f0:48:bd:56:fb:ea:65:5c: 38:aa:b0:fd:e0:2e:9c:40:09:66:fe:0a:73:a7:99: 92:17:94:2a:2d:13:e1:70:15:f7:5f:66:94:2b:50: b1:d9:e4:bc:3e:e4:61:9f:4b:a2:81:41:60:70:80: 68:ff:37:0b:c2:96:df:5d:1b:87:33:7d:d2:d1:d3: 19:ea:40:81:2c:ef:2c:9c:b1:eb:9a:2d:13:5b:1f: 23:35:5b:e3:45:57:be:3b:62:7e:03:ac:18:1a:89: a0:9c:f0:45:6b:70:b3:58:f5:75:38:08:6f:cb:9a: d1:ca:6d:7c:aa:9e:33:a7:18:0a:79:ae:d5:d9:f8: fa:6a:97:9d:c5:2a:f5:1a:ff:c7:76:d1:b6:3f:4d: c7:35:f7:13:0a:fa:eb:eb:f5:47:f3:48:01:e1:e3: ad:c5:ac:dd:6c:2c:d3:5f:fb:c0:7f:54:9d:8d:31: aa:92:11:ab:54:53:29:43:f1:aa:87:11:e1:c2:f9: b6:be:53:98:ab:8e:ca:97:db:9e:5c:2b:76:8b:31: ea:0e:c0:bb:ea:a4:73:f6:08:45:b9:dc:e5:fa:d7: 34:61:e6:b6:46:76:e8:e3:3e:51:21:4a:35:9e:50: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:19:52:85:4A:3E:13:5C:51:CD:6B:10:0D:D7:81:FD:B1:A4:49:F2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.126.0/23 IPv6: 2404:b0c0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:0a:07:93:37:34:28:fc:ed:cf:67:d9:65:fa:82:0a:df:34: fe:44:a3:b6:ed:cf:2d:cc:99:70:52:6d:2f:38:90:b4:04:a3: 91:2e:2c:80:22:fc:23:11:bd:55:39:30:47:71:ce:6e:9e:b7: 57:48:9d:15:b3:cc:70:39:5e:11:be:d7:61:b9:fa:d7:d6:95: 9c:56:e9:c2:5d:b2:b8:91:a6:95:98:2e:7b:4a:02:5c:39:16: 73:e9:fc:ff:af:df:76:58:1f:3e:7c:b3:80:0e:19:ac:68:d4: e0:54:83:80:56:c5:ff:51:60:31:3d:0e:cd:d9:55:82:2d:81: 55:ef:3b:6e:9f:d6:2b:6f:8a:52:c5:c0:73:8a:94:cd:a6:36: 04:ae:7e:ee:64:c0:ad:ba:ed:a0:ee:a9:1d:5b:1c:e7:66:6c: 38:1c:a0:e3:83:58:31:d6:94:7a:c5:01:c9:57:be:8e:f1:8b: 81:db:2b:93:cb:21:8c:a9:8d:b5:b9:da:ea:72:73:5f:0a:8e: c1:52:ab:90:f9:03:64:96:01:a6:c7:59:9a:fd:6b:2f:bd:28: 6e:ba:52:9a:c7:b0:a5:56:f9:16:8a:a1:2d:65:4c:44:74:5f: 37:8c:26:95:42:d4:aa:cf:07:19:fe:d1:3c:10:4b:d1:da:10: a5:2b:ef:f2 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUDvfYsjVpodQgKGxJZxA7gbLiJ7swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgwNjAzMDA1OVoX DTI3MDgwNTAzMDU1OVowMzExMC8GA1UEAxMoQUYxOTUyODU0QTNFMTM1QzUxQ0Q2 QjEwMERENzgxRkRCMUE0NDlGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJrJFfbuwfc77O1/7GYeDPzs6IrR5vBIvVb76mVcOKqw/eAunEAJZv4Kc6eZ kheUKi0T4XAV919mlCtQsdnkvD7kYZ9LooFBYHCAaP83C8KW310bhzN90tHTGepA gSzvLJyx65otE1sfIzVb40VXvjtifgOsGBqJoJzwRWtws1j1dTgIb8ua0cptfKqe M6cYCnmu1dn4+mqXncUq9Rr/x3bRtj9NxzX3Ewr66+v1R/NIAeHjrcWs3Wws01/7 wH9UnY0xqpIRq1RTKUPxqocR4cL5tr5TmKuOypfbnlwrdosx6g7Au+qkc/YIRbnc 5frXNGHmtkZ26OM+USFKNZ5QLeECAwEAAaOCAdswggHXMB0GA1UdDgQWBBSvGVKF Sj4TXFHNaxAN14H9saRJ8jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQBZ4l+MA0EAgACMAcDBQAkBLDAMA0GCSqGSIb3DQEBCwUAA4IBAQAOCgeT NzQo/O3PZ9ll+oIK3zT+RKO27c8tzJlwUm0vOJC0BKORLiyAIvwjEb1VOTBHcc5u nrdXSJ0Vs8xwOV4RvtdhufrX1pWcVunCXbK4kaaVmC57SgJcORZz6fz/r992WB8+ fLOADhmsaNTgVIOAVsX/UWAxPQ7N2VWCLYFV7ztun9Yrb4pSxcBzipTNpjYErn7u ZMCtuu2g7qkdWxznZmw4HKDjg1gx1pR6xQHJV76O8YuB2yuTyyGMqY21udrqcnNf Co7BUquQ+QNklgGmx1ma/WsvvShuulKax7ClVvkWiqEtZUxEdF83jCaVQtSqzwcZ /tE8EEvR2hClK+/y -----END CERTIFICATE-----Generated at Thu Sep 3 09:44:52 2026 by rpki-client