$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138830.roa File: AS138830.roa (raw, json) Hash identifier: owF59Hjl5cg8kW6KjLmYwxL24iqPaUm3CYUgkagw5cs= Subject key identifier: B9:04:73:25:7C:80:08:CC:BD:9E:0B:78:70:20:68:9D:9E:62:88:93 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4BD7867F0B4F573EEAF2DA08FEBEFA27687ACFFB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138830.roa Signing time: Mon 06 Oct 2025 04:57:41 +0000 ROA not before: Mon 06 Oct 2025 04:52:41 +0000 ROA not after: Mon 05 Oct 2026 04:57:41 +0000 asID: 138830 IP address blocks: 103.137.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d7:86:7f:0b:4f:57:3e:ea:f2:da:08:fe:be:fa:27:68:7a:cf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 6 04:52:41 2025 GMT Not After : Oct 5 04:57:41 2026 GMT Subject: CN=B90473257C8008CCBD9E0B787020689D9E628893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:66:43:04:45:ce:16:cc:55:07:38:12:fc: b3:74:f8:53:18:d3:84:b1:10:b2:dc:8c:54:36:db: 11:5f:cc:db:de:47:2b:c4:6b:eb:6f:4f:2a:fa:8e: 8b:39:45:7d:02:6f:11:4f:7a:97:ae:8a:f2:f1:95: 8d:44:da:8f:bb:a4:a2:a7:2d:fa:ec:36:99:8d:c3: 02:e6:e2:71:78:4e:34:b5:d8:4e:b2:bf:f1:e2:6c: 7e:2c:4e:c8:78:0d:1a:14:6a:68:aa:91:fd:f7:17: 99:14:78:ca:2f:6a:4b:fd:41:f6:12:4a:ce:43:52: 31:c9:5b:b3:32:10:0a:ce:78:c5:7c:87:a1:ae:72: e0:bf:c2:fb:af:f7:01:b2:52:14:1e:1d:f4:d9:7b: 0c:ae:17:f9:23:d8:29:2f:65:cd:ae:a4:37:fb:1b: d6:14:c9:49:89:b8:f9:00:eb:e7:28:23:14:ed:cc: 74:7f:23:42:94:56:e7:42:32:2b:0f:d2:f0:4c:0a: c8:8d:23:d7:5c:37:b6:4e:1d:24:9b:4f:a1:69:74: 10:79:4e:78:d9:2f:35:5e:be:2e:1a:56:a2:94:46: 6e:3e:e9:fb:7f:92:77:0e:5c:24:0e:23:b2:da:15: 74:79:10:21:ea:a3:55:c8:19:cf:df:2c:d0:14:46: b8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:04:73:25:7C:80:08:CC:BD:9E:0B:78:70:20:68:9D:9E:62:88:93 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.126.0/23 Signature Algorithm: sha256WithRSAEncryption 75:a8:40:2b:dd:b5:2f:2b:f6:bc:1c:30:3f:ca:0b:34:32:e9: 35:3a:2b:00:fb:71:e9:29:39:3e:7e:41:48:d7:f7:19:67:d8: 4f:7d:3d:d9:c4:1d:aa:3b:6c:03:68:a0:f6:b4:d3:03:71:9e: 37:6d:0d:e1:77:10:bc:e5:77:20:8b:ba:0d:c0:e1:8c:d0:0f: f2:eb:b3:33:13:76:29:05:3f:66:96:3a:f8:ba:27:58:62:33: 62:5b:44:2e:ee:b3:ab:f2:64:d0:c0:8a:ae:ae:41:ee:44:7b: 36:9c:44:55:55:55:a2:e2:99:5f:bf:6a:24:41:96:45:aa:c7: bc:b7:f7:ee:7a:7a:b0:3d:e2:15:b7:41:b8:7d:4a:23:92:4b: fc:53:7e:ab:2f:7d:ce:14:b0:4c:69:49:5c:c9:30:84:65:57: e8:00:42:b5:36:9a:16:e0:f6:de:98:8d:79:46:b3:c2:c2:07: f5:26:3f:65:e3:3d:c8:af:71:b5:b5:80:c7:73:11:ca:96:74: 01:9a:f3:6f:27:79:65:6f:c7:5b:09:24:0d:8a:91:bf:6a:52: 0a:9e:81:ee:44:e5:ea:20:c1:49:4a:c4:fa:76:08:89:3e:9a: 89:ab:92:6f:e9:b1:ff:4f:fd:42:2f:db:cb:dc:6a:58:01:27: 48:d5:37:4b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUS9eGfwtPVz7q8toI/r76J2h6z/swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwNjA0NTI0MVoX DTI2MTAwNTA0NTc0MVowMzExMC8GA1UEAxMoQjkwNDczMjU3QzgwMDhDQ0JEOUUw Qjc4NzAyMDY4OUQ5RTYyODg5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5aZkMERc4WzFUHOBL8s3T4UxjThLEQstyMVDbbEV/M295HK8Rr629PKvqO izlFfQJvEU96l66K8vGVjUTaj7ukoqct+uw2mY3DAubicXhONLXYTrK/8eJsfixO yHgNGhRqaKqR/fcXmRR4yi9qS/1B9hJKzkNSMclbszIQCs54xXyHoa5y4L/C+6/3 AbJSFB4d9Nl7DK4X+SPYKS9lza6kN/sb1hTJSYm4+QDr5ygjFO3MdH8jQpRW50Iy Kw/S8EwKyI0j11w3tk4dJJtPoWl0EHlOeNkvNV6+LhpWopRGbj7p+3+Sdw5cJA4j stoVdHkQIeqjVcgZz98s0BRGuOkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS5BHMl fIAIzL2eC3hwIGidnmKIkzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODgzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeJfjANBgkqhkiG9w0BAQsFAAOCAQEAdahAK921Lyv2vBwwP8oL NDLpNTorAPtx6Sk5Pn5BSNf3GWfYT3092cQdqjtsA2ig9rTTA3GeN20N4XcQvOV3 IIu6DcDhjNAP8uuzMxN2KQU/ZpY6+LonWGIzYltELu6zq/Jk0MCKrq5B7kR7NpxE VVVVouKZX79qJEGWRarHvLf37np6sD3iFbdBuH1KI5JL/FN+qy99zhSwTGlJXMkw hGVX6ABCtTaaFuD23piNeUazwsIH9SY/ZeM9yK9xtbWAx3MRypZ0AZrzbyd5ZW/H WwkkDYqRv2pSCp6B7kTl6iDBSUrE+nYIiT6aiauSb+mx/0/9Qi/by9xqWAEnSNU3 Sw== -----END CERTIFICATE-----Generated at Sun Oct 19 12:51:28 2025 by rpki-client