$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138990.roa File: AS138990.roa (raw, json) Hash identifier: L06hvWfzk3GHfXwcPC3CTVruL/d+LU7TRZ+G/ty0rGU= Subject key identifier: 0B:30:26:9B:1B:91:FF:70:4F:BC:26:73:FF:47:8A:FA:38:BF:C5:C5 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 42BD36D71CA2CE73092536F729DA7D74A5BDB3A5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138990.roa Signing time: Wed 04 Mar 2026 02:40:17 +0000 ROA not before: Wed 04 Mar 2026 02:35:17 +0000 ROA not after: Wed 03 Mar 2027 02:40:17 +0000 asID: 138990 IP address blocks: 2001:df6:b8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bd:36:d7:1c:a2:ce:73:09:25:36:f7:29:da:7d:74:a5:bd:b3:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 4 02:35:17 2026 GMT Not After : Mar 3 02:40:17 2027 GMT Subject: CN=0B30269B1B91FF704FBC2673FF478AFA38BFC5C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:be:06:0f:5e:f0:76:f8:ab:f9:6c:28:7d:ff: 5b:2a:6e:44:8a:6e:31:9d:4b:66:b0:e4:98:bd:c3: 8c:a7:05:34:bf:8b:2f:00:dc:b5:b0:59:15:63:7d: 26:9e:c4:34:25:6c:28:e4:78:52:73:8e:09:82:28: 4a:dc:a2:51:3c:79:a3:2a:02:61:8b:64:6c:05:51: c5:84:46:4a:39:51:6e:66:44:b4:3f:bf:42:e6:ba: 05:35:5e:eb:05:a4:00:45:e9:5f:fb:79:e8:93:2a: 32:5e:e1:3c:e9:ef:67:9e:7c:2f:26:f4:46:d2:88: 87:cc:f7:24:a2:f1:6c:2a:52:39:2f:bb:88:5b:75: d8:61:e0:01:be:34:04:73:cf:e3:c7:e2:aa:e9:4f: a1:73:c5:8e:07:da:04:e6:7b:9e:27:66:13:a3:03: b8:d9:19:82:b6:62:73:8c:48:3e:8f:ff:43:a1:8f: 7b:3d:da:5b:12:b7:cf:f0:e1:70:c6:e4:9e:57:d1: 9b:d4:7f:ab:0f:4a:55:f6:a5:7b:61:71:81:31:2e: 48:9d:2a:57:ef:d9:ad:73:1e:9b:11:c9:5d:47:da: b1:0f:3b:d0:04:79:92:be:8a:9f:af:60:76:0f:55: 2a:6d:60:ed:1c:82:f8:70:d0:86:ba:b7:c2:d4:74: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:30:26:9B:1B:91:FF:70:4F:BC:26:73:FF:47:8A:FA:38:BF:C5:C5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138990.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:b8c0::/48 Signature Algorithm: sha256WithRSAEncryption 1e:0c:60:cc:31:e2:af:10:9b:3e:75:0c:15:82:c4:d1:84:ed: 6c:7f:a6:d5:1f:07:e6:18:18:b2:09:74:52:69:9e:38:ad:27: 93:73:9d:ba:40:20:21:f9:7a:ea:73:58:46:c8:4a:02:fd:42: fd:8d:ef:0e:cb:d6:e6:f2:99:85:f4:b7:7b:72:c2:f7:6d:26: 14:bc:86:4b:5c:3f:e8:e9:41:61:05:e0:47:32:7a:87:3b:6e: 59:fe:e6:9e:e7:06:31:07:8a:71:de:9a:b9:30:1c:c6:8f:32: 9c:dd:c8:82:c2:cb:e3:63:00:25:42:1f:7d:02:df:c7:45:4e: ff:e3:03:66:b6:98:67:1a:13:b0:af:55:a7:79:ab:a6:46:38: 56:ac:3a:ba:a8:b4:c8:d1:62:85:08:f9:42:19:7c:91:c2:86: a4:19:09:16:03:cf:aa:73:13:c6:9a:9d:1d:0a:6a:6b:de:21: d4:3c:62:63:dd:95:bd:ea:c6:be:e6:f4:e3:ce:11:2e:84:e3: 8c:1c:d5:e8:b3:25:77:3c:7f:e2:05:26:1a:8d:56:46:f8:a0: 34:dd:52:d1:96:d3:13:5f:5c:c6:d7:7c:15:1e:8f:34:82:da: 04:bc:6b:43:7a:c7:9c:70:ce:6f:86:e5:22:3a:04:e4:1a:3d: 3b:50:3e:4f -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUQr021xyiznMJJTb3Kdp9dKW9s6UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwNDAyMzUxN1oX DTI3MDMwMzAyNDAxN1owMzExMC8GA1UEAxMoMEIzMDI2OUIxQjkxRkY3MDRGQkMy NjczRkY0NzhBRkEzOEJGQzVDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOu+Bg9e8Hb4q/lsKH3/WypuRIpuMZ1LZrDkmL3DjKcFNL+LLwDctbBZFWN9 Jp7ENCVsKOR4UnOOCYIoStyiUTx5oyoCYYtkbAVRxYRGSjlRbmZEtD+/Qua6BTVe 6wWkAEXpX/t56JMqMl7hPOnvZ558Lyb0RtKIh8z3JKLxbCpSOS+7iFt12GHgAb40 BHPP48fiqulPoXPFjgfaBOZ7nidmE6MDuNkZgrZic4xIPo//Q6GPez3aWxK3z/Dh cMbknlfRm9R/qw9KVfale2FxgTEuSJ0qV+/ZrXMemxHJXUfasQ870AR5kr6Kn69g dg9VKm1g7RyC+HDQhrq3wtR0Q70CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQLMCab G5H/cE+8JnP/R4r6OL/FxTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODk5MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfa4wDANBgkqhkiG9w0BAQsFAAOCAQEAHgxgzDHirxCbPnUM FYLE0YTtbH+m1R8H5hgYsgl0UmmeOK0nk3OdukAgIfl66nNYRshKAv1C/Y3vDsvW 5vKZhfS3e3LC920mFLyGS1w/6OlBYQXgRzJ6hztuWf7mnucGMQeKcd6auTAcxo8y nN3IgsLL42MAJUIffQLfx0VO/+MDZraYZxoTsK9Vp3mrpkY4Vqw6uqi0yNFihQj5 Qhl8kcKGpBkJFgPPqnMTxpqdHQpqa94h1DxiY92VverGvub0484RLoTjjBzV6LMl dzx/4gUmGo1WRvigNN1S0ZbTE19cxtd8FR6PNILaBLxrQ3rHnHDOb4blIjoE5Bo9 O1A+Tw== -----END CERTIFICATE-----Generated at Sat Mar 7 19:39:27 2026 by rpki-client