$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS137939.roa File: AS137939.roa (raw, json) Hash identifier: JO2yPEhaYE5vJyHnWqidGxYRyyd/xzfnT7j56dS01io= Subject key identifier: 97:A3:3E:DB:E8:3E:82:13:58:04:20:74:E6:56:95:9D:26:ED:88:17 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 284FF2939DE69CB0A655F376BC783F3F26905D4A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS137939.roa Signing time: Sat 02 May 2026 09:22:41 +0000 ROA not before: Sat 02 May 2026 09:17:41 +0000 ROA not after: Sat 01 May 2027 09:22:41 +0000 asID: 137939 IP address blocks: 138.252.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4f:f2:93:9d:e6:9c:b0:a6:55:f3:76:bc:78:3f:3f:26:90:5d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:41 2026 GMT Not After : May 1 09:22:41 2027 GMT Subject: CN=97A33EDBE83E821358042074E656959D26ED8817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2e:d1:c7:7b:0b:1c:01:8b:0b:f9:48:f3:f8: a0:26:25:1d:61:5b:e5:52:e4:4f:aa:06:8a:eb:a7: 66:66:a3:58:7d:75:51:bb:59:81:3a:68:fb:46:b7: d5:43:76:dc:12:8c:2b:36:40:47:2c:b5:7c:d2:ac: 1b:e9:b3:b7:66:b0:be:db:11:e7:5d:e5:ba:93:0c: e8:b3:bc:99:e0:7c:b1:7a:3c:60:9b:d3:61:de:52: 8a:d9:74:aa:25:3d:d1:76:7b:c9:69:3f:cb:ec:a8: c1:3f:98:35:83:b0:13:45:9b:b3:df:0e:96:e3:06: a2:38:1e:5b:8e:03:79:99:dd:f7:83:c3:ac:fd:1d: ec:41:7f:b7:e1:79:54:2c:d7:01:2e:da:ba:75:75: e0:9f:db:31:f8:d1:d9:4d:63:7d:ac:55:01:4a:f2: 88:35:b8:6c:49:ea:4a:64:18:26:d9:5f:04:e2:2f: 30:10:af:15:52:52:1a:b7:e8:81:dd:1a:02:b1:d4: de:57:8c:ce:61:7a:e8:66:80:35:4a:eb:43:2b:6f: fd:46:aa:25:b8:86:f0:06:3e:56:ef:ed:9d:4a:84: f4:91:b0:f8:0c:80:1b:42:58:b9:06:d2:19:ca:e1: b2:6e:c1:bd:fe:2f:0e:3b:d0:5e:4e:87:6e:a2:28: 60:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A3:3E:DB:E8:3E:82:13:58:04:20:74:E6:56:95:9D:26:ED:88:17 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS137939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.17.0/24 Signature Algorithm: sha256WithRSAEncryption 32:a8:7b:55:81:42:37:c1:3a:e8:95:e6:5f:a1:de:df:aa:ab: 31:0b:06:86:91:39:7f:8f:27:fe:2a:1d:89:27:cf:ce:fa:76: 2e:dd:fb:ef:47:aa:12:a7:38:6e:11:ac:b0:13:49:e1:84:56: 08:e5:53:f1:43:e4:63:c9:ad:9c:df:89:45:7b:e0:d1:c5:7a: 31:71:4c:b6:77:d0:6f:e9:d3:8c:7b:d2:08:71:75:3b:e5:0b: 79:52:f2:ef:5b:7f:f5:16:c4:b8:11:51:40:0d:34:c3:fb:cc: ce:db:45:cc:d5:7e:41:95:9e:30:af:ae:db:b1:91:ec:e6:c4: ac:f5:5d:c6:c3:3b:91:32:fb:70:a6:ff:f7:01:bf:dd:fb:41: b7:ee:4b:9d:72:a0:24:25:fe:6f:55:f9:39:ab:67:00:1a:34: b7:50:64:38:8a:8c:26:02:2c:f2:16:e1:28:be:ea:44:46:63: 89:4b:07:29:09:f5:08:24:92:a4:a4:0a:26:ad:2d:d0:65:ea: 6f:b5:9b:6a:ce:24:a4:56:08:f4:69:fc:14:30:d3:0d:aa:85: b1:da:59:b6:42:3b:69:19:3f:39:56:64:d0:48:40:df:b6:94: cb:e8:13:9d:34:30:d6:a2:b7:92:4b:b6:cb:9a:8a:67:c8:09: e4:98:a5:a5 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUKE/yk53mnLCmVfN2vHg/PyaQXUowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc0MVoX DTI3MDUwMTA5MjI0MVowMzExMC8GA1UEAxMoOTdBMzNFREJFODNFODIxMzU4MDQy MDc0RTY1Njk1OUQyNkVEODgxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIQu0cd7CxwBiwv5SPP4oCYlHWFb5VLkT6oGiuunZmajWH11UbtZgTpo+0a3 1UN23BKMKzZARyy1fNKsG+mzt2awvtsR513lupMM6LO8meB8sXo8YJvTYd5Sitl0 qiU90XZ7yWk/y+yowT+YNYOwE0Wbs98OluMGojgeW44DeZnd94PDrP0d7EF/t+F5 VCzXAS7aunV14J/bMfjR2U1jfaxVAUryiDW4bEnqSmQYJtlfBOIvMBCvFVJSGrfo gd0aArHU3leMzmF66GaANUrrQytv/UaqJbiG8AY+Vu/tnUqE9JGw+AyAG0JYuQbS Gcrhsm7Bvf4vDjvQXk6HbqIoYI8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSXoz7b 6D6CE1gEIHTmVpWdJu2IFzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM3OTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAivwRMA0GCSqGSIb3DQEBCwUAA4IBAQAyqHtVgUI3wTroleZfod7fqqsx CwaGkTl/jyf+Kh2JJ8/O+nYu3fvvR6oSpzhuEaywE0nhhFYI5VPxQ+Rjya2c34lF e+DRxXoxcUy2d9Bv6dOMe9IIcXU75Qt5UvLvW3/1FsS4EVFADTTD+8zO20XM1X5B lZ4wr67bsZHs5sSs9V3GwzuRMvtwpv/3Ab/d+0G37kudcqAkJf5vVfk5q2cAGjS3 UGQ4iowmAizyFuEovupERmOJSwcpCfUIJJKkpAomrS3QZepvtZtqziSkVgj0afwU MNMNqoWx2lm2QjtpGT85VmTQSEDftpTL6BOdNDDWoreSS7bLmopnyAnkmKWl -----END CERTIFICATE-----Generated at Sat May 2 21:06:04 2026 by rpki-client