$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS137946.roa File: AS137946.roa (raw, json) Hash identifier: 7ZL/aQ1pfNSE0Vhh+TseJG8a/8Y4ykoU1UNxiT3GHe8= Subject key identifier: 12:19:17:A9:E5:F8:53:0F:8D:25:AD:A8:08:9F:FD:0D:C4:9A:E9:E0 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2DC6CA5457DF392A0C2686F1CD15577F298ABF9E Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS137946.roa Signing time: Sat 02 May 2026 09:22:51 +0000 ROA not before: Sat 02 May 2026 09:17:51 +0000 ROA not after: Sat 01 May 2027 09:22:51 +0000 asID: 137946 IP address blocks: 138.252.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c6:ca:54:57:df:39:2a:0c:26:86:f1:cd:15:57:7f:29:8a:bf:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:51 2026 GMT Not After : May 1 09:22:51 2027 GMT Subject: CN=121917A9E5F8530F8D25ADA8089FFD0DC49AE9E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:96:6a:d3:d9:96:67:bb:76:59:59:c4:7d: 9c:1e:19:16:5e:54:34:f8:29:fb:8b:d9:58:63:5d: 5b:95:cb:db:5e:1a:09:39:97:a3:21:4c:44:5e:85: ab:94:99:e5:fc:26:43:4c:4d:4a:4b:54:84:95:fb: e1:84:a2:03:76:9b:33:2f:7d:fb:2d:bf:c8:28:86: 0e:23:3e:98:d0:da:24:d9:26:bd:75:61:4d:ab:6d: a7:88:95:c8:f1:eb:7a:f2:f1:54:20:4c:57:61:49: b0:aa:6e:d8:aa:4b:85:6c:02:7e:a4:b8:ec:55:48: 86:e3:f2:c6:7f:86:6e:aa:65:be:9e:9b:28:d0:21: ff:d5:a5:be:99:a0:76:e1:83:31:06:77:2e:f1:be: c0:73:bb:d8:e4:79:02:a5:14:93:99:e6:54:b4:49: c8:f6:87:80:ae:1a:df:f3:42:93:27:5c:96:b3:91: 81:3c:70:e3:49:bd:8c:05:75:81:f9:e2:ad:c3:d1: 05:e4:b7:30:22:71:16:41:8d:c2:8a:83:12:f8:68: e2:e5:db:7c:cb:c9:4b:bb:57:98:c4:a3:05:aa:c0: a8:49:37:9c:20:03:e9:39:18:1c:fe:c9:56:09:93: 0c:95:3d:05:b1:e7:f5:77:57:ab:88:ba:68:bf:80: 5f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:19:17:A9:E5:F8:53:0F:8D:25:AD:A8:08:9F:FD:0D:C4:9A:E9:E0 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS137946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.47.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:9d:fe:ce:8b:7b:58:ff:0b:52:ff:f3:d1:03:1b:0d:73:a1: 4b:df:25:06:dc:0c:fb:da:1e:01:c3:45:d8:14:6a:dc:1e:53: 1f:4b:2b:ad:35:5d:ca:49:12:ab:05:12:52:2b:15:ec:3c:39: e6:8e:52:97:04:6f:57:49:6f:5d:0a:f9:80:1c:2b:13:b3:90: 58:5e:ac:ec:ac:6b:10:ec:75:11:46:55:02:f7:4f:13:9e:d7: 65:a5:6f:ae:b4:28:ac:52:47:a3:f6:20:20:24:10:ea:45:6d: 75:3f:ae:af:92:75:cd:2a:a5:96:cf:3a:ec:4e:78:8b:74:12: ba:95:f8:6f:7c:ae:24:9a:42:d4:54:ab:bc:c7:53:5d:79:6d: 1a:23:a4:46:da:13:20:c3:97:a4:d6:3f:0e:60:25:68:30:63: e5:85:b4:48:db:a0:4a:8a:cc:fd:81:3b:17:89:21:c8:ba:bd: b5:b3:ea:dd:19:e0:e5:15:19:88:97:1b:ba:01:d5:c0:c4:14: 6f:a6:ec:d8:5e:8b:23:26:e9:e6:cb:b1:b2:fd:3b:29:60:aa: fa:c2:f6:12:64:d8:e8:a0:40:36:06:d0:89:9b:ca:0d:91:78: f1:55:07:1a:2c:f5:2c:24:aa:0c:21:5f:02:8e:20:07:43:88: fe:9c:20:38 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIULcbKVFffOSoMJobxzRVXfymKv54wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc1MVoX DTI3MDUwMTA5MjI1MVowMzExMC8GA1UEAxMoMTIxOTE3QTlFNUY4NTMwRjhEMjVB REE4MDg5RkZEMERDNDlBRTlFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9olmrT2ZZnu3ZZWcR9nB4ZFl5UNPgp+4vZWGNdW5XL214aCTmXoyFMRF6F q5SZ5fwmQ0xNSktUhJX74YSiA3abMy99+y2/yCiGDiM+mNDaJNkmvXVhTattp4iV yPHrevLxVCBMV2FJsKpu2KpLhWwCfqS47FVIhuPyxn+Gbqplvp6bKNAh/9Wlvpmg duGDMQZ3LvG+wHO72OR5AqUUk5nmVLRJyPaHgK4a3/NCkydclrORgTxw40m9jAV1 gfnircPRBeS3MCJxFkGNwoqDEvho4uXbfMvJS7tXmMSjBarAqEk3nCAD6TkYHP7J VgmTDJU9BbHn9XdXq4i6aL+AX5UCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQSGRep 5fhTD40lragIn/0NxJrp4DAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM3OTQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAivwvMA0GCSqGSIb3DQEBCwUAA4IBAQBqnf7Oi3tY/wtS//PRAxsNc6FL 3yUG3Az72h4Bw0XYFGrcHlMfSyutNV3KSRKrBRJSKxXsPDnmjlKXBG9XSW9dCvmA HCsTs5BYXqzsrGsQ7HURRlUC908TntdlpW+utCisUkej9iAgJBDqRW11P66vknXN KqWWzzrsTniLdBK6lfhvfK4kmkLUVKu8x1NdeW0aI6RG2hMgw5ek1j8OYCVoMGPl hbRI26BKisz9gTsXiSHIur21s+rdGeDlFRmIlxu6AdXAxBRvpuzYXosjJunmy7Gy /TspYKr6wvYSZNjooEA2BtCJm8oNkXjxVQcaLPUsJKoMIV8CjiAHQ4j+nCA4 -----END CERTIFICATE-----Generated at Sat May 2 21:05:02 2026 by rpki-client