$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS138000.roa File: AS138000.roa (raw, json) Hash identifier: 8TOVg5ZVIMvbaMjDE7PuNBaJGFW/rPIwHu8Po8+sbQ4= Subject key identifier: E7:C2:E0:0C:89:96:32:80:DB:69:ED:F8:34:90:4F:83:F2:24:B2:A3 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 354A0D1A73BC75F70C033A3C6CBC4F8D513E2393 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138000.roa Signing time: Mon 24 Aug 2026 02:43:11 +0000 ROA not before: Mon 24 Aug 2026 02:38:11 +0000 ROA not after: Mon 23 Aug 2027 02:43:11 +0000 asID: 138000 IP address blocks: 144.79.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4a:0d:1a:73:bc:75:f7:0c:03:3a:3c:6c:bc:4f:8d:51:3e:23:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 24 02:38:11 2026 GMT Not After : Aug 23 02:43:11 2027 GMT Subject: CN=E7C2E00C89963280DB69EDF834904F83F224B2A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:4e:70:15:7c:8b:7a:44:3b:03:a0:2b:3f: 94:47:f7:5e:d6:07:df:87:04:57:f4:25:78:e4:78: b5:6f:dd:4e:67:f4:59:68:95:60:96:4e:b0:d4:de: 69:06:56:08:fc:f5:6e:06:88:69:c6:06:ee:80:c6: a5:35:c0:80:18:09:eb:dc:96:16:41:24:81:71:48: 44:92:5f:6d:5d:f8:6a:60:a5:97:06:a5:92:f3:d6: 3e:88:f8:07:d5:12:58:d7:82:e9:38:d7:47:8d:82: fa:c3:02:a8:62:ed:3a:66:03:75:d2:6a:98:22:fe: a4:e9:2c:17:af:42:24:1b:da:d3:e1:a4:0e:9b:2a: 25:82:a0:c0:4f:8a:7c:d7:d1:ee:ad:e5:a5:b3:4c: dc:12:da:be:cd:77:52:9a:da:54:2e:2b:e3:7c:ee: cf:ea:95:af:ec:6d:48:4a:ac:98:c6:2e:dc:23:6a: 61:1b:24:8b:89:aa:1d:ca:e3:b8:09:b3:17:77:64: 69:d2:6c:87:93:80:ba:27:98:8e:da:60:83:ce:17: c7:d5:19:36:df:fb:ea:f2:b4:07:39:79:75:11:71: 8d:f3:d8:1c:27:71:e9:17:1c:f6:ce:af:f9:77:79: fc:39:9c:0e:e5:2f:c0:a9:13:c9:3d:02:07:52:ec: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C2:E0:0C:89:96:32:80:DB:69:ED:F8:34:90:4F:83:F2:24:B2:A3 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138000.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.187.0/24 Signature Algorithm: sha256WithRSAEncryption 85:85:29:98:d3:8c:5f:bd:1f:26:92:54:d3:c4:57:76:13:3f: c1:88:22:07:68:d0:2a:77:57:39:db:45:41:34:8c:e0:70:63: 24:93:93:31:8e:47:81:cf:0b:e3:57:f5:a0:23:73:5d:8c:1e: 63:ed:f4:ea:e9:6b:a6:53:c2:c0:f8:02:dd:13:20:68:2b:99: aa:44:cd:b2:6f:52:c5:46:19:9f:c2:51:23:20:d3:83:fe:76: 6b:3e:82:f7:dc:3d:45:54:1f:ac:07:24:84:8e:39:b7:23:d3: e6:df:3d:a1:8e:ad:bb:9c:c3:aa:e1:73:16:55:52:f5:87:aa: af:79:05:52:c8:fa:22:d4:d8:38:06:fc:96:28:76:ea:0f:44: d0:be:3d:44:ab:68:99:6a:62:31:a7:09:11:08:57:79:60:7e: 48:e5:e3:32:62:e7:48:8a:0f:41:2c:67:41:1f:42:26:d2:91: 7a:d5:30:b3:5d:d7:6d:1b:75:c3:05:ed:2b:05:05:53:a1:df: 8f:d9:ca:5e:b7:48:7b:e5:d4:94:64:54:25:e1:28:2c:ae:5b: a8:88:1b:15:e7:f0:ad:03:80:11:11:ba:83:4b:fa:82:d7:4b: 03:bc:5d:7e:22:f2:e5:1b:8d:ef:2b:8c:bc:b8:7c:c6:52:77: 77:4f:c5:28 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUNUoNGnO8dfcMAzo8bLxPjVE+I5MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgyNDAyMzgxMVoX DTI3MDgyMzAyNDMxMVowMzExMC8GA1UEAxMoRTdDMkUwMEM4OTk2MzI4MERCNjlF REY4MzQ5MDRGODNGMjI0QjJBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJyqTnAVfIt6RDsDoCs/lEf3XtYH34cEV/QleOR4tW/dTmf0WWiVYJZOsNTe aQZWCPz1bgaIacYG7oDGpTXAgBgJ69yWFkEkgXFIRJJfbV34amCllwalkvPWPoj4 B9USWNeC6TjXR42C+sMCqGLtOmYDddJqmCL+pOksF69CJBva0+GkDpsqJYKgwE+K fNfR7q3lpbNM3BLavs13UpraVC4r43zuz+qVr+xtSEqsmMYu3CNqYRski4mqHcrj uAmzF3dkadJsh5OAuieYjtpgg84Xx9UZNt/76vK0Bzl5dRFxjfPYHCdx6Rcc9s6v +Xd5/DmcDuUvwKkTyT0CB1LsKHsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTnwuAM iZYygNtp7fg0kE+D8iSyozAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM4MDAwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAkE+7MA0GCSqGSIb3DQEBCwUAA4IBAQCFhSmY04xfvR8mklTTxFd2Ez/B iCIHaNAqd1c520VBNIzgcGMkk5MxjkeBzwvjV/WgI3NdjB5j7fTq6WumU8LA+ALd EyBoK5mqRM2yb1LFRhmfwlEjINOD/nZrPoL33D1FVB+sBySEjjm3I9Pm3z2hjq27 nMOq4XMWVVL1h6qveQVSyPoi1Ng4BvyWKHbqD0TQvj1Eq2iZamIxpwkRCFd5YH5I 5eMyYudIig9BLGdBH0Im0pF61TCzXddtG3XDBe0rBQVTod+P2cpet0h75dSUZFQl 4SgsrluoiBsV5/CtA4AREbqDS/qC10sDvF1+IvLlG43vK4y8uHzGUnd3T8Uo -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:32 2026 by rpki-client