$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS138011.roa File: AS138011.roa (raw, json) Hash identifier: A9Fl5Gs7X6VHfoDw3eewT0CJXhS19l14stq4jbp9Jx8= Subject key identifier: AA:A9:27:E9:60:7F:D3:E4:FB:73:2C:85:46:B5:E2:3B:66:1F:BB:52 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5C809C58C969348D37BB0DE87425FCB80D0C5AD7 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138011.roa Signing time: Sat 02 May 2026 09:22:34 +0000 ROA not before: Sat 02 May 2026 09:17:34 +0000 ROA not after: Sat 01 May 2027 09:22:34 +0000 asID: 138011 IP address blocks: 144.79.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:80:9c:58:c9:69:34:8d:37:bb:0d:e8:74:25:fc:b8:0d:0c:5a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:34 2026 GMT Not After : May 1 09:22:34 2027 GMT Subject: CN=AAA927E9607FD3E4FB732C8546B5E23B661FBB52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:62:dc:3e:8b:41:6d:b7:0d:d8:f0:b4:6e:85: 07:50:a3:4b:43:0e:39:67:51:70:fb:e1:fc:bf:e3: ef:c0:33:1a:86:26:fb:d0:d1:35:69:d3:15:ad:50: 1e:9f:f3:20:74:a9:d9:e6:c5:5f:27:26:0e:07:b5: 60:fb:f9:95:8f:0d:37:5f:41:ef:d1:ad:3d:df:ca: 4c:c8:f5:74:2f:97:18:17:06:9c:3f:f0:f7:fc:69: 27:fe:61:bd:03:bc:fe:c0:e0:62:b5:0a:a8:3f:fa: 49:31:e2:24:b1:a8:1a:c5:6d:d8:92:5c:b3:3e:c4: c1:93:c0:93:aa:15:c6:c5:37:9e:4b:98:35:74:e9: 16:0b:16:d8:8a:81:44:59:63:e4:6f:a9:d9:4b:80: b6:08:ef:4f:32:2a:e2:08:cd:85:6d:7f:be:8f:3e: da:14:4c:2c:9f:94:a3:58:fb:5f:90:cf:d4:10:5e: 5b:e7:d5:77:b3:25:b1:f7:ce:12:69:38:26:25:32: a0:62:5d:4d:3c:ce:0e:b9:51:fc:26:bf:9c:e0:fa: 02:b9:02:3f:95:e4:ec:93:5d:a1:b0:71:fb:09:b0: d3:f4:90:ed:b0:cf:d7:2a:4c:e4:c9:b5:cd:b1:62: ab:a4:ed:f5:f9:f7:26:01:92:6e:76:04:f5:b9:90: 6d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A9:27:E9:60:7F:D3:E4:FB:73:2C:85:46:B5:E2:3B:66:1F:BB:52 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138011.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.176.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:a5:f7:f8:ee:c1:24:7a:b7:c6:3b:ea:cf:d2:dc:51:e8:9c: 16:9b:39:7f:b8:2e:79:bf:7d:f0:e2:b2:a1:f8:43:25:4f:ae: c4:d8:b7:a3:72:3e:e2:b5:9f:56:78:b8:5c:a8:4d:93:91:79: 59:1a:2c:65:0d:87:c7:7d:d4:e8:6c:0a:b5:b5:41:aa:c7:86: 8a:0c:e5:d0:fc:47:f2:f7:9a:4b:97:06:76:40:ec:23:46:48: 8d:52:86:ce:b9:f8:9c:4a:11:09:ff:6e:b4:02:b5:c7:47:f7: d5:10:7c:3a:4c:4b:80:5e:b3:6d:3b:16:69:23:c1:67:24:b8: 3f:b5:92:3e:cc:24:7c:7f:7f:ed:9a:eb:58:c6:7d:fc:e1:61: 5e:fa:84:29:d8:7b:a6:ec:f0:61:39:2b:59:41:50:cc:79:20: 94:5e:eb:49:d7:c4:ec:eb:70:1e:50:a3:6e:46:b4:56:95:64: 73:5d:40:0b:aa:63:1a:d4:fd:c9:2a:a7:94:7a:4f:41:26:c9: 13:ab:0c:84:e7:e2:70:e3:16:b1:21:1f:75:7e:a4:9c:8a:40: a6:c5:c3:10:4b:40:fd:9b:31:ff:cf:92:34:df:cc:32:90:39: 86:f8:c8:12:7d:56:c2:84:ab:a4:bb:79:64:b7:3d:ed:e3:81: cb:fb:dd:37 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUXICcWMlpNI03uw3odCX8uA0MWtcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTczNFoX DTI3MDUwMTA5MjIzNFowMzExMC8GA1UEAxMoQUFBOTI3RTk2MDdGRDNFNEZCNzMy Qzg1NDZCNUUyM0I2NjFGQkI1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAONi3D6LQW23DdjwtG6FB1CjS0MOOWdRcPvh/L/j78AzGoYm+9DRNWnTFa1Q Hp/zIHSp2ebFXycmDge1YPv5lY8NN19B79GtPd/KTMj1dC+XGBcGnD/w9/xpJ/5h vQO8/sDgYrUKqD/6STHiJLGoGsVt2JJcsz7EwZPAk6oVxsU3nkuYNXTpFgsW2IqB RFlj5G+p2UuAtgjvTzIq4gjNhW1/vo8+2hRMLJ+Uo1j7X5DP1BBeW+fVd7MlsffO Emk4JiUyoGJdTTzODrlR/Ca/nOD6ArkCP5Xk7JNdobBx+wmw0/SQ7bDP1ypM5Mm1 zbFiq6Tt9fn3JgGSbnYE9bmQbWsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSqqSfp YH/T5PtzLIVGteI7Zh+7UjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM4MDExLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAkE+wMA0GCSqGSIb3DQEBCwUAA4IBAQA6pff47sEkerfGO+rP0txR6JwW mzl/uC55v33w4rKh+EMlT67E2Lejcj7itZ9WeLhcqE2TkXlZGixlDYfHfdTobAq1 tUGqx4aKDOXQ/Efy95pLlwZ2QOwjRkiNUobOuficShEJ/260ArXHR/fVEHw6TEuA XrNtOxZpI8FnJLg/tZI+zCR8f3/tmutYxn384WFe+oQp2Hum7PBhOStZQVDMeSCU XutJ18Ts63AeUKNuRrRWlWRzXUALqmMa1P3JKqeUek9BJskTqwyE5+Jw4xaxIR91 fqScikCmxcMQS0D9mzH/z5I038wykDmG+MgSfVbChKuku3lktz3t44HL+903 -----END CERTIFICATE-----Generated at Sat May 2 21:05:16 2026 by rpki-client