$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS138089.roa File: AS138089.roa (raw, json) Hash identifier: CYYDeyZqfKcZ+xXlJAK8DdP3QwF+X6uANFZNR4ty4go= Subject key identifier: C5:1C:14:75:64:41:02:1E:E9:EF:D3:24:86:7F:32:2B:EA:D5:65:8A Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 0C6EB4BD397D16B9FDC1E35F2506FDBDFC1EA7D1 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138089.roa Signing time: Sat 02 May 2026 09:25:18 +0000 ROA not before: Sat 02 May 2026 09:20:18 +0000 ROA not after: Sat 01 May 2027 09:25:18 +0000 asID: 138089 IP address blocks: 165.99.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:6e:b4:bd:39:7d:16:b9:fd:c1:e3:5f:25:06:fd:bd:fc:1e:a7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:20:18 2026 GMT Not After : May 1 09:25:18 2027 GMT Subject: CN=C51C14756441021EE9EFD324867F322BEAD5658A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ab:48:45:13:f9:a7:02:6f:92:84:18:0f:c5: 15:d9:84:51:07:de:01:a1:c8:a7:7f:c5:eb:b8:c1: e3:55:1d:99:ec:50:a4:8e:ab:93:2d:ea:40:4b:e2: 08:e5:7b:bf:52:6b:47:e0:23:68:c8:32:ef:e4:32: b6:50:b7:6b:3d:3e:a3:65:c0:22:9c:f6:d3:a6:97: 1f:a5:3d:78:58:8b:0f:c1:18:1c:ec:b2:e4:64:77: 22:67:1a:e5:9b:f0:3b:e8:95:66:06:bb:2c:25:9a: b2:62:62:81:47:95:90:3e:f9:a2:eb:b8:48:9a:ae: 3a:bf:dc:90:33:68:86:e2:81:4c:06:30:fa:e8:e1: 2e:3a:3a:77:f8:ff:c3:19:0f:ef:8e:62:72:e6:22: a9:65:fe:62:0c:a7:72:d3:84:f9:ae:30:70:98:6c: 65:c5:cd:4f:ae:5c:eb:78:31:72:31:4f:8c:a3:95: 55:82:12:a6:89:22:69:35:e7:7d:f1:b6:d0:21:58: 59:18:f3:59:40:fc:d1:40:67:d9:f4:6e:3c:0a:e3: 99:89:b5:06:50:70:9e:62:16:27:3a:fa:d7:3c:e0: 62:ad:e4:3c:0c:09:df:7d:a8:a8:e1:5b:d5:8a:e1: 00:5d:ed:d6:62:be:25:94:99:ce:26:38:e2:32:98: 02:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1C:14:75:64:41:02:1E:E9:EF:D3:24:86:7F:32:2B:EA:D5:65:8A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138089.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.225.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:3d:2b:0f:50:72:b6:63:17:b8:ed:f9:a5:fe:29:7d:ae:98: b3:95:98:f0:6a:9b:75:0f:0a:f1:4b:f2:52:61:df:d4:b8:8d: d3:d9:10:15:c6:52:01:85:5b:b1:9f:0d:10:fe:62:4b:3d:47: fa:ff:c6:a0:10:8d:56:8d:01:0d:4f:b1:3d:0c:94:60:e0:6c: b2:f4:33:41:fd:9b:22:5c:40:24:93:e4:42:ab:35:7e:77:10: 96:57:ef:fa:7f:84:26:58:a3:05:bc:fc:ea:15:a7:4a:af:92: 4a:63:96:4f:30:62:d3:b4:37:9d:f6:58:8f:ed:7b:a7:b9:26: aa:91:8b:cf:e1:2d:67:59:d1:8d:7e:9f:01:19:81:e5:e1:1e: 2b:f4:ff:a7:fc:45:eb:e9:31:a6:cb:2c:39:c3:fc:b2:9a:b6: 8e:43:18:2c:01:c1:35:cf:f9:f0:c9:0b:2c:d8:ba:59:d0:90: 80:bd:c5:3e:08:dd:f2:fb:cd:05:da:77:00:9c:ce:d5:1e:4f: 87:ca:71:21:57:1d:43:82:7b:c9:56:46:c5:a3:27:80:24:53: ad:b7:96:e7:98:b6:c1:a6:cc:51:2a:68:12:21:97:e2:f0:19: 27:a7:c1:cc:6b:3f:41:8f:d4:79:43:e3:49:12:b7:fa:09:85: ba:d8:bf:c6 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUDG60vTl9Frn9weNfJQb9vfwep9EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MjAxOFoX DTI3MDUwMTA5MjUxOFowMzExMC8GA1UEAxMoQzUxQzE0NzU2NDQxMDIxRUU5RUZE MzI0ODY3RjMyMkJFQUQ1NjU4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGrSEUT+acCb5KEGA/FFdmEUQfeAaHIp3/F67jB41UdmexQpI6rky3qQEvi COV7v1JrR+AjaMgy7+QytlC3az0+o2XAIpz206aXH6U9eFiLD8EYHOyy5GR3Imca 5ZvwO+iVZga7LCWasmJigUeVkD75ouu4SJquOr/ckDNohuKBTAYw+ujhLjo6d/j/ wxkP745icuYiqWX+YgynctOE+a4wcJhsZcXNT65c63gxcjFPjKOVVYISpokiaTXn ffG20CFYWRjzWUD80UBn2fRuPArjmYm1BlBwnmIWJzr61zzgYq3kPAwJ332oqOFb 1YrhAF3t1mK+JZSZziY44jKYAisCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTFHBR1 ZEECHunv0ySGfzIr6tVlijAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM4MDg5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQApWPhMA0GCSqGSIb3DQEBCwUAA4IBAQAfPSsPUHK2Yxe47fml/il9rpiz lZjwapt1DwrxS/JSYd/UuI3T2RAVxlIBhVuxnw0Q/mJLPUf6/8agEI1WjQENT7E9 DJRg4Gyy9DNB/ZsiXEAkk+RCqzV+dxCWV+/6f4QmWKMFvPzqFadKr5JKY5ZPMGLT tDed9liP7XunuSaqkYvP4S1nWdGNfp8BGYHl4R4r9P+n/EXr6TGmyyw5w/yymraO QxgsAcE1z/nwyQss2LpZ0JCAvcU+CN3y+80F2ncAnM7VHk+HynEhVx1DgnvJVkbF oyeAJFOtt5bnmLbBpsxRKmgSIZfi8Bknp8HMaz9Bj9R5Q+NJErf6CYW62L/G -----END CERTIFICATE-----Generated at Sat May 2 21:05:01 2026 by rpki-client