$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS138115.roa File: AS138115.roa (raw, json) Hash identifier: 9Lz/SB/uH60DzviYgXD0vVu8otw9hWBbNRIDyh1ZAzQ= Subject key identifier: 44:E7:D5:49:27:F6:D1:26:57:D5:C3:75:A1:81:93:2D:A3:3F:3B:CD Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2BF7D2B2EB2691368DDCB8D2BF22D22DA2540C7C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138115.roa Signing time: Sat 02 May 2026 09:23:28 +0000 ROA not before: Sat 02 May 2026 09:18:28 +0000 ROA not after: Sat 01 May 2027 09:23:28 +0000 asID: 138115 IP address blocks: 157.15.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f7:d2:b2:eb:26:91:36:8d:dc:b8:d2:bf:22:d2:2d:a2:54:0c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:28 2026 GMT Not After : May 1 09:23:28 2027 GMT Subject: CN=44E7D54927F6D12657D5C375A181932DA33F3BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b0:3c:a5:38:03:cd:e2:0d:35:de:b6:ad:f9: 7f:f6:08:a7:bb:5a:64:70:ce:81:c5:4e:9d:35:2a: 30:0c:7a:f7:5a:67:7a:d0:1b:26:35:ba:ed:4c:55: 4e:a2:7a:d2:31:cd:43:a5:10:df:6a:16:f4:41:5b: 12:2a:2e:2a:0f:f0:03:51:d0:70:2d:88:29:26:e4: 51:18:3f:6d:ae:08:f4:ab:11:5a:ef:ae:b9:65:b7: fe:24:dc:5c:54:70:6c:b6:c4:b9:10:34:89:e4:c2: bb:f0:32:ff:49:69:3a:43:42:2a:90:66:c9:ef:d7: 9d:ec:b5:e4:53:42:4a:09:be:e7:16:76:d8:8f:15: 9f:b9:4a:22:13:d4:b3:8c:b1:d0:e4:23:a3:2e:c4: ad:32:13:7f:3f:58:58:4d:2d:19:ce:57:23:23:1e: b7:f2:1c:37:fb:2b:89:57:8d:f4:ad:73:42:85:fa: 40:8f:b4:87:7a:c7:87:36:b3:e7:9f:a3:82:a9:d4: be:66:b0:d9:e9:bd:67:ac:e9:4c:ed:03:d9:81:34: 02:0a:ed:ef:90:d8:76:dc:62:a0:82:94:1a:df:55: 3f:84:27:ee:dc:35:7c:27:09:b0:ef:11:5d:81:22: 27:1d:0c:c7:73:34:7a:b3:93:4d:eb:5b:c8:39:63: 44:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E7:D5:49:27:F6:D1:26:57:D5:C3:75:A1:81:93:2D:A3:3F:3B:CD X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138115.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.124.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:0b:5a:6f:9a:36:ca:ce:5b:e6:d0:b0:c2:b4:31:9e:b8:ed: b5:35:8b:27:fb:bf:86:1d:5b:9d:15:1b:36:f1:14:87:49:10: d2:e7:bb:2d:22:4a:a5:7c:20:8e:1a:43:38:73:80:81:51:cf: c0:02:e3:cb:f9:e9:6d:3e:82:db:54:6c:06:f9:cf:5e:32:1b: 00:93:b2:a8:1c:c7:4b:5f:fb:4d:37:82:ff:22:f9:58:3e:31: 35:68:fa:1f:bc:64:0b:14:07:eb:6c:73:5f:95:3b:ce:4a:b2: 1c:fe:7f:2a:db:5d:39:56:9a:d6:f7:5e:00:9d:e7:d3:84:52: 80:71:09:cf:7e:e4:4f:f7:68:c9:50:cc:b1:fb:9b:bc:dd:40: 4d:24:e0:3a:a5:74:c6:72:6b:f0:22:47:4d:72:72:0d:62:ac: 72:d6:4b:c1:0a:a4:6d:6e:aa:a6:f5:d4:16:1c:40:00:bc:7f: 74:6d:fd:b3:14:85:f7:fd:4d:52:3c:01:97:99:cc:0e:29:0b: ad:16:e1:5b:6a:bd:8d:8d:f8:6b:12:d3:04:c7:7c:43:08:c0: 21:c1:74:33:86:78:61:70:88:e3:b3:9a:01:be:85:4a:3a:3c: e0:f8:c1:27:ed:7f:91:98:a0:2e:80:15:45:d9:65:a4:1e:51: cf:5a:b6:8a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUK/fSsusmkTaN3LjSvyLSLaJUDHwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgyOFoX DTI3MDUwMTA5MjMyOFowMzExMC8GA1UEAxMoNDRFN0Q1NDkyN0Y2RDEyNjU3RDVD Mzc1QTE4MTkzMkRBMzNGM0JDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKwPKU4A83iDTXetq35f/YIp7taZHDOgcVOnTUqMAx691pnetAbJjW67UxV TqJ60jHNQ6UQ32oW9EFbEiouKg/wA1HQcC2IKSbkURg/ba4I9KsRWu+uuWW3/iTc XFRwbLbEuRA0ieTCu/Ay/0lpOkNCKpBmye/Xney15FNCSgm+5xZ22I8Vn7lKIhPU s4yx0OQjoy7ErTITfz9YWE0tGc5XIyMet/IcN/sriVeN9K1zQoX6QI+0h3rHhzaz 55+jgqnUvmaw2em9Z6zpTO0D2YE0Agrt75DYdtxioIKUGt9VP4Qn7tw1fCcJsO8R XYEiJx0Mx3M0erOTTetbyDljRLECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRE59VJ J/bRJlfVw3WhgZMtoz87zTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM4MTE1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBnQ98MA0GCSqGSIb3DQEBCwUAA4IBAQBeC1pvmjbKzlvm0LDCtDGeuO21 NYsn+7+GHVudFRs28RSHSRDS57stIkqlfCCOGkM4c4CBUc/AAuPL+eltPoLbVGwG +c9eMhsAk7KoHMdLX/tNN4L/IvlYPjE1aPofvGQLFAfrbHNflTvOSrIc/n8q2105 VprW914AnefThFKAcQnPfuRP92jJUMyx+5u83UBNJOA6pXTGcmvwIkdNcnINYqxy 1kvBCqRtbqqm9dQWHEAAvH90bf2zFIX3/U1SPAGXmcwOKQutFuFbar2NjfhrEtME x3xDCMAhwXQzhnhhcIjjs5oBvoVKOjzg+MEn7X+RmKAugBVF2WWkHlHPWraK -----END CERTIFICATE-----Generated at Sat May 2 21:05:00 2026 by rpki-client