$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS138554.roa File: AS138554.roa (raw, json) Hash identifier: +uMoBkYo2F5xUg+RrtyAris1S8X1iBO7CWo0Wt7syOk= Subject key identifier: CE:58:C2:B7:31:64:1E:6E:64:16:3E:EF:78:30:FE:08:3D:BB:97:6A Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6EF33E30E16FA90E4145B88287F9841531F65A95 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138554.roa Signing time: Sat 02 May 2026 09:22:46 +0000 ROA not before: Sat 02 May 2026 09:17:46 +0000 ROA not after: Sat 01 May 2027 09:22:46 +0000 asID: 138554 IP address blocks: 138.252.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f3:3e:30:e1:6f:a9:0e:41:45:b8:82:87:f9:84:15:31:f6:5a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:46 2026 GMT Not After : May 1 09:22:46 2027 GMT Subject: CN=CE58C2B731641E6E64163EEF7830FE083DBB976A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:40:d6:a6:eb:a1:81:ca:00:66:31:1c:1f: 8c:80:fe:da:f2:2f:42:06:a2:16:86:6d:05:e4:91: bc:61:7b:2b:6f:80:82:e3:21:7c:68:9f:62:3f:04: 2f:2d:29:7a:d6:7c:1a:7b:8c:a2:8a:45:14:21:dc: cd:9a:fa:8c:96:cd:fe:bd:5d:2f:fe:d5:da:81:a6: 25:2d:73:e9:c5:0c:f6:f6:0d:1e:6b:ea:a6:58:47: 67:90:66:7c:89:8f:68:0c:02:ad:c6:55:90:01:1e: 5e:72:6b:68:a4:ed:d4:1a:69:00:f7:51:14:2d:5b: 29:a0:3e:3f:c5:52:6e:cc:d2:db:08:38:89:36:64: 9d:e2:af:30:16:f3:a3:5f:95:0d:fa:b6:0e:4f:eb: 0c:cf:60:2a:4a:a6:6c:5a:43:74:a8:f8:1f:67:a4: e1:9c:94:61:e3:c6:f6:29:d6:d6:71:4a:f1:86:da: 70:01:a7:4c:8f:3e:cf:75:d0:a0:08:d6:d8:08:ea: 29:eb:9d:8a:a1:e3:22:31:ab:d0:aa:eb:c9:ad:da: 23:df:f7:84:72:8b:41:d5:36:bb:d1:11:47:7c:10: 3d:98:1f:79:29:22:e5:37:d7:9c:09:df:11:a0:c3: 9e:aa:11:e0:ab:6c:66:c2:c4:08:dc:d2:33:34:a6: a3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:58:C2:B7:31:64:1E:6E:64:16:3E:EF:78:30:FE:08:3D:BB:97:6A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138554.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.87.0/24 Signature Algorithm: sha256WithRSAEncryption 11:6e:f1:53:fe:f0:c0:48:7f:23:de:78:6e:8d:7a:4c:8e:92: 56:9f:a3:a7:fc:87:68:20:3c:9c:a2:fc:4e:8d:bf:2f:e0:01: a8:c6:82:08:ff:82:94:ff:47:15:c6:23:f3:0f:97:60:63:65: 05:4d:6a:76:b1:82:aa:e2:9c:36:92:ef:0c:33:eb:45:94:84: 6a:99:e1:cf:d0:48:ab:0b:a0:38:c8:11:2e:17:a6:eb:49:ca: 4d:05:91:ab:36:71:b9:53:c4:5f:bf:3f:76:9e:89:19:80:2e: 57:41:59:57:ed:00:34:5e:dd:c2:cf:37:18:eb:e2:4b:f4:08: e8:78:87:d6:ff:73:f5:1d:9a:39:23:37:a2:77:ec:9d:ef:9d: b0:fa:c8:8b:3a:8a:1c:68:8b:64:8f:a1:ad:d0:dd:4b:a1:83: ec:83:1a:5d:3e:49:a9:24:d8:71:b5:4b:ea:f9:ec:fd:b3:c3: 44:1c:61:3e:d1:9b:0c:c9:64:aa:f0:f9:87:1f:77:34:d7:fe: ff:ae:66:18:68:98:d4:cc:7b:c8:b4:05:b8:17:69:3a:6e:d3: b5:90:03:b9:99:96:5c:6e:72:ea:71:c0:25:1f:ff:4d:ad:10: 1b:9f:e6:c9:d3:63:17:3e:d0:ca:c1:63:ca:b5:bf:e6:a5:35: 88:8f:72:f6 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUbvM+MOFvqQ5BRbiCh/mEFTH2WpUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc0NloX DTI3MDUwMTA5MjI0NlowMzExMC8GA1UEAxMoQ0U1OEMyQjczMTY0MUU2RTY0MTYz RUVGNzgzMEZFMDgzREJCOTc2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUwQNam66GBygBmMRwfjID+2vIvQgaiFoZtBeSRvGF7K2+AguMhfGifYj8E Ly0petZ8GnuMoopFFCHczZr6jJbN/r1dL/7V2oGmJS1z6cUM9vYNHmvqplhHZ5Bm fImPaAwCrcZVkAEeXnJraKTt1BppAPdRFC1bKaA+P8VSbszS2wg4iTZkneKvMBbz o1+VDfq2Dk/rDM9gKkqmbFpDdKj4H2ek4ZyUYePG9inW1nFK8YbacAGnTI8+z3XQ oAjW2AjqKeudiqHjIjGr0Krrya3aI9/3hHKLQdU2u9ERR3wQPZgfeSki5TfXnAnf EaDDnqoR4KtsZsLECNzSMzSmo0MCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTOWMK3 MWQebmQWPu94MP4IPbuXajAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM4NTU0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAivxXMA0GCSqGSIb3DQEBCwUAA4IBAQARbvFT/vDASH8j3nhujXpMjpJW n6On/IdoIDycovxOjb8v4AGoxoII/4KU/0cVxiPzD5dgY2UFTWp2sYKq4pw2ku8M M+tFlIRqmeHP0EirC6A4yBEuF6brScpNBZGrNnG5U8Rfvz92nokZgC5XQVlX7QA0 Xt3CzzcY6+JL9AjoeIfW/3P1HZo5Izeid+yd752w+siLOoocaItkj6Gt0N1LoYPs gxpdPkmpJNhxtUvq+ez9s8NEHGE+0ZsMyWSq8PmHH3c01/7/rmYYaJjUzHvItAW4 F2k6btO1kAO5mZZcbnLqccAlH/9NrRAbn+bJ02MXPtDKwWPKtb/mpTWIj3L2 -----END CERTIFICATE-----Generated at Sat May 2 21:04:35 2026 by rpki-client