$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS138577.roa File: AS138577.roa (raw, json) Hash identifier: SpW8qtD/V99d9WrCokExYbCrq9i0eXWWP+j+SOElHKo= Subject key identifier: 1F:6E:17:42:37:28:4B:BC:0C:20:E6:9C:C1:5A:55:80:71:1F:CA:98 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 030F92C12121BAD6E97BD62E63A720CF0143999A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138577.roa Signing time: Tue 29 Sep 2026 02:58:15 +0000 ROA not before: Tue 29 Sep 2026 02:53:15 +0000 ROA not after: Tue 28 Sep 2027 02:58:15 +0000 asID: 138577 IP address blocks: 160.236.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:0f:92:c1:21:21:ba:d6:e9:7b:d6:2e:63:a7:20:cf:01:43:99:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 29 02:53:15 2026 GMT Not After : Sep 28 02:58:15 2027 GMT Subject: CN=1F6E174237284BBC0C20E69CC15A5580711FCA98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:3a:bf:47:cb:51:59:4e:19:f9:51:8a:e1: 32:1a:57:49:92:70:44:8a:22:68:8b:20:cc:ee:de: 54:9e:e2:f8:eb:71:d2:a5:3e:8a:f2:35:3c:c6:58: 28:b3:28:e3:07:76:11:58:59:2d:c1:0e:93:16:87: 00:ec:da:d1:7e:ac:4a:2c:a5:3c:be:db:dd:42:4a: 9e:22:a4:e3:32:a8:30:67:31:79:99:b3:67:ca:af: be:88:35:47:85:ce:45:7e:35:ef:cc:b4:b8:1d:f2: f0:68:e0:bc:e1:37:f0:34:60:20:bd:15:6f:90:84: d8:3c:10:eb:f0:35:23:7d:08:5a:fb:19:08:1e:79: bc:3d:f1:32:ad:5c:58:f3:26:12:14:4e:02:14:12: 0f:5c:f1:93:9f:89:20:b8:bf:28:83:97:8e:c8:e0: 7a:86:e4:ab:e4:b8:28:bb:52:44:60:9c:ee:7d:02: 26:14:16:c8:7a:5f:f9:81:eb:58:71:34:a8:30:4a: 9d:30:93:64:b9:66:f0:ea:31:9b:30:a9:8b:e3:d0: 6c:34:43:42:5a:0a:23:e3:b0:9a:de:7e:ce:cb:98: 9e:ef:ba:d7:33:b5:8a:97:1a:17:8e:75:99:77:0d: ad:e6:14:f4:8b:49:91:26:1e:2f:b7:7f:e4:bc:83: 96:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6E:17:42:37:28:4B:BC:0C:20:E6:9C:C1:5A:55:80:71:1F:CA:98 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138577.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.142.0/24 Signature Algorithm: sha256WithRSAEncryption a0:81:b5:d3:ca:0f:10:5f:99:6f:ac:d6:cf:b4:46:43:f1:7f: d5:00:98:3b:7e:45:cc:19:58:ba:3c:dc:01:04:a1:bb:40:38: e9:66:40:8a:8a:2e:0f:ef:d3:f2:c1:85:4f:81:3e:f8:7b:12: c3:5d:f3:df:3b:fe:e8:16:a2:53:c8:8a:48:96:2f:d4:ab:4c: ed:0c:37:87:fc:f4:64:ad:e1:6f:9f:86:d2:d7:32:31:34:a0: 7a:ad:fb:82:56:46:bc:1a:58:3b:4f:f2:b9:ac:a5:40:06:f7: a8:8d:bc:e8:35:bb:55:88:f7:d4:56:ba:cf:8f:ca:eb:75:5d: c1:3f:cc:40:53:76:27:48:2f:86:4f:16:b2:35:96:00:4c:e0: c0:e2:c9:e0:39:5d:80:2a:d3:8b:e1:0c:9e:ba:c2:e4:f9:77: fb:e2:76:44:77:a5:6b:3c:57:fc:4d:c2:7c:f0:67:76:ff:a6: e2:2e:e8:d3:bf:8c:54:84:bc:83:b6:0c:fd:e9:da:ab:9b:5a: 79:20:d7:5b:1c:fe:51:6c:2a:9c:dc:4b:15:91:3f:f9:23:62: f7:b7:6e:40:49:de:0b:e2:cb:89:ed:6e:0a:93:98:dc:54:cb: 4d:09:2c:73:26:27:5b:79:a4:a1:5b:84:e0:c5:4d:4b:7b:ea: 9b:f7:1c:18 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUAw+SwSEhutbpe9YuY6cgzwFDmZowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkyOTAyNTMxNVoX DTI3MDkyODAyNTgxNVowMzExMC8GA1UEAxMoMUY2RTE3NDIzNzI4NEJCQzBDMjBF NjlDQzE1QTU1ODA3MTFGQ0E5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWBOr9Hy1FZThn5UYrhMhpXSZJwRIoiaIsgzO7eVJ7i+Otx0qU+ivI1PMZY KLMo4wd2EVhZLcEOkxaHAOza0X6sSiylPL7b3UJKniKk4zKoMGcxeZmzZ8qvvog1 R4XORX4178y0uB3y8GjgvOE38DRgIL0Vb5CE2DwQ6/A1I30IWvsZCB55vD3xMq1c WPMmEhROAhQSD1zxk5+JILi/KIOXjsjgeobkq+S4KLtSRGCc7n0CJhQWyHpf+YHr WHE0qDBKnTCTZLlm8OoxmzCpi+PQbDRDQloKI+Owmt5+zsuYnu+61zO1ipcaF451 mXcNreYU9ItJkSYeL7d/5LyDlhkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQfbhdC NyhLvAwg5pzBWlWAcR/KmDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM4NTc3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOyOMA0GCSqGSIb3DQEBCwUAA4IBAQCggbXTyg8QX5lvrNbPtEZD8X/V AJg7fkXMGVi6PNwBBKG7QDjpZkCKii4P79PywYVPgT74exLDXfPfO/7oFqJTyIpI li/Uq0ztDDeH/PRkreFvn4bS1zIxNKB6rfuCVka8Glg7T/K5rKVABveojbzoNbtV iPfUVrrPj8rrdV3BP8xAU3YnSC+GTxayNZYATODA4sngOV2AKtOL4QyeusLk+Xf7 4nZEd6VrPFf8TcJ88Gd2/6biLujTv4xUhLyDtgz96dqrm1p5INdbHP5RbCqc3EsV kT/5I2L3t25ASd4L4suJ7W4Kk5jcVMtNCSxzJidbeaShW4TgxU1Le+qb9xwY -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:51 2026 by rpki-client