$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS138829.roa File: AS138829.roa (raw, json) Hash identifier: umzPVSaz4SQxEzsoK0qSTx/uvdLUZ2QN5RnWxLCg9Mc= Subject key identifier: 29:F0:DF:87:83:3C:1F:05:03:0A:B7:6E:51:EA:0E:22:17:96:EE:AC Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 18C1B3D5CE37C1AD75AFDAFDC162C349A49E8D67 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138829.roa Signing time: Fri 07 Aug 2026 03:23:26 +0000 ROA not before: Fri 07 Aug 2026 03:18:26 +0000 ROA not after: Fri 06 Aug 2027 03:23:26 +0000 asID: 138829 IP address blocks: 157.66.7.0/24 maxlen: 24 162.4.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c1:b3:d5:ce:37:c1:ad:75:af:da:fd:c1:62:c3:49:a4:9e:8d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 7 03:18:26 2026 GMT Not After : Aug 6 03:23:26 2027 GMT Subject: CN=29F0DF87833C1F05030AB76E51EA0E221796EEAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:6b:65:b8:d0:06:23:23:2f:bf:bc:bf:e5: 30:e6:55:b5:07:52:57:05:ee:29:6b:af:d6:8e:e1: 8f:81:be:53:89:c1:a0:90:39:84:d1:cb:58:6f:23: a1:52:f6:b2:49:30:a7:8b:72:5d:e2:56:b8:95:b2: 24:a5:76:97:aa:7a:3a:dd:5f:09:b4:21:c5:dc:ca: de:06:bb:cb:25:97:a2:60:c8:d1:95:95:bc:d5:75: ed:f9:ca:36:bc:6a:23:71:9e:76:1e:19:eb:e9:f2: 29:af:80:c7:1b:42:a8:93:77:1c:10:43:90:01:75: 83:69:76:27:b4:30:08:5b:94:63:8f:2e:59:03:33: 44:e6:fa:93:22:71:8f:b4:e0:e5:22:1f:9f:89:34: 4f:75:04:8a:e5:ea:db:b1:37:c5:cf:ab:57:e7:40: 83:5d:bd:2a:d9:cd:c8:ce:d4:d4:0f:03:28:a6:39: fe:d7:1a:b5:84:87:82:dc:47:44:b3:97:69:ef:c1: b5:17:bd:e4:2e:18:06:33:40:f6:39:09:37:db:e2: ab:99:17:93:48:92:9a:f0:46:6a:e7:12:30:cd:69: da:93:d9:ec:d4:a0:90:b4:b9:cc:39:87:7f:37:f6: 7e:48:91:56:c0:7e:f0:e4:8b:d5:b9:68:c4:b8:44: 45:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F0:DF:87:83:3C:1F:05:03:0A:B7:6E:51:EA:0E:22:17:96:EE:AC X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138829.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.7.0/24 162.4.71.0/24 Signature Algorithm: sha256WithRSAEncryption 62:48:5c:a3:67:40:4f:d9:22:0e:d1:10:28:17:09:40:5b:34: 6b:82:a5:70:8c:d0:3e:11:10:dc:93:3c:95:09:b8:38:d1:4e: cb:70:76:21:d9:5e:ef:86:1e:5e:f9:af:9a:dd:2a:33:a6:32: c7:c0:12:02:23:de:6e:dc:5a:c8:3d:c8:07:15:1a:8a:a2:44: 88:e9:48:c3:ac:c4:b1:e2:c3:aa:3c:56:37:9d:9b:77:fd:78: c2:ff:f2:e1:82:49:b2:3c:51:42:75:2c:8f:9f:1a:78:29:d9: 3e:d3:b5:5d:01:d2:40:2e:f3:08:ea:65:f6:12:98:79:8d:01: 5e:2b:dd:cf:83:c4:85:21:5d:bf:d8:b8:b0:1f:96:c9:0e:25: db:e9:c1:17:d7:22:09:c5:08:79:40:b5:83:5e:bf:d6:75:40: 1e:e2:af:ff:4d:64:25:d4:b8:d2:b6:bb:31:97:23:98:6b:c3: 78:9c:39:d8:f5:2f:98:35:97:69:6c:58:14:cf:2c:28:8a:55: 4e:ea:56:73:67:00:32:c4:75:f6:38:16:69:bf:81:19:12:6f: 33:d7:c6:40:ad:90:c4:c3:1e:36:88:77:a6:b6:bf:42:68:78: f4:f8:74:87:fe:c3:32:b7:e6:14:84:0b:ff:19:3f:30:d2:8e: 7f:34:c7:4a -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUGMGz1c43wa11r9r9wWLDSaSejWcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgwNzAzMTgyNloX DTI3MDgwNjAzMjMyNlowMzExMC8GA1UEAxMoMjlGMERGODc4MzNDMUYwNTAzMEFC NzZFNTFFQTBFMjIxNzk2RUVBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALB8a2W40AYjIy+/vL/lMOZVtQdSVwXuKWuv1o7hj4G+U4nBoJA5hNHLWG8j oVL2skkwp4tyXeJWuJWyJKV2l6p6Ot1fCbQhxdzK3ga7yyWXomDI0ZWVvNV17fnK NrxqI3Gedh4Z6+nyKa+AxxtCqJN3HBBDkAF1g2l2J7QwCFuUY48uWQMzROb6kyJx j7Tg5SIfn4k0T3UEiuXq27E3xc+rV+dAg129KtnNyM7U1A8DKKY5/tcatYSHgtxH RLOXae/BtRe95C4YBjNA9jkJN9viq5kXk0iSmvBGaucSMM1p2pPZ7NSgkLS5zDmH fzf2fkiRVsB+8OSL1bloxLhERQsCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBQp8N+H gzwfBQMKt25R6g4iF5burDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM4ODI5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAnUIHAwQAogRHMA0GCSqGSIb3DQEBCwUAA4IBAQBiSFyjZ0BP2SIO0RAo FwlAWzRrgqVwjNA+ERDckzyVCbg40U7LcHYh2V7vhh5e+a+a3SozpjLHwBICI95u 3FrIPcgHFRqKokSI6UjDrMSx4sOqPFY3nZt3/XjC//LhgkmyPFFCdSyPnxp4Kdk+ 07VdAdJALvMI6mX2Eph5jQFeK93Pg8SFIV2/2LiwH5bJDiXb6cEX1yIJxQh5QLWD Xr/WdUAe4q//TWQl1LjStrsxlyOYa8N4nDnY9S+YNZdpbFgUzywoilVO6lZzZwAy xHX2OBZpv4EZEm8z18ZArZDEwx42iHemtr9CaHj0+HSH/sMyt+YUhAv/GT8w0o5/ NMdK -----END CERTIFICATE-----Generated at Thu Sep 17 12:18:16 2026 by rpki-client