$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138000.roa File: AS138000.roa (raw, json) Hash identifier: E/dxEAoFnoavYLemk6MeGzJQ+zafXEn8ZdJUzN1DsDo= Subject key identifier: D1:97:2C:27:D0:5A:F2:33:F6:05:23:FB:52:5D:2B:2A:6E:C9:D4:0D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 29D2082D83A18AA00D525BDCF178E85C32FD312E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138000.roa Signing time: Mon 24 Aug 2026 02:43:27 +0000 ROA not before: Mon 24 Aug 2026 02:38:27 +0000 ROA not after: Mon 23 Aug 2027 02:43:27 +0000 asID: 138000 IP address blocks: 2001:df6:7b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d2:08:2d:83:a1:8a:a0:0d:52:5b:dc:f1:78:e8:5c:32:fd:31:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 24 02:38:27 2026 GMT Not After : Aug 23 02:43:27 2027 GMT Subject: CN=D1972C27D05AF233F60523FB525D2B2A6EC9D40D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ad:9a:a4:0f:0f:a6:b9:8e:01:24:1f:7c:98: fe:8a:80:0f:56:1b:42:c7:9b:9a:d1:89:fd:09:9f: 36:50:56:ec:41:4f:02:80:3f:64:ab:b5:a9:4a:87: ff:10:45:4c:31:87:70:1c:23:1b:67:0b:a5:4d:c7: 9c:d3:7c:c6:e5:fe:5c:53:a7:36:17:6c:b7:bd:74: f2:dc:ec:e0:cd:40:8b:9f:5a:fd:b8:a9:a5:4b:fb: 4b:84:81:83:fb:5b:c4:99:3b:45:38:dc:6e:65:11: 32:7b:92:60:7a:02:08:02:ee:0b:20:7d:80:62:e3: 8f:61:0c:82:bf:d3:c7:c9:c6:a8:ab:2b:8b:27:5b: 39:22:56:91:0a:8e:c6:eb:4c:bb:75:42:a8:da:2f: a3:1c:8e:6a:32:5e:f1:dc:06:be:a4:01:b4:70:95: 96:13:ce:75:0c:aa:af:9f:4d:43:09:2c:3c:e4:6c: 89:cb:ad:f1:95:92:6e:9a:45:96:48:f6:46:66:5c: b1:d4:e4:94:00:b7:0b:ca:48:c7:5d:eb:26:00:7e: 85:cc:58:7b:a4:a0:a5:ec:ca:65:06:44:30:e6:d6: 76:75:7b:46:16:60:90:ed:6a:85:9f:14:93:71:e2: 69:e8:27:c2:fb:d7:cf:1e:ba:88:94:74:cb:4e:a3: fd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:97:2C:27:D0:5A:F2:33:F6:05:23:FB:52:5D:2B:2A:6E:C9:D4:0D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138000.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:7b40::/48 Signature Algorithm: sha256WithRSAEncryption 58:be:86:26:87:f4:00:08:e7:d3:e2:7d:b0:e9:46:22:a3:67: dc:33:53:1c:15:d8:a3:ee:30:ad:b9:0e:28:48:f6:a0:d5:00: 5f:3b:16:17:65:a7:ed:cc:c7:d3:0c:18:a7:da:71:2e:32:d4: 2c:db:24:b9:0e:ca:9c:2c:5f:e6:37:74:7c:31:4d:ec:ac:3a: 53:b8:a1:ee:d0:b9:ee:11:cb:57:d6:50:09:63:86:e6:76:d2: 2d:c9:a6:14:38:fc:22:5c:0b:01:f0:78:40:fc:8f:25:43:44: 7d:98:52:fc:64:b3:66:4b:98:dd:35:f2:9c:11:f6:c6:1a:7a: d4:06:c8:e0:3b:e3:51:13:4f:f3:b0:86:0c:5e:04:0b:da:bb: 94:f2:a6:7a:8e:df:3a:32:40:66:2e:3f:f4:4d:27:a5:8b:4c: 81:26:8d:53:0d:f4:d1:cc:01:c4:64:db:11:f8:3d:55:b5:a7: 2e:62:81:91:57:80:0b:db:07:08:2f:fa:34:18:95:ae:07:1a: c7:d9:f0:8b:a7:53:5a:1d:e7:eb:95:b5:0d:45:52:bc:aa:b1: 6a:19:7e:08:5b:90:7a:95:f5:ef:32:37:db:4d:d5:be:83:bd: 7a:47:dd:fb:ed:d5:f0:3b:9d:b9:54:e8:68:9d:ae:b4:7f:3c: 5e:68:be:c1 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUKdIILYOhiqANUlvc8XjoXDL9MS4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgyNDAyMzgyN1oX DTI3MDgyMzAyNDMyN1owMzExMC8GA1UEAxMoRDE5NzJDMjdEMDVBRjIzM0Y2MDUy M0ZCNTI1RDJCMkE2RUM5RDQwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI2tmqQPD6a5jgEkH3yY/oqAD1YbQsebmtGJ/QmfNlBW7EFPAoA/ZKu1qUqH /xBFTDGHcBwjG2cLpU3HnNN8xuX+XFOnNhdst7108tzs4M1Ai59a/bippUv7S4SB g/tbxJk7RTjcbmURMnuSYHoCCALuCyB9gGLjj2EMgr/Tx8nGqKsriydbOSJWkQqO xutMu3VCqNovoxyOajJe8dwGvqQBtHCVlhPOdQyqr59NQwksPORsicut8ZWSbppF lkj2RmZcsdTklAC3C8pIx13rJgB+hcxYe6SgpezKZQZEMObWdnV7RhZgkO1qhZ8U k3HiaegnwvvXzx66iJR0y06j/TMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTRlywn 0FryM/YFI/tSXSsqbsnUDTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4MDAwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9ntAMA0GCSqGSIb3DQEBCwUAA4IBAQBYvoYmh/QACOfT4n2w6UYi o2fcM1McFdij7jCtuQ4oSPag1QBfOxYXZaftzMfTDBin2nEuMtQs2yS5DsqcLF/m N3R8MU3srDpTuKHu0LnuEctX1lAJY4bmdtItyaYUOPwiXAsB8HhA/I8lQ0R9mFL8 ZLNmS5jdNfKcEfbGGnrUBsjgO+NRE0/zsIYMXgQL2ruU8qZ6jt86MkBmLj/0TSel i0yBJo1TDfTRzAHEZNsR+D1VtacuYoGRV4AL2wcIL/o0GJWuBxrH2fCLp1NaHefr lbUNRVK8qrFqGX4IW5B6lfXvMjfbTdW+g716R9377dXwO525VOhona60fzxeaL7B -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:00 2026 by rpki-client