
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138050.roa
File: AS138050.roa (raw, json)
Hash identifier: 5Me2syf+16hTMM9lYHmbDEj7CHRBdPhxknjbbR7q54U=
Subject key identifier: 02:4E:1C:97:0E:F9:F4:62:D8:65:04:74:47:6B:BB:6F:39:5D:78:42
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 452263EEC2F210AB20D1FC600DF7B78988A60875
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138050.roa
Signing time: Sat 02 May 2026 21:08:01 +0000
ROA not before: Sat 02 May 2026 21:03:01 +0000
ROA not after: Sat 01 May 2027 21:08:01 +0000
asID: 138050
IP address blocks: 103.147.222.0/24 maxlen: 24
202.58.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 03:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:22:63:ee:c2:f2:10:ab:20:d1:fc:60:0d:f7:b7:89:88:a6:08:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:03:01 2026 GMT
Not After : May 1 21:08:01 2027 GMT
Subject: CN=024E1C970EF9F462D8650474476BBB6F395D7842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:4b:b1:fb:28:2f:46:c9:b3:c4:ca:2a:36:
5f:83:9d:01:40:2a:02:e9:34:f7:c2:ea:90:f4:6b:
4f:5b:ae:f3:85:b2:a3:5e:68:f8:08:0f:b3:1c:f0:
8b:fd:fe:95:c2:3f:c5:1e:40:e2:6a:2f:de:cd:69:
ff:e7:ca:e8:34:81:ce:98:4f:2c:8c:2f:d9:ff:69:
d5:6d:ee:a4:de:2d:10:6d:39:63:70:17:ef:cb:ae:
7c:8d:c8:87:c4:04:5f:32:6a:e1:3f:94:b1:21:d8:
c0:11:b6:37:d0:25:06:90:4d:2c:9f:3d:ef:82:22:
2c:b2:a6:52:03:30:f6:d6:54:50:e4:99:e2:69:cd:
68:96:c6:91:a5:fe:67:2d:6a:45:90:26:16:a8:09:
d5:a8:6f:08:db:1a:64:5a:9d:88:d1:b2:c9:aa:2a:
ae:c0:e3:ad:12:06:77:30:9b:f4:9e:0c:a6:bc:6f:
a5:5b:bd:40:85:90:98:61:dd:0e:5b:94:e1:35:60:
6c:a3:8b:e7:4e:29:3d:89:19:cc:72:93:b7:f5:e7:
eb:a3:23:8e:f3:12:31:c9:87:a9:1f:2b:8f:b8:15:
69:d7:45:d2:35:f6:c9:25:7e:f3:4c:34:b7:ca:9a:
c7:29:94:f1:48:df:9c:9e:dd:a9:a9:c5:e7:64:12:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4E:1C:97:0E:F9:F4:62:D8:65:04:74:47:6B:BB:6F:39:5D:78:42
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138050.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.222.0/24
202.58.242.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e8:24:c4:e5:3d:63:31:88:fc:e4:99:4f:ed:81:6b:0f:ea:
e5:38:31:55:b3:69:ba:94:c3:14:58:c2:7e:df:b0:3c:28:e6:
d3:f5:0c:58:eb:29:27:6d:b8:08:76:78:fa:1e:fc:0a:76:26:
8f:ab:5f:75:29:a1:b7:ce:14:13:1a:b3:38:67:49:d7:8d:d8:
50:37:58:dd:43:b1:ce:00:79:25:f0:94:14:59:f6:5d:66:05:
19:9e:c3:06:86:c3:34:1c:82:c0:b2:94:b5:f9:21:c2:3b:32:
bc:0b:02:35:e8:52:fe:01:48:91:2f:fb:9e:db:9b:3a:30:0e:
80:dd:e2:cb:0a:bb:bc:01:80:80:53:ad:ce:98:32:c4:c9:a2:
cf:63:b7:35:75:93:7b:b1:34:48:4d:06:0c:8f:a0:75:0e:b1:
19:c9:e0:10:d4:4a:33:9f:31:83:48:78:9b:b6:04:e9:5c:9a:
96:fc:b1:5e:ad:06:5a:5e:ba:88:8f:b4:77:ac:5d:6e:de:1f:
f0:8a:7a:1e:9b:18:b5:b6:44:7a:12:fe:42:9d:c0:5c:65:72:
f2:7a:2c:e6:ca:20:7c:b8:05:66:d4:db:a3:93:e9:a8:98:6c:
a9:95:87:94:4d:65:e3:c0:71:d0:67:3e:fa:f1:cb:7c:3d:b6:
c1:c4:6b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 01:44:02 2026 by rpki-client