$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138104.roa File: AS138104.roa (raw, json) Hash identifier: GMYQyeBLsugAgQEEzVp/VFMhGBl/9eARe6CCv0kwO8A= Subject key identifier: 92:54:34:D7:02:6D:0D:01:6D:6E:2B:B8:F8:CD:96:10:F6:02:7C:F2 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 22F9681C6B02D39382752724B371CF13E276F835 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138104.roa Signing time: Sat 02 May 2026 21:01:55 +0000 ROA not before: Sat 02 May 2026 20:56:55 +0000 ROA not after: Sat 01 May 2027 21:01:55 +0000 asID: 138104 IP address blocks: 103.125.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f9:68:1c:6b:02:d3:93:82:75:27:24:b3:71:cf:13:e2:76:f8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 20:56:55 2026 GMT Not After : May 1 21:01:55 2027 GMT Subject: CN=925434D7026D0D016D6E2BB8F8CD9610F6027CF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:ac:fc:89:00:01:84:fe:ec:08:01:5e:aa: c3:8a:b3:6f:a0:02:49:75:0c:f5:7b:7a:70:bd:61: f7:a0:35:70:90:e2:e8:77:40:1a:3d:5e:15:da:ec: a0:f6:8c:d7:e7:0e:1d:0a:92:d0:eb:70:32:41:43: 07:bd:c1:f5:88:ad:ce:94:13:3c:ad:f9:03:db:0d: 81:37:29:f5:5a:a3:9f:e1:36:e9:83:24:50:2e:c3: 5f:34:e9:95:47:dd:f8:b4:95:fc:ee:7c:92:00:df: e3:73:f3:03:4d:d6:a9:cc:52:bd:41:ec:84:aa:5f: a8:80:7e:64:fc:13:56:54:7b:84:98:a1:01:d2:b6: 59:fc:33:74:93:be:78:3d:d4:f9:4a:ad:f3:ea:93: 57:3e:b4:b1:70:fc:2c:04:dd:48:ec:4f:79:62:bc: 9a:4c:20:3c:e0:48:85:e8:22:82:ae:71:52:f8:94: 29:dd:77:5d:92:90:91:b3:35:2c:c6:ed:e0:28:53: 73:d3:9f:0c:e9:85:71:45:00:65:e1:98:15:3a:6e: 8c:4f:c7:8a:1c:28:b8:e4:b2:25:71:41:e4:9a:8c: f2:c6:2b:1c:73:d7:f0:c6:12:87:a1:0f:ab:5a:5d: f6:dc:80:2e:ca:3a:a8:3d:41:e8:b7:b0:2a:91:31: 72:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:54:34:D7:02:6D:0D:01:6D:6E:2B:B8:F8:CD:96:10:F6:02:7C:F2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138104.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.223.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:66:56:9a:90:28:e0:c1:dd:dc:87:4f:38:be:80:1e:d6:c1: f7:61:c5:a8:80:6e:ae:26:13:40:36:33:a6:f4:f8:65:67:93: 86:87:e1:a0:ba:6d:86:38:82:47:16:2b:c0:ce:a8:b4:d5:77: 9d:ce:6e:4c:ac:ee:86:27:5f:48:12:b7:d8:5f:11:fa:fa:43: e4:0c:a6:fc:1b:be:cc:2d:6c:7d:b3:89:90:38:0d:4c:69:9f: 5d:f4:ce:9d:4e:11:65:04:c7:58:1c:ad:e6:af:47:5c:6b:80: 84:e5:fc:81:e0:d2:f5:76:83:5c:2b:e7:52:e8:67:72:f3:96: 5d:e3:e1:cf:a9:68:b7:f0:f3:78:f5:a8:95:9d:8e:3f:04:02: bb:71:c8:78:7e:b6:76:f7:4c:c4:a1:03:42:c5:8d:53:84:19: 81:97:fa:0b:ab:ba:5a:b3:68:b6:29:07:45:94:01:0b:94:24: 87:b5:2b:e3:da:05:f5:3c:b7:d1:87:f1:f4:76:f6:42:74:88: 21:87:61:60:0a:96:79:96:8f:d7:9a:59:4e:85:e6:db:4b:df: 09:e8:22:75:ac:6d:90:0e:0b:93:db:f6:eb:96:4f:3f:98:37: 51:d6:84:dd:9d:ed:35:b4:39:09:d0:77:c5:b5:91:8c:87:53: 2b:7c:47:93 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUIvloHGsC05OCdScks3HPE+J2+DUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIwNTY1NVoX DTI3MDUwMTIxMDE1NVowMzExMC8GA1UEAxMoOTI1NDM0RDcwMjZEMEQwMTZENkUy QkI4RjhDRDk2MTBGNjAyN0NGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+JrPyJAAGE/uwIAV6qw4qzb6ACSXUM9Xt6cL1h96A1cJDi6HdAGj1eFdrs oPaM1+cOHQqS0OtwMkFDB73B9YitzpQTPK35A9sNgTcp9Vqjn+E26YMkUC7DXzTp lUfd+LSV/O58kgDf43PzA03WqcxSvUHshKpfqIB+ZPwTVlR7hJihAdK2WfwzdJO+ eD3U+Uqt8+qTVz60sXD8LATdSOxPeWK8mkwgPOBIhegigq5xUviUKd13XZKQkbM1 LMbt4ChTc9OfDOmFcUUAZeGYFTpujE/HihwouOSyJXFB5JqM8sYrHHPX8MYSh6EP q1pd9tyALso6qD1B6LewKpExclcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSSVDTX Am0NAW1uK7j4zZYQ9gJ88jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4MTA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ33fMA0GCSqGSIb3DQEBCwUAA4IBAQBPZlaakCjgwd3ch084voAe1sH3 YcWogG6uJhNANjOm9PhlZ5OGh+Ggum2GOIJHFivAzqi01Xedzm5MrO6GJ19IErfY XxH6+kPkDKb8G77MLWx9s4mQOA1MaZ9d9M6dThFlBMdYHK3mr0dca4CE5fyB4NL1 doNcK+dS6Gdy85Zd4+HPqWi38PN49aiVnY4/BAK7cch4frZ290zEoQNCxY1ThBmB l/oLq7pas2i2KQdFlAELlCSHtSvj2gX1PLfRh/H0dvZCdIghh2FgCpZ5lo/XmllO hebbS98J6CJ1rG2QDguT2/brlk8/mDdR1oTdne01tDkJ0HfFtZGMh1MrfEeT -----END CERTIFICATE-----Generated at Sun May 3 00:42:19 2026 by rpki-client