$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138115.roa File: AS138115.roa (raw, json) Hash identifier: MDiyZsZMeS6W3iIrmZ+GckwdrL3gNK7qaJ/37wNg7qE= Subject key identifier: 26:BD:BD:6B:7B:34:CC:66:4A:FD:DB:36:88:09:82:1C:C2:7C:C6:90 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 27E311B7A44C39ABECFD1C2F4389174C65907863 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138115.roa Signing time: Sat 02 May 2026 09:25:25 +0000 ROA not before: Sat 02 May 2026 09:20:25 +0000 ROA not after: Sat 01 May 2027 09:25:25 +0000 asID: 138115 IP address blocks: 36.50.77.0/24 maxlen: 24 163.61.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e3:11:b7:a4:4c:39:ab:ec:fd:1c:2f:43:89:17:4c:65:90:78:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:25 2026 GMT Not After : May 1 09:25:25 2027 GMT Subject: CN=26BDBD6B7B34CC664AFDDB368809821CC27CC690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:77:0d:60:62:e0:56:92:e1:44:0e:5e:57: 98:81:5f:71:6b:17:5e:98:81:78:5e:22:0f:39:40: 4b:26:74:dd:80:71:0d:06:83:ef:c2:81:1e:2b:e8: 37:1b:ed:cf:aa:a5:17:46:68:b3:69:08:29:35:df: d2:03:2a:94:2e:8d:39:1a:b4:78:8d:c3:ea:1d:56: ce:b7:8a:71:5d:ed:23:e2:07:58:b7:cd:e1:02:f6: 68:a4:57:a0:06:6e:05:07:a0:88:19:77:a4:fc:ff: 16:01:0e:9f:d6:be:99:06:ea:c1:72:4e:ed:ce:95: 5e:59:da:3d:fe:08:01:0c:8e:30:c0:c4:59:d5:04: dc:5e:72:c2:74:c4:89:35:c2:b1:93:fd:15:82:c0: 45:da:93:f3:85:4f:a8:5b:53:68:c0:23:f8:cd:d4: 0b:95:bc:34:fc:7d:e0:b8:51:fd:85:5c:81:63:f0: e3:64:a4:f9:a1:b4:0a:77:7a:bf:a3:47:fd:03:19: 0b:18:5d:50:59:59:59:ba:e8:37:1e:d3:60:68:d8: ef:12:81:e5:aa:03:4f:77:e1:54:2a:02:5b:c0:19: 48:17:70:62:7f:93:34:82:dc:47:5f:c0:06:02:dc: 93:48:b5:5a:55:88:de:44:e3:fc:3d:7c:b5:c1:e5: a0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BD:BD:6B:7B:34:CC:66:4A:FD:DB:36:88:09:82:1C:C2:7C:C6:90 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138115.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.77.0/24 163.61.58.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:d8:fb:db:54:36:f3:9e:3d:77:c6:ca:14:df:c5:11:50:aa: df:28:c3:f0:47:a7:e6:52:b9:1b:10:cd:6b:48:28:bb:c9:de: 04:be:44:d7:1e:ec:50:04:db:7c:69:0d:ee:44:ad:09:a3:52: 85:3f:46:a6:81:1f:d4:09:db:a6:51:20:ff:c4:d6:89:32:69: 8d:03:88:a3:ab:b9:45:04:6d:5e:65:f4:a2:d6:5e:d4:89:80: 79:a0:03:d9:40:d2:d7:1c:09:7f:13:85:d0:bc:af:55:79:f3: 07:ae:29:87:a9:ab:9d:eb:28:5e:bb:f8:3d:22:7b:48:65:cb: 76:93:a4:4b:45:7e:ad:79:7a:99:59:5e:af:1f:54:49:41:88: 24:c8:6f:63:f6:be:23:97:fc:42:d1:c5:24:9a:09:97:0b:ce: e7:57:18:8b:a1:ac:d0:a0:17:e1:02:bc:ea:f0:31:63:17:9d: ec:1c:df:f5:6c:29:1b:30:91:a5:6b:8c:af:f3:1f:5e:11:cc: 72:42:4c:10:2c:e4:fc:a0:ae:db:54:2a:b9:2e:3a:21:de:24: 97:0b:65:e6:18:d0:e6:22:93:c3:0d:99:a4:21:2c:33:a5:7f: cf:6a:99:3c:c3:e9:36:b8:b0:7d:54:c2:47:cc:4c:37:99:7d: 99:82:ee:b9 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUJ+MRt6RMOavs/RwvQ4kXTGWQeGMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjAyNVoX DTI3MDUwMTA5MjUyNVowMzExMC8GA1UEAxMoMjZCREJENkI3QjM0Q0M2NjRBRkRE QjM2ODgwOTgyMUNDMjdDQzY5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFHdw1gYuBWkuFEDl5XmIFfcWsXXpiBeF4iDzlASyZ03YBxDQaD78KBHivo Nxvtz6qlF0Zos2kIKTXf0gMqlC6NORq0eI3D6h1WzreKcV3tI+IHWLfN4QL2aKRX oAZuBQegiBl3pPz/FgEOn9a+mQbqwXJO7c6VXlnaPf4IAQyOMMDEWdUE3F5ywnTE iTXCsZP9FYLARdqT84VPqFtTaMAj+M3UC5W8NPx94LhR/YVcgWPw42Sk+aG0Cnd6 v6NH/QMZCxhdUFlZWbroNx7TYGjY7xKB5aoDT3fhVCoCW8AZSBdwYn+TNILcR1/A BgLck0i1WlWI3kTj/D18tcHloP8CAwEAAaOCAdIwggHOMB0GA1UdDgQWBBQmvb1r ezTMZkr92zaICYIcwnzGkDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4MTE1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAJDJNAwQAoz06MA0GCSqGSIb3DQEBCwUAA4IBAQCc2PvbVDbznj13xsoU 38URUKrfKMPwR6fmUrkbEM1rSCi7yd4EvkTXHuxQBNt8aQ3uRK0Jo1KFP0amgR/U CdumUSD/xNaJMmmNA4ijq7lFBG1eZfSi1l7UiYB5oAPZQNLXHAl/E4XQvK9VefMH rimHqaud6yheu/g9IntIZct2k6RLRX6teXqZWV6vH1RJQYgkyG9j9r4jl/xC0cUk mgmXC87nVxiLoazQoBfhArzq8DFjF53sHN/1bCkbMJGla4yv8x9eEcxyQkwQLOT8 oK7bVCq5Ljoh3iSXC2XmGNDmIpPDDZmkISwzpX/Papk8w+k2uLB9VMJHzEw3mX2Z gu65 -----END CERTIFICATE-----Generated at Sun May 3 00:40:39 2026 by rpki-client