$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138122.roa File: AS138122.roa (raw, json) Hash identifier: JYk+uuvEEwK06yPO3rlAwKBbmsyfZmJFpo+kMXibTJw= Subject key identifier: 1A:30:E9:B0:96:87:3D:7B:F7:87:10:39:4E:99:EF:73:6B:05:28:28 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 74A6933F9C9265926913DA5601F918690244F85C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138122.roa Signing time: Sat 02 May 2026 08:35:09 +0000 ROA not before: Sat 02 May 2026 08:30:09 +0000 ROA not after: Sat 01 May 2027 08:35:09 +0000 asID: 138122 IP address blocks: 103.127.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a6:93:3f:9c:92:65:92:69:13:da:56:01:f9:18:69:02:44:f8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:09 2026 GMT Not After : May 1 08:35:09 2027 GMT Subject: CN=1A30E9B096873D7BF78710394E99EF736B052828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cf:80:b5:91:76:b3:53:67:12:c5:73:fb:c2: fd:78:3f:30:66:72:72:87:1c:93:60:e9:a4:19:da: 93:e4:34:01:1a:a3:03:3f:00:0e:4b:2b:ee:23:72: bb:0d:20:d2:d5:44:1d:50:d9:b1:ee:a1:49:ce:30: ad:e4:be:a7:8c:8b:19:22:b4:1c:d0:1f:19:e9:48: 40:3c:1f:a5:a1:a2:b6:34:76:c6:a3:f6:d8:ea:c5: dd:e7:d2:47:1f:bc:65:5d:97:de:d8:f4:bf:bf:47: 70:48:aa:29:e1:48:b9:b5:d7:47:63:4a:48:b7:16: 89:0f:36:0a:27:17:df:5a:51:7f:f6:d4:83:42:6d: 2a:cc:cc:0c:d6:82:6a:4d:77:97:10:d8:78:27:0d: 9d:84:d4:dc:4e:2b:a6:6d:a1:6f:40:89:d5:11:1e: d5:c6:f9:0f:3f:4e:0d:84:e8:c4:97:f5:09:2a:2c: c3:3c:98:82:31:56:7a:69:8c:10:ff:12:77:2a:0e: 2d:6c:4c:95:49:06:26:fb:d4:87:b9:1d:7e:ec:d1: f8:c5:ca:a9:9c:da:a0:ac:fc:ef:33:98:0b:93:d0: 0c:8f:26:ed:86:1c:fa:4b:da:09:6b:f9:fb:7e:15: 3a:09:6d:30:d0:91:7a:18:61:c0:0e:8b:10:f9:a5: 2d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:30:E9:B0:96:87:3D:7B:F7:87:10:39:4E:99:EF:73:6B:05:28:28 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138122.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.127.171.0/24 Signature Algorithm: sha256WithRSAEncryption 35:be:40:98:d6:8e:e3:ae:9c:df:16:04:80:cb:19:1a:0b:a9: 6f:14:2a:c5:4a:a9:73:42:a4:b0:5c:aa:ab:9d:af:fd:ea:b8: 4c:ad:e2:78:85:66:01:b4:3c:e9:80:2e:ab:da:ed:48:2a:06: 48:c5:74:ae:ee:d0:d4:4c:5d:07:81:f8:84:3f:ea:ed:98:37: 1e:2f:58:49:67:05:cd:cf:55:ea:8b:79:49:e3:29:55:b8:45: 49:5b:d1:1d:a2:1e:19:85:e9:8a:18:e0:df:ed:92:c8:f4:86: 9c:34:25:bd:c0:df:73:6e:7a:93:1e:5f:08:df:a5:7f:bb:85: 39:4b:08:be:03:84:2e:03:fd:9d:3a:ce:ee:c4:94:8a:74:86: 07:56:17:f0:16:a8:b7:d6:0a:4f:d2:b6:59:3d:9a:65:8d:92: 44:91:66:8b:06:a0:fc:21:b3:a4:d4:e2:fd:1e:75:90:31:0a: 10:40:4a:84:6a:fb:de:dc:3c:53:b6:f4:19:f6:54:2a:11:a3: 53:da:d0:25:4b:5e:b7:17:0a:35:b2:0c:ad:89:08:8c:48:8d: bd:83:6a:8b:0a:24:30:6e:83:91:67:ce:c8:65:d7:e0:e3:fd: d3:08:28:1f:62:c3:87:af:94:19:12:4a:63:01:d5:c7:45:d0: 81:88:84:1e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUdKaTP5ySZZJpE9pWAfkYaQJE+FwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzAwOVoX DTI3MDUwMTA4MzUwOVowMzExMC8GA1UEAxMoMUEzMEU5QjA5Njg3M0Q3QkY3ODcx MDM5NEU5OUVGNzM2QjA1MjgyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfPgLWRdrNTZxLFc/vC/Xg/MGZycocck2DppBnak+Q0ARqjAz8ADksr7iNy uw0g0tVEHVDZse6hSc4wreS+p4yLGSK0HNAfGelIQDwfpaGitjR2xqP22OrF3efS Rx+8ZV2X3tj0v79HcEiqKeFIubXXR2NKSLcWiQ82CicX31pRf/bUg0JtKszMDNaC ak13lxDYeCcNnYTU3E4rpm2hb0CJ1REe1cb5Dz9ODYToxJf1CSoswzyYgjFWemmM EP8SdyoOLWxMlUkGJvvUh7kdfuzR+MXKqZzaoKz87zOYC5PQDI8m7YYc+kvaCWv5 +34VOgltMNCRehhhwA6LEPmlLR8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQaMOmw loc9e/eHEDlOme9zawUoKDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4MTIyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ3+rMA0GCSqGSIb3DQEBCwUAA4IBAQA1vkCY1o7jrpzfFgSAyxkaC6lv FCrFSqlzQqSwXKqrna/96rhMreJ4hWYBtDzpgC6r2u1IKgZIxXSu7tDUTF0HgfiE P+rtmDceL1hJZwXNz1Xqi3lJ4ylVuEVJW9Edoh4ZhemKGODf7ZLI9IacNCW9wN9z bnqTHl8I36V/u4U5Swi+A4QuA/2dOs7uxJSKdIYHVhfwFqi31gpP0rZZPZpljZJE kWaLBqD8IbOk1OL9HnWQMQoQQEqEavve3DxTtvQZ9lQqEaNT2tAlS163Fwo1sgyt iQiMSI29g2qLCiQwboORZ87IZdfg4/3TCCgfYsOHr5QZEkpjAdXHRdCBiIQe -----END CERTIFICATE-----Generated at Sun May 3 00:42:11 2026 by rpki-client