$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138123.roa File: AS138123.roa (raw, json) Hash identifier: yl1SbzKjfro9MSwzo3MfSj0k/aJgjgY0beOTg3VytnY= Subject key identifier: 75:27:95:67:91:74:31:F3:5F:57:A0:29:20:B1:B8:73:CB:C0:F9:A5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6B2EAF9A1BD7D3FA2DB7CB11D590526C390E6FB6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138123.roa Signing time: Sat 02 May 2026 21:03:43 +0000 ROA not before: Sat 02 May 2026 20:58:43 +0000 ROA not after: Sat 01 May 2027 21:03:43 +0000 asID: 138123 IP address blocks: 103.132.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:2e:af:9a:1b:d7:d3:fa:2d:b7:cb:11:d5:90:52:6c:39:0e:6f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 20:58:43 2026 GMT Not After : May 1 21:03:43 2027 GMT Subject: CN=75279567917431F35F57A02920B1B873CBC0F9A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:76:a3:36:9f:6c:d8:de:fa:ad:98:93:1f: df:95:c0:8e:ac:b1:59:67:0c:f1:90:d7:ab:6b:4f: 28:c8:8f:e1:9b:dd:02:5b:3e:00:0b:89:5c:0f:fa: 79:40:d6:3a:db:94:f5:72:d8:8b:c5:8c:94:e2:1b: 57:5e:2f:22:b2:e1:c6:68:be:60:2e:52:11:1a:0c: 64:e5:72:4b:64:36:22:18:a5:ae:12:6d:16:c7:12: 49:0b:99:42:7f:2b:03:59:1c:a1:48:9b:07:73:6c: dc:fe:5a:76:fe:94:f2:48:0c:5d:bb:a3:43:7a:10: 33:78:75:45:67:b6:31:d0:65:92:45:d0:29:77:2c: c1:8f:79:ae:26:f6:7e:be:eb:90:c3:ff:e3:0f:bb: 57:5e:6d:04:be:b0:92:c8:04:87:1b:72:5c:0d:90: be:26:6f:da:5f:6f:79:89:df:8f:81:2e:cc:e8:5f: 8f:44:55:f8:8a:c8:90:fe:f6:37:a9:c5:8a:ef:84: 09:76:98:b7:c3:94:38:68:51:43:91:e5:6b:16:eb: b9:3f:d8:d0:95:7a:f9:2b:85:4c:b5:d4:bd:d3:b2: e6:cf:aa:4f:37:b2:34:57:8b:3d:97:60:fb:44:14: d0:b5:ed:2d:6e:6a:b2:77:8b:b5:40:03:b9:7a:f5: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:27:95:67:91:74:31:F3:5F:57:A0:29:20:B1:B8:73:CB:C0:F9:A5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138123.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.132.52.0/22 Signature Algorithm: sha256WithRSAEncryption 10:e5:41:9f:4c:be:7d:4f:4b:cd:ee:d7:07:86:6d:23:00:d3: 81:00:35:19:26:f7:c5:6a:b4:ea:04:1a:77:b7:16:b4:42:1e: 02:a9:96:e9:12:29:3b:05:44:d8:77:8a:b1:09:a0:a5:6e:58: f8:cb:61:f4:3c:55:cf:53:14:08:b1:6a:a3:b2:bb:69:3f:e5: 76:6a:25:f5:38:a3:2c:e8:0f:ed:eb:88:66:93:39:77:e5:71: 27:16:36:95:59:ea:24:ac:a6:d2:05:1a:51:78:46:e0:e6:d1: 3f:e2:2f:17:8a:2c:c8:8e:01:ab:68:b8:f1:cc:9d:a1:04:08: e6:a5:7e:fe:3d:43:16:e2:bf:ad:1b:1e:e6:c6:a9:80:9e:d4: 41:93:de:17:79:99:0b:63:32:a6:98:f2:da:f0:29:17:44:c0: 50:4c:bc:fa:27:7e:e1:b2:de:28:c6:02:57:e2:c4:7b:07:f0: 3a:19:32:da:cc:15:55:85:4e:9e:e2:65:10:48:da:7c:73:c6: c8:8b:ab:d4:9e:55:aa:1b:8b:3e:61:13:f7:be:6e:f3:6d:10: 58:fe:8b:15:f1:81:41:86:0f:31:40:d1:05:d9:da:9c:63:c0: 10:f2:29:ca:99:2c:fe:12:cc:ea:4b:75:e8:1e:0c:08:05:c9: 62:59:91:e3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUay6vmhvX0/ott8sR1ZBSbDkOb7YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIwNTg0M1oX DTI3MDUwMTIxMDM0M1owMzExMC8GA1UEAxMoNzUyNzk1Njc5MTc0MzFGMzVGNTdB MDI5MjBCMUI4NzNDQkMwRjlBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqSdqM2n2zY3vqtmJMf35XAjqyxWWcM8ZDXq2tPKMiP4ZvdAls+AAuJXA/6 eUDWOtuU9XLYi8WMlOIbV14vIrLhxmi+YC5SERoMZOVyS2Q2IhilrhJtFscSSQuZ Qn8rA1kcoUibB3Ns3P5adv6U8kgMXbujQ3oQM3h1RWe2MdBlkkXQKXcswY95rib2 fr7rkMP/4w+7V15tBL6wksgEhxtyXA2QviZv2l9veYnfj4EuzOhfj0RV+IrIkP72 N6nFiu+ECXaYt8OUOGhRQ5HlaxbruT/Y0JV6+SuFTLXUvdOy5s+qTzeyNFeLPZdg +0QU0LXtLW5qsneLtUADuXr1zpMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR1J5Vn kXQx819XoCkgsbhzy8D5pTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4MTIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCZ4Q0MA0GCSqGSIb3DQEBCwUAA4IBAQAQ5UGfTL59T0vN7tcHhm0jANOB ADUZJvfFarTqBBp3txa0Qh4CqZbpEik7BUTYd4qxCaClblj4y2H0PFXPUxQIsWqj srtpP+V2aiX1OKMs6A/t64hmkzl35XEnFjaVWeokrKbSBRpReEbg5tE/4i8XiizI jgGraLjxzJ2hBAjmpX7+PUMW4r+tGx7mxqmAntRBk94XeZkLYzKmmPLa8CkXRMBQ TLz6J37hst4oxgJX4sR7B/A6GTLazBVVhU6e4mUQSNp8c8bIi6vUnlWqG4s+YRP3 vm7zbRBY/osV8YFBhg8xQNEF2dqcY8AQ8inKmSz+EszqS3XoHgwIBcliWZHj -----END CERTIFICATE-----Generated at Sun May 3 00:42:24 2026 by rpki-client