$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138128.roa File: AS138128.roa (raw, json) Hash identifier: 03KwlF3WdasUWVwvf/te5WPuMD9oSrOTeErHGbg9o50= Subject key identifier: D7:24:3F:5A:1A:66:8E:BE:70:EB:E1:E5:D3:14:DC:44:79:13:A5:36 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4E1F2EBC1B5B9668DCD40EB1586079B565FFBB8B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138128.roa Signing time: Sat 02 May 2026 21:36:24 +0000 ROA not before: Sat 02 May 2026 21:31:24 +0000 ROA not after: Sat 01 May 2027 21:36:24 +0000 asID: 138128 IP address blocks: 103.185.36.0/23 maxlen: 24 2407:7c0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1f:2e:bc:1b:5b:96:68:dc:d4:0e:b1:58:60:79:b5:65:ff:bb:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:31:24 2026 GMT Not After : May 1 21:36:24 2027 GMT Subject: CN=D7243F5A1A668EBE70EBE1E5D314DC447913A536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b4:c3:f6:44:18:c5:2a:74:85:d9:1a:9c:bd: 03:ab:34:30:9f:4b:61:2c:eb:79:04:b7:f7:fb:19: e6:ae:76:48:3d:aa:3e:c9:63:07:bd:3b:3c:1e:65: c0:a4:ab:20:4f:70:d5:2e:58:15:34:90:ee:66:99: 61:9b:30:0f:96:19:01:39:12:0a:86:9e:9d:d7:09: 13:82:be:24:7b:85:55:3d:a5:2d:12:37:57:64:98: ab:66:ab:c1:a1:f3:66:88:80:63:b8:63:f0:43:ed: b1:3c:58:23:b5:03:d7:20:0a:5c:55:54:e7:a3:6d: 4c:53:e1:fc:7f:9d:91:c1:00:0c:e2:a5:30:54:33: 73:92:e6:8e:2f:d2:40:84:d2:9f:12:dc:c1:37:be: 7c:b2:b1:2b:a2:ed:19:37:53:0f:23:3d:4a:51:99: 6c:ae:ce:7d:e8:8a:6d:c3:df:7d:7a:8c:79:87:d8: 49:e3:7a:ce:a3:d9:11:dd:6b:18:3c:8b:23:89:75: 37:83:26:2c:48:91:e9:49:73:d8:e9:e8:4f:79:06: fd:af:13:f7:3c:83:1c:e5:58:f7:d8:dd:5b:fd:70: 4a:7d:70:c1:21:50:94:07:18:95:5b:6f:ba:25:68: d2:b8:c4:e8:54:3e:9c:05:14:dd:2b:68:f0:e6:4f: fc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:24:3F:5A:1A:66:8E:BE:70:EB:E1:E5:D3:14:DC:44:79:13:A5:36 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138128.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.36.0/23 IPv6: 2407:7c0::/40 Signature Algorithm: sha256WithRSAEncryption 4c:75:73:26:48:62:79:56:31:e8:6b:95:72:35:f3:54:71:c6: f1:4b:2b:92:6a:a6:0e:77:75:82:94:9a:37:70:6a:3a:89:73: 55:7f:2d:8c:99:19:03:12:33:df:e1:9e:fd:71:68:57:2b:1d: cc:b4:f8:58:3e:15:5a:18:8e:24:42:d1:f1:a0:c8:a8:da:a0: 52:c5:72:80:23:22:45:63:c4:ff:ed:ac:00:10:11:f7:23:5c: 73:5f:fc:7b:c6:ea:4b:e4:db:6c:98:47:b7:19:b9:61:84:0d: ae:9b:41:be:42:e2:ee:c3:88:0e:d6:37:59:13:6f:d7:5b:d5: c2:62:d5:86:f5:bb:7a:15:0a:d6:93:24:ac:60:43:80:b9:8f: 96:47:9a:63:ca:a1:1d:a4:04:69:26:f0:db:20:e4:71:31:2d: 75:8e:ca:9e:e4:20:e3:64:08:df:d1:ef:a9:75:bb:f5:a7:39: b1:8c:8a:e2:76:55:c4:48:4d:db:cd:1f:e2:ff:c7:a4:c3:c4: 82:15:5e:aa:90:40:1b:5c:fc:0c:9c:d3:58:b2:11:36:e9:c5: d1:61:08:47:b8:05:bb:70:be:bf:12:01:bb:89:01:4f:b8:f6: 15:e2:51:5b:c9:1d:45:2d:f9:98:4e:78:47:0a:f3:5c:55:8a: fc:0e:64:71 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUTh8uvBtblmjc1A6xWGB5tWX/u4swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzEyNFoX DTI3MDUwMTIxMzYyNFowMzExMC8GA1UEAxMoRDcyNDNGNUExQTY2OEVCRTcwRUJF MUU1RDMxNERDNDQ3OTEzQTUzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANG0w/ZEGMUqdIXZGpy9A6s0MJ9LYSzreQS39/sZ5q52SD2qPsljB707PB5l wKSrIE9w1S5YFTSQ7maZYZswD5YZATkSCoaendcJE4K+JHuFVT2lLRI3V2SYq2ar waHzZoiAY7hj8EPtsTxYI7UD1yAKXFVU56NtTFPh/H+dkcEADOKlMFQzc5Lmji/S QITSnxLcwTe+fLKxK6LtGTdTDyM9SlGZbK7OfeiKbcPffXqMeYfYSeN6zqPZEd1r GDyLI4l1N4MmLEiR6Ulz2OnoT3kG/a8T9zyDHOVY99jdW/1wSn1wwSFQlAcYlVtv uiVo0rjE6FQ+nAUU3Sto8OZP/D8CAwEAAaOCAdwwggHYMB0GA1UdDgQWBBTXJD9a GmaOvnDr4eXTFNxEeROlNjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4MTI4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIA ATAGAwQBZ7kkMA4EAgACMAgDBgAkBwfAADANBgkqhkiG9w0BAQsFAAOCAQEATHVz JkhieVYx6GuVcjXzVHHG8UsrkmqmDnd1gpSaN3BqOolzVX8tjJkZAxIz3+Ge/XFo VysdzLT4WD4VWhiOJELR8aDIqNqgUsVygCMiRWPE/+2sABAR9yNcc1/8e8bqS+Tb bJhHtxm5YYQNrptBvkLi7sOIDtY3WRNv11vVwmLVhvW7ehUK1pMkrGBDgLmPlkea Y8qhHaQEaSbw2yDkcTEtdY7KnuQg42QI39HvqXW79ac5sYyK4nZVxEhN280f4v/H pMPEghVeqpBAG1z8DJzTWLIRNunF0WEIR7gFu3C+vxIBu4kBT7j2FeJRW8kdRS35 mE54RwrzXFWK/A5kcQ== -----END CERTIFICATE-----Generated at Sun May 3 01:44:16 2026 by rpki-client