$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138141.roa File: AS138141.roa (raw, json) Hash identifier: H5i+sg7dWdENCr2tdKH3JBzwIpigs5y6BY3DL75LCac= Subject key identifier: 80:E5:EC:3E:84:14:48:CC:CF:C4:CA:F4:A3:5E:A0:00:36:6B:75:94 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 359E04FF83597406FD9C1CAD2E42CA3B1FD30BC7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138141.roa Signing time: Sat 02 May 2026 08:34:41 +0000 ROA not before: Sat 02 May 2026 08:29:41 +0000 ROA not after: Sat 01 May 2027 08:34:41 +0000 asID: 138141 IP address blocks: 103.134.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9e:04:ff:83:59:74:06:fd:9c:1c:ad:2e:42:ca:3b:1f:d3:0b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:29:41 2026 GMT Not After : May 1 08:34:41 2027 GMT Subject: CN=80E5EC3E841448CCCFC4CAF4A35EA000366B7594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6e:06:44:14:ce:8f:0b:71:3c:75:4c:8a:b8: 44:e9:59:2c:dc:f1:fc:c1:cb:c9:cf:96:e6:2a:fa: 5c:a0:10:2e:80:89:a7:a2:7b:65:3e:43:42:2c:b4: 2e:3f:82:30:3d:ba:5d:64:02:6a:9f:68:a1:43:79: 07:df:36:67:5e:45:cd:67:a7:fb:53:c5:18:34:b6: 01:3f:df:cd:97:b7:e7:56:61:cb:36:5f:04:47:b5: e1:ef:e8:85:20:a2:d0:80:50:5a:06:2a:4a:99:0c: d9:8a:85:34:68:73:61:45:1a:1f:69:e8:34:8b:df: f8:00:80:0f:71:41:fa:ed:75:d8:e5:4b:8c:84:6f: 85:50:82:4d:8d:fb:4b:eb:52:44:5d:36:37:97:c8: ae:dc:13:38:cb:9c:91:c5:48:e1:8e:60:ee:ed:30: c9:5a:9d:f8:83:56:fe:ac:d9:c9:9c:94:1c:c2:ed: 07:f0:83:74:fa:6c:ce:d3:ca:eb:93:a5:7d:ca:ea: 1b:10:ac:84:9a:8e:26:5f:f9:81:74:50:cd:a4:52: 16:aa:5c:36:eb:d1:1f:c4:a5:25:05:96:c6:84:67: 2c:16:f2:be:2a:f2:86:31:50:1d:69:8c:10:7a:81: 67:2d:9b:02:85:ce:aa:da:38:b0:26:f3:b0:9b:13: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E5:EC:3E:84:14:48:CC:CF:C4:CA:F4:A3:5E:A0:00:36:6B:75:94 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138141.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.18.0/23 Signature Algorithm: sha256WithRSAEncryption 14:2e:2d:86:66:a5:66:9d:97:ae:a8:49:a7:bd:4d:de:6f:9c: 9d:70:30:8b:5c:9a:e2:e3:11:5b:49:1a:3b:44:0a:49:e2:4e: 0b:7f:cc:64:12:49:a0:ed:3d:5d:64:a2:0a:09:29:ab:95:6d: 56:e9:22:be:a3:cb:5b:ac:d0:13:e8:66:f6:7a:b5:e5:40:b9: b2:50:0d:41:aa:04:37:26:63:6a:02:60:c6:b2:75:7b:4f:6f: 29:d2:d7:ed:e8:5f:ff:be:1a:ed:96:0f:72:9a:44:03:44:4f: 3d:d0:12:6b:9d:02:96:dd:90:cf:a7:34:90:ec:ec:e8:3c:78: 7f:df:e6:be:7f:60:41:35:29:c8:26:ce:4b:30:78:15:60:a5: dc:ce:98:a4:e4:0c:a3:6b:63:fb:10:99:1b:1b:da:35:a9:de: 99:78:ba:71:0c:28:88:96:4d:2c:76:93:e1:25:1d:82:81:86: 5d:9f:43:53:7b:4f:b4:d2:72:af:53:d3:aa:80:1e:f0:3e:9e: f0:9b:9e:f9:58:3c:2a:ef:d1:ed:dd:74:d7:c3:50:65:61:a4: 49:a8:0a:f6:ad:d5:83:d4:9f:ad:33:61:98:65:30:b0:6e:14: b7:5a:83:76:33:38:b4:24:e3:4a:f2:52:12:17:9b:0c:b5:87: cb:75:13:24 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUNZ4E/4NZdAb9nBytLkLKOx/TC8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4Mjk0MVoX DTI3MDUwMTA4MzQ0MVowMzExMC8GA1UEAxMoODBFNUVDM0U4NDE0NDhDQ0NGQzRD QUY0QTM1RUEwMDAzNjZCNzU5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPduBkQUzo8LcTx1TIq4ROlZLNzx/MHLyc+W5ir6XKAQLoCJp6J7ZT5DQiy0 Lj+CMD26XWQCap9ooUN5B982Z15FzWen+1PFGDS2AT/fzZe351ZhyzZfBEe14e/o hSCi0IBQWgYqSpkM2YqFNGhzYUUaH2noNIvf+ACAD3FB+u112OVLjIRvhVCCTY37 S+tSRF02N5fIrtwTOMuckcVI4Y5g7u0wyVqd+INW/qzZyZyUHMLtB/CDdPpsztPK 65OlfcrqGxCshJqOJl/5gXRQzaRSFqpcNuvRH8SlJQWWxoRnLBbyviryhjFQHWmM EHqBZy2bAoXOqto4sCbzsJsTl80CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSA5ew+ hBRIzM/EyvSjXqAANmt1lDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4MTQxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ4YSMA0GCSqGSIb3DQEBCwUAA4IBAQAULi2GZqVmnZeuqEmnvU3eb5yd cDCLXJri4xFbSRo7RApJ4k4Lf8xkEkmg7T1dZKIKCSmrlW1W6SK+o8tbrNAT6Gb2 erXlQLmyUA1BqgQ3JmNqAmDGsnV7T28p0tft6F//vhrtlg9ymkQDRE890BJrnQKW 3ZDPpzSQ7OzoPHh/3+a+f2BBNSnIJs5LMHgVYKXczpik5Ayja2P7EJkbG9o1qd6Z eLpxDCiIlk0sdpPhJR2CgYZdn0NTe0+00nKvU9OqgB7wPp7wm575WDwq79Ht3XTX w1BlYaRJqAr2rdWD1J+tM2GYZTCwbhS3WoN2Mzi0JONK8lISF5sMtYfLdRMk -----END CERTIFICATE-----Generated at Sun May 3 00:40:39 2026 by rpki-client