$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138389.roa File: AS138389.roa (raw, json) Hash identifier: drzxnFVb7nJmFKJ1iG62HuDW1z5zvr/beV45+67XAy4= Subject key identifier: C5:B6:3A:A3:94:CA:57:04:A9:5C:C8:0F:17:16:1F:F9:F8:C2:AF:3A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 11C1D85D2037BA87151840F2F64EE8F8F8DE0975 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138389.roa Signing time: Thu 10 Sep 2026 01:01:30 +0000 ROA not before: Thu 10 Sep 2026 00:56:30 +0000 ROA not after: Thu 09 Sep 2027 01:01:30 +0000 asID: 138389 IP address blocks: 163.52.132.0/24 maxlen: 24 2001:df7:7640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c1:d8:5d:20:37:ba:87:15:18:40:f2:f6:4e:e8:f8:f8:de:09:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 10 00:56:30 2026 GMT Not After : Sep 9 01:01:30 2027 GMT Subject: CN=C5B63AA394CA5704A95CC80F17161FF9F8C2AF3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:28:89:ea:d3:70:fe:77:ea:68:7d:90:19:31: e6:0b:79:c2:e8:46:08:83:e0:f8:8c:87:fa:e7:8d: b2:15:19:ab:68:a0:2b:c6:93:c7:15:e3:04:8e:6a: 72:1e:d0:12:40:87:04:15:64:bb:d1:2e:fb:38:ea: ef:b4:1f:7e:6f:24:fd:e2:b6:91:a2:89:55:e7:8f: 95:89:89:e0:37:12:2e:f9:20:1a:aa:d5:29:db:eb: 5d:92:bb:8f:7c:af:a2:9b:5f:5e:cc:6b:98:b9:81: 17:70:c1:1c:03:5b:56:fd:48:21:71:a3:bd:eb:32: 3a:81:a6:83:ee:8b:f2:7c:d9:7d:44:64:2f:5a:44: 65:59:c3:f3:a6:d6:30:a5:83:91:95:f4:57:26:ae: ff:00:d7:6e:e6:15:52:83:32:02:38:5d:69:e3:4d: 3f:c4:5a:aa:73:ef:82:d2:49:05:90:ce:d7:e8:c0: b2:8c:51:7a:60:ba:0b:23:1e:46:3a:a7:8e:39:e4: 83:54:66:01:69:ea:b7:3f:86:ba:96:fe:e7:4c:1c: 7e:a4:0f:72:b8:cf:db:7d:01:49:7c:94:c7:d1:de: 4e:e3:af:ad:86:d2:71:a9:a6:b9:f9:94:f2:f2:ae: 7f:74:d2:1c:85:7c:66:f8:98:cd:ef:f2:49:ce:1a: d4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B6:3A:A3:94:CA:57:04:A9:5C:C8:0F:17:16:1F:F9:F8:C2:AF:3A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138389.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.132.0/24 IPv6: 2001:df7:7640::/48 Signature Algorithm: sha256WithRSAEncryption 70:02:9f:76:0b:48:9b:ea:1a:b0:b4:c5:91:51:f2:56:42:f2: b2:a0:ea:09:b2:85:5e:cc:30:87:c4:8b:24:8d:ac:1a:42:c3: 8f:d8:43:5d:cb:c0:4c:e7:c1:90:07:c5:a2:fa:7e:b4:2f:d1: a6:9a:bc:80:7f:32:93:8e:c7:2e:99:ef:dc:bb:d1:be:f2:13: 18:ef:69:57:fe:82:04:e1:4c:ab:66:62:54:86:fe:06:79:56: 49:ae:ba:c4:a7:1a:d8:80:bb:d4:84:3b:53:2a:cc:d5:cd:2d: 2d:30:9e:16:9f:d2:73:bd:81:84:47:5b:92:06:19:e7:1f:c9: d5:63:fb:46:a0:20:8e:f1:19:5e:71:72:8c:ec:ed:87:28:aa: b4:0a:0a:3c:94:f9:c2:18:da:ec:38:9f:f6:42:ea:a4:4c:5d: c0:17:dc:14:02:18:3b:aa:36:4f:23:86:28:2b:91:b3:fa:aa: 57:63:62:fd:15:12:8f:12:94:f8:99:45:8e:a9:79:cc:0b:ca: 6a:97:80:91:80:ed:af:d8:96:73:83:60:76:ac:c3:95:f6:86: 05:ec:8f:0c:14:a5:fa:05:17:af:03:07:47:b6:24:ed:4a:c5: 3d:a0:68:2c:15:08:cf:b7:1c:c9:06:99:5a:ee:ee:9f:7a:8c: d5:e2:b1:c2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUEcHYXSA3uocVGEDy9k7o+PjeCXUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxMDAwNTYzMFoX DTI3MDkwOTAxMDEzMFowMzExMC8GA1UEAxMoQzVCNjNBQTM5NENBNTcwNEE5NUND ODBGMTcxNjFGRjlGOEMyQUYzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgoierTcP536mh9kBkx5gt5wuhGCIPg+IyH+ueNshUZq2igK8aTxxXjBI5q ch7QEkCHBBVku9Eu+zjq77Qffm8k/eK2kaKJVeePlYmJ4DcSLvkgGqrVKdvrXZK7 j3yvoptfXsxrmLmBF3DBHANbVv1IIXGjvesyOoGmg+6L8nzZfURkL1pEZVnD86bW MKWDkZX0Vyau/wDXbuYVUoMyAjhdaeNNP8RaqnPvgtJJBZDO1+jAsoxRemC6CyMe Rjqnjjnkg1RmAWnqtz+Gupb+50wcfqQPcrjP230BSXyUx9HeTuOvrYbScammufmU 8vKuf3TSHIV8ZviYze/ySc4a1M8CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTFtjqj lMpXBKlcyA8XFh/5+MKvOjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4Mzg5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozSEMA8EAgACMAkDBwAgAQ33dkAwDQYJKoZIhvcNAQELBQADggEBAHAC n3YLSJvqGrC0xZFR8lZC8rKg6gmyhV7MMIfEiySNrBpCw4/YQ13LwEznwZAHxaL6 frQv0aaavIB/MpOOxy6Z79y70b7yExjvaVf+ggThTKtmYlSG/gZ5VkmuusSnGtiA u9SEO1MqzNXNLS0wnhaf0nO9gYRHW5IGGecfydVj+0agII7xGV5xcozs7YcoqrQK CjyU+cIY2uw4n/ZC6qRMXcAX3BQCGDuqNk8jhigrkbP6qldjYv0VEo8SlPiZRY6p ecwLymqXgJGA7a/YlnODYHasw5X2hgXsjwwUpfoFF68DB0e2JO1KxT2gaCwVCM+3 HMkGmVru7p96jNXiscI= -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:18 2026 by rpki-client