$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138809.roa File: AS138809.roa (raw, json) Hash identifier: DHzKCDcHQYg+MSqy3/2RQrkHRvRad3H50oSYLZnRtPA= Subject key identifier: D4:AA:E6:E1:AB:E0:72:AB:DA:42:DB:0A:E5:F3:FE:9B:E3:DD:A8:AF Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 643A62BCE9825CB4CA2DC5B541D7D209AAACE780 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138809.roa Signing time: Sat 02 May 2026 08:36:53 +0000 ROA not before: Sat 02 May 2026 08:31:53 +0000 ROA not after: Sat 01 May 2027 08:36:53 +0000 asID: 138809 IP address blocks: 103.134.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3a:62:bc:e9:82:5c:b4:ca:2d:c5:b5:41:d7:d2:09:aa:ac:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:53 2026 GMT Not After : May 1 08:36:53 2027 GMT Subject: CN=D4AAE6E1ABE072ABDA42DB0AE5F3FE9BE3DDA8AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:55:52:29:c2:27:5a:6c:75:86:9a:93:1a:8c: 59:43:16:48:75:e4:74:37:57:83:d3:8b:0f:51:29: 53:4b:d8:95:06:ee:13:eb:de:95:3f:4e:aa:cf:ca: fd:74:ed:b0:48:65:4d:25:64:83:b2:ba:a5:7b:fd: 5c:02:9f:d1:62:f4:e4:b1:b3:82:a6:47:5d:92:5c: 6d:78:48:01:88:ba:51:d7:8d:1d:41:42:25:03:16: 8f:55:ed:29:d0:1b:2c:8a:53:3f:cc:69:0b:71:a1: 15:5e:5f:96:6b:f8:dc:46:9b:67:5b:af:b8:b9:dd: 59:50:06:51:57:e9:27:49:84:13:4e:53:a1:df:c2: 86:1f:5c:6a:4f:f4:46:00:28:7f:4b:49:be:e0:a9: 43:e7:b1:0f:eb:01:a7:f3:58:b6:de:11:8e:7a:19: f6:f5:ba:b5:fe:ba:93:09:f0:19:a9:06:e4:43:b9: 3c:f9:d9:a4:dd:73:06:b5:5c:67:9a:02:f7:b9:05: 24:58:e4:78:3c:c1:a3:73:23:92:ec:e2:09:5a:51: 0d:e6:92:ab:1b:cf:14:7e:1c:eb:37:48:65:58:43: 7c:26:99:27:bd:60:bf:2b:73:9b:4b:ad:df:94:e6: 6e:2c:fe:ef:1a:e9:19:a5:f9:2f:4e:0e:8e:d7:8c: ef:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AA:E6:E1:AB:E0:72:AB:DA:42:DB:0A:E5:F3:FE:9B:E3:DD:A8:AF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138809.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.228.0/22 Signature Algorithm: sha256WithRSAEncryption 51:80:aa:63:48:13:55:ba:17:f3:84:0b:43:23:74:36:4a:4e: 27:ac:d8:21:6e:12:6d:6b:1b:c6:98:ba:b9:f2:ae:b9:71:60: 6e:f7:53:cc:26:b6:bb:b0:ee:1b:92:84:4e:b5:85:3d:6e:27: ba:42:17:8e:12:c6:f8:d2:c0:1c:fb:d2:eb:ea:ee:1c:d3:3f: 99:d3:e7:8e:a1:55:55:99:3a:69:93:88:84:91:c3:38:86:cc: 67:6a:99:48:c3:bb:aa:c3:a9:b6:92:25:bb:f4:91:ae:0e:8a: 80:81:7a:d0:8e:76:a6:e3:11:94:5a:3b:36:ed:a1:b8:20:65: 5a:35:69:cf:bf:eb:5f:03:69:75:89:34:dc:1f:66:75:c0:d7: af:d7:60:82:cb:d6:98:e4:34:4d:a5:09:f8:0e:ac:95:57:25: 5c:d5:19:57:c6:d1:6f:aa:7a:24:dc:d8:c7:de:3a:f8:68:d4: 4e:6b:32:e4:27:58:df:60:8b:18:57:9e:c7:3e:b9:28:78:d4: 14:3b:f2:ab:ab:15:df:1e:d1:ac:f0:2d:1d:8d:fd:ac:a9:7e: ac:d6:86:16:95:09:00:ee:e8:3f:a4:e4:9d:59:c0:2c:37:eb: fa:2c:64:27:fb:ce:07:c6:9d:75:1e:71:a0:1a:13:c4:f9:fc: c8:9a:f1:bf -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZDpivOmCXLTKLcW1QdfSCaqs54AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzE1M1oX DTI3MDUwMTA4MzY1M1owMzExMC8GA1UEAxMoRDRBQUU2RTFBQkUwNzJBQkRBNDJE QjBBRTVGM0ZFOUJFM0REQThBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAONVUinCJ1psdYaakxqMWUMWSHXkdDdXg9OLD1EpU0vYlQbuE+velT9Oqs/K /XTtsEhlTSVkg7K6pXv9XAKf0WL05LGzgqZHXZJcbXhIAYi6UdeNHUFCJQMWj1Xt KdAbLIpTP8xpC3GhFV5flmv43EabZ1uvuLndWVAGUVfpJ0mEE05Tod/Chh9cak/0 RgAof0tJvuCpQ+exD+sBp/NYtt4RjnoZ9vW6tf66kwnwGakG5EO5PPnZpN1zBrVc Z5oC97kFJFjkeDzBo3MjkuziCVpRDeaSqxvPFH4c6zdIZVhDfCaZJ71gvytzm0ut 35Tmbiz+7xrpGaX5L04OjteM73ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTUqubh q+Byq9pC2wrl8/6b492orzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODA5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCZ4bkMA0GCSqGSIb3DQEBCwUAA4IBAQBRgKpjSBNVuhfzhAtDI3Q2Sk4n rNghbhJtaxvGmLq58q65cWBu91PMJra7sO4bkoROtYU9bie6QheOEsb40sAc+9Lr 6u4c0z+Z0+eOoVVVmTppk4iEkcM4hsxnaplIw7uqw6m2kiW79JGuDoqAgXrQjnam 4xGUWjs27aG4IGVaNWnPv+tfA2l1iTTcH2Z1wNev12CCy9aY5DRNpQn4DqyVVyVc 1RlXxtFvqnok3NjH3jr4aNROazLkJ1jfYIsYV57HPrkoeNQUO/KrqxXfHtGs8C0d jf2sqX6s1oYWlQkA7ug/pOSdWcAsN+v6LGQn+84Hxp11HnGgGhPE+fzImvG/ -----END CERTIFICATE-----Generated at Sun May 3 00:40:24 2026 by rpki-client