$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138816.roa File: AS138816.roa (raw, json) Hash identifier: FmAJo9Y2aGoY1yOyu64zXtBS64c5JalqWt52VC9Us/c= Subject key identifier: 54:23:52:24:08:65:49:69:10:5B:3E:0C:B0:A6:D4:C0:83:17:C4:42 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 21D6066B738D204DBBC31A01D1F797DD4CABF6FE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138816.roa Signing time: Sat 02 May 2026 08:37:02 +0000 ROA not before: Sat 02 May 2026 08:32:02 +0000 ROA not after: Sat 01 May 2027 08:37:02 +0000 asID: 138816 IP address blocks: 103.136.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d6:06:6b:73:8d:20:4d:bb:c3:1a:01:d1:f7:97:dd:4c:ab:f6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:02 2026 GMT Not After : May 1 08:37:02 2027 GMT Subject: CN=5423522408654969105B3E0CB0A6D4C08317C442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:42:ad:49:e2:e5:be:84:78:9f:13:f2:b0:9a: de:37:8c:c2:e6:4d:85:7f:a0:68:4f:28:7b:9b:83: 1a:76:cc:a4:87:5b:cd:39:9d:e1:eb:71:94:ea:ed: b8:66:2b:dc:7a:ef:f6:42:cb:fa:20:b2:fa:ed:68: 6b:f0:d4:11:13:49:85:75:39:f4:05:a3:7c:3c:44: a1:b5:1d:09:27:02:49:22:30:ff:c4:22:f5:14:a3: 58:6a:96:06:96:ba:54:38:d0:20:54:15:fd:f9:4b: 81:47:c3:b7:29:a9:e4:f4:91:34:2d:14:d5:cf:b6: bd:34:1a:a5:f4:30:20:87:d4:bd:0d:92:bf:e5:cc: 5f:3c:c2:ab:f6:93:b3:4e:af:7a:ce:ad:c0:63:19: 34:d6:4b:10:ae:9a:37:3e:a8:f6:62:e7:06:e5:4b: 2b:04:1f:14:c7:7c:59:56:62:7f:26:cf:66:d7:13: 2b:47:c7:5c:10:4d:69:52:91:dd:09:5f:5c:51:96: 02:37:36:05:85:f1:75:d3:0d:a5:6c:15:eb:e2:b7: 34:67:69:20:e7:a6:c9:02:5f:63:4a:00:2c:38:87: 96:af:58:3d:3e:a8:99:d7:38:9f:a5:23:3b:9d:c1: d6:be:3a:d7:27:78:4b:ce:34:5c:34:45:c6:a9:6f: d9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:23:52:24:08:65:49:69:10:5B:3E:0C:B0:A6:D4:C0:83:17:C4:42 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.182.0/23 Signature Algorithm: sha256WithRSAEncryption 98:c7:8e:3b:f3:74:b4:ce:45:9b:e0:e1:19:7c:5a:ea:f1:31: 49:17:a5:4b:3d:0c:68:9f:6a:a3:68:8f:7b:a4:f5:e9:77:1d: 40:39:35:8f:fa:6b:a7:e1:de:02:6a:62:11:d5:52:c0:e6:6b: eb:1c:b4:c9:53:1a:bd:ce:d0:51:f5:63:6a:be:cd:10:60:c6: 85:7c:97:1c:49:17:cb:9c:6a:c7:49:64:42:89:da:93:3f:7f: 1e:03:93:86:f3:29:23:ba:96:1b:9a:95:83:af:fe:72:55:f1: e3:72:ff:3f:e2:2c:16:05:b0:22:ad:b7:08:1d:5b:3a:fa:79: d0:87:98:52:95:e4:fb:6d:88:90:71:53:b6:63:1c:c5:ca:55: 6a:50:28:34:e2:18:66:be:fc:7f:4d:6b:ec:c0:04:fe:1b:a1: c4:1b:de:fb:f2:ac:fc:df:5f:cd:d8:70:66:80:da:4a:91:7e: c8:82:68:4c:b6:81:8f:2d:88:3d:51:d8:06:8b:16:2e:64:47: d9:c2:63:3a:14:f0:33:cd:35:a9:57:ce:0b:cc:40:25:b9:68: ec:97:dc:f7:d2:41:84:dd:84:a3:ac:18:f0:6f:14:85:59:f2: d6:c9:a8:84:7c:b7:29:99:40:2d:3c:50:32:dc:03:ed:58:25: 0e:b5:cc:6c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUIdYGa3ONIE27wxoB0feX3Uyr9v4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIwMloX DTI3MDUwMTA4MzcwMlowMzExMC8GA1UEAxMoNTQyMzUyMjQwODY1NDk2OTEwNUIz RTBDQjBBNkQ0QzA4MzE3QzQ0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANdCrUni5b6EeJ8T8rCa3jeMwuZNhX+gaE8oe5uDGnbMpIdbzTmd4etxlOrt uGYr3Hrv9kLL+iCy+u1oa/DUERNJhXU59AWjfDxEobUdCScCSSIw/8Qi9RSjWGqW Bpa6VDjQIFQV/flLgUfDtymp5PSRNC0U1c+2vTQapfQwIIfUvQ2Sv+XMXzzCq/aT s06ves6twGMZNNZLEK6aNz6o9mLnBuVLKwQfFMd8WVZifybPZtcTK0fHXBBNaVKR 3QlfXFGWAjc2BYXxddMNpWwV6+K3NGdpIOemyQJfY0oALDiHlq9YPT6omdc4n6Uj O53B1r461yd4S840XDRFxqlv2ScCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRUI1Ik CGVJaRBbPgywptTAgxfEQjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODE2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ4i2MA0GCSqGSIb3DQEBCwUAA4IBAQCYx44783S0zkWb4OEZfFrq8TFJ F6VLPQxon2qjaI97pPXpdx1AOTWP+mun4d4CamIR1VLA5mvrHLTJUxq9ztBR9WNq vs0QYMaFfJccSRfLnGrHSWRCidqTP38eA5OG8ykjupYbmpWDr/5yVfHjcv8/4iwW BbAirbcIHVs6+nnQh5hSleT7bYiQcVO2YxzFylVqUCg04hhmvvx/TWvswAT+G6HE G9778qz831/N2HBmgNpKkX7IgmhMtoGPLYg9UdgGixYuZEfZwmM6FPAzzTWpV84L zEAluWjsl9z30kGE3YSjrBjwbxSFWfLWyaiEfLcpmUAtPFAy3APtWCUOtcxs -----END CERTIFICATE-----Generated at Sun May 3 00:42:22 2026 by rpki-client