$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138829.roa File: AS138829.roa (raw, json) Hash identifier: rFBfGD0bOEZ6TsaqE4pGgeKawUsa4Dcmwax4Ug2cyRY= Subject key identifier: 5A:3A:9A:25:17:AE:EA:8B:9C:E4:C8:7F:1A:8A:52:6E:5D:74:78:6F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 489EB0745AFBE0679598FC1B5E79715D6F2B8A22 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138829.roa Signing time: Sat 02 May 2026 21:37:27 +0000 ROA not before: Sat 02 May 2026 21:32:27 +0000 ROA not after: Sat 01 May 2027 21:37:27 +0000 asID: 138829 IP address blocks: 36.50.253.0/24 maxlen: 24 103.11.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9e:b0:74:5a:fb:e0:67:95:98:fc:1b:5e:79:71:5d:6f:2b:8a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:32:27 2026 GMT Not After : May 1 21:37:27 2027 GMT Subject: CN=5A3A9A2517AEEA8B9CE4C87F1A8A526E5D74786F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:64:4e:2d:cf:8a:01:f8:81:48:11:c7:aa: a1:78:49:0c:ab:9f:fb:cb:c4:30:46:33:f6:1b:3e: 5f:5a:ca:c4:d5:d3:bc:39:43:47:3b:ba:a6:d5:2e: 03:11:26:02:70:06:d6:18:85:5e:02:e9:f7:72:d6: 18:06:a2:13:0b:f8:52:fc:15:14:89:dc:5f:01:d7: c0:e4:9d:00:82:15:d4:d4:db:83:62:1b:84:91:84: 5e:8e:1d:a3:a3:e3:d9:57:dc:09:3f:01:10:c9:ea: 1e:d1:1c:a8:c7:9f:d3:e9:27:ae:22:e8:85:44:32: 1f:53:d6:d6:77:88:81:3d:57:6a:73:ab:f4:ee:97: 48:57:62:be:c3:2b:0a:fb:5e:ae:ec:11:c0:7e:cf: 0d:73:d1:6d:dc:a6:44:4e:66:20:32:14:a5:2e:39: 31:69:68:99:58:b1:89:98:6a:a3:3d:15:1e:fe:3b: e4:c2:8c:20:4e:2e:73:c9:23:de:59:c9:35:3b:84: f0:d5:0e:c1:fc:ec:61:35:23:a7:aa:9b:2c:c0:61: 49:f5:61:f5:0d:75:4b:13:8a:93:e9:6e:49:4c:3e: 5a:49:cd:9b:a8:48:b2:65:4d:e6:0b:ec:79:65:b5: de:11:81:96:4a:c4:09:61:a8:b7:30:21:8a:a1:68: ae:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3A:9A:25:17:AE:EA:8B:9C:E4:C8:7F:1A:8A:52:6E:5D:74:78:6F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138829.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.253.0/24 103.11.132.0/23 Signature Algorithm: sha256WithRSAEncryption a6:80:82:d9:6a:bd:a3:b8:db:84:1f:74:f6:bd:56:10:38:22: bf:1e:36:ed:d1:68:d0:a6:3a:35:c2:8b:32:6e:6b:0f:34:e4: 8d:1f:b8:9c:39:05:30:46:cb:ea:0c:57:25:47:79:48:46:43: c1:d1:bf:30:51:e5:d2:5a:87:97:a7:6c:96:64:c6:69:fc:1a: c5:30:be:4e:4c:92:b4:f3:c0:45:fb:eb:41:d9:b1:c2:0e:af: c4:14:14:20:3e:af:e1:c9:38:67:b3:87:33:99:be:ce:64:31: 0e:a9:b6:33:5b:72:d0:bd:e2:4d:5c:3d:4c:4e:8f:0f:f0:3b: e1:8b:08:7d:41:b8:28:76:47:85:78:b1:2f:64:85:b7:cf:42: d2:59:73:a7:5c:e2:8f:a2:60:15:98:c8:71:91:df:90:6e:72: 11:fe:09:4e:9e:ad:cc:8a:ff:f0:a5:1c:b8:a7:96:37:71:18: a0:e2:c4:99:d9:e5:11:20:fc:6b:9a:aa:56:8f:12:66:23:d4: 7d:5b:3e:f0:6b:32:d5:3a:26:7f:fd:5a:2e:c8:13:94:f4:5d: d1:ff:c4:38:d9:1f:9b:bf:ba:26:f7:cb:bb:9d:2d:b8:99:64: ce:f0:e4:a5:99:3d:66:d4:4a:54:1b:ac:c2:4c:e5:7a:7a:d0: 73:55:90:ca -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUSJ6wdFr74GeVmPwbXnlxXW8riiIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzIyN1oX DTI3MDUwMTIxMzcyN1owMzExMC8GA1UEAxMoNUEzQTlBMjUxN0FFRUE4QjlDRTRD ODdGMUE4QTUyNkU1RDc0Nzg2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/pZE4tz4oB+IFIEceqoXhJDKuf+8vEMEYz9hs+X1rKxNXTvDlDRzu6ptUu AxEmAnAG1hiFXgLp93LWGAaiEwv4UvwVFIncXwHXwOSdAIIV1NTbg2IbhJGEXo4d o6Pj2VfcCT8BEMnqHtEcqMef0+knriLohUQyH1PW1neIgT1XanOr9O6XSFdivsMr CvteruwRwH7PDXPRbdymRE5mIDIUpS45MWlomVixiZhqoz0VHv475MKMIE4uc8kj 3lnJNTuE8NUOwfzsYTUjp6qbLMBhSfVh9Q11SxOKk+luSUw+WknNm6hIsmVN5gvs eWW13hGBlkrECWGotzAhiqForg8CAwEAAaOCAdIwggHOMB0GA1UdDgQWBBRaOpol F67qi5zkyH8ailJuXXR4bzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODI5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAJDL9AwQBZwuEMA0GCSqGSIb3DQEBCwUAA4IBAQCmgILZar2juNuEH3T2 vVYQOCK/Hjbt0WjQpjo1wosybmsPNOSNH7icOQUwRsvqDFclR3lIRkPB0b8wUeXS WoeXp2yWZMZp/BrFML5OTJK088BF++tB2bHCDq/EFBQgPq/hyThns4czmb7OZDEO qbYzW3LQveJNXD1MTo8P8Dvhiwh9QbgodkeFeLEvZIW3z0LSWXOnXOKPomAVmMhx kd+QbnIR/glOnq3Miv/wpRy4p5Y3cRig4sSZ2eURIPxrmqpWjxJmI9R9Wz7wazLV OiZ//VouyBOU9F3R/8Q42R+bv7om98u7nS24mWTO8OSlmT1m1EpUG6zCTOV6etBz VZDK -----END CERTIFICATE-----Generated at Sun May 3 00:42:14 2026 by rpki-client