$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138835.roa File: AS138835.roa (raw, json) Hash identifier: qNq317NkAYu6sijU0HUQxGbipw/mlLZ0t3bt/KWA6d0= Subject key identifier: 3D:71:66:BA:F3:4F:58:DB:B2:93:0D:66:EA:8D:51:53:C9:DA:2B:49 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7FAD48BA1F3B0CB6461563715C35429D0F30741A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138835.roa Signing time: Sat 02 May 2026 14:47:32 +0000 ROA not before: Sat 02 May 2026 14:42:32 +0000 ROA not after: Sat 01 May 2027 14:47:32 +0000 asID: 138835 IP address blocks: 103.138.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ad:48:ba:1f:3b:0c:b6:46:15:63:71:5c:35:42:9d:0f:30:74:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 14:42:32 2026 GMT Not After : May 1 14:47:32 2027 GMT Subject: CN=3D7166BAF34F58DBB2930D66EA8D5153C9DA2B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:c7:bf:95:4b:70:07:90:b5:20:df:00:87: 65:7b:5c:8a:eb:eb:a5:8a:dc:92:de:98:d1:86:f7: 37:56:a6:da:d8:04:e8:d6:8c:19:26:81:a3:90:fa: 90:21:7c:1d:31:03:fd:5f:e8:c5:1b:21:cf:bc:bb: 9f:51:0e:91:41:33:8f:b2:f7:1a:84:49:1a:61:6d: b0:ff:a8:5c:77:40:91:88:7c:69:40:d8:6c:85:88: 84:e5:5c:7a:bb:74:33:00:1b:2f:ab:53:00:06:f5: 1d:55:83:4c:b0:5c:8d:86:d2:b2:c7:27:5c:a1:99: be:8d:ca:c5:cd:02:1f:4e:14:ed:b2:70:4f:3b:e6: 12:02:b0:dd:0e:28:a0:26:38:b3:6f:52:f9:03:c5: b9:89:ff:27:24:63:c0:ae:de:f4:40:4f:43:01:35: a8:5a:ed:de:aa:9b:69:36:84:d5:77:12:65:d0:bf: c7:b3:ca:a8:79:e6:35:88:e3:7b:38:f7:27:85:1b: 24:03:81:f2:9f:9e:6d:68:11:90:77:7e:99:bd:a8: d5:4f:dd:eb:8c:2a:11:08:62:e0:cc:df:d6:0b:c0: bf:21:a9:25:22:cb:1c:8c:6d:1e:65:be:8f:4e:05: 22:60:c1:61:77:56:7c:79:03:8f:f7:e6:e8:5c:8f: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:71:66:BA:F3:4F:58:DB:B2:93:0D:66:EA:8D:51:53:C9:DA:2B:49 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.10.0/24 Signature Algorithm: sha256WithRSAEncryption 96:25:cb:82:46:57:be:43:06:d8:a3:09:6d:ce:53:01:c4:aa: 83:35:92:8f:af:39:a0:13:f6:0d:5a:e1:68:e6:54:7c:63:36: cc:63:d0:c6:a3:cc:48:22:60:b3:72:a7:ca:3d:27:6c:9a:7a: e0:14:3b:1e:f0:33:b3:e3:95:b6:18:d6:40:2d:00:dc:30:8e: 21:a9:d1:e4:48:d4:fd:e5:3a:5b:a3:26:0a:b8:a7:ab:f2:33: 8c:f0:48:32:fb:d3:dd:e4:d5:f6:4d:99:76:6f:97:db:21:ad: 18:03:0f:3a:e3:60:b5:7b:a0:28:fa:10:51:7d:4d:03:b4:36: 60:7a:cd:9d:c7:6d:0e:85:44:e2:05:e0:a1:06:60:2b:00:97: 9d:8f:d1:b6:0f:73:9c:6b:8e:cb:ad:bd:12:b5:21:02:3c:95: 94:7b:9e:38:cd:f2:69:04:11:ec:93:08:6f:4f:be:e6:ea:61: 86:c3:d5:6d:ff:0e:e0:88:72:90:a5:f7:76:66:b8:a2:d7:08: 99:be:86:33:8e:0a:48:ff:7a:df:47:62:5c:aa:04:8c:ef:18: 65:f7:fb:ef:56:d3:b5:cb:7e:e2:bf:13:50:46:f5:63:83:fa: 04:f5:5c:da:e4:9c:c6:ff:39:8f:b0:46:7e:28:d6:91:45:a1: 2d:ed:c1:04 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUf61Iuh87DLZGFWNxXDVCnQ8wdBowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE0NDIzMloX DTI3MDUwMTE0NDczMlowMzExMC8GA1UEAxMoM0Q3MTY2QkFGMzRGNThEQkIyOTMw RDY2RUE4RDUxNTNDOURBMkI0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcGx7+VS3AHkLUg3wCHZXtciuvrpYrckt6Y0Yb3N1am2tgE6NaMGSaBo5D6 kCF8HTED/V/oxRshz7y7n1EOkUEzj7L3GoRJGmFtsP+oXHdAkYh8aUDYbIWIhOVc ert0MwAbL6tTAAb1HVWDTLBcjYbSsscnXKGZvo3Kxc0CH04U7bJwTzvmEgKw3Q4o oCY4s29S+QPFuYn/JyRjwK7e9EBPQwE1qFrt3qqbaTaE1XcSZdC/x7PKqHnmNYjj ezj3J4UbJAOB8p+ebWgRkHd+mb2o1U/d64wqEQhi4Mzf1gvAvyGpJSLLHIxtHmW+ j04FImDBYXdWfHkDj/fm6FyPyEUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ9cWa6 809Y27KTDWbqjVFTydorSTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ4oKMA0GCSqGSIb3DQEBCwUAA4IBAQCWJcuCRle+QwbYowltzlMBxKqD NZKPrzmgE/YNWuFo5lR8YzbMY9DGo8xIImCzcqfKPSdsmnrgFDse8DOz45W2GNZA LQDcMI4hqdHkSNT95TpboyYKuKer8jOM8Egy+9Pd5NX2TZl2b5fbIa0YAw8642C1 e6Ao+hBRfU0DtDZges2dx20OhUTiBeChBmArAJedj9G2D3Oca47Lrb0StSECPJWU e544zfJpBBHskwhvT77m6mGGw9Vt/w7giHKQpfd2Zrii1wiZvoYzjgpI/3rfR2Jc qgSM7xhl9/vvVtO1y37ivxNQRvVjg/oE9Vza5JzG/zmPsEZ+KNaRRaEt7cEE -----END CERTIFICATE-----Generated at Sun May 3 01:44:43 2026 by rpki-client