$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138839.roa File: AS138839.roa (raw, json) Hash identifier: zD220RBcGtRUkDkbWuJB422dhltSQOgXq7jT7WgRlEc= Subject key identifier: E0:98:97:81:21:97:C2:B3:ED:69:85:4B:C6:6D:92:D1:EB:32:15:26 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 31B66316D63BC5E120B3C0BCFC1F647A9217CF1F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138839.roa Signing time: Sat 02 May 2026 21:04:52 +0000 ROA not before: Sat 02 May 2026 20:59:52 +0000 ROA not after: Sat 01 May 2027 21:04:52 +0000 asID: 138839 IP address blocks: 103.138.14.0/23 maxlen: 24 103.166.92.0/23 maxlen: 24 2404:bdc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b6:63:16:d6:3b:c5:e1:20:b3:c0:bc:fc:1f:64:7a:92:17:cf:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 20:59:52 2026 GMT Not After : May 1 21:04:52 2027 GMT Subject: CN=E09897812197C2B3ED69854BC66D92D1EB321526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:c5:eb:fe:17:3a:7d:ba:49:5f:c6:74:2f: 69:61:c2:e9:3a:5d:2c:ac:f3:19:d2:88:6e:c4:e2: d5:6f:c4:9c:8f:0d:73:cc:7f:61:1c:88:7a:3d:4a: 91:00:cb:1e:d5:76:61:78:92:fd:88:fb:ca:e7:1f: e4:2b:97:2f:bd:6b:2e:98:1a:95:9a:bf:e7:8f:06: 0d:21:d2:2e:41:1e:cb:03:f1:79:6a:b6:55:b5:c0: 85:da:2f:93:4a:d6:20:b9:8f:ef:3d:23:ea:f6:e5: 9f:a9:76:c9:12:03:74:c8:41:b3:1c:99:f9:8c:07: 19:e1:eb:f6:a8:0b:f7:0d:6a:53:26:8d:ad:25:d1: 79:09:90:f3:d5:a3:08:7c:0b:7c:ee:d8:ca:fe:74: 30:3a:3e:ce:41:b7:00:42:ee:4e:27:dc:80:6c:84: e8:8a:45:3c:d5:17:d1:91:54:4d:a5:1d:56:ad:2b: f1:ba:47:a5:ed:de:d4:8f:90:07:5e:77:98:13:d4: ba:1b:eb:70:c2:dd:00:29:31:50:2f:16:ec:17:33: 3a:15:96:2b:5a:d3:e9:fe:1b:ed:49:79:ea:03:10: d3:24:8f:99:a6:9e:92:8b:ad:5b:5f:4b:5b:3d:f8: 00:f3:b5:02:1c:d4:b0:c5:ef:77:51:36:1e:d7:68: 99:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:98:97:81:21:97:C2:B3:ED:69:85:4B:C6:6D:92:D1:EB:32:15:26 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.14.0/23 103.166.92.0/23 IPv6: 2404:bdc0::/32 Signature Algorithm: sha256WithRSAEncryption 6b:44:8e:35:d3:08:2c:20:15:ae:0c:ad:b2:15:6f:f0:f0:93: 76:da:4f:91:71:d3:75:1f:43:30:b9:52:af:1e:44:59:91:3f: a4:15:b4:c1:83:e5:6e:ae:ed:3d:30:53:07:3b:3d:ba:b8:18: 2b:16:9a:6d:8c:33:77:5b:c3:1c:7e:bb:c8:a0:54:d3:db:97: 48:4f:74:58:df:de:79:39:89:d2:95:10:ba:87:da:f0:c9:97: 28:c1:66:f8:d7:58:5a:37:aa:9e:07:88:5a:d3:d6:de:c4:75: 5a:00:56:65:f7:f2:03:a9:7c:ab:e7:a3:75:6f:ec:37:4c:af: 01:08:6c:eb:88:57:9a:a2:e7:56:7b:32:a3:0d:38:38:af:2a: 0a:8b:de:34:83:4a:4c:76:3d:6d:22:a1:c8:4a:15:24:12:58: 86:1f:ab:20:75:c1:e8:8d:f4:fb:20:ca:36:b0:82:37:99:23: fb:04:88:8e:6b:fa:5c:6c:a1:68:5c:62:f1:36:60:94:7c:92: a1:c9:57:91:7a:b6:9b:00:c5:2e:5a:38:86:76:d4:b3:bd:13: 70:b2:06:47:21:8a:55:94:a2:08:ea:7d:25:0b:95:2c:ad:9a: 33:25:39:97:21:93:57:e8:8a:6c:60:65:19:14:a9:63:85:d7: 19:07:20:29 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUMbZjFtY7xeEgs8C8/B9kepIXzx8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIwNTk1MloX DTI3MDUwMTIxMDQ1MlowMzExMC8GA1UEAxMoRTA5ODk3ODEyMTk3QzJCM0VENjk4 NTRCQzY2RDkyRDFFQjMyMTUyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANF8xev+Fzp9uklfxnQvaWHC6TpdLKzzGdKIbsTi1W/EnI8Nc8x/YRyIej1K kQDLHtV2YXiS/Yj7yucf5CuXL71rLpgalZq/548GDSHSLkEeywPxeWq2VbXAhdov k0rWILmP7z0j6vbln6l2yRIDdMhBsxyZ+YwHGeHr9qgL9w1qUyaNrSXReQmQ89Wj CHwLfO7Yyv50MDo+zkG3AELuTifcgGyE6IpFPNUX0ZFUTaUdVq0r8bpHpe3e1I+Q B153mBPUuhvrcMLdACkxUC8W7BczOhWWK1rT6f4b7Ul56gMQ0ySPmaaekoutW19L Wz34APO1AhzUsMXvd1E2HtdomdsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTgmJeB IZfCs+1phUvGbZLR6zIVJjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIA ATAMAwQBZ4oOAwQBZ6ZcMA0EAgACMAcDBQAkBL3AMA0GCSqGSIb3DQEBCwUAA4IB AQBrRI410wgsIBWuDK2yFW/w8JN22k+RcdN1H0MwuVKvHkRZkT+kFbTBg+Vuru09 MFMHOz26uBgrFpptjDN3W8McfrvIoFTT25dIT3RY3955OYnSlRC6h9rwyZcowWb4 11haN6qeB4ha09bexHVaAFZl9/IDqXyr56N1b+w3TK8BCGzriFeaoudWezKjDTg4 ryoKi940g0pMdj1tIqHIShUkEliGH6sgdcHojfT7IMo2sII3mSP7BIiOa/pcbKFo XGLxNmCUfJKhyVeRerabAMUuWjiGdtSzvRNwsgZHIYpVlKII6n0lC5UsrZozJTmX IZNX6IpsYGUZFKljhdcZByAp -----END CERTIFICATE-----Generated at Sun May 3 00:42:28 2026 by rpki-client