$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138841.roa File: AS138841.roa (raw, json) Hash identifier: yzvpq9xiVO8mdxSt3RB/i0NVtryoh5x8tM38X/e2L0Y= Subject key identifier: 75:32:56:51:C9:8B:BF:9C:89:80:3F:FF:3C:FE:EC:61:82:6E:CA:DB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3E030B6E3B1515168A6B0D4C5B4D0434B0CD3380 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138841.roa Signing time: Mon 14 Sep 2026 09:40:59 +0000 ROA not before: Mon 14 Sep 2026 09:35:59 +0000 ROA not after: Mon 13 Sep 2027 09:40:59 +0000 asID: 138841 IP address blocks: 43.229.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:03:0b:6e:3b:15:15:16:8a:6b:0d:4c:5b:4d:04:34:b0:cd:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 14 09:35:59 2026 GMT Not After : Sep 13 09:40:59 2027 GMT Subject: CN=75325651C98BBF9C89803FFF3CFEEC61826ECADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:80:b7:be:24:51:ba:82:21:33:cf:5b:c2: 56:eb:d9:b7:81:b8:9d:88:d0:3a:a6:4b:5c:dc:51: 98:57:fa:85:98:e9:7a:65:57:36:27:b9:c0:60:f9: e3:ab:9d:4e:56:80:af:2a:5a:4f:3f:e9:e2:ac:9c: ca:82:a1:7a:a2:ea:db:b4:65:43:11:7a:4c:e9:6b: 2c:36:9d:f6:70:5d:8c:8e:5e:55:96:ea:d1:de:93: 04:b2:06:b6:1b:2f:b2:0f:84:a5:5a:50:15:c0:70: 46:b2:0e:52:a7:3e:80:a1:99:df:ef:c5:b6:4b:4f: b9:0d:f0:2b:e4:42:e1:95:a9:a3:ff:ad:d0:4e:40: ed:43:4c:72:42:56:8e:25:15:c4:86:09:34:73:6d: f5:79:ad:69:80:83:4e:4c:60:1b:e4:fe:4c:dc:07: 4c:8d:14:92:14:d4:47:d5:79:7d:c8:bf:87:90:52: 80:dc:2e:46:4e:f9:9a:e2:5e:f3:0f:5a:8f:e7:e2: 9d:c6:15:75:cc:08:cd:a4:61:d0:b3:0b:8d:1c:91: 52:55:e3:95:95:9e:b4:bf:08:e4:8f:14:32:43:b5: e6:0d:ee:bc:45:4b:f8:85:c9:5e:f1:a3:7c:a3:4f: d4:0f:39:b5:a3:e0:7e:a3:95:46:43:36:78:ca:90: c8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:32:56:51:C9:8B:BF:9C:89:80:3F:FF:3C:FE:EC:61:82:6E:CA:DB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138841.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.252.0/24 Signature Algorithm: sha256WithRSAEncryption 95:5b:b1:cb:76:fa:68:f7:8a:6b:0e:f2:b0:d6:4c:ef:18:eb: 5b:a8:21:98:78:f3:94:26:9d:3b:8b:3b:aa:73:89:6d:d9:5e: f5:1c:98:31:21:6e:3f:d5:c3:82:e4:37:e6:4e:3b:6f:9b:4d: 9a:fa:ff:a1:11:18:31:a0:47:c7:96:ef:83:b6:e3:7e:3f:aa: 38:04:68:25:27:21:65:c7:d0:38:b8:b3:97:91:a6:d4:54:3c: 3d:a8:f6:ad:6d:00:df:29:9d:48:e5:60:35:cd:6d:bb:b7:31: ce:97:c6:ac:7f:71:c2:be:d4:84:03:9a:b6:c7:93:5f:70:17: 6f:3e:44:67:89:2d:4d:fe:87:3b:bb:13:2b:32:5a:fa:99:f5: 59:13:4d:9a:28:7f:0d:ba:a9:a1:f5:86:d6:3c:64:73:b4:a1: 03:2a:02:2e:8c:ef:a8:57:87:be:2e:a3:2e:4c:1f:b1:51:43: da:0d:e3:c7:c8:91:dc:5d:29:c3:83:91:b2:ac:25:b4:9d:86: fe:a3:c9:0a:d5:08:c2:f1:93:71:80:54:1e:a9:5f:a4:54:21: e6:fb:00:e9:a9:c0:20:e5:aa:2f:9f:75:84:6f:c1:95:40:3e: 09:59:d9:09:86:f7:9e:06:94:dc:02:ca:2d:c9:e4:bd:e5:cd: 36:43:0c:e2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUPgMLbjsVFRaKaw1MW00ENLDNM4AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxNDA5MzU1OVoX DTI3MDkxMzA5NDA1OVowMzExMC8GA1UEAxMoNzUzMjU2NTFDOThCQkY5Qzg5ODAz RkZGM0NGRUVDNjE4MjZFQ0FEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALg2gLe+JFG6giEzz1vCVuvZt4G4nYjQOqZLXNxRmFf6hZjpemVXNie5wGD5 46udTlaArypaTz/p4qycyoKheqLq27RlQxF6TOlrLDad9nBdjI5eVZbq0d6TBLIG thsvsg+EpVpQFcBwRrIOUqc+gKGZ3+/FtktPuQ3wK+RC4ZWpo/+t0E5A7UNMckJW jiUVxIYJNHNt9XmtaYCDTkxgG+T+TNwHTI0UkhTUR9V5fci/h5BSgNwuRk75muJe 8w9aj+fincYVdcwIzaRh0LMLjRyRUlXjlZWetL8I5I8UMkO15g3uvEVL+IXJXvGj fKNP1A85taPgfqOVRkM2eMqQyP8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR1MlZR yYu/nImAP/88/uxhgm7K2zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODQxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAK+X8MA0GCSqGSIb3DQEBCwUAA4IBAQCVW7HLdvpo94prDvKw1kzvGOtb qCGYePOUJp07izuqc4lt2V71HJgxIW4/1cOC5DfmTjtvm02a+v+hERgxoEfHlu+D tuN+P6o4BGglJyFlx9A4uLOXkabUVDw9qPatbQDfKZ1I5WA1zW27tzHOl8asf3HC vtSEA5q2x5NfcBdvPkRniS1N/oc7uxMrMlr6mfVZE02aKH8Nuqmh9YbWPGRztKED KgIujO+oV4e+LqMuTB+xUUPaDePHyJHcXSnDg5GyrCW0nYb+o8kK1QjC8ZNxgFQe qV+kVCHm+wDpqcAg5aovn3WEb8GVQD4JWdkJhveeBpTcAsotyeS95c02Qwzi -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:06 2026 by rpki-client