$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138843.roa File: AS138843.roa (raw, json) Hash identifier: eb4xcDNzDu97XxWNKSvJl0a23p5pvXMRBhrgembka9Y= Subject key identifier: 88:F5:D5:F6:57:75:9F:62:6A:61:CE:49:06:4B:3A:48:C1:62:3D:C1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0C3B6430136F0F4AF5686A677228F81ED1E8CCF8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138843.roa Signing time: Sat 02 May 2026 08:35:52 +0000 ROA not before: Sat 02 May 2026 08:30:52 +0000 ROA not after: Sat 01 May 2027 08:35:52 +0000 asID: 138843 IP address blocks: 203.84.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3b:64:30:13:6f:0f:4a:f5:68:6a:67:72:28:f8:1e:d1:e8:cc:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:52 2026 GMT Not After : May 1 08:35:52 2027 GMT Subject: CN=88F5D5F657759F626A61CE49064B3A48C1623DC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:af:6d:1a:29:26:39:c1:d5:28:30:0b:f5:86: 4b:3f:fe:9e:3d:db:12:0b:ad:91:ac:0b:b4:59:ac: 31:9a:bb:78:e0:c2:0b:c7:ea:19:8c:3a:27:27:54: f4:da:e4:21:d1:e0:a6:6f:4e:bd:c4:0c:39:80:ef: 66:4a:41:e3:3c:e3:06:2a:47:17:5b:5f:be:a8:54: 02:58:c6:27:04:92:d7:68:d8:17:9c:e7:ac:51:4f: 46:3a:ee:41:e4:01:7f:34:ef:f2:2c:92:90:ad:69: fd:fe:2f:90:7c:88:d9:bd:af:bc:55:20:d9:e2:19: 9d:73:7b:8e:a0:af:f5:25:7e:17:14:8c:5b:98:07: a0:ce:15:46:b6:42:bc:0e:71:0a:46:9d:76:a1:1f: 86:4f:5a:9f:93:9c:02:10:21:b7:b2:46:d1:98:a6: 0b:4e:75:dc:7d:5a:ef:c2:f2:77:0f:3b:7b:ab:1a: 16:ad:20:83:9a:ab:b6:75:a6:73:0e:fa:a4:0d:83: 31:92:b7:2c:a0:e9:e9:ef:f2:09:b8:1d:9d:71:fb: a5:f7:3d:b4:39:41:9b:98:d7:91:b0:fc:a1:f6:d5: 79:79:ba:8c:96:18:f6:46:f8:13:30:c1:2e:bf:bc: 9f:e5:6a:8f:ef:f8:e3:bf:b9:dc:e6:a3:82:92:dd: 99:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F5:D5:F6:57:75:9F:62:6A:61:CE:49:06:4B:3A:48:C1:62:3D:C1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.142.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:ba:59:a4:8e:e9:14:cd:72:c8:06:7d:fe:ae:ee:06:b8:ea: 9a:a1:23:ff:ef:58:25:63:ee:72:9a:c0:63:0b:0d:99:86:d3: 05:29:2e:bf:15:4c:98:44:b5:2b:30:f5:d3:91:f4:0e:eb:43: 7f:c2:43:38:f4:25:63:6b:63:3b:cc:c8:d0:9a:97:e5:54:df: a3:f1:ee:23:2e:d9:4d:ff:12:e0:76:5e:71:fd:82:15:45:49: dd:b7:42:ec:e9:a1:c1:bb:1d:ab:72:d1:f7:84:c6:39:c6:3d: e9:dc:36:e3:e4:17:f3:4e:b6:e6:77:8f:de:6d:6b:c5:37:f5: e4:a2:4c:77:01:be:2d:7d:7f:b0:f2:03:8c:31:cb:e0:cb:9f: 3e:69:aa:5e:83:79:88:52:cf:e7:75:d4:3d:f2:63:90:c3:53: 14:d2:57:69:9a:01:c7:2c:33:b5:70:24:f2:91:ca:c7:e4:24: 37:6d:95:a0:75:d8:c7:40:b6:11:6e:d6:01:f2:b3:10:87:89: b7:1a:93:c3:85:1d:91:8b:a1:d1:82:89:84:24:d9:c2:4a:99: a6:9c:74:d5:50:45:1b:be:d1:d7:0d:cc:27:b5:75:f3:53:e1: ca:2c:64:09:de:31:0f:86:9b:03:47:a5:67:1e:90:1e:d6:89: ff:b8:f4:c8 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUDDtkMBNvD0r1aGpncij4HtHozPgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzA1MloX DTI3MDUwMTA4MzU1MlowMzExMC8GA1UEAxMoODhGNUQ1RjY1Nzc1OUY2MjZBNjFD RTQ5MDY0QjNBNDhDMTYyM0RDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKevbRopJjnB1SgwC/WGSz/+nj3bEgutkawLtFmsMZq7eODCC8fqGYw6JydU 9NrkIdHgpm9OvcQMOYDvZkpB4zzjBipHF1tfvqhUAljGJwSS12jYF5znrFFPRjru QeQBfzTv8iySkK1p/f4vkHyI2b2vvFUg2eIZnXN7jqCv9SV+FxSMW5gHoM4VRrZC vA5xCkaddqEfhk9an5OcAhAht7JG0ZimC0513H1a78Lydw87e6saFq0gg5qrtnWm cw76pA2DMZK3LKDp6e/yCbgdnXH7pfc9tDlBm5jXkbD8ofbVeXm6jJYY9kb4EzDB Lr+8n+Vqj+/447+53OajgpLdmYcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSI9dX2 V3WfYmphzkkGSzpIwWI9wTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODQzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAy1SOMA0GCSqGSIb3DQEBCwUAA4IBAQA6ulmkjukUzXLIBn3+ru4GuOqa oSP/71glY+5ymsBjCw2ZhtMFKS6/FUyYRLUrMPXTkfQO60N/wkM49CVja2M7zMjQ mpflVN+j8e4jLtlN/xLgdl5x/YIVRUndt0Ls6aHBux2rctH3hMY5xj3p3Dbj5Bfz Trbmd4/ebWvFN/Xkokx3Ab4tfX+w8gOMMcvgy58+aapeg3mIUs/nddQ98mOQw1MU 0ldpmgHHLDO1cCTykcrH5CQ3bZWgddjHQLYRbtYB8rMQh4m3GpPDhR2Ri6HRgomE JNnCSpmmnHTVUEUbvtHXDcwntXXzU+HKLGQJ3jEPhpsDR6VnHpAe1on/uPTI -----END CERTIFICATE-----Generated at Sun May 3 00:42:23 2026 by rpki-client