$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138850.roa File: AS138850.roa (raw, json) Hash identifier: zHcWO/cB2q2RyZFCI/r6+TioboOXN8D8hnclF+OiX8k= Subject key identifier: 7A:02:9C:1E:DA:16:04:E3:55:44:29:94:A9:00:A0:75:8E:C7:A4:FF Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 20A4E34FD7C8748D46FA5F10FB0A03D8CF55C069 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138850.roa Signing time: Sat 02 May 2026 08:35:20 +0000 ROA not before: Sat 02 May 2026 08:30:20 +0000 ROA not after: Sat 01 May 2027 08:35:20 +0000 asID: 138850 IP address blocks: 103.138.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a4:e3:4f:d7:c8:74:8d:46:fa:5f:10:fb:0a:03:d8:cf:55:c0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:20 2026 GMT Not After : May 1 08:35:20 2027 GMT Subject: CN=7A029C1EDA1604E355442994A900A0758EC7A4FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d6:8a:1d:30:0a:9f:c3:9d:2a:bd:1d:45:d3: f4:b8:2e:82:91:9b:b7:15:64:42:db:f3:f1:1b:cd: 0b:7a:a0:0d:f2:19:a8:fd:7e:fe:4b:4e:3f:b8:90: 4b:a9:33:24:e0:36:29:97:5c:e9:73:4d:1c:1a:14: 90:47:98:4d:1a:41:de:54:47:37:14:c6:82:5d:5e: 24:ca:9b:c2:4e:bd:31:e9:93:f5:42:f2:96:af:70: 68:91:f0:f2:e5:da:4e:e9:86:48:6a:25:ac:08:39: ce:2f:36:08:36:23:33:57:50:16:88:7f:2e:37:88: df:d3:c2:5a:83:0d:48:dd:f5:9b:98:ab:a1:87:7f: 61:00:37:d8:bf:35:4e:cf:1d:ce:9c:ad:c9:51:74: 1d:2e:51:80:4b:17:79:e0:15:8a:56:a8:ca:3a:e0: b3:f1:c2:49:39:6c:cd:19:28:6a:1a:d7:7d:d6:1a: 50:22:c3:ee:79:df:51:ed:aa:45:53:33:97:42:a0: cf:63:bd:80:c1:ff:2b:0d:35:90:10:bc:12:6b:72: 5a:9b:e8:06:32:52:85:e3:e3:cc:25:72:d7:db:26: 74:42:29:9b:9d:9e:85:79:ff:ce:1a:d8:a1:c2:cb: 2d:dd:1e:5c:43:41:26:45:26:07:57:41:1d:01:07: 7a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:02:9C:1E:DA:16:04:E3:55:44:29:94:A9:00:A0:75:8E:C7:A4:FF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138850.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.143.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:9f:5a:e7:03:d5:32:27:dc:69:39:a2:76:45:d0:a5:91:d4: 6f:17:e4:d2:2c:b5:b6:5d:fd:5f:c4:b0:64:c3:fd:3f:a7:9c: 4d:9b:f7:04:9a:f8:51:4a:0f:7b:bb:d8:98:5e:8a:af:62:e5: 7b:98:92:1d:31:1a:ed:d8:fd:78:7a:a5:a9:30:89:b9:14:54: 89:29:5a:91:a9:52:5f:13:8f:ed:5d:08:7d:49:af:93:2f:0e: 88:d5:aa:6c:ed:04:a3:42:5c:e8:96:8c:bb:62:3c:29:c4:72: df:10:c4:b1:1e:b8:88:81:56:4b:95:84:84:cd:f1:34:a2:07: 30:70:28:1a:da:d1:92:2c:d2:78:f7:d1:c5:09:00:de:10:82: 42:fd:5f:0a:c5:f2:f6:b2:31:c8:48:3b:51:90:92:96:09:c3: f2:75:ba:5a:eb:a5:e9:6d:4a:67:f1:90:b5:f9:d3:eb:a0:d5: e8:ce:3a:17:a0:37:fe:af:b4:b7:44:7c:87:3c:2b:bb:c5:3e: 90:90:33:2e:a9:17:8c:34:a8:39:11:31:7a:23:36:b6:67:4d: 98:28:7f:77:0e:f5:a5:b0:0f:17:06:24:62:b7:d6:79:e5:e1: bd:71:4d:2c:9c:69:ec:51:7d:22:58:66:ea:4a:31:8b:b2:e8: f4:78:05:1c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUIKTjT9fIdI1G+l8Q+woD2M9VwGkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzAyMFoX DTI3MDUwMTA4MzUyMFowMzExMC8GA1UEAxMoN0EwMjlDMUVEQTE2MDRFMzU1NDQy OTk0QTkwMEEwNzU4RUM3QTRGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMzWih0wCp/DnSq9HUXT9LgugpGbtxVkQtvz8RvNC3qgDfIZqP1+/ktOP7iQ S6kzJOA2KZdc6XNNHBoUkEeYTRpB3lRHNxTGgl1eJMqbwk69MemT9ULylq9waJHw 8uXaTumGSGolrAg5zi82CDYjM1dQFoh/LjeI39PCWoMNSN31m5iroYd/YQA32L81 Ts8dzpytyVF0HS5RgEsXeeAVilaoyjrgs/HCSTlszRkoahrXfdYaUCLD7nnfUe2q RVMzl0Kgz2O9gMH/Kw01kBC8EmtyWpvoBjJShePjzCVy19smdEIpm52ehXn/zhrY ocLLLd0eXENBJkUmB1dBHQEHep0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR6Apwe 2hYE41VEKZSpAKB1jsek/zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODUwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ4qPMA0GCSqGSIb3DQEBCwUAA4IBAQBbn1rnA9UyJ9xpOaJ2RdClkdRv F+TSLLW2Xf1fxLBkw/0/p5xNm/cEmvhRSg97u9iYXoqvYuV7mJIdMRrt2P14eqWp MIm5FFSJKVqRqVJfE4/tXQh9Sa+TLw6I1aps7QSjQlzoloy7YjwpxHLfEMSxHriI gVZLlYSEzfE0ogcwcCga2tGSLNJ499HFCQDeEIJC/V8KxfL2sjHISDtRkJKWCcPy dbpa66XpbUpn8ZC1+dProNXozjoXoDf+r7S3RHyHPCu7xT6QkDMuqReMNKg5ETF6 Iza2Z02YKH93DvWlsA8XBiRit9Z55eG9cU0snGnsUX0iWGbqSjGLsuj0eAUc -----END CERTIFICATE-----Generated at Sun May 3 00:42:25 2026 by rpki-client