$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138864.roa File: AS138864.roa (raw, json) Hash identifier: lmR1XZATdDhkdMRSPV7G06RBrjcLDfcpBRERuDvxkIY= Subject key identifier: 3D:DB:54:3E:EA:C0:9E:BA:9B:FC:52:00:96:8B:52:C2:79:FA:EF:4E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 397B112B01B885749B06CF049D062F0EC85C4361 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138864.roa Signing time: Sat 02 May 2026 21:36:20 +0000 ROA not before: Sat 02 May 2026 21:31:20 +0000 ROA not after: Sat 01 May 2027 21:36:20 +0000 asID: 138864 IP address blocks: 103.139.174.0/24 maxlen: 24 2407:74c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7b:11:2b:01:b8:85:74:9b:06:cf:04:9d:06:2f:0e:c8:5c:43:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:31:20 2026 GMT Not After : May 1 21:36:20 2027 GMT Subject: CN=3DDB543EEAC09EBA9BFC5200968B52C279FAEF4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:a0:7c:af:31:f8:13:06:81:ec:cb:0c:80: 6d:99:f3:12:93:0d:a8:13:8b:75:e2:31:0e:3d:79: fb:c7:c5:d7:92:01:9f:f5:f0:bf:aa:58:f8:1a:67: d4:b1:5a:2e:26:e3:4c:15:7e:ae:a5:a7:a9:2f:08: f7:39:c9:6a:e0:d1:8c:41:ee:1e:35:d6:6d:02:f3: 87:98:4c:ff:a2:ed:5f:87:1b:60:87:ba:a3:13:a7: c0:5a:9b:1d:d8:b1:ae:00:d2:f9:1d:ab:a5:4e:95: 4f:2d:2a:85:58:af:8f:dd:8b:be:f9:8b:9e:66:9d: c4:05:2e:23:b8:7a:53:3f:27:53:3b:e3:b4:4d:1e: 21:f6:64:eb:5c:ae:7b:94:2e:84:39:ff:7b:4d:84: e6:08:72:39:de:a2:12:0e:a7:9e:c4:ca:6e:11:58: 08:b0:0e:21:fd:54:69:0d:54:53:f3:b7:98:1b:6d: 92:c3:30:bb:79:79:27:4e:3c:86:50:7f:ae:fe:ba: bd:4f:5d:a6:d8:54:ac:65:2a:9e:e5:ac:94:99:7b: e8:77:7b:51:aa:4d:3d:b9:d7:ea:17:16:40:01:11: 83:e9:e3:f8:4d:c8:b6:31:a8:25:5c:80:39:ac:f9: d1:c9:67:9a:42:03:a7:71:f4:be:97:ee:f7:f3:91: ba:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DB:54:3E:EA:C0:9E:BA:9B:FC:52:00:96:8B:52:C2:79:FA:EF:4E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138864.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.174.0/24 IPv6: 2407:74c0::/32 Signature Algorithm: sha256WithRSAEncryption 3b:c9:28:f9:30:dc:df:25:1c:cc:4d:ee:96:5b:0f:43:19:0b: ca:39:fe:46:5b:2a:10:4a:a4:52:57:ba:51:f0:be:25:31:23: 59:2a:c6:09:20:b6:40:14:41:3d:c4:f8:9a:c4:a2:db:ce:14: c0:63:5d:08:b1:dc:c5:b0:8a:aa:46:df:98:cd:a7:34:e2:e7: 3f:9d:8f:b2:1c:d8:a6:41:f0:57:a5:85:08:58:4d:ae:46:29: ac:80:ac:50:fd:f5:5a:fe:3e:30:09:da:e8:ea:89:b0:0b:83: 70:19:72:b3:04:de:28:a8:a5:15:3c:df:fd:73:8f:79:6d:ef: 57:79:54:22:f1:f6:5c:87:8c:3b:82:03:24:21:12:43:08:4b: 56:a1:ba:d8:a4:4a:c4:1a:c4:e6:1e:0f:61:87:1e:5a:48:0b: a5:f5:8f:01:e9:52:25:11:df:40:81:5b:54:58:f4:84:97:3d: 03:23:7a:90:21:fa:ea:43:02:2f:ce:af:27:21:28:85:e2:91: 88:53:4f:f2:61:71:2f:69:a7:d9:de:b4:23:8f:31:d2:f4:84: 8e:45:d3:6f:2a:5f:ad:ab:db:a5:52:51:de:55:7c:2e:f4:2c: 7a:2b:fc:36:c0:f6:7c:2a:78:2c:23:dc:d9:8e:de:d6:cd:eb: fe:1c:48:b9 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUOXsRKwG4hXSbBs8EnQYvDshcQ2EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzEyMFoX DTI3MDUwMTIxMzYyMFowMzExMC8GA1UEAxMoM0REQjU0M0VFQUMwOUVCQTlCRkM1 MjAwOTY4QjUyQzI3OUZBRUY0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDroHyvMfgTBoHsywyAbZnzEpMNqBOLdeIxDj15+8fF15IBn/Xwv6pY+Bpn 1LFaLibjTBV+rqWnqS8I9znJauDRjEHuHjXWbQLzh5hM/6LtX4cbYIe6oxOnwFqb HdixrgDS+R2rpU6VTy0qhVivj92LvvmLnmadxAUuI7h6Uz8nUzvjtE0eIfZk61yu e5QuhDn/e02E5ghyOd6iEg6nnsTKbhFYCLAOIf1UaQ1UU/O3mBttksMwu3l5J048 hlB/rv66vU9dpthUrGUqnuWslJl76Hd7UapNPbnX6hcWQAERg+nj+E3ItjGoJVyA Oaz50clnmkIDp3H0vpfu9/ORuu0CAwEAAaOCAdswggHXMB0GA1UdDgQWBBQ921Q+ 6sCeupv8UgCWi1LCefrvTjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODY0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQAZ4uuMA0EAgACMAcDBQAkB3TAMA0GCSqGSIb3DQEBCwUAA4IBAQA7ySj5 MNzfJRzMTe6WWw9DGQvKOf5GWyoQSqRSV7pR8L4lMSNZKsYJILZAFEE9xPiaxKLb zhTAY10IsdzFsIqqRt+Yzac04uc/nY+yHNimQfBXpYUIWE2uRimsgKxQ/fVa/j4w Cdro6omwC4NwGXKzBN4oqKUVPN/9c495be9XeVQi8fZch4w7ggMkIRJDCEtWobrY pErEGsTmHg9hhx5aSAul9Y8B6VIlEd9AgVtUWPSElz0DI3qQIfrqQwIvzq8nISiF 4pGIU0/yYXEvaafZ3rQjjzHS9ISORdNvKl+tq9ulUlHeVXwu9Cx6K/w2wPZ8Kngs I9zZjt7Wzev+HEi5 -----END CERTIFICATE-----Generated at Sun May 3 00:42:16 2026 by rpki-client