$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138865.roa File: AS138865.roa (raw, json) Hash identifier: hcS2pA3HPmwldPyFbbJs4iJLyldvg3VBZV80mqPFQ2o= Subject key identifier: 5D:62:5A:7F:AA:21:9A:F4:BB:76:39:04:0F:9D:13:25:C4:5A:02:56 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2F657B70A13551F2F3E5598A980B7732B7A1B2AA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138865.roa Signing time: Sat 02 May 2026 21:05:25 +0000 ROA not before: Sat 02 May 2026 21:00:25 +0000 ROA not after: Sat 01 May 2027 21:05:25 +0000 asID: 138865 IP address blocks: 103.139.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:65:7b:70:a1:35:51:f2:f3:e5:59:8a:98:0b:77:32:b7:a1:b2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:00:25 2026 GMT Not After : May 1 21:05:25 2027 GMT Subject: CN=5D625A7FAA219AF4BB7639040F9D1325C45A0256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9d:ae:48:6f:cd:63:78:49:aa:4b:10:de:88: 79:5c:6b:86:4b:78:57:b3:38:0f:59:9f:5e:7a:b8: 10:27:fe:21:fa:5e:f2:62:93:67:5d:7d:7d:21:fc: 5d:78:dd:84:65:df:fc:8e:3b:9d:dd:ca:ff:09:5c: d5:f5:31:ed:24:91:0a:43:ee:da:b3:94:80:7f:f2: 70:49:a0:06:49:76:ca:6d:fb:78:d5:5c:68:ab:a1: d5:65:f6:57:66:9e:90:3d:b7:9f:c5:14:56:3c:d9: d0:4b:90:49:4b:61:3d:62:92:53:7d:00:76:ec:08: ed:41:e9:7e:b6:40:ec:9f:b1:90:8b:d9:d4:2e:c6: 2b:20:00:70:79:77:01:a0:5f:7d:6e:80:92:6e:ca: 24:8c:69:dd:49:05:ae:cd:b6:42:31:6b:8d:6d:9b: c4:d7:82:55:42:0b:74:a6:fe:5a:46:27:62:fb:7f: 05:78:3e:ab:29:32:11:91:f2:28:d6:48:3f:17:70: 02:0c:a6:b2:60:04:f3:48:52:c8:8c:86:e3:59:ee: 28:7a:6f:de:14:8e:47:23:1b:e0:56:3c:4e:61:e4: 3e:64:b1:00:97:cd:8d:1c:c6:dc:3c:86:4f:ac:a1: 3d:56:95:ef:9c:3f:d5:fd:86:d3:e5:11:77:47:d5: cd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:62:5A:7F:AA:21:9A:F4:BB:76:39:04:0F:9D:13:25:C4:5A:02:56 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138865.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.244.0/23 Signature Algorithm: sha256WithRSAEncryption 42:a1:01:c4:6f:36:5d:90:48:91:25:dc:bc:43:8b:03:31:ec: 09:0d:54:79:4d:07:3c:80:ed:82:33:ae:59:a7:b5:72:2c:b9: 34:e9:5d:ad:73:3d:a3:00:ae:c0:8d:b4:51:57:e9:e8:b1:02: 49:02:f5:a6:5c:6f:d1:2d:8a:09:49:17:5c:20:41:10:e0:88: ff:44:aa:99:44:88:c0:9c:f7:d8:da:fc:06:ac:9a:e7:d3:4a: 05:64:50:f0:8e:05:76:34:e7:d2:de:25:e8:62:00:90:6a:56: c8:df:47:3c:53:55:4d:86:25:c2:9d:59:67:7a:e0:bf:bf:ce: af:ea:c9:0e:44:ec:1f:a8:dd:de:06:75:20:1e:0b:f4:79:b1: 7a:2d:99:6e:60:d6:9a:d3:6b:8b:84:0f:be:c0:3b:fe:fb:8c: 13:2e:f8:90:bf:53:be:70:66:b2:d6:3a:58:12:ca:3e:bf:2a: 9b:2e:86:c6:ac:ca:61:e6:20:00:23:1e:c8:ec:12:c2:6e:02: f9:4b:79:36:c2:8c:64:e4:57:5d:e7:24:35:4d:7f:73:0d:68: 3a:1e:66:94:cb:d6:66:ad:c4:f9:04:91:3b:3e:87:90:1a:3a: c2:67:1f:be:ff:2e:ac:fd:52:91:21:d9:cb:ca:f9:f8:93:08: 8c:34:77:1b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUL2V7cKE1UfLz5VmKmAt3MrehsqowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDAyNVoX DTI3MDUwMTIxMDUyNVowMzExMC8GA1UEAxMoNUQ2MjVBN0ZBQTIxOUFGNEJCNzYz OTA0MEY5RDEzMjVDNDVBMDI1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAImdrkhvzWN4SapLEN6IeVxrhkt4V7M4D1mfXnq4ECf+Ifpe8mKTZ119fSH8 XXjdhGXf/I47nd3K/wlc1fUx7SSRCkPu2rOUgH/ycEmgBkl2ym37eNVcaKuh1WX2 V2aekD23n8UUVjzZ0EuQSUthPWKSU30AduwI7UHpfrZA7J+xkIvZ1C7GKyAAcHl3 AaBffW6Akm7KJIxp3UkFrs22QjFrjW2bxNeCVUILdKb+WkYnYvt/BXg+qykyEZHy KNZIPxdwAgymsmAE80hSyIyG41nuKHpv3hSORyMb4FY8TmHkPmSxAJfNjRzG3DyG T6yhPVaV75w/1f2G0+URd0fVzSsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRdYlp/ qiGa9Lt2OQQPnRMlxFoCVjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODY1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ4v0MA0GCSqGSIb3DQEBCwUAA4IBAQBCoQHEbzZdkEiRJdy8Q4sDMewJ DVR5TQc8gO2CM65Zp7VyLLk06V2tcz2jAK7AjbRRV+nosQJJAvWmXG/RLYoJSRdc IEEQ4Ij/RKqZRIjAnPfY2vwGrJrn00oFZFDwjgV2NOfS3iXoYgCQalbI30c8U1VN hiXCnVlneuC/v86v6skOROwfqN3eBnUgHgv0ebF6LZluYNaa02uLhA++wDv++4wT LviQv1O+cGay1jpYEso+vyqbLobGrMph5iAAIx7I7BLCbgL5S3k2woxk5Fdd5yQ1 TX9zDWg6HmaUy9ZmrcT5BJE7PoeQGjrCZx++/y6s/VKRIdnLyvn4kwiMNHcb -----END CERTIFICATE-----Generated at Sun May 3 01:44:40 2026 by rpki-client