$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138866.roa File: AS138866.roa (raw, json) Hash identifier: iRFmo339xn+K8EJai2gM9jObDDtRs/PmD9SVw9vhyXY= Subject key identifier: 75:D1:D9:AB:C6:05:4A:E9:CC:3A:B4:2B:CE:A6:70:80:48:DD:EB:C9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5D5E5BD56FC676BAEB4B1DFFFA04075DED7D9710 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138866.roa Signing time: Sat 02 May 2026 08:37:01 +0000 ROA not before: Sat 02 May 2026 08:32:01 +0000 ROA not after: Sat 01 May 2027 08:37:01 +0000 asID: 138866 IP address blocks: 103.140.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5e:5b:d5:6f:c6:76:ba:eb:4b:1d:ff:fa:04:07:5d:ed:7d:97:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:01 2026 GMT Not After : May 1 08:37:01 2027 GMT Subject: CN=75D1D9ABC6054AE9CC3AB42BCEA6708048DDEBC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:e6:fb:d0:68:fb:7a:d7:56:4c:2e:3b:69: b0:dc:56:bd:cf:ae:2e:ce:f6:47:5d:5f:0b:5f:f2: fc:70:f8:73:2b:1e:01:2c:d5:02:c1:27:b1:6e:dd: e9:6d:73:86:76:ba:df:ac:44:aa:2c:2d:f0:c3:dc: 70:31:59:67:2f:99:fd:0d:97:11:a7:c1:af:f4:9b: 16:12:25:5b:e9:ce:f3:cc:f5:a7:00:5b:7a:b3:1c: df:5d:a1:64:4e:65:ca:55:26:b8:1f:72:c0:a6:20: 25:49:ac:3c:53:e4:4e:73:f1:05:8f:43:bb:c6:d3: 62:c3:50:76:bf:ac:a0:78:b1:52:67:d0:1b:b0:fb: d9:46:79:4c:97:f8:4b:2b:3f:ef:62:e2:95:50:f4: 21:11:34:58:99:6b:ef:84:18:99:fa:6b:05:7b:97: df:a1:8c:00:b1:37:c6:33:a8:52:06:78:c6:e6:b1: 7b:ae:cb:7e:90:6e:1c:d1:c4:a0:c5:4f:64:0f:7a: 63:c3:ae:3b:3f:5a:56:f1:6e:77:b0:d0:ea:5b:58: 3a:c9:f6:9c:db:11:b0:79:01:92:36:4d:30:76:22: 94:55:a2:af:9c:b3:55:79:51:da:c0:3c:11:35:ba: 70:cc:22:33:4e:6e:af:0a:4e:8d:e0:8e:21:32:3e: d6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D1:D9:AB:C6:05:4A:E9:CC:3A:B4:2B:CE:A6:70:80:48:DD:EB:C9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138866.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.130.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:1e:a8:df:18:df:b8:d6:ba:36:72:80:7a:32:5d:2a:3a:54: 2c:04:e9:ba:19:8e:d9:7d:94:36:27:13:93:46:6f:75:e0:bd: 98:ac:a9:7b:0c:58:a5:5c:19:f2:fb:68:c4:ed:ec:5f:22:c1: 0d:33:00:50:42:ab:8c:58:89:d1:bc:d9:f7:e2:93:f8:4e:56: e5:5c:c4:e9:84:ca:ee:3d:59:85:7c:0e:5e:ea:69:d2:7c:47: cc:c8:5d:c4:a6:ed:44:88:af:67:fa:ec:48:3e:5d:4d:05:cd: 17:cd:b3:7f:50:98:7d:d7:14:95:2a:ed:38:21:99:7c:c4:ae: 42:e5:11:e6:0f:3d:bc:ee:d0:56:11:13:49:ab:e6:bc:47:35: ef:c2:65:bd:8c:c2:8a:1c:18:b9:d2:76:14:ed:20:94:10:0b: 9e:e0:05:d2:01:e5:36:a5:e3:85:10:30:64:4e:3e:22:04:4e: fd:1b:86:1d:b2:99:a7:b0:c5:da:77:40:a0:bc:40:54:17:5c: 2f:95:ca:05:86:22:80:74:68:e9:6e:28:8c:a9:ec:1b:e7:d7: 33:b1:1b:a2:e9:5f:5d:71:c0:ad:40:5a:e4:93:4b:94:91:fe: d4:b1:99:b2:52:74:1c:b8:a1:fb:5c:78:e7:27:87:50:8a:5e: e2:3f:fe:30 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUXV5b1W/GdrrrSx3/+gQHXe19lxAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIwMVoX DTI3MDUwMTA4MzcwMVowMzExMC8GA1UEAxMoNzVEMUQ5QUJDNjA1NEFFOUNDM0FC NDJCQ0VBNjcwODA0OERERUJDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKp25vvQaPt611ZMLjtpsNxWvc+uLs72R11fC1/y/HD4cyseASzVAsEnsW7d 6W1zhna636xEqiwt8MPccDFZZy+Z/Q2XEafBr/SbFhIlW+nO88z1pwBberMc312h ZE5lylUmuB9ywKYgJUmsPFPkTnPxBY9Du8bTYsNQdr+soHixUmfQG7D72UZ5TJf4 Sys/72LilVD0IRE0WJlr74QYmfprBXuX36GMALE3xjOoUgZ4xuaxe67LfpBuHNHE oMVPZA96Y8OuOz9aVvFud7DQ6ltYOsn2nNsRsHkBkjZNMHYilFWir5yzVXlR2sA8 ETW6cMwiM05urwpOjeCOITI+1mcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR10dmr xgVK6cw6tCvOpnCASN3ryTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ4yCMA0GCSqGSIb3DQEBCwUAA4IBAQAcHqjfGN+41ro2coB6Ml0qOlQs BOm6GY7ZfZQ2JxOTRm914L2YrKl7DFilXBny+2jE7exfIsENMwBQQquMWInRvNn3 4pP4TlblXMTphMruPVmFfA5e6mnSfEfMyF3Epu1EiK9n+uxIPl1NBc0XzbN/UJh9 1xSVKu04IZl8xK5C5RHmDz287tBWERNJq+a8RzXvwmW9jMKKHBi50nYU7SCUEAue 4AXSAeU2peOFEDBkTj4iBE79G4YdspmnsMXad0CgvEBUF1wvlcoFhiKAdGjpbiiM qewb59czsRui6V9dccCtQFrkk0uUkf7UsZmyUnQcuKH7XHjnJ4dQil7iP/4w -----END CERTIFICATE-----Generated at Sun May 3 00:42:18 2026 by rpki-client