$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138884.roa File: AS138884.roa (raw, json) Hash identifier: +Ivj941XwQNxVwQzcypHopiBGP1+6nDKDmn0x7oZXYA= Subject key identifier: 4C:B7:B6:30:C8:88:97:7C:0C:14:2E:3C:56:C3:17:F7:16:76:DB:C7 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4D539CDFC2E2EB4BD3ECF6A834C045CB4258614B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138884.roa Signing time: Sat 05 Sep 2026 10:39:19 +0000 ROA not before: Sat 05 Sep 2026 10:34:19 +0000 ROA not after: Sat 04 Sep 2027 10:39:19 +0000 asID: 138884 IP address blocks: 103.94.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:53:9c:df:c2:e2:eb:4b:d3:ec:f6:a8:34:c0:45:cb:42:58:61:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 5 10:34:19 2026 GMT Not After : Sep 4 10:39:19 2027 GMT Subject: CN=4CB7B630C888977C0C142E3C56C317F71676DBC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:f2:f7:01:a3:c1:17:cd:8e:ad:7d:fa:00: 45:7b:61:a1:3e:23:3c:28:e8:ff:34:f3:11:ff:66: 07:1b:4b:e4:19:21:61:5c:a5:a4:06:5b:63:bb:21: 70:96:f7:8a:52:0e:91:55:87:c4:02:6d:d5:56:45: 00:28:d6:e6:50:33:67:a8:95:41:d6:cd:95:1d:40: 19:3c:68:03:8e:24:7e:39:33:0e:57:5d:76:29:8c: f7:1d:07:3f:07:f3:70:cf:4d:ea:68:19:56:1a:05: b7:99:5b:57:bf:d6:76:09:d6:ae:4b:93:8f:ad:8d: 19:6a:3e:ee:56:55:78:c5:f2:4d:c9:dd:f0:85:30: fb:9b:6c:63:19:08:9b:0a:b4:6d:10:5a:f8:3a:c1: 65:1a:20:68:3d:53:38:f2:f0:18:e6:85:58:48:70: 5c:e1:34:a7:61:17:86:8d:33:48:af:72:ca:ef:b0: 20:85:8f:ca:0c:07:d9:6a:e9:c2:49:33:1b:1f:1e: 66:64:df:1b:ea:38:15:58:08:51:a7:51:66:7d:f4: 9a:80:18:52:9f:18:af:6e:f8:de:4d:16:43:9a:26: 1a:dc:80:05:db:67:8b:db:c2:eb:7f:55:09:97:7d: 79:9e:00:2c:fb:bc:85:2c:a6:c2:c1:e1:05:0d:61: 18:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B7:B6:30:C8:88:97:7C:0C:14:2E:3C:56:C3:17:F7:16:76:DB:C7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138884.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.94.250.0/23 Signature Algorithm: sha256WithRSAEncryption 72:f0:13:74:3a:d0:06:37:ca:2e:7d:cd:ba:60:01:e3:ba:2e: 7c:3d:9f:c8:1e:78:57:56:38:40:40:79:3c:57:e1:0f:8e:f6: 16:05:a4:39:cc:cc:bb:8d:8c:e3:35:f8:8f:56:c8:27:a1:0b: ac:88:ad:08:3d:c5:3b:46:55:51:53:ae:2e:2f:cc:10:5d:ce: bd:a2:61:4f:37:73:66:b9:2f:56:6b:54:1a:85:fb:30:ea:f5: c2:99:76:7b:57:69:d0:06:0a:8d:e2:89:61:ea:01:bc:58:d0: 5e:0b:9d:5e:9c:3d:72:fe:4e:7d:63:b4:6e:d7:90:a7:9c:50: f3:55:72:bb:a4:11:f7:cf:36:17:64:f2:9c:82:dd:52:dd:96: a6:e5:b8:68:5b:4b:36:7a:b0:8d:76:07:bc:c1:64:64:2a:3e: 73:c1:00:50:76:87:b8:b0:a2:16:86:49:fa:d6:5e:d1:e5:04: 60:95:a9:5f:7c:a8:18:f7:a6:4f:73:87:28:df:65:23:ca:fd: 08:35:39:68:8d:fd:91:8e:b5:b4:bc:ca:a2:12:29:f4:36:6b: 00:80:b2:72:f9:19:59:95:d1:76:79:f8:b7:ce:32:8e:de:ce: cc:22:8b:18:e4:89:4d:98:ff:78:df:79:ea:3f:17:78:81:2e: 0e:c1:ab:ad -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUTVOc38Li60vT7PaoNMBFy0JYYUswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkwNTEwMzQxOVoX DTI3MDkwNDEwMzkxOVowMzExMC8GA1UEAxMoNENCN0I2MzBDODg4OTc3QzBDMTQy RTNDNTZDMzE3RjcxNjc2REJDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKDZ8vcBo8EXzY6tffoARXthoT4jPCjo/zTzEf9mBxtL5BkhYVylpAZbY7sh cJb3ilIOkVWHxAJt1VZFACjW5lAzZ6iVQdbNlR1AGTxoA44kfjkzDldddimM9x0H PwfzcM9N6mgZVhoFt5lbV7/WdgnWrkuTj62NGWo+7lZVeMXyTcnd8IUw+5tsYxkI mwq0bRBa+DrBZRogaD1TOPLwGOaFWEhwXOE0p2EXho0zSK9yyu+wIIWPygwH2Wrp wkkzGx8eZmTfG+o4FVgIUadRZn30moAYUp8Yr2743k0WQ5omGtyABdtni9vC639V CZd9eZ4ALPu8hSymwsHhBQ1hGKMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRMt7Yw yIiXfAwULjxWwxf3FnbbxzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODg0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ176MA0GCSqGSIb3DQEBCwUAA4IBAQBy8BN0OtAGN8oufc26YAHjui58 PZ/IHnhXVjhAQHk8V+EPjvYWBaQ5zMy7jYzjNfiPVsgnoQusiK0IPcU7RlVRU64u L8wQXc69omFPN3NmuS9Wa1Qahfsw6vXCmXZ7V2nQBgqN4olh6gG8WNBeC51enD1y /k59Y7Ru15CnnFDzVXK7pBH3zzYXZPKcgt1S3Zam5bhoW0s2erCNdge8wWRkKj5z wQBQdoe4sKIWhkn61l7R5QRglalffKgY96ZPc4co32Ujyv0INTlojf2RjrW0vMqi Ein0NmsAgLJy+RlZldF2efi3zjKO3s7MIosY5IlNmP9433nqPxd4gS4Owaut -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:26 2026 by rpki-client