$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138886.roa File: AS138886.roa (raw, json) Hash identifier: aMAj52mtibcHPvIe/kqwYmczLk8wWY7t/lyCd/il4o0= Subject key identifier: BC:4D:0C:56:60:03:9F:F3:DE:13:D4:4A:6E:95:7F:38:3F:D5:37:03 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 61726AA98275D5970D204822B9FA1BFD47284D62 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138886.roa Signing time: Sat 02 May 2026 21:28:54 +0000 ROA not before: Sat 02 May 2026 21:23:54 +0000 ROA not after: Sat 01 May 2027 21:28:54 +0000 asID: 138886 IP address blocks: 117.18.20.0/22 maxlen: 24 202.58.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:72:6a:a9:82:75:d5:97:0d:20:48:22:b9:fa:1b:fd:47:28:4d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:23:54 2026 GMT Not After : May 1 21:28:54 2027 GMT Subject: CN=BC4D0C5660039FF3DE13D44A6E957F383FD53703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:00:73:a6:04:b2:d8:74:07:68:a1:12:e8: 98:b0:95:08:ef:29:c2:5c:27:3c:da:4a:c2:0b:a5: b6:ad:21:bb:a0:57:76:9d:89:0a:c8:60:f5:90:e0: 22:d1:9e:0d:4e:07:b5:c2:11:70:e8:ac:bb:13:db: 92:66:93:52:5d:3c:17:12:27:ea:f2:5e:b8:4a:c2: f9:7a:9a:7a:24:f4:98:fe:39:5d:25:d2:76:bb:37: aa:63:17:64:21:cb:5c:e5:c7:61:da:d0:ac:bc:6d: cf:9d:89:a6:ab:34:6a:1f:48:d4:f7:16:d7:91:f8: 39:a5:96:71:af:3e:b1:ce:57:03:a5:61:fb:93:f2: d8:b5:71:ac:a3:fd:b2:28:49:78:31:c9:c2:9d:e6: ae:19:d1:ae:d1:4d:70:ba:23:66:8e:44:b2:6b:5b: c5:b1:da:a1:61:f7:43:aa:32:d1:81:cb:a8:e1:90: 28:73:82:7e:03:fc:f9:54:2c:1a:b9:2b:57:f9:d9: d1:e2:34:07:29:c1:ea:97:9e:e9:d2:65:20:5d:70: 69:b0:7a:b1:37:e0:1e:77:db:f8:25:c7:60:d2:9b: e2:52:17:14:8a:c8:2e:20:79:0b:90:f5:a8:ef:33: bf:7f:f3:35:08:39:33:d8:8f:dc:01:84:52:dd:bf: 3f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4D:0C:56:60:03:9F:F3:DE:13:D4:4A:6E:95:7F:38:3F:D5:37:03 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.18.20.0/22 202.58.72.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:e5:28:e1:b8:a9:37:2b:5f:f0:9e:56:0e:4b:1e:f7:0a:53: f2:1c:76:3f:f3:d2:63:b1:24:c8:54:5f:2d:31:d8:ab:55:9a: ba:d1:e2:fb:ee:c9:c5:10:d1:96:49:ab:01:51:ed:09:9d:44: e0:4d:5e:82:ae:82:4b:3d:99:2b:dd:f0:8d:e0:a4:3f:56:83: e6:1e:b2:2b:d8:13:7a:70:32:fa:ae:f8:c2:bc:77:8e:54:d6: a2:70:c8:33:84:a3:aa:2c:7f:2d:14:d0:96:39:3b:1d:1a:46: 53:42:71:f0:df:73:18:15:cf:66:b6:51:b0:87:7b:4c:cc:f1: 33:6b:cf:91:f1:7b:85:66:aa:3e:e9:67:e5:f7:fe:c4:6e:35: ca:9e:47:33:bc:18:68:e7:7f:6b:f1:94:2d:5b:17:53:89:a2: 9a:8c:be:97:78:50:48:62:d8:83:9c:10:de:ce:37:ef:76:87: d8:4b:c7:fc:6e:13:28:f5:d2:c7:a3:35:75:e7:e4:b5:6e:36: c2:8e:c5:5b:77:1b:8d:a5:63:dc:95:a8:ca:30:02:26:84:65: c1:ad:6c:b0:f5:d2:68:c5:d1:5e:b8:6a:be:ed:05:87:a2:fa: 7c:e0:58:ac:e2:ef:be:7a:af:f2:93:90:19:a4:a0:63:d7:09: 4b:5c:f0:a6 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUYXJqqYJ11ZcNIEgiufob/UcoTWIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjM1NFoX DTI3MDUwMTIxMjg1NFowMzExMC8GA1UEAxMoQkM0RDBDNTY2MDAzOUZGM0RFMTNE NDRBNkU5NTdGMzgzRkQ1MzcwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALOyAHOmBLLYdAdooRLomLCVCO8pwlwnPNpKwgultq0hu6BXdp2JCshg9ZDg ItGeDU4HtcIRcOisuxPbkmaTUl08FxIn6vJeuErC+XqaeiT0mP45XSXSdrs3qmMX ZCHLXOXHYdrQrLxtz52Jpqs0ah9I1PcW15H4OaWWca8+sc5XA6Vh+5Py2LVxrKP9 sihJeDHJwp3mrhnRrtFNcLojZo5EsmtbxbHaoWH3Q6oy0YHLqOGQKHOCfgP8+VQs GrkrV/nZ0eI0BynB6pee6dJlIF1wabB6sTfgHnfb+CXHYNKb4lIXFIrILiB5C5D1 qO8zv3/zNQg5M9iP3AGEUt2/P8kCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBS8TQxW YAOf894T1EpulX84P9U3AzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODg2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQCdRIUAwQDyjpIMA0GCSqGSIb3DQEBCwUAA4IBAQBd5SjhuKk3K1/wnlYO Sx73ClPyHHY/89JjsSTIVF8tMdirVZq60eL77snFENGWSasBUe0JnUTgTV6CroJL PZkr3fCN4KQ/VoPmHrIr2BN6cDL6rvjCvHeOVNaicMgzhKOqLH8tFNCWOTsdGkZT QnHw33MYFc9mtlGwh3tMzPEza8+R8XuFZqo+6Wfl9/7EbjXKnkczvBho539r8ZQt WxdTiaKajL6XeFBIYtiDnBDezjfvdofYS8f8bhMo9dLHozV15+S1bjbCjsVbdxuN pWPclajKMAImhGXBrWyw9dJoxdFeuGq+7QWHovp84Fis4u++eq/yk5AZpKBj1wlL XPCm -----END CERTIFICATE-----Generated at Sun May 3 00:42:14 2026 by rpki-client