$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138890.roa File: AS138890.roa (raw, json) Hash identifier: 6XPd1LEpkpclPcEsGj2ik7GcyFvN0s64dCk1PNlFoxQ= Subject key identifier: A2:9D:44:B6:08:65:E7:CB:4C:84:00:96:B3:BF:BB:AA:6C:6B:A7:2E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 253DE363157C659C9738E05A0E4F12812ED87FD6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138890.roa Signing time: Sat 02 May 2026 21:05:50 +0000 ROA not before: Sat 02 May 2026 21:00:50 +0000 ROA not after: Sat 01 May 2027 21:05:50 +0000 asID: 138890 IP address blocks: 103.141.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:3d:e3:63:15:7c:65:9c:97:38:e0:5a:0e:4f:12:81:2e:d8:7f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:00:50 2026 GMT Not After : May 1 21:05:50 2027 GMT Subject: CN=A29D44B60865E7CB4C840096B3BFBBAA6C6BA72E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:54:df:bb:7e:8b:c9:fe:a3:8a:ef:18:9e:9d: 79:96:05:2c:b0:ae:f5:3e:87:d8:1e:18:d4:90:18: 27:74:e1:44:84:7f:9a:ec:20:8a:19:61:29:8f:d2: 5d:08:af:14:f5:6a:14:9f:7a:31:d3:d2:c5:57:6f: b6:c4:1f:eb:3e:65:58:7c:2f:41:9e:26:73:5c:1b: 2b:3a:48:a9:53:a7:32:7a:c7:ef:f7:20:45:a4:f6: 00:da:bd:f1:e4:67:2b:a6:c3:1e:3b:46:fa:b0:9f: 4c:a7:cd:0d:67:67:7a:7a:65:fb:e2:34:c2:19:2b: eb:45:22:68:49:24:03:09:19:0c:7f:2f:fe:5f:a1: 12:7b:23:f8:30:a5:87:7a:d7:e4:aa:5e:79:a7:89: d7:5f:f7:d0:b4:a1:9c:54:24:1a:11:a6:fc:0b:3e: 0d:ad:33:3f:24:56:c3:ef:7c:c1:85:84:63:de:89: b3:8b:c0:9f:92:da:d5:1d:9c:27:47:10:60:93:04: a5:4c:c6:3c:c9:24:fd:4d:9c:00:f1:28:83:c0:7b: fa:e5:2a:97:d3:4f:d6:3a:ad:b2:33:a4:f0:be:da: 33:ad:35:e8:90:f0:8e:fc:62:19:4c:2c:05:96:ef: 07:64:51:eb:a6:d4:b3:bb:2b:ba:59:f1:2f:de:14: 3c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9D:44:B6:08:65:E7:CB:4C:84:00:96:B3:BF:BB:AA:6C:6B:A7:2E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138890.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.148.0/23 Signature Algorithm: sha256WithRSAEncryption 38:45:c2:dc:9a:12:77:41:e3:e7:70:7e:49:3f:da:91:0f:b5: 19:f1:bc:e1:26:b5:eb:ca:2d:96:64:1e:dc:f3:a9:70:52:47: 82:fb:98:75:a6:f8:b0:c7:13:e5:f5:1b:4c:6d:b3:83:b0:bb: 89:da:b3:07:b1:9f:99:fc:b7:d6:79:fe:54:77:d9:56:e8:c6: d6:06:b8:53:71:7a:f9:67:70:00:4b:e5:95:b0:d5:7a:c8:35: 82:83:c2:32:c1:bb:87:05:c3:10:e0:86:8a:ba:40:26:7a:16: 02:10:01:ac:c6:9e:19:7d:aa:fa:cf:b4:f8:ae:95:fa:12:da: c0:68:f6:4e:7b:7d:6c:ba:b9:a0:c3:d8:64:d9:c3:55:85:d4: f3:ba:27:cf:ec:72:5c:18:f2:48:26:fc:3c:cd:9f:43:3a:9a: ab:fd:5b:71:9a:e2:20:47:b0:27:6f:73:e3:f8:a3:9a:16:33: de:6f:26:c9:f9:9b:3d:4a:8f:55:cd:b5:f3:e0:55:63:20:6d: 96:10:20:d5:60:fe:a4:ba:ca:3a:49:0c:15:f9:94:ce:3f:73: 25:3c:52:cd:39:a5:6f:69:ad:5d:a6:c2:74:b0:1d:09:91:ac: fe:9d:f4:95:58:59:67:4e:10:0b:12:db:b1:df:cb:ff:73:2e: 14:05:a8:5d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUJT3jYxV8ZZyXOOBaDk8SgS7Yf9YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDA1MFoX DTI3MDUwMTIxMDU1MFowMzExMC8GA1UEAxMoQTI5RDQ0QjYwODY1RTdDQjRDODQw MDk2QjNCRkJCQUE2QzZCQTcyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJdU37t+i8n+o4rvGJ6deZYFLLCu9T6H2B4Y1JAYJ3ThRIR/muwgihlhKY/S XQivFPVqFJ96MdPSxVdvtsQf6z5lWHwvQZ4mc1wbKzpIqVOnMnrH7/cgRaT2ANq9 8eRnK6bDHjtG+rCfTKfNDWdnenpl++I0whkr60UiaEkkAwkZDH8v/l+hEnsj+DCl h3rX5KpeeaeJ11/30LShnFQkGhGm/As+Da0zPyRWw+98wYWEY96Js4vAn5La1R2c J0cQYJMEpUzGPMkk/U2cAPEog8B7+uUql9NP1jqtsjOk8L7aM6016JDwjvxiGUws BZbvB2RR66bUs7srulnxL94UPOMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSinUS2 CGXny0yEAJazv7uqbGunLjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODkwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ42UMA0GCSqGSIb3DQEBCwUAA4IBAQA4RcLcmhJ3QePncH5JP9qRD7UZ 8bzhJrXryi2WZB7c86lwUkeC+5h1pviwxxPl9RtMbbODsLuJ2rMHsZ+Z/LfWef5U d9lW6MbWBrhTcXr5Z3AAS+WVsNV6yDWCg8IywbuHBcMQ4IaKukAmehYCEAGsxp4Z far6z7T4rpX6EtrAaPZOe31surmgw9hk2cNVhdTzuifP7HJcGPJIJvw8zZ9DOpqr /VtxmuIgR7Anb3Pj+KOaFjPebybJ+Zs9So9VzbXz4FVjIG2WECDVYP6kuso6SQwV +ZTOP3MlPFLNOaVvaa1dpsJ0sB0Jkaz+nfSVWFlnThALEtux38v/cy4UBahd -----END CERTIFICATE-----Generated at Sun May 3 00:42:12 2026 by rpki-client