$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138897.roa File: AS138897.roa (raw, json) Hash identifier: o9mJN1G6/11W4225JZbvjGE91nviTfBOZKroccF4s1s= Subject key identifier: EF:DE:F5:CA:11:9F:14:10:66:36:E7:37:D6:70:2A:04:E6:F2:E0:C9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7C8437E24A6490F07B46180FF31DCFC3CCB28CD8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138897.roa Signing time: Sat 02 May 2026 21:05:44 +0000 ROA not before: Sat 02 May 2026 21:00:44 +0000 ROA not after: Sat 01 May 2027 21:05:44 +0000 asID: 138897 IP address blocks: 103.140.22.0/24 maxlen: 24 2001:df0:a380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:84:37:e2:4a:64:90:f0:7b:46:18:0f:f3:1d:cf:c3:cc:b2:8c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:00:44 2026 GMT Not After : May 1 21:05:44 2027 GMT Subject: CN=EFDEF5CA119F14106636E737D6702A04E6F2E0C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:fe:a9:7e:1d:bc:59:60:58:5f:dc:76:2f: f0:36:49:29:4a:d9:e0:0c:db:66:6a:38:df:63:3c: bd:fd:2f:1d:e3:11:b7:f1:30:03:c1:39:08:9d:97: 60:cf:47:c2:9e:a5:87:8e:79:57:9a:aa:51:41:7a: 38:c1:74:80:7b:c7:9f:db:d0:4f:d2:c6:8d:a3:b1: 23:cb:ce:ec:31:b5:a8:7d:a6:a3:0a:dd:c7:4d:ef: 0c:00:55:fb:0b:62:95:f2:ed:3f:2e:6b:05:79:b9: 3c:75:80:42:ed:dc:fc:37:47:0c:f0:5f:c7:4e:3f: b7:d4:8b:e6:df:64:63:24:29:07:92:c6:39:a9:79: 8d:65:1a:1e:7e:e1:b7:1e:f3:42:80:70:f6:90:8f: fd:6a:74:de:c7:16:de:7b:70:a2:fc:96:0a:27:01: 13:ae:bd:b1:f4:e6:2e:3e:7b:83:7b:34:d7:be:33: 5c:47:fd:83:b5:0a:b5:ed:8e:9c:53:a8:08:93:8a: 82:dc:a9:71:4c:c5:35:b6:a6:b2:d4:38:9c:29:25: 09:e6:60:8b:fe:37:28:d0:51:9d:e1:78:5e:28:72: 00:b1:9d:3e:01:68:57:4b:80:65:92:62:27:bf:36: b7:db:b9:99:a8:8f:6a:c4:05:1b:04:cf:f7:bd:b6: ad:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DE:F5:CA:11:9F:14:10:66:36:E7:37:D6:70:2A:04:E6:F2:E0:C9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138897.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.22.0/24 IPv6: 2001:df0:a380::/48 Signature Algorithm: sha256WithRSAEncryption 82:6b:0f:64:73:15:63:62:57:f4:d4:d7:fd:f4:f9:7e:53:af: ea:78:5d:dd:ab:ad:17:a1:5d:a7:17:fe:2d:84:86:fc:ce:f4: 9a:6b:14:7d:1b:0a:d9:67:21:8d:a9:51:c8:88:47:d7:0f:97: 35:0b:ac:97:8c:85:71:29:45:7d:a0:d3:53:7c:0c:90:5e:a8: ad:ea:f0:26:1c:90:2c:01:a0:80:40:f4:87:6c:f6:bb:ff:73: 0b:2c:26:30:a4:33:b9:38:a5:41:64:6a:f6:de:fe:6b:3e:7b: 18:a4:4e:af:32:01:43:b7:56:1f:84:e7:ef:0c:e2:ab:92:bb: 00:2a:d1:d0:9e:8c:8e:c4:f6:1b:3d:a5:ba:15:1b:d7:7a:42: c2:18:5f:83:fc:35:8a:e3:e5:23:c0:ad:af:77:85:96:39:9a: 73:17:8b:79:0c:5a:7d:43:34:6b:96:7e:db:88:57:70:3f:1f: 06:41:13:c5:c4:89:da:1c:79:6a:26:84:e6:78:04:1c:b1:27: f0:fc:b0:9f:90:5b:d5:4a:12:16:ae:a6:bf:87:d4:47:97:40: b4:af:99:8c:62:9a:2f:2e:17:01:66:d8:a5:21:be:c7:83:08: f1:96:76:8c:e3:af:22:17:eb:d7:19:78:43:f5:b0:b0:94:f3: 7c:5d:8c:70 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUfIQ34kpkkPB7RhgP8x3Pw8yyjNgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDA0NFoX DTI3MDUwMTIxMDU0NFowMzExMC8GA1UEAxMoRUZERUY1Q0ExMTlGMTQxMDY2MzZF NzM3RDY3MDJBMDRFNkYyRTBDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvi/ql+HbxZYFhf3HYv8DZJKUrZ4AzbZmo432M8vf0vHeMRt/EwA8E5CJ2X YM9Hwp6lh455V5qqUUF6OMF0gHvHn9vQT9LGjaOxI8vO7DG1qH2mowrdx03vDABV +wtilfLtPy5rBXm5PHWAQu3c/DdHDPBfx04/t9SL5t9kYyQpB5LGOal5jWUaHn7h tx7zQoBw9pCP/Wp03scW3ntwovyWCicBE669sfTmLj57g3s0174zXEf9g7UKte2O nFOoCJOKgtypcUzFNbamstQ4nCklCeZgi/43KNBRneF4XihyALGdPgFoV0uAZZJi J782t9u5maiPasQFGwTP9722rXsCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTv3vXK EZ8UEGY25zfWcCoE5vLgyTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODk3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ4wWMA8EAgACMAkDBwAgAQ3wo4AwDQYJKoZIhvcNAQELBQADggEBAIJr D2RzFWNiV/TU1/30+X5Tr+p4Xd2rrRehXacX/i2EhvzO9JprFH0bCtlnIY2pUciI R9cPlzULrJeMhXEpRX2g01N8DJBeqK3q8CYckCwBoIBA9Ids9rv/cwssJjCkM7k4 pUFkavbe/ms+exikTq8yAUO3Vh+E5+8M4quSuwAq0dCejI7E9hs9pboVG9d6QsIY X4P8NYrj5SPAra93hZY5mnMXi3kMWn1DNGuWftuIV3A/HwZBE8XEidoceWomhOZ4 BByxJ/D8sJ+QW9VKEhaupr+H1EeXQLSvmYximi8uFwFm2KUhvseDCPGWdozjryIX 69cZeEP1sLCU83xdjHA= -----END CERTIFICATE-----Generated at Sun May 3 00:42:13 2026 by rpki-client