$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS138842.roa File: AS138842.roa (raw, json) Hash identifier: Mm2iJCtTeTPm/2H/Wa0klhJB/MoL/S77HueiHjaxVGU= Subject key identifier: CD:AE:3A:8D:34:69:32:38:8F:82:1A:67:2A:D2:B4:51:8A:C0:26:56 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2C6ACAD4CA108CA90A0C3D6EA47882FDB6FF7DB2 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS138842.roa Signing time: Mon 23 Mar 2026 05:00:01 +0000 ROA not before: Mon 23 Mar 2026 04:55:01 +0000 ROA not after: Mon 22 Mar 2027 05:00:01 +0000 asID: 138842 IP address blocks: 160.19.32.0/23 maxlen: 24 160.25.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6a:ca:d4:ca:10:8c:a9:0a:0c:3d:6e:a4:78:82:fd:b6:ff:7d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 23 04:55:01 2026 GMT Not After : Mar 22 05:00:01 2027 GMT Subject: CN=CDAE3A8D346932388F821A672AD2B4518AC02656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5c:a8:b4:c2:75:8c:e1:eb:87:89:5e:1a:e1: 71:d1:73:e1:c4:37:cf:a1:68:0e:b3:b2:04:3d:df: 75:9d:d0:79:d0:2a:d1:53:a4:80:ab:78:a3:0e:15: 6c:46:59:8c:a8:ef:d3:b3:d6:0d:52:9f:d2:70:bc: 80:7c:5e:11:3e:dc:8a:f6:04:eb:c5:a6:1a:55:09: 6b:27:04:84:b7:a6:06:7d:2d:34:36:f9:52:fb:b1: 51:f9:4a:70:e6:05:96:26:ad:57:68:94:a7:f7:39: dc:32:32:36:a7:b1:e9:ca:1c:50:b5:f5:75:25:33: b4:d8:61:7e:de:bc:b9:86:57:2d:9f:fe:24:6f:42: ea:84:69:e5:e4:75:35:5e:10:e4:ab:8d:55:94:b9: 36:88:56:68:25:7a:ee:4a:1c:ed:e7:c6:64:90:2c: bb:01:b1:f3:77:c4:6b:74:6b:3f:61:ed:6f:0d:65: 80:4b:fa:bf:b5:07:88:c2:2b:4a:bd:c1:e9:f1:65: 5c:8e:34:c5:34:84:8f:aa:9b:d7:47:93:97:74:96: fd:15:64:5f:c0:83:9a:28:33:c9:88:dc:70:9c:b7: 6a:d1:91:9c:71:a8:3f:df:ee:9b:5d:70:01:fb:51: 86:1e:e3:cc:bc:19:c2:ed:74:ae:99:ec:9f:3d:60: 31:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AE:3A:8D:34:69:32:38:8F:82:1A:67:2A:D2:B4:51:8A:C0:26:56 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS138842.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.32.0/23 160.25.238.0/23 Signature Algorithm: sha256WithRSAEncryption 84:e1:93:41:eb:65:23:6c:c2:e2:ed:1b:cc:6c:a6:83:39:5a: a8:65:d7:7e:d3:94:98:d2:2b:e9:81:06:d8:64:46:66:05:52: ca:83:51:b3:a2:fd:72:b1:70:66:21:d5:4d:69:fa:4c:e0:02: b4:d3:5b:75:fc:08:e1:1d:34:7f:ed:ea:f8:e7:8a:21:9e:ca: c2:18:c0:55:82:f0:fa:e7:c3:08:4f:67:15:d2:d6:2d:48:ad: 85:da:5d:6b:e8:f9:e7:f3:13:b7:f8:6e:cb:8f:fd:4b:9e:cd: 9d:96:22:3a:2a:21:32:41:de:d5:a5:07:7c:b6:d7:96:18:a7: ff:64:38:f1:24:57:9c:43:9c:4c:b0:7c:b8:68:6e:e6:df:22: 39:dc:52:6b:54:c2:e2:9b:a3:03:ad:db:a9:4e:50:16:a2:64: b0:09:cf:99:62:3f:db:8b:07:69:c2:61:d8:06:ee:93:19:23: 73:52:a4:28:bb:75:77:fe:e7:07:80:d2:70:cf:c8:70:e6:65: ce:b9:76:8d:05:c9:c8:cc:65:46:3e:c5:3f:66:90:ff:a6:c2: d0:8b:5d:bb:6b:29:0b:20:c6:df:2e:95:da:9f:8b:bb:9b:e9: 91:8e:e2:26:80:c6:70:8a:a2:79:ef:d9:e8:d3:2e:9f:7a:49: e8:d1:01:cd -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIULGrK1MoQjKkKDD1upHiC/bb/fbIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMyMzA0NTUwMVoX DTI3MDMyMjA1MDAwMVowMzExMC8GA1UEAxMoQ0RBRTNBOEQzNDY5MzIzODhGODIx QTY3MkFEMkI0NTE4QUMwMjY1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOJcqLTCdYzh64eJXhrhcdFz4cQ3z6FoDrOyBD3fdZ3QedAq0VOkgKt4ow4V bEZZjKjv07PWDVKf0nC8gHxeET7civYE68WmGlUJaycEhLemBn0tNDb5UvuxUflK cOYFliatV2iUp/c53DIyNqex6cocULX1dSUztNhhft68uYZXLZ/+JG9C6oRp5eR1 NV4Q5KuNVZS5NohWaCV67koc7efGZJAsuwGx83fEa3RrP2Htbw1lgEv6v7UHiMIr Sr3B6fFlXI40xTSEj6qb10eTl3SW/RVkX8CDmigzyYjccJy3atGRnHGoP9/um11w AftRhh7jzLwZwu10rpnsnz1gMfUCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBTNrjqN NGkyOI+CGmcq0rRRisAmVjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzODg0Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAaATIAMEAaAZ7jANBgkqhkiG9w0BAQsFAAOCAQEAhOGTQetlI2zC 4u0bzGymgzlaqGXXftOUmNIr6YEG2GRGZgVSyoNRs6L9crFwZiHVTWn6TOACtNNb dfwI4R00f+3q+OeKIZ7KwhjAVYLw+ufDCE9nFdLWLUithdpda+j55/MTt/huy4/9 S57NnZYiOiohMkHe1aUHfLbXlhin/2Q48SRXnEOcTLB8uGhu5t8iOdxSa1TC4puj A63bqU5QFqJksAnPmWI/24sHacJh2Abukxkjc1KkKLt1d/7nB4DScM/IcOZlzrl2 jQXJyMxlRj7FP2aQ/6bC0Itdu2spCyDG3y6V2p+Lu5vpkY7iJoDGcIqiee/Z6NMu n3pJ6NEBzQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:51:32 2026 by rpki-client