$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138050.roa File: AS138050.roa (raw, json) Hash identifier: qqpsTLL8Y8oIky20XEy16/fLKfAwrCvRnusdO3+0LH0= Subject key identifier: EC:E5:C9:86:2D:A1:1C:4C:03:2A:0A:FC:6D:A2:F4:2F:57:D9:3A:7D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 28F6BC1323A495E2F65B368A63ECFBA1B19EED0F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138050.roa Signing time: Tue 09 Sep 2025 06:36:19 +0000 ROA not before: Tue 09 Sep 2025 06:31:19 +0000 ROA not after: Tue 08 Sep 2026 06:36:19 +0000 asID: 138050 IP address blocks: 103.147.222.0/24 maxlen: 24 202.58.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f6:bc:13:23:a4:95:e2:f6:5b:36:8a:63:ec:fb:a1:b1:9e:ed:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 9 06:31:19 2025 GMT Not After : Sep 8 06:36:19 2026 GMT Subject: CN=ECE5C9862DA11C4C032A0AFC6DA2F42F57D93A7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:62:a2:3e:26:be:f1:d6:b5:ef:30:f1:4d: a4:8d:e7:86:9b:5d:ee:48:b1:5d:95:51:86:bd:77: 6c:e0:39:de:d6:e8:e6:49:0f:e0:ba:99:6e:2e:c3: 62:1d:c8:dd:5f:d3:6e:b7:43:fc:5c:b3:55:77:38: 61:53:d1:c4:61:0f:7c:a7:6f:18:c7:b9:06:c5:a8: 8c:ea:c2:27:b2:44:fe:69:4f:e2:45:4d:35:80:bf: 56:ac:47:ba:d6:12:14:8e:68:22:8c:5a:5d:88:f2: 73:7d:89:43:c2:60:a3:53:8f:64:c2:0a:98:8b:6d: cf:63:a1:00:5e:5e:b1:19:2a:ed:94:24:7e:a8:2f: ec:23:92:22:fe:33:80:79:16:da:fb:c9:47:45:07: e2:e1:f5:04:bb:22:13:1b:ce:5d:93:72:b3:f5:9a: d9:16:37:7d:8f:3d:67:e3:74:0a:04:bc:98:4f:06: a4:da:e7:1a:91:81:5d:50:ed:db:c2:a0:23:3d:da: 72:53:bd:33:28:5f:39:92:d7:0d:43:c8:e4:f9:04: 89:fe:71:7a:52:ae:f4:97:38:84:b1:27:8c:62:49: 88:18:92:22:fe:27:13:1b:05:b0:e4:6a:75:0a:a5: 64:4c:3c:f5:a1:ad:8c:87:ad:db:87:ed:6d:17:7f: 57:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E5:C9:86:2D:A1:1C:4C:03:2A:0A:FC:6D:A2:F4:2F:57:D9:3A:7D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138050.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.222.0/24 202.58.242.0/24 Signature Algorithm: sha256WithRSAEncryption 15:5b:ed:cb:d8:8a:17:09:a4:dc:c5:cb:7d:36:62:a4:5e:0f: d2:13:35:1a:b5:e0:af:b3:97:06:b7:f8:9b:f6:dc:ed:42:28: 68:eb:97:1e:3a:d5:fc:e4:9b:8c:25:f6:20:aa:41:1e:89:b0: 51:1a:16:bd:cc:4f:80:92:8e:e2:21:b6:47:6d:f3:92:36:fa: fd:56:d8:2e:ca:4e:0e:82:8b:41:da:ce:d1:a7:38:6b:e4:bc: 66:bf:94:2d:05:6e:f9:ee:4e:f2:91:09:a2:b8:f9:e9:a6:22: d7:67:9d:de:0b:30:b3:c1:bf:b4:78:02:af:be:4b:c6:8f:dd: 5b:6e:02:07:6e:3b:df:7d:22:be:77:82:a7:cc:f8:9a:fb:be: f5:df:bd:bc:bf:40:5e:e1:37:cb:24:ad:1e:92:87:91:a1:40: d1:d9:39:67:b0:c5:58:94:05:93:d8:a8:f6:16:3b:69:71:80: 24:7c:92:84:31:10:99:41:78:e2:f7:7f:26:c4:20:b7:97:6c: 8e:4e:5a:ea:b4:a0:ea:7f:8a:04:72:06:22:4a:ef:6b:f2:cb: f9:16:1f:6b:0f:dd:5e:0e:76:8f:f3:9d:c5:ef:91:ba:2c:70: db:c7:13:21:6e:63:21:8f:36:f6:73:44:69:b9:b1:08:c8:93: 15:80:38:e4 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUKPa8EyOkleL2WzaKY+z7obGe7Q8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwOTA2MzExOVoX DTI2MDkwODA2MzYxOVowMzExMC8GA1UEAxMoRUNFNUM5ODYyREExMUM0QzAzMkEw QUZDNkRBMkY0MkY1N0Q5M0E3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcBYqI+Jr7x1rXvMPFNpI3nhptd7kixXZVRhr13bOA53tbo5kkP4LqZbi7D Yh3I3V/TbrdD/FyzVXc4YVPRxGEPfKdvGMe5BsWojOrCJ7JE/mlP4kVNNYC/VqxH utYSFI5oIoxaXYjyc32JQ8Jgo1OPZMIKmIttz2OhAF5esRkq7ZQkfqgv7COSIv4z gHkW2vvJR0UH4uH1BLsiExvOXZNys/Wa2RY3fY89Z+N0CgS8mE8GpNrnGpGBXVDt 28KgIz3aclO9MyhfOZLXDUPI5PkEif5xelKu9Jc4hLEnjGJJiBiSIv4nExsFsORq dQqlZEw89aGtjIet24ftbRd/V68CAwEAAaOCAdYwggHSMB0GA1UdDgQWBBTs5cmG LaEcTAMqCvxtovQvV9k6fTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODA1MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGeT3gMEAMo68jANBgkqhkiG9w0BAQsFAAOCAQEAFVvty9iKFwmk 3MXLfTZipF4P0hM1GrXgr7OXBrf4m/bc7UIoaOuXHjrV/OSbjCX2IKpBHomwURoW vcxPgJKO4iG2R23zkjb6/VbYLspODoKLQdrO0ac4a+S8Zr+ULQVu+e5O8pEJorj5 6aYi12ed3gsws8G/tHgCr75Lxo/dW24CB247330ivneCp8z4mvu+9d+9vL9AXuE3 yyStHpKHkaFA0dk5Z7DFWJQFk9io9hY7aXGAJHyShDEQmUF44vd/JsQgt5dsjk5a 6rSg6n+KBHIGIkrva/LL+RYfaw/dXg52j/Odxe+Ruixw28cTIW5jIY829nNEabmx CMiTFYA45A== -----END CERTIFICATE-----Generated at Mon Oct 20 06:00:14 2025 by rpki-client