$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS138115.roa File: AS138115.roa (raw, json) Hash identifier: yMb1ifWnVebcwdbhuG66PUwMM9p6xvzWJKrpGpzJ2w4= Subject key identifier: 6B:29:5C:BA:7E:32:E5:31:53:AB:D3:0E:90:7F:9A:C4:89:ED:E4:3D Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 71CCECCACFF25D7654BFF99A767745550FD1500A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138115.roa Signing time: Wed 23 Sep 2026 02:41:30 +0000 ROA not before: Wed 23 Sep 2026 02:36:30 +0000 ROA not after: Wed 22 Sep 2027 02:41:30 +0000 asID: 138115 IP address blocks: 157.15.124.0/23 maxlen: 24 174.128.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cc:ec:ca:cf:f2:5d:76:54:bf:f9:9a:76:77:45:55:0f:d1:50:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 23 02:36:30 2026 GMT Not After : Sep 22 02:41:30 2027 GMT Subject: CN=6B295CBA7E32E53153ABD30E907F9AC489EDE43D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0d:32:15:7a:c9:5d:31:3b:c6:db:ca:a4:36: e5:22:5b:43:ee:a4:f7:76:51:eb:30:ad:47:20:0b: 1f:e1:a6:f0:6f:1d:a0:ad:9f:8d:42:86:83:37:1a: 50:65:36:4a:d5:f5:93:90:bf:dc:38:b9:12:98:59: 06:80:fe:72:77:f7:3e:b6:3a:70:51:32:d6:40:8e: 2a:01:97:69:84:45:1f:af:a9:75:0f:0e:bb:37:56: 55:6f:e3:8b:db:91:d9:c5:16:fb:1b:59:dc:3e:f7: 3a:81:5f:68:b7:88:27:9f:8d:88:e9:24:f8:70:dc: ca:47:3f:79:c5:f4:b8:83:ff:63:52:09:b1:6a:fc: 99:44:fd:4f:58:03:b3:d3:30:fc:76:0b:74:2c:71: 6b:35:7e:21:4a:c1:7c:c1:e0:7a:e9:ce:7b:06:fd: 1b:b2:86:b7:8d:12:e8:b3:c6:95:48:1e:ff:d4:7a: f2:ac:8f:ef:b7:55:59:63:88:8e:aa:51:83:c3:b2: 0c:6b:c3:24:54:95:3a:c1:68:ba:07:2a:64:4b:15: bf:70:8f:be:df:9e:6c:d8:55:36:51:79:d8:c0:c1: 91:53:db:89:26:c5:8b:46:0b:b8:d1:4a:e3:fd:f2: 26:2f:c1:23:53:1a:37:73:66:77:8e:82:18:1d:d7: ef:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:29:5C:BA:7E:32:E5:31:53:AB:D3:0E:90:7F:9A:C4:89:ED:E4:3D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS138115.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.124.0/23 174.128.204.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:4e:1f:db:bb:37:1a:0c:44:69:93:86:52:d1:dc:95:16:54: a2:93:bf:44:ce:ec:bf:5b:08:ae:e7:ac:f4:10:1b:c8:36:7a: 8f:ac:a1:96:8f:00:df:bf:4b:5f:cf:ef:5d:12:83:3c:58:68: 1d:1e:bd:52:fd:5d:b6:a9:d4:22:57:34:f5:ec:49:5e:8b:2c: 58:03:58:0f:90:9b:43:8f:ed:f0:40:96:c9:5c:a5:f1:17:63: 60:bf:01:ae:83:f6:0d:92:39:68:dc:bb:62:97:07:e3:ab:72: 6a:90:dc:b6:a2:ee:5d:f8:22:d5:b8:8a:bc:04:e4:5c:09:31: aa:9e:0b:dc:5d:44:90:3b:29:dc:0f:6d:87:2c:79:02:3c:74: c7:d0:1c:78:a1:0e:4b:87:78:46:38:8d:05:57:3c:57:c4:f1: 03:05:cc:e4:c8:4d:91:b2:f7:15:a5:a5:ca:44:fe:95:70:4f: ae:4c:82:90:67:d9:14:c9:43:88:51:ad:71:dc:b5:c0:37:60: 27:2b:d0:61:69:c2:a2:63:f0:30:02:d4:68:99:b3:2d:95:6a: 90:ec:b2:f0:2e:d5:fb:52:38:e4:60:13:3e:f2:40:01:eb:00: e6:2a:a9:e6:f8:8e:90:22:95:db:f1:b4:e4:f9:02:2f:15:7f: 7b:44:b1:d4 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUcczsys/yXXZUv/madndFVQ/RUAowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkyMzAyMzYzMFoX DTI3MDkyMjAyNDEzMFowMzExMC8GA1UEAxMoNkIyOTVDQkE3RTMyRTUzMTUzQUJE MzBFOTA3RjlBQzQ4OUVERTQzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOENMhV6yV0xO8bbyqQ25SJbQ+6k93ZR6zCtRyALH+Gm8G8doK2fjUKGgzca UGU2StX1k5C/3Di5EphZBoD+cnf3PrY6cFEy1kCOKgGXaYRFH6+pdQ8OuzdWVW/j i9uR2cUW+xtZ3D73OoFfaLeIJ5+NiOkk+HDcykc/ecX0uIP/Y1IJsWr8mUT9T1gD s9Mw/HYLdCxxazV+IUrBfMHgeunOewb9G7KGt40S6LPGlUge/9R68qyP77dVWWOI jqpRg8OyDGvDJFSVOsFougcqZEsVv3CPvt+ebNhVNlF52MDBkVPbiSbFi0YLuNFK 4/3yJi/BI1MaN3Nmd46CGB3X72MCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBRrKVy6 fjLlMVOr0w6Qf5rEie3kPTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM4MTE1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQBnQ98AwQCroDMMA0GCSqGSIb3DQEBCwUAA4IBAQA+Th/buzcaDERpk4ZS 0dyVFlSik79Ezuy/Wwiu56z0EBvINnqPrKGWjwDfv0tfz+9dEoM8WGgdHr1S/V22 qdQiVzT17EleiyxYA1gPkJtDj+3wQJbJXKXxF2NgvwGug/YNkjlo3Ltilwfjq3Jq kNy2ou5d+CLVuIq8BORcCTGqngvcXUSQOyncD22HLHkCPHTH0Bx4oQ5Lh3hGOI0F VzxXxPEDBczkyE2RsvcVpaXKRP6VcE+uTIKQZ9kUyUOIUa1x3LXAN2AnK9BhacKi Y/AwAtRombMtlWqQ7LLwLtX7UjjkYBM+8kAB6wDmKqnm+I6QIpXb8bTk+QIvFX97 RLHU -----END CERTIFICATE-----Generated at Wed Sep 23 08:11:58 2026 by rpki-client