$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138842.roa File: AS138842.roa (raw, json) Hash identifier: AIu3pmRgrh74b4+7K/DVryCef4RE9/WjzpUH7Nrpym8= Subject key identifier: 61:44:DB:DC:80:79:4C:B7:4F:C7:96:E2:2B:70:5C:19:BC:B8:24:52 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0B9966FF7C0CBEB54FE5555561469D7B92A60EE7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138842.roa Signing time: Mon 29 Jun 2026 06:54:14 +0000 ROA not before: Mon 29 Jun 2026 06:49:14 +0000 ROA not after: Mon 28 Jun 2027 06:54:14 +0000 asID: 138842 IP address blocks: 103.155.106.0/23 maxlen: 24 103.176.26.0/23 maxlen: 24 103.203.162.0/24 maxlen: 24 2404:cdc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:99:66:ff:7c:0c:be:b5:4f:e5:55:55:61:46:9d:7b:92:a6:0e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 29 06:49:14 2026 GMT Not After : Jun 28 06:54:14 2027 GMT Subject: CN=6144DBDC80794CB74FC796E22B705C19BCB82452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:6a:12:96:78:01:b4:ff:73:4e:14:58:12: 8e:67:0f:6f:66:08:7d:92:d3:4d:75:74:5c:ef:c6: ae:d0:4e:43:68:de:4d:82:a4:0f:1c:ac:cc:f4:30: ef:6e:a6:1d:98:a8:8c:9b:1e:04:22:63:6a:ab:26: d2:e5:b6:91:27:f4:f6:3a:7e:1e:8e:31:f0:fa:06: 27:2b:a4:ab:a8:75:9d:30:33:77:3e:a8:a4:f8:9a: b8:ad:79:2e:a7:87:0c:0e:43:18:93:20:d5:41:1f: 4a:18:9c:49:52:d9:84:76:e9:91:cb:37:3e:31:40: b0:d8:85:f7:6c:62:1e:77:86:30:91:64:2a:b0:47: 4e:51:d8:25:b5:d1:d2:60:d1:0b:2d:fe:b9:4b:fc: cb:32:65:ea:ec:f8:4b:ea:26:e8:54:21:d4:1b:86: 84:30:93:3a:e8:d9:88:c7:c4:cb:29:3a:7d:1a:72: 7c:6c:bc:54:83:a3:56:02:7b:58:56:79:36:74:a5: 04:73:9d:19:17:97:e9:49:f4:64:b0:65:e1:9e:7d: 95:a7:41:28:fa:19:2d:55:b1:3a:d8:a0:92:b3:3c: 9d:aa:42:5f:1c:c7:d7:ce:bc:35:37:55:dd:99:27: 3a:8c:5a:22:2c:cd:dc:7f:f7:11:de:aa:56:0f:bc: 0c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:44:DB:DC:80:79:4C:B7:4F:C7:96:E2:2B:70:5C:19:BC:B8:24:52 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138842.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.106.0/23 103.176.26.0/23 103.203.162.0/24 IPv6: 2404:cdc0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:2f:b5:50:e0:45:e4:28:d8:b9:31:b4:67:95:70:72:ba:74: f1:a3:38:c6:3d:ad:02:c5:3e:01:b2:bb:c1:02:9a:65:3c:16: e9:a2:6f:19:8c:e8:eb:39:e9:6f:49:a0:6e:5e:69:4c:03:51: eb:fc:b4:13:89:ce:a9:78:94:ed:a2:74:b0:ed:dc:a2:cf:1c: ba:79:2c:e5:7b:c3:e6:5d:2a:13:aa:cd:f5:87:b2:08:09:a5: c3:42:90:42:73:4b:dc:b3:34:27:43:ba:64:69:72:f9:51:b5: 6d:c5:41:1f:a8:5f:17:65:98:1a:56:de:0c:46:b6:01:04:f6: 44:1d:a9:f7:26:ac:7c:ae:f5:12:54:c1:59:68:48:a0:3e:1f: e4:ce:51:83:0f:bf:c2:b4:14:4b:46:5d:7a:ab:a1:64:3b:cc: 37:13:d1:6d:09:6f:76:5f:e0:0e:c1:49:94:ef:46:3a:4b:13: f6:1d:20:84:af:97:39:71:f3:77:a9:5f:6d:a9:89:2c:a3:67: 6b:23:10:e3:09:85:75:d8:dc:98:de:81:69:05:0d:ea:24:cd: cb:93:0e:23:f0:38:e0:78:1f:cd:db:14:cb:d9:14:81:b7:aa: a4:eb:f7:1d:be:8b:c6:2b:e5:63:a4:0d:e6:7a:05:67:10:07: 5d:42:30:ad -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUC5lm/3wMvrVP5VVVYUade5KmDucwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYyOTA2NDkxNFoX DTI3MDYyODA2NTQxNFowMzExMC8GA1UEAxMoNjE0NERCREM4MDc5NENCNzRGQzc5 NkUyMkI3MDVDMTlCQ0I4MjQ1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtJahKWeAG0/3NOFFgSjmcPb2YIfZLTTXV0XO/GrtBOQ2jeTYKkDxyszPQw 726mHZiojJseBCJjaqsm0uW2kSf09jp+Ho4x8PoGJyukq6h1nTAzdz6opPiauK15 LqeHDA5DGJMg1UEfShicSVLZhHbpkcs3PjFAsNiF92xiHneGMJFkKrBHTlHYJbXR 0mDRCy3+uUv8yzJl6uz4S+om6FQh1BuGhDCTOujZiMfEyyk6fRpyfGy8VIOjVgJ7 WFZ5NnSlBHOdGReX6Un0ZLBl4Z59ladBKPoZLVWxOtigkrM8napCXxzH1868NTdV 3ZknOoxaIizN3H/3Ed6qVg+8DNsCAwEAAaOCAecwggHjMB0GA1UdDgQWBBRhRNvc gHlMt0/HluIrcFwZvLgkUjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODQyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIA ATASAwQBZ5tqAwQBZ7AaAwQAZ8uiMA0EAgACMAcDBQAkBM3AMA0GCSqGSIb3DQEB CwUAA4IBAQAOL7VQ4EXkKNi5MbRnlXByunTxozjGPa0CxT4BsrvBApplPBbpom8Z jOjrOelvSaBuXmlMA1Hr/LQTic6peJTtonSw7dyizxy6eSzle8PmXSoTqs31h7II CaXDQpBCc0vcszQnQ7pkaXL5UbVtxUEfqF8XZZgaVt4MRrYBBPZEHan3Jqx8rvUS VMFZaEigPh/kzlGDD7/CtBRLRl16q6FkO8w3E9FtCW92X+AOwUmU70Y6SxP2HSCE r5c5cfN3qV9tqYkso2drIxDjCYV12NyY3oFpBQ3qJM3Lkw4j8DjgeB/N2xTL2RSB t6qk6/cdvovGK+VjpA3megVnEAddQjCt -----END CERTIFICATE-----Generated at Thu Jul 23 23:51:29 2026 by rpki-client