$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138842.roa File: AS138842.roa (raw, json) Hash identifier: YVz5TsKSDj8gPzUucl6QN6+PvQ3usnRYsMW+QDYSn6A= Subject key identifier: 16:0D:CB:30:FF:81:22:8E:92:87:B2:0A:A2:FF:DB:1B:44:6C:AB:E1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 430D64E1D6766DDD3D911F19823F6D4FA2D9E59E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138842.roa Signing time: Wed 06 May 2026 09:13:42 +0000 ROA not before: Wed 06 May 2026 09:08:42 +0000 ROA not after: Wed 05 May 2027 09:13:42 +0000 asID: 138842 IP address blocks: 103.155.106.0/23 maxlen: 24 103.176.26.0/23 maxlen: 24 2404:cdc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0d:64:e1:d6:76:6d:dd:3d:91:1f:19:82:3f:6d:4f:a2:d9:e5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 6 09:08:42 2026 GMT Not After : May 5 09:13:42 2027 GMT Subject: CN=160DCB30FF81228E9287B20AA2FFDB1B446CABE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e4:69:bd:98:77:5c:fd:cd:3e:7b:53:b4:fc: b4:3c:6d:e1:0f:4e:11:28:72:2e:d9:9f:4d:6f:68: 43:00:25:31:18:ba:c0:0a:5e:81:21:94:dc:60:79: d6:0c:54:59:56:a2:5b:45:bc:83:c0:c3:e7:f7:2c: bb:e2:76:fd:65:aa:ff:fa:68:b0:fa:bb:e3:87:47: 34:28:0b:87:8c:15:71:65:f1:e5:75:cb:f8:d2:23: 4a:36:be:ee:12:bc:ad:0b:05:fc:fd:48:9c:4d:2a: 6d:a8:d3:93:90:a9:f8:ab:b0:6d:bb:30:80:39:0c: 6e:3b:40:2e:52:3e:5d:81:cc:c9:ad:db:b5:48:7a: 10:25:a5:9b:5f:1d:73:e5:66:60:5e:3d:28:6c:1d: 25:46:b0:44:80:da:46:f5:82:b7:89:96:4b:b5:c4: 61:75:58:43:83:7e:87:04:d9:cd:d8:e2:1f:d2:b1: 7b:b1:a9:01:12:16:3e:2c:68:0b:b6:0f:e7:aa:4d: 74:55:46:90:27:ca:9d:e0:5d:4c:3f:7d:b2:77:8c: a2:65:d9:67:24:fc:b5:1a:a1:75:b5:e0:82:59:55: dc:ea:d2:1d:38:a0:f2:64:0c:ad:ae:27:2f:29:9d: 3a:9d:5f:95:b3:46:f7:25:ef:6f:3f:8d:e0:03:f8: 0f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0D:CB:30:FF:81:22:8E:92:87:B2:0A:A2:FF:DB:1B:44:6C:AB:E1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138842.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.106.0/23 103.176.26.0/23 IPv6: 2404:cdc0::/32 Signature Algorithm: sha256WithRSAEncryption 60:1d:8a:15:70:21:5e:76:de:4e:c6:a6:42:d0:77:3b:52:2c: 02:a6:aa:cd:66:ca:53:8f:8e:39:c7:83:45:51:0a:0d:1a:c3: a7:99:9a:7f:63:09:f6:23:e1:32:d2:5e:94:bc:f2:44:6b:07: 77:83:f5:eb:5c:d2:18:04:a5:c0:15:f8:d2:c3:4f:cc:c6:98: c9:ef:44:e1:33:2e:68:a7:05:f8:22:df:d6:ae:82:ff:a6:78: 0c:ca:71:87:29:3f:23:4d:e1:79:70:ac:d0:df:76:a7:b5:2f: 8d:1e:d2:d2:47:a9:ff:bf:55:70:62:9c:62:16:e8:0b:1f:0f: 5a:d6:8b:5c:34:a0:01:65:ce:aa:ee:07:3c:e4:c9:5c:42:e8: 96:c5:a8:eb:25:e4:20:bc:53:11:79:2d:49:6f:38:82:2f:5b: 30:71:8e:51:89:d7:d3:64:68:ba:03:48:b4:ec:7b:92:4d:2b: f7:b1:f7:e2:a3:10:93:5a:58:f2:99:20:45:6b:06:d5:34:0f: 8f:b0:27:50:eb:06:d9:9e:f7:14:d2:b8:37:9e:79:f7:48:f7: 6c:c3:c4:b9:fa:9a:f1:50:73:e4:d4:21:a0:cb:93:ee:2b:92: ca:55:16:b5:fc:a2:99:52:6d:cc:cb:20:92:3d:02:fd:3d:ca: ff:f1:f8:b3 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUQw1k4dZ2bd09kR8Zgj9tT6LZ5Z4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwNjA5MDg0MloX DTI3MDUwNTA5MTM0MlowMzExMC8GA1UEAxMoMTYwRENCMzBGRjgxMjI4RTkyODdC MjBBQTJGRkRCMUI0NDZDQUJFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnkab2Yd1z9zT57U7T8tDxt4Q9OEShyLtmfTW9oQwAlMRi6wApegSGU3GB5 1gxUWVaiW0W8g8DD5/csu+J2/WWq//posPq744dHNCgLh4wVcWXx5XXL+NIjSja+ 7hK8rQsF/P1InE0qbajTk5Cp+KuwbbswgDkMbjtALlI+XYHMya3btUh6ECWlm18d c+VmYF49KGwdJUawRIDaRvWCt4mWS7XEYXVYQ4N+hwTZzdjiH9Kxe7GpARIWPixo C7YP56pNdFVGkCfKneBdTD99sneMomXZZyT8tRqhdbXggllV3OrSHTig8mQMra4n LymdOp1flbNG9yXvbz+N4AP4D+ECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQWDcsw /4EijpKHsgqi/9sbRGyr4TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODQyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIA ATAMAwQBZ5tqAwQBZ7AaMA0EAgACMAcDBQAkBM3AMA0GCSqGSIb3DQEBCwUAA4IB AQBgHYoVcCFedt5OxqZC0Hc7UiwCpqrNZspTj445x4NFUQoNGsOnmZp/Ywn2I+Ey 0l6UvPJEawd3g/XrXNIYBKXAFfjSw0/MxpjJ70ThMy5opwX4It/WroL/pngMynGH KT8jTeF5cKzQ33antS+NHtLSR6n/v1VwYpxiFugLHw9a1otcNKABZc6q7gc85Mlc QuiWxajrJeQgvFMReS1JbziCL1swcY5RidfTZGi6A0i07HuSTSv3sffioxCTWljy mSBFawbVNA+PsCdQ6wbZnvcU0rg3nnn3SPdsw8S5+prxUHPk1CGgy5PuK5LKVRa1 /KKZUm3MyyCSPQL9Pcr/8fiz -----END CERTIFICATE-----Generated at Tue May 12 23:03:20 2026 by rpki-client