$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138850.roa File: AS138850.roa (raw, json) Hash identifier: 8OGL+Z/boe43cndDFcRadGWG9giSlKz8P1rKc0w6Opo= Subject key identifier: 39:9A:8A:6B:F9:AA:C7:01:34:21:FB:17:36:CE:F9:EF:D8:2B:E1:67 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6818D8BBEF300D6BF39DE5BB4D449611B955CDCB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138850.roa Signing time: Fri 27 Feb 2026 03:40:14 +0000 ROA not before: Fri 27 Feb 2026 03:35:14 +0000 ROA not after: Fri 26 Feb 2027 03:40:14 +0000 asID: 138850 IP address blocks: 103.138.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:18:d8:bb:ef:30:0d:6b:f3:9d:e5:bb:4d:44:96:11:b9:55:cd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 27 03:35:14 2026 GMT Not After : Feb 26 03:40:14 2027 GMT Subject: CN=399A8A6BF9AAC7013421FB1736CEF9EFD82BE167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:b3:c1:8a:f9:0b:5b:e8:2e:cd:5f:63:ca: 7f:45:17:cb:82:19:61:e1:ca:da:55:51:d9:53:3b: 5a:19:fb:28:fc:a0:4c:55:c9:86:6d:f5:7c:3a:69: ba:70:dd:1f:7d:d3:0c:25:1f:b8:7e:f8:aa:a4:b8: dd:87:19:82:c2:ec:0e:91:50:71:4c:2d:be:b8:8a: 09:b7:a5:3a:a5:ab:60:42:cb:f6:52:a1:5e:54:dc: 93:62:a2:e3:d4:27:11:f9:22:e8:b7:6b:77:70:1f: fb:c1:f7:46:a4:39:cc:d3:b0:07:3d:52:5b:de:4f: 1e:06:0f:cd:c8:ba:d8:75:53:97:0f:97:d6:4c:65: 25:2d:d9:ef:f7:02:a6:90:09:43:33:a5:35:c7:b2: 52:2e:41:16:bf:f1:d0:6f:fd:95:12:49:d0:1a:53: 15:f1:85:b8:12:a4:48:79:19:05:4a:45:af:b5:ca: 24:80:c3:a8:21:ef:a0:f1:0b:46:c4:ae:d1:53:99: 16:5d:5d:f7:c8:e1:56:97:4e:43:1f:51:5f:c6:b5: 61:54:66:e8:f0:a0:61:7b:e4:4b:c3:53:51:5c:2d: 61:71:59:8d:b8:b6:16:79:58:6b:37:15:98:a3:84: f4:a0:b6:e8:d8:7e:d0:ae:56:d4:4d:17:15:5c:8c: a6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:8A:6B:F9:AA:C7:01:34:21:FB:17:36:CE:F9:EF:D8:2B:E1:67 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138850.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.143.0/24 Signature Algorithm: sha256WithRSAEncryption 26:65:a7:7a:b5:b6:1d:e2:d3:49:c8:d6:6b:a1:f1:01:ca:84: 2e:e8:de:a5:56:b6:29:5e:ff:db:95:e7:88:cc:53:1a:15:2c: e9:fa:5f:f9:55:d4:9c:25:17:8c:96:03:0c:ae:09:cd:be:9a: 11:c8:0d:87:93:df:d9:61:8e:79:f1:1e:da:7d:79:39:cb:91: 54:ef:24:4d:1d:e2:e3:52:ba:33:13:75:4a:93:a2:9d:73:d0: 5b:19:e7:71:99:c9:6d:b7:fe:b7:ae:2f:86:08:c3:d8:ba:24: ce:96:de:a7:a0:d3:c5:6b:67:c9:7a:9f:c6:92:bd:4c:68:b1: b4:86:f0:61:85:70:d9:2d:73:e2:76:7a:65:a7:7b:8a:5b:62: be:25:84:a8:f5:ea:1d:a6:e4:b6:ae:c2:12:49:3d:9a:27:e6: e2:fe:41:57:b5:af:f8:19:23:4b:52:1e:1d:90:0d:f7:2c:71: 91:80:93:af:46:d5:97:59:16:93:7d:5f:77:f9:39:20:9a:19: ef:32:be:9a:4f:14:b2:58:bb:7a:52:ff:0e:05:74:17:be:8b: d3:fa:9a:39:1e:d7:0e:c8:97:33:0a:64:a9:ff:29:e0:6a:d6: ea:35:4d:ce:cb:a9:1b:32:20:fc:a7:eb:db:3a:d6:e2:68:3b: 67:53:32:04 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUaBjYu+8wDWvzneW7TUSWEblVzcswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNzAzMzUxNFoX DTI3MDIyNjAzNDAxNFowMzExMC8GA1UEAxMoMzk5QThBNkJGOUFBQzcwMTM0MjFG QjE3MzZDRUY5RUZEODJCRTE2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKd2s8GK+Qtb6C7NX2PKf0UXy4IZYeHK2lVR2VM7Whn7KPygTFXJhm31fDpp unDdH33TDCUfuH74qqS43YcZgsLsDpFQcUwtvriKCbelOqWrYELL9lKhXlTck2Ki 49QnEfki6Ldrd3Af+8H3RqQ5zNOwBz1SW95PHgYPzci62HVTlw+X1kxlJS3Z7/cC ppAJQzOlNceyUi5BFr/x0G/9lRJJ0BpTFfGFuBKkSHkZBUpFr7XKJIDDqCHvoPEL RsSu0VOZFl1d98jhVpdOQx9RX8a1YVRm6PCgYXvkS8NTUVwtYXFZjbi2FnlYazcV mKOE9KC26Nh+0K5W1E0XFVyMptkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ5mopr +arHATQh+xc2zvnv2CvhZzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg1MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeKjzANBgkqhkiG9w0BAQsFAAOCAQEAJmWnerW2HeLTScjWa6Hx AcqELujepVa2KV7/25XniMxTGhUs6fpf+VXUnCUXjJYDDK4Jzb6aEcgNh5Pf2WGO efEe2n15OcuRVO8kTR3i41K6MxN1SpOinXPQWxnncZnJbbf+t64vhgjD2Lokzpbe p6DTxWtnyXqfxpK9TGixtIbwYYVw2S1z4nZ6Zad7iltiviWEqPXqHabktq7CEkk9 mifm4v5BV7Wv+BkjS1IeHZAN9yxxkYCTr0bVl1kWk31fd/k5IJoZ7zK+mk8Usli7 elL/DgV0F76L0/qaOR7XDsiXMwpkqf8p4GrW6jVNzsupGzIg/Kfr2zrW4mg7Z1My BA== -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:27 2026 by rpki-client