$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138854.roa File: AS138854.roa (raw, json) Hash identifier: tzUOV/tCpg/7WKaIMxUyenUL6DBzfn9GyuQLaittsuI= Subject key identifier: 5C:1C:63:02:DA:2A:99:16:6F:48:DE:77:31:86:3B:DE:7A:8A:40:28 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7D48EBA312262E3FBD7085EC7B4F61F94B3BB33D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138854.roa Signing time: Mon 21 Apr 2025 04:30:51 +0000 ROA not before: Mon 21 Apr 2025 04:25:51 +0000 ROA not after: Mon 20 Apr 2026 04:30:51 +0000 asID: 138854 IP address blocks: 103.138.218.0/23 maxlen: 24 103.178.88.0/24 maxlen: 24 103.178.89.0/24 maxlen: 24 163.61.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:48:eb:a3:12:26:2e:3f:bd:70:85:ec:7b:4f:61:f9:4b:3b:b3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 21 04:25:51 2025 GMT Not After : Apr 20 04:30:51 2026 GMT Subject: CN=5C1C6302DA2A99166F48DE7731863BDE7A8A4028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:54:a4:eb:6d:68:5e:b8:24:e2:82:9e:a5: 20:ff:b3:e8:b6:ab:9e:dc:f9:33:ce:39:4f:f7:39: 44:fc:a2:2e:ed:56:0f:df:1d:d1:13:ef:8f:0a:35: b7:0d:56:2c:d4:e1:de:13:08:a6:e2:3a:4f:26:c7: 17:62:62:b1:ab:56:e7:8b:0a:47:cb:77:ad:f7:da: 7e:61:25:cf:72:f7:8b:71:b7:bd:7e:35:3f:eb:79: 0e:22:6f:32:c1:8f:aa:a3:5f:e1:2f:f2:fd:57:d4: bc:8c:9b:54:c2:7b:b9:95:b4:e4:f7:aa:a1:af:49: ee:0b:f9:10:7f:34:9d:f2:b1:66:e7:02:59:60:b4: 52:27:1d:18:1d:ef:4a:96:0a:8e:b2:86:ad:4b:c5: f4:8e:94:7e:85:9f:8f:e2:0d:73:4a:bd:8d:76:b5: 53:e7:3d:c0:5a:61:38:b5:b9:e1:f5:69:c0:a8:68: 26:bb:3e:aa:d2:56:54:53:66:f1:be:03:a8:62:f3: 9d:76:b9:7e:c9:6b:04:2a:c8:c3:94:cc:28:54:05: 48:36:3d:c1:03:03:6c:78:63:12:e4:fe:5d:98:15: 66:0b:e6:6e:2a:c2:d5:3a:46:02:f6:ab:e6:7e:a1: 67:09:a1:c2:a5:eb:33:1e:25:49:e2:57:2c:5f:b1: 0b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1C:63:02:DA:2A:99:16:6F:48:DE:77:31:86:3B:DE:7A:8A:40:28 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138854.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.218.0/23 103.178.88.0/23 163.61.190.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:36:f4:f3:e8:4b:2c:39:70:d7:9b:40:4e:f9:e9:05:54:3e: 9f:47:2b:fa:ba:ab:56:69:e5:69:e4:ce:d7:56:fd:f5:22:d1: 54:cc:75:ad:5e:ae:cd:b8:29:e4:0e:a6:d8:5f:f2:cc:a0:4a: 7b:49:d2:dd:38:9f:6e:8a:06:e5:a1:3d:f3:3e:10:a9:b1:55: a4:c5:55:42:65:f8:69:f8:3e:40:e2:fb:25:21:f0:0e:b8:c9: e7:72:26:71:c1:74:98:54:11:d8:a6:d2:63:1c:ba:7f:ac:a6: e8:ce:0f:af:96:06:e2:ec:ba:c1:8f:28:a0:60:87:dc:d4:6f: 00:c9:f6:8b:99:ca:fc:88:be:dd:99:e3:36:46:8b:26:a8:cc: ce:77:5c:dd:c4:55:cc:07:db:a6:5e:63:99:e9:ab:91:0f:0c: 33:5f:a1:cb:ce:57:0f:5b:4b:f4:99:2c:a1:90:f8:6b:b6:21: bb:7e:c9:9e:99:72:da:e0:39:fc:0a:63:d7:f4:e3:94:61:5a: 5d:ed:4c:2e:d8:4a:7c:97:21:86:c8:6b:c7:a9:ae:24:9f:43: 0b:6e:16:56:50:24:dd:6d:4a:9b:07:30:b7:f8:1b:e6:c2:f1: 19:51:65:3b:7d:0c:44:20:2a:8f:b6:0c:74:52:29:2c:fd:c5: 06:e3:b9:96 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUfUjroxImLj+9cIXse09h+Us7sz0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyMTA0MjU1MVoX DTI2MDQyMDA0MzA1MVowMzExMC8GA1UEAxMoNUMxQzYzMDJEQTJBOTkxNjZGNDhE RTc3MzE4NjNCREU3QThBNDAyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoEVKTrbWheuCTigp6lIP+z6Larntz5M845T/c5RPyiLu1WD98d0RPvjwo1 tw1WLNTh3hMIpuI6TybHF2JisatW54sKR8t3rffafmElz3L3i3G3vX41P+t5DiJv MsGPqqNf4S/y/VfUvIybVMJ7uZW05Peqoa9J7gv5EH80nfKxZucCWWC0UicdGB3v SpYKjrKGrUvF9I6UfoWfj+INc0q9jXa1U+c9wFphOLW54fVpwKhoJrs+qtJWVFNm 8b4DqGLznXa5fslrBCrIw5TMKFQFSDY9wQMDbHhjEuT+XZgVZgvmbirC1TpGAvar 5n6hZwmhwqXrMx4lSeJXLF+xCyUCAwEAAaOCAdwwggHYMB0GA1UdDgQWBBRcHGMC 2iqZFm9I3ncxhjveeopAKDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAWeK2gMEAWeyWAMEAaM9vjANBgkqhkiG9w0BAQsFAAOCAQEAjzb0 8+hLLDlw15tATvnpBVQ+n0cr+rqrVmnlaeTO11b99SLRVMx1rV6uzbgp5A6m2F/y zKBKe0nS3TifbooG5aE98z4QqbFVpMVVQmX4afg+QOL7JSHwDrjJ53ImccF0mFQR 2KbSYxy6f6ym6M4Pr5YG4uy6wY8ooGCH3NRvAMn2i5nK/Ii+3ZnjNkaLJqjMzndc 3cRVzAfbpl5jmemrkQ8MM1+hy85XD1tL9JksoZD4a7Yhu37Jnply2uA5/Apj1/Tj lGFaXe1MLthKfJchhshrx6muJJ9DC24WVlAk3W1Kmwcwt/gb5sLxGVFlO30MRCAq j7YMdFIpLP3FBuO5lg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:45 2025 by rpki-client