$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138051.roa File: AS138051.roa (raw, json) Hash identifier: xCmuM9D7mnMZWGRdZGFGtyVCnn5VZ6Ncpv1/BXcyFsc= Subject key identifier: EA:0C:F8:10:BB:F4:46:2C:0C:18:9E:DB:E5:DE:C2:5C:D2:56:72:AD Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 315D8A66697FE228A72D40F5D5B4063014B3206E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138051.roa Signing time: Tue 13 Oct 2026 03:25:53 +0000 ROA not before: Tue 13 Oct 2026 03:20:53 +0000 ROA not after: Tue 12 Oct 2027 03:25:53 +0000 asID: 138051 IP address blocks: 103.134.55.0/24 maxlen: 24 2001:df7:bb00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5d:8a:66:69:7f:e2:28:a7:2d:40:f5:d5:b4:06:30:14:b3:20:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 13 03:20:53 2026 GMT Not After : Oct 12 03:25:53 2027 GMT Subject: CN=EA0CF810BBF4462C0C189EDBE5DEC25CD25672AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:0e:d9:f6:82:29:a3:f2:57:c4:cb:f4:9f: 37:e6:bb:f9:62:e9:06:08:e6:28:39:9e:c2:8e:51: 0f:9a:ab:0c:1e:8a:05:6e:c4:20:34:c9:99:34:0b: d7:4d:a8:20:ad:a7:1a:c1:2c:d3:18:c8:9c:34:f5: 12:87:bc:5e:1c:39:12:6b:54:58:a6:5a:35:5f:99: 76:0a:bd:38:7f:55:9f:8e:54:e7:3c:73:33:6a:d7: f6:a2:36:dc:4c:f8:a5:bf:e5:8b:d0:8f:ea:d4:9b: 1a:c6:32:4f:4b:70:13:9c:b7:ae:e1:40:b8:ef:aa: f5:02:e0:99:6f:ab:f8:b2:f0:bc:a1:8b:c5:cd:36: 3d:e9:76:8e:8a:3a:3b:e2:3d:6c:84:aa:a6:54:42: 9f:59:f1:22:87:46:99:c1:b0:c0:6d:30:3c:57:71: 22:2d:bf:64:b1:14:45:b2:59:e4:e8:2e:24:47:3c: 5d:8c:cd:3c:06:87:27:cd:47:c4:be:77:3c:30:ff: 12:ab:23:84:c8:3f:20:34:d6:ec:11:53:60:dd:ea: f2:e1:c1:9f:a5:bb:b7:32:c8:db:f0:09:7b:cc:e3: cb:e7:57:8f:66:19:cc:51:52:e2:e4:92:9f:db:67: 63:2f:29:58:8b:33:45:d3:c0:ff:43:5b:b7:d6:ce: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0C:F8:10:BB:F4:46:2C:0C:18:9E:DB:E5:DE:C2:5C:D2:56:72:AD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138051.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.55.0/24 IPv6: 2001:df7:bb00::/48 Signature Algorithm: sha256WithRSAEncryption 8c:d2:01:0d:3d:89:25:4f:ad:60:52:a2:42:49:b9:b1:4f:a7: 4a:3f:1e:35:59:ec:13:32:39:74:3b:f9:68:1c:19:a1:a8:df: e0:b5:b7:40:c3:0a:28:1b:f3:20:b2:1d:30:c1:22:a3:b0:69: 16:2b:a9:ba:85:48:51:7f:ed:aa:97:75:84:79:e0:7c:8b:ae: c8:ed:71:43:92:8c:0c:8f:f9:d8:72:85:27:7e:33:bf:fb:62: 20:22:22:32:9c:f6:af:b1:7d:49:22:fc:22:50:95:9e:67:b1: c8:04:5f:22:f1:32:63:75:06:9c:bd:98:37:35:09:ad:d9:47: 6c:24:e8:fe:5c:5d:d7:5f:32:21:6d:aa:6c:ce:97:3a:cb:fa: 30:06:25:60:7e:d6:5c:49:be:27:7b:a0:3b:d5:6a:b8:c1:c9: 8b:a6:72:1f:6e:0e:10:19:f1:4b:32:6c:79:7b:b2:43:e0:76: 0c:c3:2a:8c:5d:0b:8b:0f:4b:ca:68:52:c8:1a:c3:00:a1:75: 94:17:05:2d:2b:b2:b4:a6:04:d4:42:a6:02:a2:2b:0b:46:d0: 90:dc:86:e1:26:e0:9a:de:ed:07:e1:6e:19:84:0d:64:2e:dd: c1:6b:25:e7:2b:a6:13:bf:cf:17:05:41:71:bb:94:28:c8:cf: 3b:52:1b:9c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMV2KZml/4iinLUD11bQGMBSzIG4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxMzAzMjA1M1oX DTI3MTAxMjAzMjU1M1owMzExMC8GA1UEAxMoRUEwQ0Y4MTBCQkY0NDYyQzBDMTg5 RURCRTVERUMyNUNEMjU2NzJBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNzDtn2gimj8lfEy/SfN+a7+WLpBgjmKDmewo5RD5qrDB6KBW7EIDTJmTQL 102oIK2nGsEs0xjInDT1Eoe8Xhw5EmtUWKZaNV+Zdgq9OH9Vn45U5zxzM2rX9qI2 3Ez4pb/li9CP6tSbGsYyT0twE5y3ruFAuO+q9QLgmW+r+LLwvKGLxc02Pel2joo6 O+I9bISqplRCn1nxIodGmcGwwG0wPFdxIi2/ZLEURbJZ5OguJEc8XYzNPAaHJ81H xL53PDD/EqsjhMg/IDTW7BFTYN3q8uHBn6W7tzLI2/AJe8zjy+dXj2YZzFFS4uSS n9tnYy8pWIszRdPA/0Nbt9bOVk0CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTqDPgQ u/RGLAwYntvl3sJc0lZyrTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4MDUxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ4Y3MA8EAgACMAkDBwAgAQ33uwAwDQYJKoZIhvcNAQELBQADggEBAIzS AQ09iSVPrWBSokJJubFPp0o/HjVZ7BMyOXQ7+WgcGaGo3+C1t0DDCigb8yCyHTDB IqOwaRYrqbqFSFF/7aqXdYR54HyLrsjtcUOSjAyP+dhyhSd+M7/7YiAiIjKc9q+x fUki/CJQlZ5nscgEXyLxMmN1Bpy9mDc1Ca3ZR2wk6P5cXddfMiFtqmzOlzrL+jAG JWB+1lxJvid7oDvVarjByYumch9uDhAZ8UsybHl7skPgdgzDKoxdC4sPS8poUsga wwChdZQXBS0rsrSmBNRCpgKiKwtG0JDchuEm4Jre7QfhbhmEDWQu3cFrJecrphO/ zxcFQXG7lCjIzztSG5w= -----END CERTIFICATE-----Generated at Mon Nov 9 16:37:02 2026 by rpki-client