$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138115.roa File: AS138115.roa (raw, json) Hash identifier: RLK3dmNYIkCaTGDRc0gpN571d9mDk6veDm80azaWVOo= Subject key identifier: A6:28:E2:9F:BC:5E:FD:4D:10:50:E5:EA:E3:A5:29:C3:51:40:FA:70 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0589C7C9E189EB79143F7CE03679D2F8FB5BB76C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138115.roa Signing time: Thu 11 Jun 2026 02:36:10 +0000 ROA not before: Thu 11 Jun 2026 02:31:10 +0000 ROA not after: Thu 10 Jun 2027 02:36:10 +0000 asID: 138115 IP address blocks: 36.50.77.0/24 maxlen: 24 103.169.206.0/23 maxlen: 24 116.212.72.0/23 maxlen: 24 163.61.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:89:c7:c9:e1:89:eb:79:14:3f:7c:e0:36:79:d2:f8:fb:5b:b7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 11 02:31:10 2026 GMT Not After : Jun 10 02:36:10 2027 GMT Subject: CN=A628E29FBC5EFD4D1050E5EAE3A529C35140FA70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0f:89:8b:95:b7:b1:6e:15:ea:95:9a:b6:f8: b4:9b:b4:0a:88:b3:86:b2:00:97:e2:7e:25:a5:07: 1e:c7:d9:3c:56:90:98:3d:4b:55:5d:ed:95:f1:92: c5:0d:71:3a:d4:83:ce:40:9f:bf:fa:0c:68:52:b2: e1:46:56:d4:da:fa:53:4a:fd:ed:32:31:cf:8f:dc: 15:9f:7c:1c:27:97:8a:4d:da:ae:5f:e9:10:7e:7d: 2d:6c:d8:6d:56:45:1d:c2:bb:87:ad:e6:0f:65:15: 27:d1:45:b2:62:84:2a:cb:c1:48:b6:4c:84:2c:20: 31:73:c8:8a:0d:f2:53:30:3a:e3:89:67:07:33:e1: 69:0f:b6:8d:df:2f:a6:23:69:f8:e4:eb:64:3a:24: 62:32:35:a5:12:56:92:f1:7a:b9:2b:92:b9:9e:43: 86:fd:d4:e1:1b:6f:75:ec:c9:49:d9:03:a5:c8:23: 5e:c8:1d:af:f4:f1:b4:ec:60:ba:6a:79:72:71:b6: 70:7d:f2:dc:06:e9:32:4e:aa:7a:21:57:2a:52:19: f0:bf:1d:22:11:df:1e:d5:7f:b5:77:13:8a:5a:84: df:9f:80:21:69:de:60:3b:e9:f5:d5:b4:96:0c:d3: 60:3f:d6:9b:38:21:dc:0f:94:68:a8:9c:68:9f:b1: e2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:28:E2:9F:BC:5E:FD:4D:10:50:E5:EA:E3:A5:29:C3:51:40:FA:70 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138115.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.77.0/24 103.169.206.0/23 116.212.72.0/23 163.61.58.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:9e:fd:6f:8c:fc:f8:ad:f4:9f:87:b9:02:65:e9:d9:2a:a6: 85:a1:ed:09:af:05:59:13:82:93:35:d5:30:7d:46:1b:fb:03: 30:17:a7:e2:bd:a3:a9:7b:89:31:11:19:14:d7:d1:32:40:6c: eb:85:35:9f:60:a3:86:25:b0:06:8c:38:57:87:43:13:73:fa: 71:26:5d:b7:ed:d0:b0:b1:c4:22:93:a0:22:1a:a0:57:7f:af: 8e:9a:8f:8f:4a:d6:53:fc:38:ae:4b:b0:b4:d3:3a:c7:78:2c: 6b:00:78:c3:b3:4c:da:f1:c7:99:2f:6d:f2:1d:53:0e:2e:2b: 71:30:17:5b:9a:ae:e0:8d:f2:34:74:a6:b8:35:d4:d3:a8:a5: e9:fc:20:cb:e2:99:b1:3c:44:07:b3:44:43:a0:c0:fc:c5:62: 36:7f:ae:85:2a:d5:8d:b6:b4:06:07:07:2c:73:74:b8:7f:24: 60:78:ce:59:c1:77:10:82:ae:a8:9e:b9:a8:0f:7d:87:55:e1: 24:7d:87:8f:51:4e:79:cf:7e:c5:70:43:8c:ca:35:ea:73:b1: 1d:73:e6:e5:b0:dd:c6:0a:82:7c:0d:25:24:21:53:e1:80:cf: 27:da:eb:e9:4c:2c:4d:7d:9c:ac:76:bb:3f:a5:ba:2d:3b:b2: 37:9b:4e:dc -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUBYnHyeGJ63kUP3zgNnnS+Ptbt2wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYxMTAyMzExMFoX DTI3MDYxMDAyMzYxMFowMzExMC8GA1UEAxMoQTYyOEUyOUZCQzVFRkQ0RDEwNTBF NUVBRTNBNTI5QzM1MTQwRkE3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJoPiYuVt7FuFeqVmrb4tJu0CoizhrIAl+J+JaUHHsfZPFaQmD1LVV3tlfGS xQ1xOtSDzkCfv/oMaFKy4UZW1Nr6U0r97TIxz4/cFZ98HCeXik3arl/pEH59LWzY bVZFHcK7h63mD2UVJ9FFsmKEKsvBSLZMhCwgMXPIig3yUzA644lnBzPhaQ+2jd8v piNp+OTrZDokYjI1pRJWkvF6uSuSuZ5Dhv3U4RtvdezJSdkDpcgjXsgdr/TxtOxg ump5cnG2cH3y3AbpMk6qeiFXKlIZ8L8dIhHfHtV/tXcTilqE35+AIWneYDvp9dW0 lgzTYD/Wmzgh3A+UaKicaJ+x4pECAwEAAaOCAd4wggHaMB0GA1UdDgQWBBSmKOKf vF79TRBQ5erjpSnDUUD6cDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4MTE1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIA ATAYAwQAJDJNAwQBZ6nOAwQBdNRIAwQAoz06MA0GCSqGSIb3DQEBCwUAA4IBAQBb nv1vjPz4rfSfh7kCZenZKqaFoe0JrwVZE4KTNdUwfUYb+wMwF6fivaOpe4kxERkU 19EyQGzrhTWfYKOGJbAGjDhXh0MTc/pxJl237dCwscQik6AiGqBXf6+Omo+PStZT /DiuS7C00zrHeCxrAHjDs0za8ceZL23yHVMOLitxMBdbmq7gjfI0dKa4NdTTqKXp /CDL4pmxPEQHs0RDoMD8xWI2f66FKtWNtrQGBwcsc3S4fyRgeM5ZwXcQgq6onrmo D32HVeEkfYePUU55z37FcEOMyjXqc7Edc+blsN3GCoJ8DSUkIVPhgM8n2uvpTCxN fZysdrs/pbotO7I3m07c -----END CERTIFICATE-----Generated at Wed Jun 17 10:05:13 2026 by rpki-client