$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138844.roa File: AS138844.roa (raw, json) Hash identifier: Q4JCHt/cIYIPMIcowRGByLDh2AfN//ZdETfhLclqlR4= Subject key identifier: 78:6E:6D:A5:08:6F:E6:DA:8C:B4:1E:55:35:8A:91:92:2E:47:5E:CE Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 14D11931C9934036B75A0BAD4594ACE788AF7977 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138844.roa Signing time: Mon 25 May 2026 06:37:10 +0000 ROA not before: Mon 25 May 2026 06:32:10 +0000 ROA not after: Mon 24 May 2027 06:37:10 +0000 asID: 138844 IP address blocks: 103.91.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d1:19:31:c9:93:40:36:b7:5a:0b:ad:45:94:ac:e7:88:af:79:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 25 06:32:10 2026 GMT Not After : May 24 06:37:10 2027 GMT Subject: CN=786E6DA5086FE6DA8CB41E55358A91922E475ECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:ac:32:ac:e9:f9:22:9f:dd:d3:d8:cb:6c: f6:14:cd:77:44:7f:97:0e:24:64:0a:6f:76:ea:f4: 2a:08:83:39:2a:ae:ff:d8:64:8a:9c:92:b0:d7:da: 70:f6:98:31:3d:5a:80:b0:ec:f8:20:80:15:bc:3b: 7d:b8:2c:37:71:a0:39:d9:bd:bd:ba:8f:d8:ba:1b: 22:c2:14:51:df:e7:a7:41:79:af:c2:e8:0e:7a:d8: 40:5b:2d:ac:d6:2c:e4:f0:e1:34:ca:a2:35:c5:15: df:0d:26:e6:8b:05:70:fd:9d:52:ec:7a:e4:af:34: 80:a4:1a:d5:15:cd:e6:c7:74:64:3b:fb:73:eb:bf: 80:38:de:0d:44:7d:db:ea:5b:1a:dc:ac:4c:71:99: ed:e0:0e:20:3d:7a:75:5e:66:4f:0f:ed:b5:70:bc: 03:7b:c3:fa:1e:17:24:be:f2:25:bf:a6:35:26:dd: 9b:7f:15:af:c8:ac:e0:d9:d9:c3:1f:09:d9:d6:37: 68:a1:b4:4a:80:1d:7c:f5:85:b2:aa:6e:4c:17:c5: 5f:de:3b:6e:d8:04:52:03:22:76:b1:2b:bf:d0:2b: b8:f5:ec:e5:00:b0:64:43:1c:8e:72:13:42:a3:a3: b2:2b:27:cf:9a:a0:19:17:31:34:db:3d:8f:aa:00: 23:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6E:6D:A5:08:6F:E6:DA:8C:B4:1E:55:35:8A:91:92:2E:47:5E:CE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138844.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.14.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:8d:bc:3e:c0:52:2e:85:13:bd:78:8f:19:e2:54:b7:21:51: 70:c8:0e:f3:dc:fa:af:6e:0b:1f:19:7b:6b:69:69:be:e9:a3: 4c:a9:be:90:6d:45:f3:00:cc:bd:2d:e1:35:5a:2d:be:b3:2c: 38:9e:eb:69:16:fb:0a:95:e0:18:df:27:10:e5:eb:cd:b2:18: e9:66:ef:5b:c3:27:0c:3d:5a:0c:54:82:9f:29:66:d5:5a:fd: 56:9e:2d:b4:71:72:23:2f:1b:b2:64:c6:6e:6a:e3:f0:e9:d5: 5a:d3:2a:9b:03:ed:05:b7:72:ce:ee:69:c3:26:f5:ae:0d:d9: 05:e1:21:8b:17:76:1f:0b:d3:10:f8:62:7f:08:7e:60:0a:d7: 76:3b:77:d5:b7:ca:69:44:35:3e:cd:bd:18:36:70:3e:92:8a: fb:ec:6c:47:b7:cd:55:ef:37:e3:60:84:38:ef:97:e6:7e:6a: 52:45:b0:39:25:cb:1d:ad:03:73:b2:e8:3c:0f:bc:c2:46:21: 39:6e:d4:07:fc:39:5a:2d:d0:a5:e2:4e:3b:c3:f2:71:f9:c1: 4a:70:a3:c6:0b:43:19:96:9e:44:28:45:0f:10:1e:d2:e1:06: b6:60:4b:8c:1a:ea:7c:78:d4:48:1f:58:69:48:8c:7a:80:4d: ee:8c:63:94 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUFNEZMcmTQDa3WgutRZSs54iveXcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUyNTA2MzIxMFoX DTI3MDUyNDA2MzcxMFowMzExMC8GA1UEAxMoNzg2RTZEQTUwODZGRTZEQThDQjQx RTU1MzU4QTkxOTIyRTQ3NUVDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJrrDKs6fkin93T2Mts9hTNd0R/lw4kZApvdur0KgiDOSqu/9hkipySsNfa cPaYMT1agLDs+CCAFbw7fbgsN3GgOdm9vbqP2LobIsIUUd/np0F5r8LoDnrYQFst rNYs5PDhNMqiNcUV3w0m5osFcP2dUux65K80gKQa1RXN5sd0ZDv7c+u/gDjeDUR9 2+pbGtysTHGZ7eAOID16dV5mTw/ttXC8A3vD+h4XJL7yJb+mNSbdm38Vr8is4NnZ wx8J2dY3aKG0SoAdfPWFsqpuTBfFX947btgEUgMidrErv9AruPXs5QCwZEMcjnIT QqOjsisnz5qgGRcxNNs9j6oAIysCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR4bm2l CG/m2oy0HlU1ipGSLkdezjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4ODQ0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ1sOMA0GCSqGSIb3DQEBCwUAA4IBAQAsjbw+wFIuhRO9eI8Z4lS3IVFw yA7z3PqvbgsfGXtraWm+6aNMqb6QbUXzAMy9LeE1Wi2+syw4nutpFvsKleAY3ycQ 5evNshjpZu9bwycMPVoMVIKfKWbVWv1Wni20cXIjLxuyZMZuauPw6dVa0yqbA+0F t3LO7mnDJvWuDdkF4SGLF3YfC9MQ+GJ/CH5gCtd2O3fVt8ppRDU+zb0YNnA+kor7 7GxHt81V7zfjYIQ475fmfmpSRbA5JcsdrQNzsug8D7zCRiE5btQH/DlaLdCl4k47 w/Jx+cFKcKPGC0MZlp5EKEUPEB7S4Qa2YEuMGup8eNRIH1hpSIx6gE3ujGOU -----END CERTIFICATE-----Generated at Wed Jun 17 09:33:11 2026 by rpki-client