$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38320.roa File: AS38320.roa (raw, json) Hash identifier: EAbFRItE+H2unBRR6Mm54zAZfm8l32aD/fBCNA9xsHc= Subject key identifier: 77:40:5E:34:74:A6:82:B7:B5:55:2A:6A:16:12:C3:81:E2:83:14:40 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 72E40AB8C85E2F6F5229F60FE35939F55708A8AE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38320.roa Signing time: Wed 26 Aug 2026 02:44:20 +0000 ROA not before: Wed 26 Aug 2026 02:39:20 +0000 ROA not after: Wed 25 Aug 2027 02:44:20 +0000 asID: 38320 IP address blocks: 103.130.241.0/24 maxlen: 24 103.130.242.0/24 maxlen: 24 103.130.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e4:0a:b8:c8:5e:2f:6f:52:29:f6:0f:e3:59:39:f5:57:08:a8:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 26 02:39:20 2026 GMT Not After : Aug 25 02:44:20 2027 GMT Subject: CN=77405E3474A682B7B5552A6A1612C381E2831440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:41:a1:8e:6e:bd:33:30:11:4e:c6:c8:5a: 92:80:9c:62:41:49:c4:ec:83:8b:ba:38:7a:89:86: d2:2c:da:8e:7a:45:0e:82:d2:5e:e4:52:b6:82:7d: 1f:ca:72:e7:42:18:75:92:e3:0c:98:05:d5:de:ea: fd:5d:b9:2a:c6:d0:9b:05:bd:d4:70:a8:4e:1e:3a: 45:b3:21:0a:b1:c7:c9:d0:09:23:9e:2a:36:ef:47: 4c:28:e2:d1:01:0f:de:f4:8b:44:c3:04:17:79:de: 3e:17:d6:2c:06:11:b1:2c:90:7f:21:20:57:f9:dd: 59:83:53:49:a8:18:50:01:e0:3b:19:6c:51:23:11: f6:86:ef:30:4f:d6:89:0b:1a:c2:3e:ee:cc:6a:55: 9d:6f:fa:e1:5b:a1:52:7c:ea:38:cf:f0:f7:42:d2: a8:02:00:45:85:d0:71:3f:08:0a:43:af:38:11:7f: c7:8a:89:ec:6c:7b:0f:a3:11:c9:85:54:7b:b5:3a: df:a3:b4:8a:87:5a:b1:94:64:37:c3:81:85:63:e7: ea:9d:fc:51:22:9b:73:3d:fd:37:72:d2:b6:64:89: 87:37:fc:2c:3a:34:9e:50:67:f9:d0:5a:f0:ee:ef: 49:3b:02:e0:e2:76:2a:8d:82:82:2b:c7:1a:d3:b6: 56:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:40:5E:34:74:A6:82:B7:B5:55:2A:6A:16:12:C3:81:E2:83:14:40 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38320.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.241.0-103.130.243.255 Signature Algorithm: sha256WithRSAEncryption a1:9a:18:cc:d4:76:fe:ba:4b:5a:f3:0a:6b:86:a1:3a:c5:e9: e6:5f:b6:1a:54:f8:c4:6e:0b:1e:a6:d3:7a:9e:8d:8a:9c:6b: 2b:29:44:d6:66:48:4f:77:96:a6:ca:64:ed:e0:86:2a:a7:c5: c2:e1:f8:4a:3a:47:df:8d:16:f3:42:26:93:0e:47:95:11:75: e0:df:42:df:25:bb:2e:f4:d9:9c:eb:bc:12:8b:f1:52:0f:be: 76:b0:5d:92:46:fd:72:eb:d4:c9:00:13:50:ea:14:86:d8:59: 58:04:58:1d:c4:6f:bd:de:79:14:33:e5:5b:d3:a5:d6:da:c1: 30:9f:7d:b8:3d:d3:49:04:44:67:ee:52:19:75:47:d1:b8:c3: 9c:53:5e:ba:0c:49:ea:ef:a4:6e:4c:43:e0:d9:fb:2e:ee:46: 2a:02:7b:43:4d:b0:fb:51:a1:c8:e2:0e:d6:eb:9a:e8:ac:38: c1:14:ca:9e:cd:b3:25:87:c0:55:e3:90:b4:25:b3:e3:fe:d5: ad:20:76:d2:1d:de:dc:38:a5:9e:df:4c:cc:49:bd:6b:9f:e3: 3f:3c:6f:ac:e9:41:e6:39:0d:44:c0:da:14:94:53:d0:6e:ed: 6a:ed:b0:69:c0:76:14:27:c2:5a:3e:23:10:1b:d8:52:5e:af: fb:99:cf:c8 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUcuQKuMheL29SKfYP41k59VcIqK4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgyNjAyMzkyMFoX DTI3MDgyNTAyNDQyMFowMzExMC8GA1UEAxMoNzc0MDVFMzQ3NEE2ODJCN0I1NTUy QTZBMTYxMkMzODFFMjgzMTQ0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZNQaGObr0zMBFOxshakoCcYkFJxOyDi7o4eomG0izajnpFDoLSXuRStoJ9 H8py50IYdZLjDJgF1d7q/V25KsbQmwW91HCoTh46RbMhCrHHydAJI54qNu9HTCji 0QEP3vSLRMMEF3nePhfWLAYRsSyQfyEgV/ndWYNTSagYUAHgOxlsUSMR9obvME/W iQsawj7uzGpVnW/64VuhUnzqOM/w90LSqAIARYXQcT8ICkOvOBF/x4qJ7Gx7D6MR yYVUe7U636O0iodasZRkN8OBhWPn6p38USKbcz39N3LStmSJhzf8LDo0nlBn+dBa 8O7vSTsC4OJ2Ko2CgivHGtO2Vh0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBR3QF40 dKaCt7VVKmoWEsOB4oMUQDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMzgzMjAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgAB MA4wDAMEAGeC8QMEAmeC8DANBgkqhkiG9w0BAQsFAAOCAQEAoZoYzNR2/rpLWvMK a4ahOsXp5l+2GlT4xG4LHqbTep6NipxrKylE1mZIT3eWpspk7eCGKqfFwuH4SjpH 340W80Imkw5HlRF14N9C3yW7LvTZnOu8EovxUg++drBdkkb9cuvUyQATUOoUhthZ WARYHcRvvd55FDPlW9Ol1trBMJ99uD3TSQREZ+5SGXVH0bjDnFNeugxJ6u+kbkxD 4Nn7Lu5GKgJ7Q02w+1GhyOIO1uua6Kw4wRTKns2zJYfAVeOQtCWz4/7VrSB20h3e 3Dilnt9MzEm9a5/jPzxvrOlB5jkNRMDaFJRT0G7tau2wacB2FCfCWj4jEBvYUl6v +5nPyA== -----END CERTIFICATE-----Generated at Thu Sep 3 10:10:46 2026 by rpki-client