$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38511.roa File: AS38511.roa (raw, json) Hash identifier: ji12vOua7vmo580yiiT5rR6uhJHIV3+LiNoOEyDQg74= Subject key identifier: E1:90:E6:92:F0:B4:0A:CF:1D:DB:EE:25:E3:05:98:5B:CA:04:4F:9D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 02984F2F7D8E654B4C6B652AFA1E6422C5189644 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38511.roa Signing time: Wed 30 Apr 2025 11:00:00 +0000 ROA not before: Wed 30 Apr 2025 10:55:00 +0000 ROA not after: Wed 29 Apr 2026 11:00:00 +0000 asID: 38511 IP address blocks: 103.26.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:98:4f:2f:7d:8e:65:4b:4c:6b:65:2a:fa:1e:64:22:c5:18:96:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 30 10:55:00 2025 GMT Not After : Apr 29 11:00:00 2026 GMT Subject: CN=E190E692F0B40ACF1DDBEE25E305985BCA044F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:43:5f:74:85:96:12:47:8a:13:f2:d5:bd:3c: 6e:dd:77:dc:00:ab:b1:38:4a:a3:0f:45:6a:0e:eb: de:47:f5:49:32:9a:dd:ac:72:57:c6:6f:04:4f:8d: c4:bf:0c:be:4b:44:9d:36:42:d7:20:a8:ab:4f:41: cf:65:c5:b1:90:fa:07:b7:81:94:e2:24:0c:19:ae: dc:42:72:b9:7b:8f:c1:c2:d0:00:81:87:44:1f:99: 38:95:70:95:9f:be:bd:87:d7:53:91:6d:13:53:06: cf:4f:f4:57:14:01:1e:dc:7a:0c:6a:5a:7e:60:c1: 67:4a:07:96:ca:e4:d1:b1:be:a3:55:3b:27:26:e9: e9:08:3b:97:b4:f7:ee:1f:e7:25:84:a9:50:5a:56: 90:57:40:45:00:93:fe:8b:40:60:af:55:9f:ba:93: 0a:94:df:53:a7:7f:59:4b:d7:d1:b4:5c:52:e9:2e: b1:cb:76:21:3c:51:f4:bc:9f:7e:e4:30:3f:24:fe: fb:40:87:a2:2f:a8:8a:2b:49:26:da:1e:50:55:82: bd:7d:ef:b2:e0:be:98:63:d0:36:15:1c:57:37:dd: 63:2d:01:1e:54:1f:9f:f3:d9:2f:61:dd:f4:bb:fc: cd:76:6d:69:51:70:e2:2f:52:81:e7:c9:4b:ac:41: 9a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:90:E6:92:F0:B4:0A:CF:1D:DB:EE:25:E3:05:98:5B:CA:04:4F:9D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38511.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.26.212.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:da:4e:df:3c:74:78:96:2c:ca:b7:c8:ca:2d:28:63:17:ca: 75:3a:61:6f:db:f4:78:cd:7c:f5:51:50:83:be:34:a9:aa:3a: 3c:74:6b:e1:9b:af:33:44:2f:82:29:2e:31:6a:da:cb:31:4c: d9:35:58:4c:94:f7:fb:ca:a4:14:69:41:4b:99:44:6f:23:d6: 5d:b5:2a:7d:1c:67:e1:4f:66:24:90:13:31:8b:46:65:fd:6a: 65:bb:5e:a4:fa:1d:cc:57:ca:c2:fa:9b:54:f5:62:c3:f2:ef: 11:1d:31:8c:09:f8:88:14:9f:d7:8a:9f:ee:69:e9:d3:27:bb: b3:26:9d:15:7f:b0:5f:9b:71:83:8a:16:e1:8f:94:99:49:98: e1:84:c2:ba:97:e3:b8:54:82:8c:c1:b5:55:b6:07:3b:29:89: e5:40:e2:c2:db:64:54:f3:eb:c5:a1:d0:26:eb:d3:24:ff:3e: ec:6a:de:61:34:c4:3c:31:9c:99:5b:41:eb:fc:15:71:25:c0: da:0a:a0:de:02:16:97:8c:60:f1:8f:ca:46:89:bd:10:08:0a: 21:bf:c8:69:9a:d3:bb:ce:8e:08:a0:9e:4e:ca:a4:5f:ba:1f: 39:29:d4:c0:25:32:09:b4:c5:56:9f:68:82:6e:be:cc:55:5f: 60:28:e1:ee -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUAphPL32OZUtMa2Uq+h5kIsUYlkQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQzMDEwNTUwMFoX DTI2MDQyOTExMDAwMFowMzExMC8GA1UEAxMoRTE5MEU2OTJGMEI0MEFDRjFEREJF RTI1RTMwNTk4NUJDQTA0NEY5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJDX3SFlhJHihPy1b08bt133ACrsThKow9Fag7r3kf1STKa3axyV8ZvBE+N xL8MvktEnTZC1yCoq09Bz2XFsZD6B7eBlOIkDBmu3EJyuXuPwcLQAIGHRB+ZOJVw lZ++vYfXU5FtE1MGz0/0VxQBHtx6DGpafmDBZ0oHlsrk0bG+o1U7Jybp6Qg7l7T3 7h/nJYSpUFpWkFdARQCT/otAYK9Vn7qTCpTfU6d/WUvX0bRcUukusct2ITxR9Lyf fuQwPyT++0CHoi+oiitJJtoeUFWCvX3vsuC+mGPQNhUcVzfdYy0BHlQfn/PZL2Hd 9Lv8zXZtaVFw4i9SgefJS6xBmlkCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBThkOaS 8LQKzx3b7iXjBZhbygRPnTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4NTExLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZxrUMA0GCSqGSIb3DQEBCwUAA4IBAQBe2k7fPHR4lizKt8jKLShj F8p1OmFv2/R4zXz1UVCDvjSpqjo8dGvhm68zRC+CKS4xatrLMUzZNVhMlPf7yqQU aUFLmURvI9ZdtSp9HGfhT2YkkBMxi0Zl/Wplu16k+h3MV8rC+ptU9WLD8u8RHTGM CfiIFJ/Xip/uaenTJ7uzJp0Vf7Bfm3GDihbhj5SZSZjhhMK6l+O4VIKMwbVVtgc7 KYnlQOLC22RU8+vFodAm69Mk/z7sat5hNMQ8MZyZW0Hr/BVxJcDaCqDeAhaXjGDx j8pGib0QCAohv8hpmtO7zo4IoJ5OyqRfuh85KdTAJTIJtMVWn2iCbr7MVV9gKOHu -----END CERTIFICATE-----Generated at Tue Oct 28 16:14:41 2025 by rpki-client