$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38158.roa File: AS38158.roa (raw, json) Hash identifier: RaS27cH0/nVUO8KcyYTkQJSbkLctLbMnemUmqMIVyFM= Subject key identifier: A5:BB:66:ED:98:A8:92:B5:73:31:4D:8C:77:BC:5F:A3:29:88:D4:24 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5E2244C633A76269063FA4E8519CF0377E2CE7E3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38158.roa Signing time: Sat 02 May 2026 09:22:08 +0000 ROA not before: Sat 02 May 2026 09:17:08 +0000 ROA not after: Sat 01 May 2027 09:22:08 +0000 asID: 38158 IP address blocks: 103.91.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:22:44:c6:33:a7:62:69:06:3f:a4:e8:51:9c:f0:37:7e:2c:e7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:17:08 2026 GMT Not After : May 1 09:22:08 2027 GMT Subject: CN=A5BB66ED98A892B573314D8C77BC5FA32988D424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5b:6d:5b:cf:9f:00:7e:c1:4f:66:89:eb:2b: 0e:37:24:d7:4c:ee:a8:81:9a:22:7e:71:03:02:72: d8:71:7a:4a:13:29:ee:73:69:ca:cc:50:0e:3f:5c: 8d:37:35:99:13:ad:c4:b7:24:ad:06:73:cc:a5:f5: fc:9a:a4:08:82:5a:45:51:cc:73:58:df:8a:2b:e0: 9a:c8:94:a6:fa:29:4e:0b:cf:14:f1:b1:fd:49:03: da:e0:c1:53:23:6d:5c:08:3d:27:75:48:47:d5:c1: 48:ad:c6:3f:5b:8f:85:dd:a9:a3:40:59:20:15:3e: a3:ad:3e:be:14:3b:ac:a6:9b:d1:c8:2d:83:80:f8: c9:74:69:d0:60:1d:59:56:6c:2e:6c:a5:4a:56:37: c4:30:17:58:9e:db:6e:62:66:e9:ef:6e:ef:d7:f4: 10:e4:b2:71:84:29:0b:62:36:16:8b:f4:44:f2:1d: e4:cd:7c:6f:5f:40:ca:8f:4d:f0:d5:19:01:33:68: 57:3b:90:aa:14:4e:54:4a:44:87:3b:42:e4:d3:99: 2d:17:31:f2:1c:44:24:bc:07:c7:8a:41:f7:3e:84: 05:4a:9b:56:3a:df:e7:76:f1:6e:af:7d:63:a4:45: 08:d0:86:c7:04:ec:f4:5d:77:ca:0c:0a:a0:4d:d4: 15:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BB:66:ED:98:A8:92:B5:73:31:4D:8C:77:BC:5F:A3:29:88:D4:24 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38158.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.20.0/22 Signature Algorithm: sha256WithRSAEncryption 92:cc:77:90:09:02:5a:61:fd:2d:71:c9:e0:32:b2:34:fe:63: 01:cf:ef:76:ab:f3:84:65:28:9d:ac:a6:b5:40:4f:db:77:e0: de:97:cd:57:98:c1:ee:6d:b4:c3:82:ca:8b:aa:85:82:67:1b: a7:7e:0b:42:f5:e0:e4:3b:a5:ec:79:30:26:4c:84:41:ad:50: 05:de:7b:18:fa:cf:8b:4a:41:af:36:61:e0:bd:5f:da:cd:28: 93:cf:82:57:e5:7a:72:e5:a0:fd:94:1c:0f:bb:b6:85:e8:e3: b0:26:a5:3f:e2:16:82:47:18:f2:a3:e3:72:8a:8d:05:c4:99: fc:a8:1a:23:3a:71:6f:86:ec:ce:d2:f3:e6:e6:c1:30:a5:ed: 55:ce:28:b3:64:8e:b8:48:9f:08:0e:7b:77:71:89:01:63:ae: 94:c5:52:69:ad:59:da:5e:36:29:67:48:91:1f:25:8a:a9:e7: d7:1e:8b:0a:cc:d8:c4:c4:af:c5:33:90:dd:d6:8c:30:e6:e4: b9:6c:15:2e:04:48:0f:73:57:72:d3:87:c3:e0:d8:d4:82:6e: e0:c2:c6:05:5f:44:be:1d:01:26:14:f5:fb:43:81:d5:62:18: da:bb:0e:30:71:81:99:c8:52:4f:6f:6a:89:f5:a6:59:7d:e8: 38:3d:7c:06 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUXiJExjOnYmkGP6ToUZzwN34s5+MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTcwOFoX DTI3MDUwMTA5MjIwOFowMzExMC8GA1UEAxMoQTVCQjY2RUQ5OEE4OTJCNTczMzE0 RDhDNzdCQzVGQTMyOTg4RDQyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBbbVvPnwB+wU9miesrDjck10zuqIGaIn5xAwJy2HF6ShMp7nNpysxQDj9c jTc1mROtxLckrQZzzKX1/JqkCIJaRVHMc1jfiivgmsiUpvopTgvPFPGx/UkD2uDB UyNtXAg9J3VIR9XBSK3GP1uPhd2po0BZIBU+o60+vhQ7rKab0cgtg4D4yXRp0GAd WVZsLmylSlY3xDAXWJ7bbmJm6e9u79f0EOSycYQpC2I2Fov0RPId5M18b19Ayo9N 8NUZATNoVzuQqhROVEpEhztC5NOZLRcx8hxEJLwHx4pB9z6EBUqbVjrf53bxbq99 Y6RFCNCGxwTs9F13ygwKoE3UFXMCAwEAAaOCAcswggHHMB0GA1UdDgQWBBSlu2bt mKiStXMxTYx3vF+jKYjUJDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMzgxNTgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJnWxQwDQYJKoZIhvcNAQELBQADggEBAJLMd5AJAlph/S1xyeAysjT+YwHP 73ar84RlKJ2sprVAT9t34N6XzVeYwe5ttMOCyouqhYJnG6d+C0L14OQ7pex5MCZM hEGtUAXeexj6z4tKQa82YeC9X9rNKJPPglflenLloP2UHA+7toXo47AmpT/iFoJH GPKj43KKjQXEmfyoGiM6cW+G7M7S8+bmwTCl7VXOKLNkjrhInwgOe3dxiQFjrpTF UmmtWdpeNilnSJEfJYqp59ceiwrM2MTEr8UzkN3WjDDm5LlsFS4ESA9zV3LTh8Pg 2NSCbuDCxgVfRL4dASYU9ftDgdViGNq7DjBxgZnIUk9vaon1pll96Dg9fAY= -----END CERTIFICATE-----Generated at Sun May 3 01:40:40 2026 by rpki-client