$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38496.roa File: AS38496.roa (raw, json) Hash identifier: O1nDdyv9Ry5URbSA0+EWSpR2XzdOUuO4ErEZ3x1v3KQ= Subject key identifier: 05:8D:C6:88:FE:91:B7:50:62:ED:61:15:37:7C:01:9C:14:96:F2:1A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5F54F03FC75CB3BFBB16A6F2683D0419D78E6B6C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38496.roa Signing time: Tue 13 Oct 2026 02:57:54 +0000 ROA not before: Tue 13 Oct 2026 02:52:54 +0000 ROA not after: Tue 12 Oct 2027 02:57:54 +0000 asID: 38496 IP address blocks: 45.113.228.0/22 maxlen: 24 144.48.13.0/24 maxlen: 24 144.48.14.0/24 maxlen: 24 144.48.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:54:f0:3f:c7:5c:b3:bf:bb:16:a6:f2:68:3d:04:19:d7:8e:6b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 13 02:52:54 2026 GMT Not After : Oct 12 02:57:54 2027 GMT Subject: CN=058DC688FE91B75062ED6115377C019C1496F21A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:96:31:23:9a:7a:9c:dd:a5:3b:a6:8c:1b: 30:fe:47:c3:ec:77:bc:dc:ce:6d:19:4b:34:e7:14: 81:7c:57:39:ad:9c:b6:0d:2e:4c:ee:6e:2b:67:64: 18:6a:2d:d1:ef:09:f9:77:ff:e4:38:ef:cd:6e:da: 68:d8:a5:fb:0a:18:09:e3:65:9f:ae:dc:32:7b:e3: c6:95:02:a4:37:1c:5a:80:d1:82:25:35:b3:e6:e5: 3c:d4:3d:69:6d:f9:ee:6b:1e:d8:55:11:e3:3e:9c: 7e:ab:f6:90:97:4f:7b:9c:33:0f:aa:ce:82:b2:4f: 15:66:98:13:53:b1:17:4b:1b:9b:41:5c:12:88:b5: ea:53:90:29:bc:b1:9d:45:a3:2b:1b:8f:eb:a2:66: 33:19:2a:b5:98:9b:44:bc:7f:24:f8:78:5b:29:36: 32:e1:9d:63:67:9f:a7:76:25:a3:60:9c:cf:30:26: 38:36:d0:32:86:bd:e0:49:bd:51:83:77:f9:e9:39: 4b:b2:3f:68:ed:d7:67:da:5e:2a:34:48:8a:29:e0: b1:e7:4f:a9:18:f4:31:78:af:af:be:a1:b5:95:fd: c3:b9:0f:68:4c:e3:6e:73:67:0d:25:2f:b4:58:55: 19:66:53:c5:91:92:bc:7d:2c:1a:11:1e:43:43:f4: 43:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8D:C6:88:FE:91:B7:50:62:ED:61:15:37:7C:01:9C:14:96:F2:1A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38496.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.113.228.0/22 144.48.13.0-144.48.15.255 Signature Algorithm: sha256WithRSAEncryption 64:25:b5:e3:15:55:f9:99:63:31:91:d8:a0:da:d5:8b:9d:c4: 02:31:14:9b:38:50:8f:df:88:5e:c8:a8:c0:8e:a3:2b:9e:07: 15:ed:2f:fd:20:d1:5e:79:c3:ca:f0:f7:de:b2:51:94:15:68: b0:aa:07:ee:b7:b5:bd:7c:46:07:9f:f6:3d:65:d5:70:e3:28: 25:a5:6f:63:38:d0:18:f5:43:72:35:3e:37:9d:a7:ae:ff:d4: 0e:ba:17:12:e6:a9:d7:fd:f9:60:c7:2c:d8:47:f7:92:41:ca: fc:63:0d:d4:bf:5d:38:b8:9b:4a:fd:86:78:c2:f0:12:8d:be: 75:8e:89:2c:f5:b8:ac:cd:40:f7:df:12:96:38:88:4a:41:2c: 47:74:90:70:16:6e:c0:87:0c:b9:cd:ac:2a:18:fd:f3:b3:fb: 7d:55:b2:95:bb:ed:66:8d:23:fa:45:e4:2b:cb:bd:5f:23:37: f7:6d:05:3e:0d:a8:9e:1c:5f:ba:51:5f:ab:e3:8d:0f:75:cc: d4:a2:e6:fe:74:cf:43:42:7e:49:ed:53:89:83:51:50:9f:4a: dd:61:2f:a0:0e:e1:91:1d:7a:38:e0:4f:8d:9d:7c:b6:e6:1b: 09:ff:9f:7c:11:99:16:2d:3d:6c:7c:18:97:bb:7d:c7:20:6c: 71:94:f4:b2 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUX1TwP8dcs7+7FqbyaD0EGdeOa2wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxMzAyNTI1NFoX DTI3MTAxMjAyNTc1NFowMzExMC8GA1UEAxMoMDU4REM2ODhGRTkxQjc1MDYyRUQ2 MTE1Mzc3QzAxOUMxNDk2RjIxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALe5ljEjmnqc3aU7powbMP5Hw+x3vNzObRlLNOcUgXxXOa2ctg0uTO5uK2dk GGot0e8J+Xf/5DjvzW7aaNil+woYCeNln67cMnvjxpUCpDccWoDRgiU1s+blPNQ9 aW357mse2FUR4z6cfqv2kJdPe5wzD6rOgrJPFWaYE1OxF0sbm0FcEoi16lOQKbyx nUWjKxuP66JmMxkqtZibRLx/JPh4Wyk2MuGdY2efp3Ylo2CczzAmODbQMoa94Em9 UYN3+ek5S7I/aO3XZ9peKjRIiingsedPqRj0MXivr76htZX9w7kPaEzjbnNnDSUv tFhVGWZTxZGSvH0sGhEeQ0P0Q0sCAwEAAaOCAdkwggHVMB0GA1UdDgQWBBQFjcaI /pG3UGLtYRU3fAGcFJbyGjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMzg0OTYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgAB MBQDBAItceQwDAMEAJAwDQMEBJAwADANBgkqhkiG9w0BAQsFAAOCAQEAZCW14xVV +ZljMZHYoNrVi53EAjEUmzhQj9+IXsiowI6jK54HFe0v/SDRXnnDyvD33rJRlBVo sKoH7re1vXxGB5/2PWXVcOMoJaVvYzjQGPVDcjU+N52nrv/UDroXEuap1/35YMcs 2Ef3kkHK/GMN1L9dOLibSv2GeMLwEo2+dY6JLPW4rM1A998SljiISkEsR3SQcBZu wIcMuc2sKhj987P7fVWylbvtZo0j+kXkK8u9XyM3920FPg2onhxfulFfq+OND3XM 1KLm/nTPQ0J+Se1TiYNRUJ9K3WEvoA7hkR16OOBPjZ18tuYbCf+ffBGZFi09bHwY l7t9xyBscZT0sg== -----END CERTIFICATE-----Generated at Sun Oct 25 08:01:47 2026 by rpki-client