$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38750.roa File: AS38750.roa (raw, json) Hash identifier: WDjbVoqcr99EgCRPkAY342WVazmcSxPsjQRI6cF0/FE= Subject key identifier: A6:F3:95:8A:0E:23:C2:2F:BB:CA:6A:36:31:F8:AD:8F:8A:28:D2:8F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4BEA960220BD982A1697BBB06A81BF122935854E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38750.roa Signing time: Wed 21 Oct 2026 03:41:11 +0000 ROA not before: Wed 21 Oct 2026 03:36:11 +0000 ROA not after: Wed 20 Oct 2027 03:41:11 +0000 asID: 38750 IP address blocks: 121.50.32.0/21 maxlen: 24 150.129.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ea:96:02:20:bd:98:2a:16:97:bb:b0:6a:81:bf:12:29:35:85:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 21 03:36:11 2026 GMT Not After : Oct 20 03:41:11 2027 GMT Subject: CN=A6F3958A0E23C22FBBCA6A3631F8AD8F8A28D28F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f2:7c:b8:b0:77:5a:51:bd:2a:17:0b:62:97: d3:dc:d3:fe:6d:4b:89:b3:d0:db:1c:31:14:43:ef: b0:b8:51:76:da:55:39:8a:3b:64:12:b5:92:1d:9e: 6e:d6:02:61:8e:83:ea:01:41:9c:90:49:a7:a9:ce: 73:43:49:92:d2:f1:6d:3f:52:53:4f:90:c3:4f:1d: 62:cf:77:c4:02:aa:39:bb:4a:59:70:15:ac:e6:19: 3b:1e:7a:b2:69:30:d4:ea:95:3b:82:4e:cc:cb:27: f0:1b:e4:d6:ce:73:d4:c5:a8:c9:36:54:1d:85:b0: ca:8c:5f:62:7e:48:25:4f:22:2a:be:32:48:cf:81: 4f:21:6c:ef:5a:ea:4e:15:e0:c5:c8:6e:31:a9:b3: e7:93:74:6a:98:be:d6:0a:ff:9f:7b:22:2e:48:c9: a5:a5:4a:53:6f:92:b1:93:60:0b:4c:10:95:3e:b9: fe:48:60:83:cc:04:0c:2b:dc:6e:1f:80:0d:2e:9c: 40:a4:79:7f:7f:0f:97:39:53:48:e9:35:8e:0a:4c: f4:24:ff:02:c2:7e:06:02:29:ac:b7:20:19:f7:15: f2:4a:0d:98:a2:8e:84:ed:f7:32:56:37:a3:6a:e7: 95:de:d3:05:83:b9:76:84:80:69:3d:7a:75:96:bc: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F3:95:8A:0E:23:C2:2F:BB:CA:6A:36:31:F8:AD:8F:8A:28:D2:8F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38750.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.50.32.0/21 150.129.188.0/22 Signature Algorithm: sha256WithRSAEncryption 81:58:03:cc:f7:ff:37:e8:1a:90:d1:92:44:29:d7:a5:9c:03: c5:ca:3d:97:cc:57:55:5b:66:e2:8b:75:02:42:ff:3f:95:1e: 29:d0:30:7d:19:0f:8f:9b:1b:40:f1:25:c3:0c:f7:88:aa:f1: 76:41:73:6b:35:7b:48:f0:dd:1a:39:38:81:88:c1:28:18:b1: 03:8c:92:17:d3:15:3e:9a:0a:47:8c:85:48:89:1b:c9:a4:98: 3d:08:8b:bd:e1:0a:1a:15:b5:d8:d9:a3:ef:9e:42:98:05:7d: 7e:75:95:79:59:c8:43:36:3c:7d:cd:92:06:47:f7:d7:7e:91: d2:4f:19:4a:95:46:ec:6d:78:41:c2:e0:4a:dd:93:4d:f2:f7: 0d:2e:30:fe:74:4f:7e:ac:64:1f:7b:e2:52:17:3c:37:ff:62: d3:ce:40:aa:5e:a0:d0:b4:4d:b2:5b:2c:88:63:16:8b:46:c6: c1:f3:50:fb:c5:d6:d7:fe:e1:80:d5:9c:43:37:de:d4:56:6d: 40:14:96:e1:dc:fd:99:74:ba:4b:01:65:b9:27:c5:42:a6:df: 04:cc:80:6c:13:b8:2c:2a:9b:3a:f0:42:a2:4d:85:5c:72:17: 34:7a:9c:95:85:2c:c7:5f:95:57:ce:54:ab:22:d3:02:43:55: a4:b2:8a:71 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUS+qWAiC9mCoWl7uwaoG/Eik1hU4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAyMTAzMzYxMVoX DTI3MTAyMDAzNDExMVowMzExMC8GA1UEAxMoQTZGMzk1OEEwRTIzQzIyRkJCQ0E2 QTM2MzFGOEFEOEY4QTI4RDI4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJLyfLiwd1pRvSoXC2KX09zT/m1LibPQ2xwxFEPvsLhRdtpVOYo7ZBK1kh2e btYCYY6D6gFBnJBJp6nOc0NJktLxbT9SU0+Qw08dYs93xAKqObtKWXAVrOYZOx56 smkw1OqVO4JOzMsn8Bvk1s5z1MWoyTZUHYWwyoxfYn5IJU8iKr4ySM+BTyFs71rq ThXgxchuMamz55N0api+1gr/n3siLkjJpaVKU2+SsZNgC0wQlT65/khgg8wEDCvc bh+ADS6cQKR5f38PlzlTSOk1jgpM9CT/AsJ+BgIprLcgGfcV8koNmKKOhO33MlY3 o2rnld7TBYO5doSAaT16dZa8P48CAwEAAaOCAdEwggHNMB0GA1UdDgQWBBSm85WK DiPCL7vKajYx+K2PiijSjzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMzg3NTAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB MAwDBAN5MiADBAKWgbwwDQYJKoZIhvcNAQELBQADggEBAIFYA8z3/zfoGpDRkkQp 16WcA8XKPZfMV1VbZuKLdQJC/z+VHinQMH0ZD4+bG0DxJcMM94iq8XZBc2s1e0jw 3Ro5OIGIwSgYsQOMkhfTFT6aCkeMhUiJG8mkmD0Ii73hChoVtdjZo++eQpgFfX51 lXlZyEM2PH3NkgZH99d+kdJPGUqVRuxteEHC4Erdk03y9w0uMP50T36sZB974lIX PDf/YtPOQKpeoNC0TbJbLIhjFotGxsHzUPvF1tf+4YDVnEM33tRWbUAUluHc/Zl0 uksBZbknxUKm3wTMgGwTuCwqmzrwQqJNhVxyFzR6nJWFLMdflVfOVKsi0wJDVaSy inE= -----END CERTIFICATE-----Generated at Sat Oct 24 12:00:19 2026 by rpki-client