$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38760.roa File: AS38760.roa (raw, json) Hash identifier: Hh8bfZU+TsKaUBGJLF1q21i+/pY8mEq8s4oO7yUH61I= Subject key identifier: B0:49:CD:AD:ED:57:51:8F:B5:BA:40:A6:DE:DD:96:99:3B:09:11:97 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 220E005BAABFB9A127AA42ADB25E6C15D79868B0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38760.roa Signing time: Sat 02 May 2026 21:31:22 +0000 ROA not before: Sat 02 May 2026 21:26:22 +0000 ROA not after: Sat 01 May 2027 21:31:22 +0000 asID: 38760 IP address blocks: 103.4.52.0/23 maxlen: 24 103.99.164.0/22 maxlen: 24 2400:9b60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0e:00:5b:aa:bf:b9:a1:27:aa:42:ad:b2:5e:6c:15:d7:98:68:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:26:22 2026 GMT Not After : May 1 21:31:22 2027 GMT Subject: CN=B049CDADED57518FB5BA40A6DEDD96993B091197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:df:c1:27:01:26:e5:ad:25:2c:ef:7a:1a: 76:41:c3:82:4f:5a:d1:d5:40:34:4f:79:19:f5:61: 6d:b9:c2:a4:4c:6c:c7:de:d7:a1:e2:c0:78:11:90: 15:a1:f4:bb:81:5c:8c:5b:be:65:b7:4b:69:1f:af: 2c:35:66:1c:bb:63:36:14:9f:77:cc:ea:b6:ee:9b: da:a2:5f:10:1e:37:cb:f9:01:86:a3:fc:6c:f1:9c: b0:af:33:24:ba:bc:a4:f8:78:4b:32:28:be:af:f8: 20:20:5d:73:da:b1:b7:97:ad:af:e4:bb:3b:bb:d7: 30:38:ff:7d:8a:95:5a:b1:34:b8:5d:b0:db:c7:28: 50:90:a5:6b:16:a4:23:5c:c7:6d:c6:51:fc:a2:92: 19:a3:a8:04:71:f1:91:a5:5e:4a:d9:73:ca:3f:30: d2:bb:e6:ea:d1:2d:73:b7:01:ed:8c:b6:2e:ea:f4: e9:2a:b8:e8:10:50:c0:4c:aa:9a:37:62:bd:88:07: cf:5b:91:7b:49:d5:7b:0c:7d:a3:53:ab:8e:68:11: 5f:d8:c9:0e:6c:bb:b5:33:05:37:a2:6c:6e:fc:03: 06:60:64:c5:b9:c0:33:d9:09:e9:7d:d0:e9:be:62: 51:9e:d0:76:e4:c7:0c:26:b8:18:77:0b:d6:8a:5a: 22:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:49:CD:AD:ED:57:51:8F:B5:BA:40:A6:DE:DD:96:99:3B:09:11:97 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38760.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.52.0/23 103.99.164.0/22 IPv6: 2400:9b60::/32 Signature Algorithm: sha256WithRSAEncryption 08:96:dc:97:c3:da:7f:a2:14:58:cf:24:5b:6b:a4:32:f5:3f: 36:70:f0:b4:95:c8:80:2a:97:fb:6b:d3:e9:98:36:d2:7d:b1: 09:3a:54:05:8f:03:63:a4:16:f5:a1:0f:fd:d6:37:d6:79:83: 47:8f:8e:44:ae:65:95:69:f8:0b:f6:f4:a2:93:1b:ee:1e:2f: 16:6d:1c:d6:ff:e1:0c:84:23:2d:35:01:62:1c:e1:8c:6e:da: b0:ff:09:aa:a6:20:e1:10:01:27:3f:76:18:a5:8c:cc:e7:e7: ca:39:3d:c3:0d:5e:80:49:36:95:e7:45:b8:86:c6:27:95:ef: 32:af:cf:23:10:f0:c5:6c:ea:09:07:b4:4a:c1:c2:41:ca:26: 48:11:74:63:6b:50:99:d7:54:86:a2:0c:1e:0d:de:3c:ad:25: 4f:f4:8e:8b:e1:46:d8:1d:8d:52:ff:0b:9d:f9:fe:47:6d:ee: f5:9a:19:e6:c4:45:f6:49:73:17:42:c5:2e:db:91:33:26:dc: a1:87:ce:23:91:cc:c2:79:0b:cd:75:f9:f3:35:ca:72:b9:eb: 44:62:65:cb:28:13:e5:08:a2:15:72:64:fe:c8:2d:c9:85:13: f2:ee:32:5c:a3:cd:d9:98:e2:f0:03:d4:62:c5:62:cc:a2:31: d8:40:c0:f0 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUIg4AW6q/uaEnqkKtsl5sFdeYaLAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjYyMloX DTI3MDUwMTIxMzEyMlowMzExMC8GA1UEAxMoQjA0OUNEQURFRDU3NTE4RkI1QkE0 MEE2REVERDk2OTkzQjA5MTE5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJwS38EnASblrSUs73oadkHDgk9a0dVANE95GfVhbbnCpExsx97XoeLAeBGQ FaH0u4FcjFu+ZbdLaR+vLDVmHLtjNhSfd8zqtu6b2qJfEB43y/kBhqP8bPGcsK8z JLq8pPh4SzIovq/4ICBdc9qxt5etr+S7O7vXMDj/fYqVWrE0uF2w28coUJClaxak I1zHbcZR/KKSGaOoBHHxkaVeStlzyj8w0rvm6tEtc7cB7Yy2Lur06Sq46BBQwEyq mjdivYgHz1uRe0nVewx9o1OrjmgRX9jJDmy7tTMFN6JsbvwDBmBkxbnAM9kJ6X3Q 6b5iUZ7QduTHDCa4GHcL1opaIsECAwEAAaOCAeAwggHcMB0GA1UdDgQWBBSwSc2t 7VdRj7W6QKbe3ZaZOwkRlzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMzg3NjAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgAB MAwDBAFnBDQDBAJnY6QwDQQCAAIwBwMFACQAm2AwDQYJKoZIhvcNAQELBQADggEB AAiW3JfD2n+iFFjPJFtrpDL1PzZw8LSVyIAql/tr0+mYNtJ9sQk6VAWPA2OkFvWh D/3WN9Z5g0ePjkSuZZVp+Av29KKTG+4eLxZtHNb/4QyEIy01AWIc4Yxu2rD/Caqm IOEQASc/dhiljMzn58o5PcMNXoBJNpXnRbiGxieV7zKvzyMQ8MVs6gkHtErBwkHK JkgRdGNrUJnXVIaiDB4N3jytJU/0jovhRtgdjVL/C535/kdt7vWaGebERfZJcxdC xS7bkTMm3KGHziORzMJ5C811+fM1ynK560RiZcsoE+UIohVyZP7ILcmFE/LuMlyj zdmY4vAD1GLFYsyiMdhAwPA= -----END CERTIFICATE-----Generated at Sun May 3 00:40:27 2026 by rpki-client