$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38511.roa File: AS38511.roa (raw, json) Hash identifier: 5TzRVqHdTxH7LzXuPyE7ezu8SWYUrt/M7K1qJLHeBK4= Subject key identifier: A6:20:EF:CC:C8:DE:85:3A:54:83:FB:F8:2D:8E:B7:1C:86:12:21:AB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 51A61444200AE09DD0339E79EAB6F4AF1204DA98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38511.roa Signing time: Wed 01 Apr 2026 11:00:00 +0000 ROA not before: Wed 01 Apr 2026 10:55:00 +0000 ROA not after: Wed 31 Mar 2027 11:00:00 +0000 asID: 38511 IP address blocks: 103.26.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a6:14:44:20:0a:e0:9d:d0:33:9e:79:ea:b6:f4:af:12:04:da:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 1 10:55:00 2026 GMT Not After : Mar 31 11:00:00 2027 GMT Subject: CN=A620EFCCC8DE853A5483FBF82D8EB71C861221AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7c:1b:b4:84:0d:5a:e9:43:31:86:ff:b7:53: e7:f3:e7:f8:03:c1:e1:3e:c7:e7:c9:bc:e3:33:12: 71:99:3b:b1:49:8c:25:f5:10:03:6d:4d:23:eb:bb: 78:d9:6d:f6:de:5e:5d:6e:8c:b7:ed:f1:5b:c7:db: 54:31:8a:cf:02:fd:30:c8:55:75:32:ed:b6:0f:39: 98:50:5a:6c:af:45:18:85:d6:9f:fd:26:7a:0b:1d: a8:6d:17:d4:ae:ff:1d:fa:0d:65:74:42:c9:c0:cf: a8:c5:7f:ff:1f:18:be:60:7e:04:4c:ae:0e:f2:22: a7:d5:38:8f:bc:1e:d2:70:05:66:3e:40:61:02:74: 09:68:75:88:b3:4e:d2:ad:ac:ec:2e:e3:29:35:78: 0c:3c:53:03:5c:a0:83:d1:37:7f:7b:ad:c1:b7:fd: 52:5e:dd:bd:d1:67:be:f5:d3:3d:d2:49:5c:8d:4d: cd:84:fe:9a:cc:0e:bc:91:b9:c8:09:36:72:bc:55: 99:31:8f:4f:17:1a:d3:d7:b0:f1:65:6f:ac:65:0d: 60:a9:04:de:92:61:3e:d4:a8:15:b5:f8:ca:91:5f: 13:b5:1b:76:c3:95:6c:41:7e:cd:12:25:45:79:46: dc:e3:87:48:d0:42:5c:19:86:a8:85:65:80:ba:81: 56:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:20:EF:CC:C8:DE:85:3A:54:83:FB:F8:2D:8E:B7:1C:86:12:21:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38511.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.26.212.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:df:ee:79:c6:49:eb:da:11:22:95:f8:6d:bb:51:73:10:2b: c5:f5:f9:9a:64:42:a7:ae:cb:da:bd:df:f6:e5:c5:78:03:93: 55:22:20:0a:c3:dc:52:ad:02:22:66:6c:19:ca:0c:4d:01:4e: c2:91:23:d1:90:6c:8d:5f:b3:cf:ab:d0:86:b1:bc:bc:db:7a: b6:00:19:7f:c1:15:af:ed:28:7c:7f:03:80:8f:7a:78:de:98: 6c:df:36:4b:c7:a6:5e:e2:af:fc:62:19:c4:6a:b5:52:bf:98: 0f:ad:7d:38:7b:5f:31:db:5a:22:2c:1f:c4:59:16:0c:ce:ff: 61:2d:82:d0:fe:89:c9:51:62:2c:71:bf:b0:1c:ab:27:28:85: ef:fb:0e:9d:f6:fc:2b:c7:64:cd:2f:a7:63:38:23:98:0e:49: fe:0d:c6:b7:ab:17:a6:32:64:1b:6f:b2:69:78:fd:a9:f4:55: 88:6b:d7:66:a2:f6:56:53:4c:1b:41:0a:6f:56:58:d4:0f:60: b2:f6:06:36:d8:60:d4:fe:1a:9c:ce:41:45:af:c3:d2:f7:6d: 5c:d4:bb:96:0d:a6:a2:df:a1:1e:e6:b0:9c:49:84:1b:37:25: 1d:a6:56:f1:84:f0:54:40:fe:0e:29:d5:16:5a:e6:69:f4:31: 67:35:da:9e -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUUaYURCAK4J3QM5556rb0rxIE2pgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwMTEwNTUwMFoX DTI3MDMzMTExMDAwMFowMzExMC8GA1UEAxMoQTYyMEVGQ0NDOERFODUzQTU0ODNG QkY4MkQ4RUI3MUM4NjEyMjFBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOJ8G7SEDVrpQzGG/7dT5/Pn+APB4T7H58m84zMScZk7sUmMJfUQA21NI+u7 eNlt9t5eXW6Mt+3xW8fbVDGKzwL9MMhVdTLttg85mFBabK9FGIXWn/0megsdqG0X 1K7/HfoNZXRCycDPqMV//x8YvmB+BEyuDvIip9U4j7we0nAFZj5AYQJ0CWh1iLNO 0q2s7C7jKTV4DDxTA1ygg9E3f3utwbf9Ul7dvdFnvvXTPdJJXI1NzYT+mswOvJG5 yAk2crxVmTGPTxca09ew8WVvrGUNYKkE3pJhPtSoFbX4ypFfE7UbdsOVbEF+zRIl RXlG3OOHSNBCXBmGqIVlgLqBViMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSmIO/M yN6FOlSD+/gtjrcchhIhqzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4NTExLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZxrUMA0GCSqGSIb3DQEBCwUAA4IBAQAt3+55xknr2hEilfhtu1Fz ECvF9fmaZEKnrsvavd/25cV4A5NVIiAKw9xSrQIiZmwZygxNAU7CkSPRkGyNX7PP q9CGsby823q2ABl/wRWv7Sh8fwOAj3p43phs3zZLx6Ze4q/8YhnEarVSv5gPrX04 e18x21oiLB/EWRYMzv9hLYLQ/onJUWIscb+wHKsnKIXv+w6d9vwrx2TNL6djOCOY Dkn+Dca3qxemMmQbb7JpeP2p9FWIa9dmovZWU0wbQQpvVljUD2Cy9gY22GDU/hqc zkFFr8PS921c1LuWDaai36Ee5rCcSYQbNyUdplbxhPBUQP4OKdUWWuZp9DFnNdqe -----END CERTIFICATE-----Generated at Fri Apr 17 08:16:35 2026 by rpki-client