$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38760.roa File: AS38760.roa (raw, json) Hash identifier: Mem++849APKuzrjkvINJIz7My+883nBFqDqjuf8jc0g= Subject key identifier: 8E:1A:95:BA:1A:5C:6C:41:7E:CD:6E:B6:C9:55:EA:9D:73:A5:A6:A7 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 67F5353D85791E933E66AFAF1534C35317E799AE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38760.roa Signing time: Fri 08 Aug 2025 03:00:00 +0000 ROA not before: Fri 08 Aug 2025 02:55:00 +0000 ROA not after: Fri 07 Aug 2026 03:00:00 +0000 asID: 38760 IP address blocks: 103.4.52.0/23 maxlen: 24 103.99.164.0/22 maxlen: 24 2400:9b60::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f5:35:3d:85:79:1e:93:3e:66:af:af:15:34:c3:53:17:e7:99:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 8 02:55:00 2025 GMT Not After : Aug 7 03:00:00 2026 GMT Subject: CN=8E1A95BA1A5C6C417ECD6EB6C955EA9D73A5A6A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9d:84:bb:e4:56:48:1e:c5:ea:84:c4:13:a2: bd:0c:db:62:47:e9:42:9a:3c:c2:6f:55:01:10:6f: ae:05:59:eb:02:81:09:db:de:b9:09:0d:8f:5d:c5: 3b:1c:b8:f4:66:e8:2f:45:19:f5:f9:e9:f9:ca:fb: 3d:8d:5f:1c:75:7f:3b:7a:2e:9f:f3:7e:69:68:41: 40:91:ab:e7:1e:0d:10:37:42:97:25:7b:f6:3f:03: 43:f0:6a:0b:7b:5b:33:6f:fb:8c:38:98:26:36:08: f0:5c:ba:13:a2:78:1d:5a:25:76:8b:bf:ba:30:83: f1:e9:0d:10:53:f8:00:87:81:47:26:c4:0e:47:08: 87:ac:03:99:db:38:a6:a1:b5:19:16:18:62:7d:2a: d0:e7:07:6a:ae:e7:69:a3:47:f4:e0:1d:cb:09:d6: d0:99:2e:a6:0b:58:4a:c1:3c:53:f7:69:4b:d4:59: b9:74:f3:47:1c:e6:a4:57:39:25:ac:50:a8:59:89: 38:58:3f:90:5e:20:83:a6:67:ad:75:87:3f:6d:16: 1b:ce:71:3f:a5:d4:38:16:63:9e:65:e7:b8:fe:77: 06:94:3e:af:81:0b:52:07:a7:10:79:cb:89:fe:49: 3b:e0:52:06:69:93:36:6d:65:24:a7:73:2f:34:5b: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1A:95:BA:1A:5C:6C:41:7E:CD:6E:B6:C9:55:EA:9D:73:A5:A6:A7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38760.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.52.0/23 103.99.164.0/22 IPv6: 2400:9b60::/32 Signature Algorithm: sha256WithRSAEncryption 25:9e:6f:89:61:74:37:31:5b:14:b2:e0:65:3e:9b:77:34:48: 1b:e8:1e:19:8f:27:87:9a:31:66:14:39:ac:0d:14:b7:eb:ac: 77:0c:39:5a:7f:2d:da:04:bb:86:db:34:20:c7:27:62:a8:13: d2:27:93:d2:ee:7f:16:50:78:d4:30:60:86:5c:94:23:75:b4: 7f:70:e6:0a:5b:a7:ac:44:cf:5d:4d:73:2a:f4:bf:16:91:71: 3b:ff:1b:43:d0:d3:cc:4e:ea:3a:ce:f8:c0:57:3b:b1:04:bc: 9f:59:4e:f6:98:21:3a:82:a0:0a:10:2d:44:02:93:0b:da:54: ed:0c:7d:32:d0:01:00:49:d8:35:34:56:bf:7c:e3:36:e2:68: ee:4d:bd:6a:6f:30:66:fd:8c:ce:28:35:d4:a9:a3:c3:1a:53: 24:76:21:fb:9a:55:ce:db:37:54:11:dc:59:9a:be:6c:af:c7: 2d:45:8e:b6:3b:e9:1e:f9:d5:3e:f7:bb:6e:61:74:94:06:31: 87:06:63:7b:17:06:25:ad:af:e3:38:cb:dc:15:ef:f2:ab:b7: 25:3f:9e:68:9b:9a:00:6d:7f:a0:42:22:a6:13:49:79:ae:ce: 4a:64:8a:bf:a9:05:f9:25:bd:8a:a4:23:31:70:ca:2f:32:51: 3e:95:7b:b4 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUZ/U1PYV5HpM+Zq+vFTTDUxfnma4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwODAyNTUwMFoX DTI2MDgwNzAzMDAwMFowMzExMC8GA1UEAxMoOEUxQTk1QkExQTVDNkM0MTdFQ0Q2 RUI2Qzk1NUVBOUQ3M0E1QTZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGdhLvkVkgexeqExBOivQzbYkfpQpo8wm9VARBvrgVZ6wKBCdveuQkNj13F Oxy49GboL0UZ9fnp+cr7PY1fHHV/O3oun/N+aWhBQJGr5x4NEDdClyV79j8DQ/Bq C3tbM2/7jDiYJjYI8Fy6E6J4HVoldou/ujCD8ekNEFP4AIeBRybEDkcIh6wDmds4 pqG1GRYYYn0q0OcHaq7naaNH9OAdywnW0JkupgtYSsE8U/dpS9RZuXTzRxzmpFc5 JaxQqFmJOFg/kF4gg6ZnrXWHP20WG85xP6XUOBZjnmXnuP53BpQ+r4ELUgenEHnL if5JO+BSBmmTNm1lJKdzLzRbSM8CAwEAAaOCAeQwggHgMB0GA1UdDgQWBBSOGpW6 GlxsQX7NbrbJVeqdc6WmpzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4NzYwLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZwQ0AwQCZ2OkMA0EAgACMAcDBQAkAJtgMA0GCSqGSIb3DQEBCwUA A4IBAQAlnm+JYXQ3MVsUsuBlPpt3NEgb6B4ZjyeHmjFmFDmsDRS366x3DDlafy3a BLuG2zQgxydiqBPSJ5PS7n8WUHjUMGCGXJQjdbR/cOYKW6esRM9dTXMq9L8WkXE7 /xtD0NPMTuo6zvjAVzuxBLyfWU72mCE6gqAKEC1EApML2lTtDH0y0AEASdg1NFa/ fOM24mjuTb1qbzBm/YzOKDXUqaPDGlMkdiH7mlXO2zdUEdxZmr5sr8ctRY62O+ke +dU+97tuYXSUBjGHBmN7FwYlra/jOMvcFe/yq7clP55om5oAbX+gQiKmE0l5rs5K ZIq/qQX5Jb2KpCMxcMovMlE+lXu0 -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:34 2025 by rpki-client