$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38772.roa File: AS38772.roa (raw, json) Hash identifier: cyIPdjDpubIKKMZMig5IudCXwSBhj9zTMGDOejP4e90= Subject key identifier: 64:3E:64:CE:A7:93:3B:74:7A:77:6F:88:4C:F7:57:31:22:16:DC:AA Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 601F55DBDE61DFEB0665BFF9AABDCC41BFE862F1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38772.roa Signing time: Wed 28 Oct 2026 04:30:56 +0000 ROA not before: Wed 28 Oct 2026 04:25:56 +0000 ROA not after: Wed 27 Oct 2027 04:30:56 +0000 asID: 38772 IP address blocks: 114.141.60.0/24 maxlen: 24 114.141.61.0/24 maxlen: 24 114.141.62.0/24 maxlen: 24 114.141.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:1f:55:db:de:61:df:eb:06:65:bf:f9:aa:bd:cc:41:bf:e8:62:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 28 04:25:56 2026 GMT Not After : Oct 27 04:30:56 2027 GMT Subject: CN=643E64CEA7933B747A776F884CF757312216DCAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:14:c8:6b:f1:3d:2d:ac:6c:47:63:da:c7:b9: 9b:0e:90:16:d0:20:a1:fc:54:6a:89:a5:38:db:ba: c9:c4:fb:64:d1:8d:00:d5:f1:23:f4:5b:37:a3:09: a5:64:7c:d1:37:8b:2c:ef:09:ff:89:2e:19:a4:79: 2a:55:77:9e:b5:b5:c3:01:59:42:aa:2d:25:fa:e4: f9:51:bd:ef:49:c9:72:b3:67:00:2c:85:df:26:0b: bb:aa:c2:93:29:4b:08:6b:e0:c4:a4:99:4a:77:af: 26:6a:7d:84:71:28:3c:7a:df:36:5c:41:fb:56:2c: 22:85:4e:5f:02:c7:55:89:97:48:51:ea:66:7a:c0: bf:fe:80:b0:95:9a:da:7e:ad:22:39:1e:fe:2e:6d: 9a:4c:0b:00:85:2a:34:5e:6c:75:6c:a5:ef:eb:be: c8:2c:07:29:20:86:35:9d:39:a2:86:44:f2:8b:43: dd:79:cf:2f:dc:b5:65:af:2b:9e:21:fa:dd:33:04: e1:35:6b:2e:fe:1b:ce:96:ee:85:cf:ec:7a:59:a6: a3:c3:31:aa:be:25:4f:8c:c9:d0:c9:30:66:0b:93: 4c:20:8e:51:40:45:a3:c0:1a:d9:c0:a6:cd:aa:43: b3:71:b5:92:6b:cf:3c:be:2e:c6:c6:fc:93:7d:63: 69:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3E:64:CE:A7:93:3B:74:7A:77:6F:88:4C:F7:57:31:22:16:DC:AA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38772.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.141.60.0/22 Signature Algorithm: sha256WithRSAEncryption 98:b3:54:2d:bf:46:33:bf:f8:b8:15:e8:09:e7:a6:98:78:e4: 3a:ec:25:66:9f:06:04:74:42:32:27:4e:c5:f9:65:e5:ce:42: 0e:6b:ab:67:5f:7a:51:95:dc:db:f8:b8:dc:1f:fd:f0:1d:00: 32:a7:cd:7a:ef:09:0e:05:44:fe:82:73:f9:3f:21:19:da:37: 2f:54:64:e8:0b:3f:2a:84:03:8d:27:4f:ea:94:2c:52:06:bf: 5f:ce:02:c5:bd:92:46:44:2d:97:20:ee:09:41:23:71:9e:31: 87:64:e8:6d:c4:5b:91:2f:43:ac:ff:1b:c0:b8:58:f5:5d:a2: 2d:9c:21:d6:ab:40:22:57:7e:a3:be:f5:66:bb:bf:4a:10:81: 35:ea:9c:48:75:ab:87:3f:e6:fb:67:08:ca:40:b4:4c:19:cd: 85:be:df:00:46:78:35:ac:99:e3:28:0e:76:42:1e:1c:92:5d: 64:b4:51:0a:57:e6:d8:1b:39:d5:fe:86:be:50:42:3d:43:eb: d2:c4:28:03:eb:28:96:bf:06:af:5d:98:d4:0b:74:06:ad:cc: d4:e7:23:81:70:08:f8:af:9e:66:05:dc:6d:8f:85:ea:3e:d5: ef:03:0d:12:25:7d:cb:8a:6a:9b:a3:af:b8:4d:ee:d6:d5:64: 05:d6:01:62 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUYB9V295h3+sGZb/5qr3MQb/oYvEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAyODA0MjU1NloX DTI3MTAyNzA0MzA1NlowMzExMC8GA1UEAxMoNjQzRTY0Q0VBNzkzM0I3NDdBNzc2 Rjg4NENGNzU3MzEyMjE2RENBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPUUyGvxPS2sbEdj2se5mw6QFtAgofxUaomlONu6ycT7ZNGNANXxI/RbN6MJ pWR80TeLLO8J/4kuGaR5KlV3nrW1wwFZQqotJfrk+VG970nJcrNnACyF3yYLu6rC kylLCGvgxKSZSnevJmp9hHEoPHrfNlxB+1YsIoVOXwLHVYmXSFHqZnrAv/6AsJWa 2n6tIjke/i5tmkwLAIUqNF5sdWyl7+u+yCwHKSCGNZ05ooZE8otD3XnPL9y1Za8r niH63TME4TVrLv4bzpbuhc/selmmo8Mxqr4lT4zJ0MkwZguTTCCOUUBFo8Aa2cCm zapDs3G1kmvPPL4uxsb8k31jaXkCAwEAAaOCAcswggHHMB0GA1UdDgQWBBRkPmTO p5M7dHp3b4hM91cxIhbcqjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMzg3NzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJyjTwwDQYJKoZIhvcNAQELBQADggEBAJizVC2/RjO/+LgV6Annpph45Drs JWafBgR0QjInTsX5ZeXOQg5rq2dfelGV3Nv4uNwf/fAdADKnzXrvCQ4FRP6Cc/k/ IRnaNy9UZOgLPyqEA40nT+qULFIGv1/OAsW9kkZELZcg7glBI3GeMYdk6G3EW5Ev Q6z/G8C4WPVdoi2cIdarQCJXfqO+9Wa7v0oQgTXqnEh1q4c/5vtnCMpAtEwZzYW+ 3wBGeDWsmeMoDnZCHhySXWS0UQpX5tgbOdX+hr5QQj1D69LEKAPrKJa/Bq9dmNQL dAatzNTnI4FwCPivnmYF3G2Pheo+1e8DDRIlfcuKapujr7hN7tbVZAXWAWI= -----END CERTIFICATE-----Generated at Mon Nov 9 15:04:47 2026 by rpki-client