$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38764.roa File: AS38764.roa (raw, json) Hash identifier: slzLDQuLF1MS2UvjToqMsigTN3ElMx314E5HW6hz+pI= Subject key identifier: 9F:D2:CF:B5:4A:9F:1F:FF:3F:2E:D0:38:A8:E3:9A:C3:EB:73:79:1F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5489CC52C5E88224BE2CFB39F534E7B9F84EB8C3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38764.roa Signing time: Mon 16 Mar 2026 04:00:00 +0000 ROA not before: Mon 16 Mar 2026 03:55:00 +0000 ROA not after: Mon 15 Mar 2027 04:00:00 +0000 asID: 38764 IP address blocks: 120.29.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:89:cc:52:c5:e8:82:24:be:2c:fb:39:f5:34:e7:b9:f8:4e:b8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 16 03:55:00 2026 GMT Not After : Mar 15 04:00:00 2027 GMT Subject: CN=9FD2CFB54A9F1FFF3F2ED038A8E39AC3EB73791F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:02:79:2c:eb:d7:c6:e3:7f:93:83:39:a3: 0e:b0:d4:b5:d2:e3:e9:57:8a:99:68:14:8d:81:3b: 9f:9c:e8:ec:a8:8d:65:60:c8:3e:37:a3:34:73:74: f4:69:2e:0f:fd:c9:2e:40:c5:df:ad:2c:d5:a4:75: 58:d0:e1:88:f7:e0:0f:66:8d:c7:01:4c:72:22:f8: 35:4f:fc:52:13:5f:74:9f:c9:ac:47:f5:87:50:51: 8b:b8:80:1c:eb:5f:0a:a3:28:34:53:15:08:c3:7c: 38:3c:cc:0b:5f:ef:da:b6:e7:2e:b0:99:38:13:73: 9b:b3:97:7e:8e:38:d9:f1:50:f6:e6:31:e2:f0:0d: e3:ff:c5:27:a7:95:3f:70:0f:18:f0:d0:3c:8c:89: 13:64:69:41:0d:4c:24:73:d9:6d:89:77:e3:23:c5: 41:95:65:1c:60:b5:e8:05:55:ac:8f:8f:98:ac:fb: 93:b1:50:10:ba:eb:27:30:98:36:c6:a0:ee:86:8c: e5:7c:8a:e9:30:ff:bf:91:61:3b:86:b6:b7:28:9a: ad:c9:e5:bf:02:99:48:e3:7e:2e:56:e5:e5:56:07: 61:bd:64:cf:09:49:d6:42:b2:91:af:52:cf:1a:fd: bd:ae:0b:87:8a:ee:4d:7e:33:d3:b4:af:d3:79:ad: 45:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D2:CF:B5:4A:9F:1F:FF:3F:2E:D0:38:A8:E3:9A:C3:EB:73:79:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38764.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.29.224.0/21 Signature Algorithm: sha256WithRSAEncryption 03:5c:58:4c:6d:b6:01:1c:dc:7c:d1:8c:dd:31:e3:88:39:b6: d4:fc:29:6f:94:a8:09:bf:43:22:d3:be:61:96:e9:f0:ee:e5: 22:2c:b0:81:68:39:e2:e0:f9:2b:e9:46:4c:50:e0:a7:92:c3: a3:c3:37:d5:dc:3c:cb:8c:ba:b0:3e:e1:8c:fa:02:2e:53:d7: 9b:54:20:00:85:39:e2:d3:ba:9e:20:d4:5d:bb:15:99:9b:e4: 44:18:94:45:72:b6:54:cd:9c:d9:54:bf:cd:24:ae:38:b9:0f: bd:a5:00:29:dc:29:70:9b:e8:80:61:6b:d0:ac:88:7a:5f:5e: eb:98:80:be:21:8a:06:de:01:4c:0a:8b:33:d2:9c:a3:c2:31: 0c:f7:6f:47:a4:7a:f8:fc:0d:3d:95:46:39:2e:b1:4f:4a:0c: 40:36:e1:12:28:e7:38:6f:a3:bb:d6:c0:9e:bf:a4:f9:d0:2d: 30:08:67:2c:cf:2a:f2:b6:a3:bd:c2:9c:cc:b8:96:d5:4a:f0: 93:ea:7b:c5:c1:a9:a2:6d:75:b3:29:66:53:78:05:3b:37:90: 7d:65:ee:24:2e:ec:65:ce:ab:78:8b:39:4c:f3:55:e8:c2:d7: 73:06:7c:9d:1f:ca:9b:3f:84:70:d9:01:00:5c:b8:b4:99:4a: 1b:66:78:db -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUVInMUsXogiS+LPs59TTnufhOuMMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxNjAzNTUwMFoX DTI3MDMxNTA0MDAwMFowMzExMC8GA1UEAxMoOUZEMkNGQjU0QTlGMUZGRjNGMkVE MDM4QThFMzlBQzNFQjczNzkxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALW+Anks69fG43+TgzmjDrDUtdLj6VeKmWgUjYE7n5zo7KiNZWDIPjejNHN0 9GkuD/3JLkDF360s1aR1WNDhiPfgD2aNxwFMciL4NU/8UhNfdJ/JrEf1h1BRi7iA HOtfCqMoNFMVCMN8ODzMC1/v2rbnLrCZOBNzm7OXfo442fFQ9uYx4vAN4//FJ6eV P3APGPDQPIyJE2RpQQ1MJHPZbYl34yPFQZVlHGC16AVVrI+PmKz7k7FQELrrJzCY Nsag7oaM5XyK6TD/v5FhO4a2tyiarcnlvwKZSON+Llbl5VYHYb1kzwlJ1kKyka9S zxr9va4Lh4ruTX4z07Sv03mtRZkCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSf0s+1 Sp8f/z8u0Dio45rD63N5HzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4NzY0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDeB3gMA0GCSqGSIb3DQEBCwUAA4IBAQADXFhMbbYBHNx80YzdMeOI ObbU/ClvlKgJv0Mi075hlunw7uUiLLCBaDni4Pkr6UZMUOCnksOjwzfV3DzLjLqw PuGM+gIuU9ebVCAAhTni07qeINRduxWZm+REGJRFcrZUzZzZVL/NJK44uQ+9pQAp 3Clwm+iAYWvQrIh6X17rmIC+IYoG3gFMCosz0pyjwjEM929HpHr4/A09lUY5LrFP SgxANuESKOc4b6O71sCev6T50C0wCGcszyrytqO9wpzMuJbVSvCT6nvFwamibXWz KWZTeAU7N5B9Ze4kLuxlzqt4izlM81XowtdzBnydH8qbP4Rw2QEAXLi0mUobZnjb -----END CERTIFICATE-----Generated at Thu Mar 26 04:02:10 2026 by rpki-client