$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38778.roa File: AS38778.roa (raw, json) Hash identifier: 8nnfxwSG9DQlmNs/W6IexVoNW+ceGycih58zBx+386Y= Subject key identifier: 95:50:07:B8:F9:EB:22:02:58:AD:D4:CB:9F:44:03:29:D1:84:EF:F2 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78BD52083B376E9E6B09E1BABA6AB1F8D98FBBCB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38778.roa Signing time: Thu 18 Sep 2025 04:00:00 +0000 ROA not before: Thu 18 Sep 2025 03:55:00 +0000 ROA not after: Thu 17 Sep 2026 04:00:00 +0000 asID: 38778 IP address blocks: 2407:f900::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:bd:52:08:3b:37:6e:9e:6b:09:e1:ba:ba:6a:b1:f8:d9:8f:bb:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 18 03:55:00 2025 GMT Not After : Sep 17 04:00:00 2026 GMT Subject: CN=955007B8F9EB220258ADD4CB9F440329D184EFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:66:a8:09:6a:a0:c0:92:39:21:f4:74:b9: 94:00:30:41:ef:8b:de:30:50:ab:c6:e8:cf:05:ab: 38:13:41:5d:e3:f1:1f:87:67:05:1d:90:04:22:a5: 22:26:c7:0c:8d:bd:e0:38:f2:90:c6:25:dd:9e:5b: f3:31:1f:51:e3:dd:68:95:18:3c:72:16:dc:d7:12: 5e:c9:21:08:99:bd:c6:96:4d:43:5a:45:9e:44:ca: 07:4e:08:c1:5d:2e:3a:59:1d:fe:59:44:98:77:21: dd:fe:b1:f2:fa:b1:9e:54:e7:de:a9:b4:bf:2f:d4: 88:bb:fb:77:e4:09:28:f2:cc:2d:54:91:d0:1b:bf: fc:4b:ca:95:39:33:bb:ab:01:1b:39:39:89:54:7d: 85:bd:95:a1:e7:74:63:25:40:04:57:80:c7:49:80: e3:57:f3:b7:22:9a:67:e0:c8:c3:4e:b9:13:98:47: 5b:7d:17:03:4e:74:51:80:bd:14:59:a7:68:86:56: b8:87:2e:f8:18:81:b2:be:f9:83:7a:87:08:ae:c4: 98:5b:fb:ab:62:a6:78:e2:9e:cf:54:fb:49:f5:a4: 9a:7f:5a:ba:a1:3e:98:f5:d9:62:31:45:a6:7a:9b: 83:03:e8:95:7c:1a:eb:b6:ac:be:c7:d9:d3:95:16: 0a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:50:07:B8:F9:EB:22:02:58:AD:D4:CB:9F:44:03:29:D1:84:EF:F2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38778.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:f900::/32 Signature Algorithm: sha256WithRSAEncryption 4b:2e:f4:80:7b:e9:fc:f6:6c:79:13:30:9d:2f:46:a5:41:35: 80:96:15:cf:6e:e2:ca:a7:f5:e7:14:e0:df:1a:eb:24:c0:02: 9c:b8:99:5c:76:17:d2:87:1f:20:a2:a3:ce:24:51:08:91:08: f4:ce:7e:bd:59:f5:ef:53:0a:86:07:37:2e:33:a4:fa:b5:18: 27:da:1b:84:ad:94:1d:5d:09:ac:70:bb:65:3b:eb:ff:7f:e9: 73:56:64:a9:42:c2:fe:ee:b2:fd:ef:36:e7:7a:13:f5:e9:c7: 54:29:41:fc:e5:50:00:78:2a:c3:64:f9:86:41:b4:da:76:47: d5:38:94:9e:07:d7:0f:ed:48:6b:30:5b:99:39:2e:d9:28:34: b4:14:00:52:db:6c:a8:be:9d:74:7f:7f:81:05:24:7a:53:c8: 91:0f:23:1b:4c:85:82:fe:f1:de:43:18:51:2b:a4:50:b5:45: bb:fc:00:33:bf:56:f2:c5:54:c1:9c:0b:08:72:fa:01:75:6e: d7:70:b4:16:ee:8c:24:b4:a8:6a:43:38:ef:11:8d:89:50:24: e2:b0:d7:6b:77:8a:e4:64:26:b5:46:36:e9:9a:5d:93:04:d5: ae:77:13:99:e1:21:72:3b:d5:1a:8f:95:d6:28:a8:18:d7:56: 7c:7e:4d:57 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUeL1SCDs3bp5rCeG6umqx+NmPu8swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxODAzNTUwMFoX DTI2MDkxNzA0MDAwMFowMzExMC8GA1UEAxMoOTU1MDA3QjhGOUVCMjIwMjU4QURE NENCOUY0NDAzMjlEMTg0RUZGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpPZqgJaqDAkjkh9HS5lAAwQe+L3jBQq8bozwWrOBNBXePxH4dnBR2QBCKl IibHDI294DjykMYl3Z5b8zEfUePdaJUYPHIW3NcSXskhCJm9xpZNQ1pFnkTKB04I wV0uOlkd/llEmHch3f6x8vqxnlTn3qm0vy/UiLv7d+QJKPLMLVSR0Bu//EvKlTkz u6sBGzk5iVR9hb2Voed0YyVABFeAx0mA41fztyKaZ+DIw065E5hHW30XA050UYC9 FFmnaIZWuIcu+BiBsr75g3qHCK7EmFv7q2KmeOKez1T7SfWkmn9auqE+mPXZYjFF pnqbgwPolXwa67asvsfZ05UWCm0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSVUAe4 +esiAlit1MufRAMp0YTv8jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4Nzc4LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAf5ADANBgkqhkiG9w0BAQsFAAOCAQEASy70gHvp/PZseRMwnS9G pUE1gJYVz27iyqf15xTg3xrrJMACnLiZXHYX0ocfIKKjziRRCJEI9M5+vVn171MK hgc3LjOk+rUYJ9obhK2UHV0JrHC7ZTvr/3/pc1ZkqULC/u6y/e8253oT9enHVClB /OVQAHgqw2T5hkG02nZH1TiUngfXD+1IazBbmTku2Sg0tBQAUttsqL6ddH9/gQUk elPIkQ8jG0yFgv7x3kMYUSukULVFu/wAM79W8sVUwZwLCHL6AXVu13C0Fu6MJLSo akM47xGNiVAk4rDXa3eK5GQmtUY26ZpdkwTVrncTmeEhcjvVGo+V1iioGNdWfH5N Vw== -----END CERTIFICATE-----Generated at Mon Oct 20 08:51:04 2025 by rpki-client