$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58816.roa File: AS58816.roa (raw, json) Hash identifier: LWWqY3zXEoNszHdyvHYUeu1KESVyJJ0udOx8jgAdmj4= Subject key identifier: 4D:DC:66:A0:F2:94:35:FD:63:97:15:5E:F3:9A:D3:5E:FA:4A:34:47 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 08AE6A6D2EB773D4064E37E115310C22FB75F0EE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58816.roa Signing time: Tue 03 Mar 2026 03:00:00 +0000 ROA not before: Tue 03 Mar 2026 02:55:00 +0000 ROA not after: Tue 02 Mar 2027 03:00:00 +0000 asID: 58816 IP address blocks: 124.158.134.0/23 maxlen: 24 124.158.142.0/23 maxlen: 24 202.181.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ae:6a:6d:2e:b7:73:d4:06:4e:37:e1:15:31:0c:22:fb:75:f0:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 3 02:55:00 2026 GMT Not After : Mar 2 03:00:00 2027 GMT Subject: CN=4DDC66A0F29435FD6397155EF39AD35EFA4A3447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:45:f3:9f:43:2f:a3:b3:db:1a:c5:56:ec:09: c4:78:c3:72:2f:ae:e5:84:36:2c:41:ec:ae:7c:14: e7:d8:4c:39:9c:63:7d:98:fb:c7:9f:b4:63:c0:c3: d9:d3:ff:34:78:ce:c0:93:32:b3:70:89:14:07:f9: da:6e:ec:94:6d:04:0b:de:c7:38:e7:ec:d3:21:9c: 9b:94:9d:26:cd:b0:ce:16:6d:ab:f7:43:f5:d9:51: 24:46:ba:3c:18:6b:83:b7:b8:7c:8c:34:9d:6d:f4: 05:ae:40:83:e1:82:10:b3:b9:df:a0:ec:bb:86:55: 06:be:be:87:0a:19:f8:a8:61:cd:ec:6d:77:64:65: 16:58:95:69:1b:15:00:6e:2f:a6:f4:e6:b3:68:cb: b1:b3:f9:6b:34:50:8a:f5:14:c8:7c:04:75:ee:bc: 01:d3:24:31:19:fb:a2:2a:89:82:83:7f:98:11:15: ae:46:61:6f:90:8f:b0:ea:00:f0:e4:85:af:30:e1: de:e8:49:a0:ac:70:66:39:ed:f3:de:41:1b:6f:e9: 64:e8:75:5c:8c:fe:e9:33:8b:b4:d3:25:cd:6c:87: cb:1d:20:47:8e:ff:6b:4d:6c:95:16:b8:d2:8f:c2: 88:68:79:2b:83:e6:3a:af:1a:51:ed:5b:f3:bc:65: 63:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DC:66:A0:F2:94:35:FD:63:97:15:5E:F3:9A:D3:5E:FA:4A:34:47 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.158.134.0/23 124.158.142.0/23 202.181.80.0/21 Signature Algorithm: sha256WithRSAEncryption 77:44:9f:1c:12:0b:c1:07:f6:1f:b5:37:67:d4:ef:80:0c:0f: 16:3a:61:6e:37:b2:7c:a0:30:ba:f4:0b:ad:85:25:15:ee:d9: c0:55:f3:83:80:c5:30:b2:61:95:73:4f:52:27:f8:d3:53:34: 79:a5:76:93:4a:f7:59:89:22:d5:76:04:33:c0:b0:01:49:e9: fe:17:bb:94:8a:54:13:af:cb:6c:6d:2e:d4:d9:bb:20:bd:d1: d9:1d:5d:5f:cb:2f:bd:35:ba:df:c6:c9:56:e1:87:c9:fd:64: 59:a7:2f:3a:ed:c9:f9:9c:65:36:6d:3b:2f:e3:88:5f:3c:a2: 52:18:eb:b3:d4:3c:ea:25:e7:7e:99:64:6d:81:0b:79:48:69: e0:06:5a:0d:0f:f7:ce:64:f4:81:74:69:80:84:0f:c4:db:80: 76:1a:46:2b:b5:65:5b:10:b6:e4:74:f3:a5:3a:85:37:6b:1e: 42:c7:3e:79:d0:c6:d3:7f:73:0a:37:e8:4b:de:3d:9e:d1:06: 47:45:52:51:84:6f:39:59:06:a1:d5:99:e5:ab:2b:78:b1:47: b8:50:4f:f6:08:0c:2e:9f:5a:37:f9:a6:ea:01:9a:4f:8a:4f: b0:63:f6:b7:dc:c0:38:ca:3d:e7:d7:0f:d5:5a:7f:67:62:66: e9:0a:39:1e -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUCK5qbS63c9QGTjfhFTEMIvt18O4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwMzAyNTUwMFoX DTI3MDMwMjAzMDAwMFowMzExMC8GA1UEAxMoNEREQzY2QTBGMjk0MzVGRDYzOTcx NTVFRjM5QUQzNUVGQTRBMzQ0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNF859DL6Oz2xrFVuwJxHjDci+u5YQ2LEHsrnwU59hMOZxjfZj7x5+0Y8DD 2dP/NHjOwJMys3CJFAf52m7slG0EC97HOOfs0yGcm5SdJs2wzhZtq/dD9dlRJEa6 PBhrg7e4fIw0nW30Ba5Ag+GCELO536Dsu4ZVBr6+hwoZ+Khhzextd2RlFliVaRsV AG4vpvTms2jLsbP5azRQivUUyHwEde68AdMkMRn7oiqJgoN/mBEVrkZhb5CPsOoA 8OSFrzDh3uhJoKxwZjnt895BG2/pZOh1XIz+6TOLtNMlzWyHyx0gR47/a01slRa4 0o/CiGh5K4PmOq8aUe1b87xlY78CAwEAAaOCAdswggHXMB0GA1UdDgQWBBRN3Gag 8pQ1/WOXFV7zmtNe+ko0RzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU4ODE2LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBfJ6GAwQBfJ6OAwQDyrVQMA0GCSqGSIb3DQEBCwUAA4IBAQB3RJ8c EgvBB/YftTdn1O+ADA8WOmFuN7J8oDC69AuthSUV7tnAVfODgMUwsmGVc09SJ/jT UzR5pXaTSvdZiSLVdgQzwLABSen+F7uUilQTr8tsbS7U2bsgvdHZHV1fyy+9Nbrf xslW4YfJ/WRZpy867cn5nGU2bTsv44hfPKJSGOuz1DzqJed+mWRtgQt5SGngBloN D/fOZPSBdGmAhA/E24B2GkYrtWVbELbkdPOlOoU3ax5Cxz550MbTf3MKN+hL3j2e 0QZHRVJRhG85WQah1Znlqyt4sUe4UE/2CAwun1o3+abqAZpPik+wY/a33MA4yj3n 1w/VWn9nYmbpCjke -----END CERTIFICATE-----Generated at Thu Mar 26 04:02:12 2026 by rpki-client