$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58819.roa File: AS58819.roa (raw, json) Hash identifier: Cw97wZ494NiNnVXrwWAOmQgWPOlTMf6Yc5R54OKDZu4= Subject key identifier: BA:03:CC:DA:8A:65:CC:59:2E:2B:89:60:7B:C7:6D:BF:72:D0:D1:31 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 42FB419E41FF223C6225E3D561CF8A9D8A569B24 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58819.roa Signing time: Tue 03 Mar 2026 11:00:00 +0000 ROA not before: Tue 03 Mar 2026 10:55:00 +0000 ROA not after: Tue 02 Mar 2027 11:00:00 +0000 asID: 58819 IP address blocks: 103.160.148.0/23 maxlen: 24 103.184.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fb:41:9e:41:ff:22:3c:62:25:e3:d5:61:cf:8a:9d:8a:56:9b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 3 10:55:00 2026 GMT Not After : Mar 2 11:00:00 2027 GMT Subject: CN=BA03CCDA8A65CC592E2B89607BC76DBF72D0D131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:97:a4:a9:0f:50:95:0a:c1:0e:c2:5c:21:e3: a4:2d:b7:5b:1b:96:04:db:df:26:3c:a1:ba:ef:60: ec:31:e4:bf:a2:90:70:fc:e1:1e:06:7d:48:e5:d3: 8f:1e:a3:8c:67:05:0d:78:20:84:92:37:25:56:c2: c5:d7:8a:fb:a4:bc:ce:02:5f:76:6f:df:30:0c:fb: 11:93:97:74:11:a0:88:35:45:d4:cc:2c:b1:f3:74: d3:db:23:5d:c3:13:9a:65:4b:13:39:d6:6d:65:05: 21:80:77:a0:4c:a6:96:cd:e6:b7:72:db:90:ac:11: ef:cd:39:f6:fa:92:43:3b:43:f9:bd:3a:24:a0:34: 37:a5:86:96:87:13:6b:a0:30:9e:34:9c:27:4b:fd: 09:ec:57:5b:0c:6c:74:87:5c:61:54:7c:31:57:d3: d4:74:b8:15:43:f9:4a:45:9d:1d:d8:db:74:37:68: 9d:4a:93:92:04:0b:bf:ad:56:5f:f6:fd:df:50:62: 67:d0:a0:08:f7:6f:a1:c0:1b:e3:5b:5f:fc:02:73: 1b:9d:5e:1b:3e:1a:db:77:d3:dd:81:40:1f:cc:04: 67:af:64:d8:ee:d5:b9:10:ce:55:2c:57:2a:79:87: d9:78:72:70:af:4f:ee:59:d4:4a:6c:55:b5:cb:2e: e7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:03:CC:DA:8A:65:CC:59:2E:2B:89:60:7B:C7:6D:BF:72:D0:D1:31 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58819.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.148.0/23 103.184.31.0/24 Signature Algorithm: sha256WithRSAEncryption 34:19:9a:9f:03:5f:ef:9e:5e:ee:55:f7:d7:87:de:52:01:da: dc:1a:76:4a:9f:c2:12:0c:ef:d6:e9:1f:a8:39:8c:f8:d9:af: 8d:a4:11:f3:0d:25:64:fa:ee:62:58:cb:b5:b5:cc:86:55:ed: 6c:db:1f:5f:b9:1b:af:80:cf:53:b0:06:ef:86:98:07:f4:ef: d0:fc:58:b8:49:10:a7:ca:dd:62:7f:fa:c0:36:16:c1:94:4c: c5:2e:37:e4:d4:57:60:ff:e6:91:45:16:09:f4:aa:da:cc:15: 50:b6:1a:09:f4:60:e1:4d:3f:b7:c2:eb:96:e0:fb:4e:a7:a4: 1f:5a:bf:6f:88:41:4b:37:57:b9:98:74:57:4c:bf:bc:86:a9: d0:28:bf:73:7e:93:77:49:f8:a6:b9:fc:3a:39:ce:5b:8b:08: 0a:e7:74:68:08:c4:9c:84:a6:46:7e:2b:77:56:a1:22:d9:55: 65:76:e4:d3:9e:f9:ce:49:a1:be:11:28:a5:d1:a6:ef:c4:c0: 40:ae:b2:73:ad:90:32:ef:70:91:47:42:af:cb:a6:0b:ef:bd: 1d:7b:fc:61:b2:7b:e7:08:84:dd:f1:c5:2b:25:41:da:23:ef: 52:5c:cb:16:3b:ac:3d:3c:4d:cf:a4:81:0e:d4:4c:08:4f:67: cd:6c:cb:18 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUQvtBnkH/IjxiJePVYc+KnYpWmyQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwMzEwNTUwMFoX DTI3MDMwMjExMDAwMFowMzExMC8GA1UEAxMoQkEwM0NDREE4QTY1Q0M1OTJFMkI4 OTYwN0JDNzZEQkY3MkQwRDEzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWXpKkPUJUKwQ7CXCHjpC23WxuWBNvfJjyhuu9g7DHkv6KQcPzhHgZ9SOXT jx6jjGcFDXgghJI3JVbCxdeK+6S8zgJfdm/fMAz7EZOXdBGgiDVF1MwssfN009sj XcMTmmVLEznWbWUFIYB3oEymls3mt3LbkKwR78059vqSQztD+b06JKA0N6WGlocT a6AwnjScJ0v9CexXWwxsdIdcYVR8MVfT1HS4FUP5SkWdHdjbdDdonUqTkgQLv61W X/b931BiZ9CgCPdvocAb41tf/AJzG51eGz4a23fT3YFAH8wEZ69k2O7VuRDOVSxX KnmH2XhycK9P7lnUSmxVtcsu5/ECAwEAAaOCAdUwggHRMB0GA1UdDgQWBBS6A8za imXMWS4riWB7x22/ctDRMTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU4ODE5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZ6CUAwQAZ7gfMA0GCSqGSIb3DQEBCwUAA4IBAQA0GZqfA1/vnl7u VffXh95SAdrcGnZKn8ISDO/W6R+oOYz42a+NpBHzDSVk+u5iWMu1tcyGVe1s2x9f uRuvgM9TsAbvhpgH9O/Q/Fi4SRCnyt1if/rANhbBlEzFLjfk1Fdg/+aRRRYJ9Kra zBVQthoJ9GDhTT+3wuuW4PtOp6QfWr9viEFLN1e5mHRXTL+8hqnQKL9zfpN3Sfim ufw6Oc5biwgK53RoCMSchKZGfit3VqEi2VVlduTTnvnOSaG+ESil0abvxMBArrJz rZAy73CRR0Kvy6YL770de/xhsnvnCITd8cUrJUHaI+9SXMsWO6w9PE3PpIEO1EwI T2fNbMsY -----END CERTIFICATE-----Generated at Thu Mar 26 04:02:08 2026 by rpki-client