$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS58821.roa File: AS58821.roa (raw, json) Hash identifier: ldURCwlMultgJhOpmAQuQLLbKLJzDLdWtEg0aZkmqEE= Subject key identifier: D1:B6:59:B2:C7:08:56:87:B4:19:88:32:21:D3:9F:2B:78:CF:9B:46 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7BE2F3859064799D4E6AF13E3FC84D0E52B32F6B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS58821.roa Signing time: Wed 08 Jul 2026 02:41:13 +0000 ROA not before: Wed 08 Jul 2026 02:36:13 +0000 ROA not after: Wed 07 Jul 2027 02:41:13 +0000 asID: 58821 IP address blocks: 160.236.27.0/24 maxlen: 24 165.101.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e2:f3:85:90:64:79:9d:4e:6a:f1:3e:3f:c8:4d:0e:52:b3:2f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 8 02:36:13 2026 GMT Not After : Jul 7 02:41:13 2027 GMT Subject: CN=D1B659B2C7085687B419883221D39F2B78CF9B46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:c4:df:14:21:87:68:e3:45:86:aa:74:62: 9b:09:02:7a:ff:64:3a:39:e8:c9:11:c3:bc:52:ae: 74:45:98:31:0a:a7:a7:37:31:ca:a0:3e:2c:67:ca: a8:e4:60:2f:6e:79:7a:a4:04:ec:a4:e4:6a:1b:bd: 7d:c0:f7:2b:5c:e8:96:67:39:16:55:71:38:9e:8b: 45:38:ba:2b:f8:7f:2e:69:2e:f5:4d:d2:5d:08:58: 0b:8c:af:68:a7:db:1c:6c:22:24:eb:bc:f6:ff:23: 8c:ad:09:3a:e6:27:f1:f9:70:c8:46:ca:fa:3b:15: f5:0c:88:27:fb:8f:fb:7b:8d:fe:21:bc:87:54:bb: 94:14:41:a8:7e:df:d9:2f:8a:5b:32:6e:f7:2f:64: a8:4d:10:df:d4:b8:20:d8:46:59:03:75:41:34:cc: 8e:a4:19:b6:1a:b9:a6:83:ec:76:e1:ff:15:76:bc: 84:c7:17:02:49:01:c0:15:eb:9c:7a:c7:ae:40:f5: 64:19:9a:08:ee:62:8a:ad:e0:fe:e3:5b:bd:d9:dd: 8c:dc:4a:be:67:c5:ad:2c:86:c3:eb:13:d2:cb:d5: b5:ee:ad:1b:8c:d4:6d:ce:0f:a0:30:68:8c:f5:65: 04:7f:dd:f3:3c:7a:23:08:5d:e7:36:f7:04:d6:6c: 7d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B6:59:B2:C7:08:56:87:B4:19:88:32:21:D3:9F:2B:78:CF:9B:46 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS58821.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.27.0/24 165.101.42.0/23 Signature Algorithm: sha256WithRSAEncryption 56:10:f6:45:89:b8:0c:be:6d:54:2d:7f:f5:51:21:78:44:0c: 1c:48:73:f0:18:d1:06:03:c2:9b:0e:0f:55:d1:f0:45:eb:e5: 84:c1:b6:a8:41:f8:ce:1f:2c:7a:74:f8:f0:57:4f:6d:0f:fe: b3:dc:ff:47:a8:6f:df:14:fa:4d:90:2d:a8:6d:9d:3f:02:97: 89:20:93:ef:86:c6:43:f2:64:d5:26:8e:92:68:c3:4b:ff:4b: 6d:51:eb:67:19:91:0e:3c:dc:f5:ce:7b:9c:1d:00:0e:66:ec: 7d:b7:72:91:1b:d5:47:4a:6a:63:50:50:55:50:71:65:b8:e5: 44:d3:5e:57:34:d3:47:ab:a4:b3:a7:c6:d5:4c:e0:9d:cf:c6: ef:fc:d2:c0:8a:c7:d7:e7:7d:c2:5d:81:87:23:70:ae:77:2c: ec:75:61:b3:08:a6:54:8a:cf:bf:6a:4c:44:19:4e:98:18:b2: a3:7f:0c:29:98:29:90:f1:e9:4a:bf:71:60:4b:70:fc:66:1f: df:09:72:05:76:43:61:36:c8:98:97:95:3f:f6:2a:4c:22:c7: 9a:bd:f2:76:66:dc:6b:94:ba:0b:09:e8:70:a6:50:7c:53:a6: 82:0b:0a:2c:ad:0c:7f:ee:e8:f6:2d:f6:1f:f2:26:96:b0:0d: 80:e9:99:1d -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUe+LzhZBkeZ1OavE+P8hNDlKzL2swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcwODAyMzYxM1oX DTI3MDcwNzAyNDExM1owMzExMC8GA1UEAxMoRDFCNjU5QjJDNzA4NTY4N0I0MTk4 ODMyMjFEMzlGMkI3OENGOUI0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ33xN8UIYdo40WGqnRimwkCev9kOjnoyRHDvFKudEWYMQqnpzcxyqA+LGfK qORgL255eqQE7KTkahu9fcD3K1zolmc5FlVxOJ6LRTi6K/h/Lmku9U3SXQhYC4yv aKfbHGwiJOu89v8jjK0JOuYn8flwyEbK+jsV9QyIJ/uP+3uN/iG8h1S7lBRBqH7f 2S+KWzJu9y9kqE0Q39S4INhGWQN1QTTMjqQZthq5poPsduH/FXa8hMcXAkkBwBXr nHrHrkD1ZBmaCO5iiq3g/uNbvdndjNxKvmfFrSyGw+sT0svVte6tG4zUbc4PoDBo jPVlBH/d8zx6Iwhd5zb3BNZsfYsCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBTRtlmy xwhWh7QZiDIh058reM+bRjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTNTg4MjEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB MAwDBACg7BsDBAGlZSowDQYJKoZIhvcNAQELBQADggEBAFYQ9kWJuAy+bVQtf/VR IXhEDBxIc/AY0QYDwpsOD1XR8EXr5YTBtqhB+M4fLHp0+PBXT20P/rPc/0eob98U +k2QLahtnT8Cl4kgk++GxkPyZNUmjpJow0v/S21R62cZkQ483PXOe5wdAA5m7H23 cpEb1UdKamNQUFVQcWW45UTTXlc000erpLOnxtVM4J3Pxu/80sCKx9fnfcJdgYcj cK53LOx1YbMIplSKz79qTEQZTpgYsqN/DCmYKZDx6Uq/cWBLcPxmH98JcgV2Q2E2 yJiXlT/2Kkwix5q98nZm3GuUugsJ6HCmUHxTpoILCiytDH/u6PYt9h/yJpawDYDp mR0= -----END CERTIFICATE-----Generated at Thu Jul 23 23:50:29 2026 by rpki-client