$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS58392.roa File: AS58392.roa (raw, json) Hash identifier: Hq1BXAJGGq9jSf8poLQ+/AjRg5JwlICxVFM59OMLII4= Subject key identifier: C4:A7:51:6F:67:33:78:60:3A:EE:48:BE:B3:CE:02:63:B0:CD:C3:DF Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3A47F77FCA8CFD99BE873195BF70EE6CFDAD7A06 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58392.roa Signing time: Sun 03 May 2026 04:30:18 +0000 ROA not before: Sun 03 May 2026 04:25:18 +0000 ROA not after: Sun 02 May 2027 04:30:18 +0000 asID: 58392 IP address blocks: 103.11.134.0/23 maxlen: 23 103.40.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:47:f7:7f:ca:8c:fd:99:be:87:31:95:bf:70:ee:6c:fd:ad:7a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 04:25:18 2026 GMT Not After : May 2 04:30:18 2027 GMT Subject: CN=C4A7516F673378603AEE48BEB3CE0263B0CDC3DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a7:2f:16:52:68:73:fb:24:ca:c9:f9:98:ed: 98:03:d7:11:ce:78:9d:ad:18:7e:28:4e:0d:da:ad: 0a:99:f9:e1:29:9f:8d:e4:4f:34:0d:a8:29:56:21: d6:d3:c8:cf:34:78:81:50:d8:3c:79:00:53:c9:fd: 3a:29:c5:07:d0:85:30:e4:8f:6e:ad:5d:5d:5b:82: cb:b3:ef:2e:5b:6d:f9:4e:22:f0:97:cf:47:3f:6c: 83:95:c9:fb:a6:54:3f:93:33:86:de:58:de:40:be: 6f:42:ca:2e:1e:af:65:3e:ec:ef:c1:6e:de:85:b7: dc:75:83:f4:61:06:7e:94:04:22:8a:99:73:a5:53: 64:49:d8:fb:50:72:30:6b:dc:94:9f:49:d2:12:b7: 34:b6:b9:da:5d:51:8d:0c:dc:51:01:0f:ab:02:c3: dc:f3:12:a1:b0:37:da:57:91:0f:19:8c:94:c4:c1: f7:40:77:bc:7a:f8:98:80:35:f4:db:83:3b:61:1d: 1f:46:f4:cd:db:43:00:dd:e0:43:56:fb:6f:e8:16: 08:f5:8a:d3:5f:3b:2e:a6:0a:22:99:1c:cd:67:fe: d7:a9:98:70:62:0a:b7:5a:4f:0e:c9:d2:eb:ae:c7: 9d:0a:fc:96:77:12:31:3d:15:2f:87:87:3f:ed:20: 03:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A7:51:6F:67:33:78:60:3A:EE:48:BE:B3:CE:02:63:B0:CD:C3:DF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58392.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.134.0/23 103.40.54.0/23 Signature Algorithm: sha256WithRSAEncryption 12:d1:da:35:4d:b0:ef:c8:ca:4d:f2:78:29:01:df:cd:31:b3: f8:97:5d:3f:2a:34:62:f7:22:7a:b6:e9:19:65:d2:c3:ed:b9: c6:80:54:e3:69:1f:55:35:41:e8:c3:fc:44:b7:e8:92:6e:dd: 4c:03:50:bd:ed:0d:ae:27:35:8b:2a:dd:5c:b2:2c:ef:7c:ed: bf:6a:cf:73:cd:26:ad:14:45:6e:9b:e4:1d:d0:1a:28:ae:1b: eb:cb:db:87:79:ce:87:ed:c6:1e:94:c1:6a:e5:50:b9:fa:7a: 61:ef:68:39:67:09:b4:86:7b:33:20:64:ad:3a:a6:5b:81:aa: 6b:7e:a5:2e:19:75:28:01:f1:a0:c8:3d:5f:a8:59:dc:52:ab: d3:83:1f:95:e0:34:29:7f:83:08:aa:53:c6:fe:84:6d:74:ff: 6b:98:86:76:70:a1:25:9b:88:62:57:dc:5c:35:da:5c:d5:39: eb:14:c9:82:1b:be:5e:5b:a5:19:86:3a:65:0a:bf:a1:2a:a0: c1:a7:35:a8:dc:b8:52:87:af:6d:d0:99:f8:e8:84:e9:07:e1: fd:ee:ad:f7:55:f3:89:33:ca:a5:27:0b:a9:b9:c0:bb:17:e7: 68:1d:e3:39:b0:96:31:96:24:eb:d8:d3:ed:97:ad:c0:5e:2e: a0:83:0d:d5 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUOkf3f8qM/Zm+hzGVv3DubP2tegYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA0MjUxOFoX DTI3MDUwMjA0MzAxOFowMzExMC8GA1UEAxMoQzRBNzUxNkY2NzMzNzg2MDNBRUU0 OEJFQjNDRTAyNjNCMENEQzNERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANanLxZSaHP7JMrJ+ZjtmAPXEc54na0YfihODdqtCpn54SmfjeRPNA2oKVYh 1tPIzzR4gVDYPHkAU8n9OinFB9CFMOSPbq1dXVuCy7PvLltt+U4i8JfPRz9sg5XJ +6ZUP5Mzht5Y3kC+b0LKLh6vZT7s78Fu3oW33HWD9GEGfpQEIoqZc6VTZEnY+1By MGvclJ9J0hK3NLa52l1RjQzcUQEPqwLD3PMSobA32leRDxmMlMTB90B3vHr4mIA1 9NuDO2EdH0b0zdtDAN3gQ1b7b+gWCPWK0187LqYKIpkczWf+16mYcGIKt1pPDsnS 667HnQr8lncSMT0VL4eHP+0gA+ECAwEAAaOCAdEwggHNMB0GA1UdDgQWBBTEp1Fv ZzN4YDruSL6zzgJjsM3D3zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTgzOTIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB MAwDBAFnC4YDBAFnKDYwDQYJKoZIhvcNAQELBQADggEBABLR2jVNsO/Iyk3yeCkB 380xs/iXXT8qNGL3Inq26Rll0sPtucaAVONpH1U1QejD/ES36JJu3UwDUL3tDa4n NYsq3VyyLO987b9qz3PNJq0URW6b5B3QGiiuG+vL24d5zoftxh6UwWrlULn6emHv aDlnCbSGezMgZK06pluBqmt+pS4ZdSgB8aDIPV+oWdxSq9ODH5XgNCl/gwiqU8b+ hG10/2uYhnZwoSWbiGJX3Fw12lzVOesUyYIbvl5bpRmGOmUKv6EqoMGnNajcuFKH r23QmfjohOkH4f3urfdV84kzyqUnC6m5wLsX52gd4zmwljGWJOvY0+2XrcBeLqCD DdU= -----END CERTIFICATE-----Generated at Tue May 12 22:42:07 2026 by rpki-client