$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS58820.roa File: AS58820.roa (raw, json) Hash identifier: nEZQRgpWRYkDm1rp+MyJK8fm9mjHE8S8ZP0/6zw29kQ= Subject key identifier: A7:C1:CA:AC:47:32:0E:54:F5:DD:5E:E7:DF:7C:8C:C1:56:74:45:0F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 26BCAA615E6630F7CDF1EA2D17B6F05178CED4C0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58820.roa Signing time: Tue 14 Jul 2026 07:13:31 +0000 ROA not before: Tue 14 Jul 2026 07:08:31 +0000 ROA not after: Tue 13 Jul 2027 07:13:31 +0000 asID: 58820 IP address blocks: 103.113.28.0/24 maxlen: 24 103.136.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:bc:aa:61:5e:66:30:f7:cd:f1:ea:2d:17:b6:f0:51:78:ce:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 14 07:08:31 2026 GMT Not After : Jul 13 07:13:31 2027 GMT Subject: CN=A7C1CAAC47320E54F5DD5EE7DF7C8CC15674450F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f4:de:fa:1f:65:f3:9a:b3:e8:53:c5:33:8b: 2a:4f:c3:18:67:12:0e:3c:b4:2c:ad:e5:f1:0f:b6: c2:90:72:c5:0d:fc:46:92:5e:1b:8e:25:5b:c2:1d: 16:b6:02:5c:2f:8c:2c:8d:f6:aa:cd:25:41:1e:87: 1c:41:41:f6:30:73:fb:c4:e3:6a:68:56:11:a6:0a: 91:05:52:b5:43:e4:b8:8a:f2:18:32:5c:67:85:ba: 47:a0:17:e7:9c:c1:3c:85:4f:45:be:db:19:71:2d: 24:d6:4e:cc:68:7f:32:26:82:4a:68:10:85:2a:d8: 7d:e6:ee:60:ca:35:b0:15:cc:43:a7:b8:5f:3a:36: 9d:61:b5:2e:f3:01:a4:5a:7d:4d:c3:68:d2:3a:0a: d5:5a:60:ae:25:36:68:89:3d:e5:1e:11:7d:7d:56: 65:a7:a5:57:4f:e5:ff:f9:d8:1f:cc:9d:44:a4:94: f0:95:e8:21:2b:c7:f8:c8:68:21:c1:65:ac:00:69: 3d:66:1f:a5:b6:cf:47:ba:85:ee:4c:df:bb:8a:cf: 72:9d:ee:3f:a1:80:a9:6a:95:b5:ed:d4:fc:e8:b9: 2d:1d:1e:d6:29:78:54:9e:19:10:96:94:15:0a:e5: 67:35:17:69:cc:21:9f:43:aa:84:d5:5d:5d:eb:90: b2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C1:CA:AC:47:32:0E:54:F5:DD:5E:E7:DF:7C:8C:C1:56:74:45:0F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58820.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.113.28.0/24 103.136.16.0/22 Signature Algorithm: sha256WithRSAEncryption 18:91:dd:d9:27:de:7c:84:57:36:a3:d7:b7:37:a8:9d:de:21: 0e:bb:e9:d1:5f:84:ec:7c:42:08:c4:ba:cd:70:81:e9:80:ad: c1:40:db:82:ee:ec:8a:2d:58:ba:25:72:24:20:19:0a:c9:e0: ba:c5:40:78:25:26:9e:8b:75:ce:58:06:9a:57:b3:53:b4:93: 79:9c:45:b2:95:8d:49:55:f4:bf:bc:96:15:2c:07:75:29:e0: 66:c0:92:65:3f:ce:e9:bc:ea:c7:51:d9:36:90:75:20:a9:cd: 16:f8:aa:80:62:f6:94:a9:60:32:f2:8f:0e:9e:26:c0:1d:1a: c1:b0:79:5c:af:b7:3f:02:80:c2:a4:d1:8d:25:a0:29:70:1b: 53:ae:91:c1:3c:5b:6c:00:7e:91:5b:f5:d3:80:bb:af:22:67: 3e:57:52:17:12:9c:d5:7c:12:2c:7d:45:dc:f5:e2:2c:12:77: ba:49:34:70:26:b0:61:a5:f4:c5:4b:a2:f6:cb:6d:7c:0e:cd: b5:b1:56:46:99:b2:ae:b4:de:ff:40:41:fa:b1:5d:e1:8a:f9: 2c:64:00:42:ee:19:f9:3c:ed:1f:e7:fa:f5:34:5e:a3:0f:91: ef:42:39:55:0d:59:d4:c3:26:82:a2:43:27:49:61:e1:ff:8a: 50:7a:6a:ce -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUJryqYV5mMPfN8eotF7bwUXjO1MAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcxNDA3MDgzMVoX DTI3MDcxMzA3MTMzMVowMzExMC8GA1UEAxMoQTdDMUNBQUM0NzMyMEU1NEY1REQ1 RUU3REY3QzhDQzE1Njc0NDUwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOv03vofZfOas+hTxTOLKk/DGGcSDjy0LK3l8Q+2wpByxQ38RpJeG44lW8Id FrYCXC+MLI32qs0lQR6HHEFB9jBz+8TjamhWEaYKkQVStUPkuIryGDJcZ4W6R6AX 55zBPIVPRb7bGXEtJNZOzGh/MiaCSmgQhSrYfebuYMo1sBXMQ6e4Xzo2nWG1LvMB pFp9TcNo0joK1VpgriU2aIk95R4RfX1WZaelV0/l//nYH8ydRKSU8JXoISvH+Mho IcFlrABpPWYfpbbPR7qF7kzfu4rPcp3uP6GAqWqVte3U/Oi5LR0e1il4VJ4ZEJaU FQrlZzUXacwhn0OqhNVdXeuQssMCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBSnwcqs RzIOVPXdXufffIzBVnRFDzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTg4MjAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB MAwDBABncRwDBAJniBAwDQYJKoZIhvcNAQELBQADggEBABiR3dkn3nyEVzaj17c3 qJ3eIQ676dFfhOx8QgjEus1wgemArcFA24Lu7IotWLolciQgGQrJ4LrFQHglJp6L dc5YBppXs1O0k3mcRbKVjUlV9L+8lhUsB3Up4GbAkmU/zum86sdR2TaQdSCpzRb4 qoBi9pSpYDLyjw6eJsAdGsGweVyvtz8CgMKk0Y0loClwG1OukcE8W2wAfpFb9dOA u68iZz5XUhcSnNV8Eix9Rdz14iwSd7pJNHAmsGGl9MVLovbLbXwOzbWxVkaZsq60 3v9AQfqxXeGK+SxkAELuGfk87R/n+vU0XqMPke9COVUNWdTDJoKiQydJYeH/ilB6 as4= -----END CERTIFICATE-----Generated at Fri Jul 24 01:05:55 2026 by rpki-client