$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58495.roa File: AS58495.roa (raw, json) Hash identifier: F/OgExApun5sPEbFDsq2/Q38FIaDU0B4ex7CEUlBW2g= Subject key identifier: 0F:49:4B:C2:D4:56:0A:A4:1A:57:D1:AB:03:2F:F4:57:4B:B9:78:83 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 45FA49A4AFB3FC3E8760CC9982B56F712ACA1C23 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58495.roa Signing time: Tue 11 Nov 2025 06:00:19 +0000 ROA not before: Tue 11 Nov 2025 05:55:19 +0000 ROA not after: Tue 10 Nov 2026 06:00:19 +0000 asID: 58495 IP address blocks: 103.115.28.0/22 maxlen: 24 103.121.196.0/22 maxlen: 24 103.151.218.0/23 maxlen: 24 103.151.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Nov 2025 16:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fa:49:a4:af:b3:fc:3e:87:60:cc:99:82:b5:6f:71:2a:ca:1c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:19 2025 GMT Not After : Nov 10 06:00:19 2026 GMT Subject: CN=0F494BC2D4560AA41A57D1AB032FF4574BB97883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:93:9a:2d:9f:79:c2:5e:02:32:a4:e1:52: 1e:88:6f:1e:c5:92:84:19:93:bb:54:e8:af:ed:bc: a3:6d:47:48:0d:9d:b0:39:a4:65:d6:d2:51:c8:98: ef:38:86:a7:6a:81:aa:b3:90:1b:0c:91:c1:c6:32: 0c:ea:9f:fb:70:84:38:61:5f:97:eb:10:07:1b:9e: 24:a5:dc:8c:e1:5a:6d:8d:0f:2d:63:fa:bb:23:f4: 99:fc:1b:e2:fa:88:4d:71:0c:6a:b6:36:d3:e5:e2: 04:b7:9a:d0:33:b9:43:7a:7a:f2:a4:ae:36:ae:c2: ce:43:a5:93:be:b4:af:c1:70:77:cb:2d:9e:a2:1b: 4e:8e:cb:6e:a9:67:72:f9:e1:0b:b7:d3:3f:fd:e6: ce:79:74:8d:eb:1e:28:41:e6:59:30:9f:6a:1b:59: 64:3e:a4:1f:9e:d6:a9:f5:c6:8a:d9:64:ab:d3:e4: 2c:ea:74:b6:92:ff:6c:e7:b4:7b:c0:dd:45:bd:fd: e9:81:e5:c0:cc:4f:34:01:6f:22:4e:74:42:62:52: 75:93:bb:c3:4b:99:1d:03:55:f4:1b:ed:e8:d3:2e: 3f:e2:d6:69:4b:ac:97:11:ef:fc:c7:a8:b3:6f:24: d5:a4:41:29:f7:6d:be:b3:a0:a7:72:8e:cc:6e:5e: 39:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:49:4B:C2:D4:56:0A:A4:1A:57:D1:AB:03:2F:F4:57:4B:B9:78:83 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58495.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.28.0/22 103.121.196.0/22 103.151.218.0-103.151.221.255 Signature Algorithm: sha256WithRSAEncryption 84:15:4b:27:41:4a:d9:4e:02:05:b9:52:69:70:48:f2:4e:90: c8:21:da:9d:be:8a:4b:59:ef:58:8d:75:2a:86:1d:20:10:5d: e3:a9:3e:ce:03:37:d3:54:6c:6b:f0:c9:85:35:3d:78:d2:96: af:49:33:07:cb:5e:a4:05:7c:a7:17:e0:88:18:47:bf:09:5a: 7a:97:5f:9b:15:23:5e:89:36:27:cb:1a:78:7b:db:5f:9a:b3: 4b:59:6a:9a:49:52:7b:ae:d8:2b:ca:63:81:63:f9:a2:fc:d6: 56:41:e4:32:5b:b8:1c:f8:ce:d4:e8:83:3b:f3:e0:6a:ea:08: d8:fd:7d:cc:42:42:57:35:a2:79:2f:ef:74:f6:8f:bb:01:e1: 40:f6:29:3b:db:db:cf:99:56:09:1a:b7:c2:db:58:e6:fe:9a: b2:d6:f5:1a:6a:b2:ed:d2:7c:b1:f4:61:08:8d:5f:34:27:46: e7:70:1e:4f:c0:01:f0:54:26:06:44:a3:e3:ce:b5:e2:d9:2a: 62:7c:9a:34:04:c8:c0:b3:7f:ec:a3:0d:73:a6:02:63:77:d3: ca:f7:e6:2a:c7:1e:d0:bc:3a:c2:51:98:c9:f0:07:51:d1:b1: 95:78:31:97:51:5f:3c:f5:0c:3a:21:7e:cd:8a:f4:23:d6:aa: dd:34:1a:7e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIURfpJpK+z/D6HYMyZgrVvcSrKHCMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxOVoX DTI2MTExMDA2MDAxOVowMzExMC8GA1UEAxMoMEY0OTRCQzJENDU2MEFBNDFBNTdE MUFCMDMyRkY0NTc0QkI5Nzg4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtgk5otn3nCXgIypOFSHohvHsWShBmTu1Tor+28o21HSA2dsDmkZdbSUciY 7ziGp2qBqrOQGwyRwcYyDOqf+3CEOGFfl+sQBxueJKXcjOFabY0PLWP6uyP0mfwb 4vqITXEMarY20+XiBLea0DO5Q3p68qSuNq7CzkOlk760r8Fwd8stnqIbTo7Lbqln cvnhC7fTP/3mznl0jeseKEHmWTCfahtZZD6kH57WqfXGitlkq9PkLOp0tpL/bOe0 e8DdRb396YHlwMxPNAFvIk50QmJSdZO7w0uZHQNV9Bvt6NMuP+LWaUuslxHv/Meo s28k1aRBKfdtvrOgp3KOzG5eOUkCAwEAAaOCAeMwggHfMB0GA1UdDgQWBBQPSUvC 1FYKpBpX0asDL/RXS7l4gzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU4NDk1LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQCZ3McAwQCZ3nEMAwDBAFnl9oDBAFnl9wwDQYJKoZIhvcNAQELBQAD ggEBAIQVSydBStlOAgW5UmlwSPJOkMgh2p2+iktZ71iNdSqGHSAQXeOpPs4DN9NU bGvwyYU1PXjSlq9JMwfLXqQFfKcX4IgYR78JWnqXX5sVI16JNifLGnh721+as0tZ appJUnuu2CvKY4Fj+aL81lZB5DJbuBz4ztTogzvz4GrqCNj9fcxCQlc1onkv73T2 j7sB4UD2KTvb28+ZVgkat8LbWOb+mrLW9Rpqsu3SfLH0YQiNXzQnRudwHk/AAfBU JgZEo+POteLZKmJ8mjQEyMCzf+yjDXOmAmN308r35irHHtC8OsJRmMnwB1HRsZV4 MZdRXzz1DDohfs2K9CPWqt00Gn4= -----END CERTIFICATE-----Generated at Thu Nov 13 18:54:24 2025 by rpki-client