$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59132.roa File: AS59132.roa (raw, json) Hash identifier: L1zaFkbGjUHyoP5MINTfUaJs12lPE+L9Lf3GwpGarj8= Subject key identifier: 04:90:AF:4E:03:E8:0F:38:61:32:8B:84:61:12:58:CB:7B:9C:C9:8E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 294E2863A14440DAE64AD6CFEC3F6E2C0ACB584F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59132.roa Signing time: Fri 29 Aug 2025 09:10:25 +0000 ROA not before: Fri 29 Aug 2025 09:05:25 +0000 ROA not after: Fri 28 Aug 2026 09:10:25 +0000 asID: 59132 IP address blocks: 103.183.255.0/24 maxlen: 24 203.33.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4e:28:63:a1:44:40:da:e6:4a:d6:cf:ec:3f:6e:2c:0a:cb:58:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 29 09:05:25 2025 GMT Not After : Aug 28 09:10:25 2026 GMT Subject: CN=0490AF4E03E80F3861328B84611258CB7B9CC98E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:42:48:98:38:d9:da:37:7c:02:e4:2a:65: 95:c0:c2:71:4c:62:e5:08:6d:c7:72:25:e6:6f:6c: 69:40:8b:4d:a2:ab:5e:9b:51:38:8f:06:a6:e0:c9: 0f:26:30:85:09:96:0d:97:9a:23:c1:7b:2e:cc:0c: c1:99:2f:7d:43:8f:7f:60:c0:5f:7a:56:92:b9:e5: a6:d6:50:e6:e7:64:9d:28:d0:90:cd:b6:f3:de:bc: 7f:e9:b6:3d:ab:05:04:2b:dd:7c:f8:1b:39:b2:ea: 01:63:20:eb:73:88:c8:56:c1:f2:6d:4b:7b:62:34: 95:96:93:f6:88:58:2d:50:5b:89:d8:98:c0:9c:a4: 81:f7:36:30:c4:b8:b4:98:de:2e:3f:2f:35:37:fa: 71:59:10:11:ae:48:1a:95:12:5a:b9:30:e9:7a:09: 63:cb:fb:c3:0e:0e:3d:c5:e4:04:b7:3c:f9:ef:38: b6:1b:7b:63:7e:c0:83:94:c4:53:f4:4b:a0:5a:f9: 77:01:2e:df:af:6c:d6:3b:67:7c:b0:dc:31:31:de: 2c:d6:07:cc:ab:3c:93:50:9c:0d:e7:fa:6e:d0:b8: de:15:b2:c1:54:d3:7c:19:81:1d:0e:3f:3e:98:1a: ba:4b:44:9a:6c:52:b7:4a:ad:4d:65:aa:56:5b:5d: a0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:90:AF:4E:03:E8:0F:38:61:32:8B:84:61:12:58:CB:7B:9C:C9:8E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.255.0/24 203.33.35.0/24 Signature Algorithm: sha256WithRSAEncryption 45:54:34:ba:b4:15:d9:a5:6a:d2:71:37:4f:28:71:38:41:57: f5:67:68:92:3d:d6:9d:a4:25:83:44:03:27:d4:62:13:8c:31: aa:46:77:97:2c:97:ff:8e:93:f9:8f:2f:65:49:53:3d:b8:07: 22:ce:7e:23:94:ed:d7:02:87:e0:64:e4:fc:78:11:72:cf:e5: 19:0f:c1:99:25:ee:8c:45:e5:03:aa:46:ca:a2:df:63:09:b6: ca:fe:8a:3a:52:64:61:70:76:66:28:cf:56:c7:30:51:4c:b2: 26:42:25:b5:c6:41:17:8d:85:45:49:7c:48:2d:4c:c0:84:91: a5:51:16:2c:da:05:dc:4f:bf:19:b2:f0:a9:e1:16:31:15:18: e4:b8:7a:aa:f4:c2:84:b5:85:fd:e4:41:7c:d0:91:5b:d3:82: 0b:4e:60:62:be:7c:4c:81:a1:9f:ce:8d:a1:d3:4d:76:8e:93: 60:70:2b:60:ba:b9:f4:31:5f:87:56:c8:4f:0e:26:cd:1e:29: 2b:5b:7c:9b:35:c9:04:9c:7d:9f:aa:50:59:89:f2:bf:49:1b: 51:cb:51:bb:be:34:0b:d9:18:c7:a1:80:ed:72:bc:01:54:42: c8:65:ce:18:2a:70:a0:cd:54:14:55:a5:8b:9a:6a:b3:80:f2: c4:8c:c7:09 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUKU4oY6FEQNrmStbP7D9uLArLWE8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyOTA5MDUyNVoX DTI2MDgyODA5MTAyNVowMzExMC8GA1UEAxMoMDQ5MEFGNEUwM0U4MEYzODYxMzI4 Qjg0NjExMjU4Q0I3QjlDQzk4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRUQkiYONnaN3wC5CpllcDCcUxi5Qhtx3Il5m9saUCLTaKrXptROI8GpuDJ DyYwhQmWDZeaI8F7LswMwZkvfUOPf2DAX3pWkrnlptZQ5udknSjQkM228968f+m2 PasFBCvdfPgbObLqAWMg63OIyFbB8m1Le2I0lZaT9ohYLVBbidiYwJykgfc2MMS4 tJjeLj8vNTf6cVkQEa5IGpUSWrkw6XoJY8v7ww4OPcXkBLc8+e84tht7Y37Ag5TE U/RLoFr5dwEu369s1jtnfLDcMTHeLNYHzKs8k1CcDef6btC43hWywVTTfBmBHQ4/ PpgauktEmmxSt0qtTWWqVltdoHkCAwEAAaOCAdUwggHRMB0GA1UdDgQWBBQEkK9O A+gPOGEyi4RhEljLe5zJjjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU5MTMyLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ7f/AwQAyyEjMA0GCSqGSIb3DQEBCwUAA4IBAQBFVDS6tBXZpWrS cTdPKHE4QVf1Z2iSPdadpCWDRAMn1GITjDGqRneXLJf/jpP5jy9lSVM9uAcizn4j lO3XAofgZOT8eBFyz+UZD8GZJe6MReUDqkbKot9jCbbK/oo6UmRhcHZmKM9WxzBR TLImQiW1xkEXjYVFSXxILUzAhJGlURYs2gXcT78ZsvCp4RYxFRjkuHqq9MKEtYX9 5EF80JFb04ILTmBivnxMgaGfzo2h0012jpNgcCtgurn0MV+HVshPDibNHikrW3yb NckEnH2fqlBZifK/SRtRy1G7vjQL2RjHoYDtcrwBVELIZc4YKnCgzVQUVaWLmmqz gPLEjMcJ -----END CERTIFICATE-----Generated at Fri Sep 5 08:11:20 2025 by rpki-client