$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS58404.roa File: AS58404.roa (raw, json) Hash identifier: zIDOAAOUytMVOhT+9Vx5QR1ouJKNcQWCoKThKd4F6is= Subject key identifier: 7D:C2:39:AC:85:CC:FD:2D:AE:85:FB:AF:DB:5D:15:97:51:39:50:82 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4A8E32DF17AD385D5C0E9EC61C8E7FFA9BC0C420 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58404.roa Signing time: Sat 02 May 2026 09:22:21 +0000 ROA not before: Sat 02 May 2026 09:17:21 +0000 ROA not after: Sat 01 May 2027 09:22:21 +0000 asID: 58404 IP address blocks: 123.253.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8e:32:df:17:ad:38:5d:5c:0e:9e:c6:1c:8e:7f:fa:9b:c0:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:17:21 2026 GMT Not After : May 1 09:22:21 2027 GMT Subject: CN=7DC239AC85CCFD2DAE85FBAFDB5D159751395082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:f9:7a:ad:4d:b8:f2:8f:00:01:54:51:d5: 6f:f7:57:78:ed:7d:10:b7:bc:ed:d2:2b:3a:91:d5: ab:13:10:c6:d4:f2:74:09:51:b0:76:c8:47:d9:d1: 75:d5:bb:2b:1f:63:b6:8c:84:de:48:46:29:7b:64: 76:f3:a2:d2:39:b2:d5:02:68:cd:be:aa:17:00:39: b0:f4:67:a7:81:6c:cb:41:f4:14:90:fb:f2:ff:24: d0:73:79:a3:7b:2d:17:c1:39:a0:37:7e:cc:10:dd: 7d:0b:87:04:5d:d0:9c:d0:41:81:95:4e:be:86:fc: 34:29:c2:55:37:60:0e:e3:1f:6a:63:be:13:79:ff: 98:8c:b7:29:b5:b4:fd:07:ff:22:ca:ed:26:f8:c3: 75:48:5e:47:e2:29:8b:55:dc:7a:40:6d:b7:df:96: bb:0c:7d:ea:c9:c8:94:48:df:de:8f:03:35:4a:c5: 8a:15:0c:6e:70:af:fe:b0:73:7c:35:38:17:63:fb: db:df:4a:f6:ab:3b:ff:37:a9:47:4b:c0:75:b8:e8: cc:17:e6:c7:f0:bf:e2:fd:49:a5:cd:26:37:ce:c7: 6e:09:9d:3f:62:3a:1d:35:c3:29:65:7e:13:25:74: 56:33:fe:64:7a:37:09:21:c2:8c:2c:85:c4:9b:4b: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C2:39:AC:85:CC:FD:2D:AE:85:FB:AF:DB:5D:15:97:51:39:50:82 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58404.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.28.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:26:48:31:aa:24:bc:dd:b8:10:8f:47:15:e2:de:8b:e2:0b: 37:a9:1f:62:c5:07:9f:0d:3e:6b:3c:7d:09:95:03:f1:f9:75: 68:b0:10:b5:f9:cc:c8:3e:60:9c:a7:81:76:ff:c9:5a:5e:db: a2:63:55:1b:07:a6:dc:99:3c:6d:50:95:40:e5:f0:fd:cc:aa: bc:3c:09:04:73:71:38:39:71:ce:3a:4e:61:86:57:f1:a9:8c: 91:db:9c:a7:ba:55:7f:de:c5:ff:5f:83:65:40:e7:64:87:06: 83:6b:9b:ca:25:17:b3:b4:21:26:42:e4:3b:a9:f3:94:d7:85: 73:95:ed:28:0c:73:3d:21:71:37:79:56:82:40:57:8f:7e:93: db:fe:d5:2f:12:50:21:7c:b5:16:d6:52:a2:1d:ea:63:d3:53: 4f:5e:9a:06:8b:ba:a0:27:54:78:60:29:44:36:2d:18:76:97: db:a9:31:38:51:9d:91:dc:f5:66:af:35:00:d6:1f:fc:7a:bc: 1e:b4:46:95:ad:25:6f:b1:49:6b:11:af:bb:15:c2:44:2b:8f: 23:51:e5:42:5b:27:eb:43:1c:7b:ba:4e:d5:1f:68:81:0f:09: ef:72:1f:72:2f:b8:27:0c:c8:9d:54:e4:63:a4:1d:17:d9:80: d3:bc:8e:99 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUSo4y3xetOF1cDp7GHI5/+pvAxCAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTcyMVoX DTI3MDUwMTA5MjIyMVowMzExMC8GA1UEAxMoN0RDMjM5QUM4NUNDRkQyREFFODVG QkFGREI1RDE1OTc1MTM5NTA4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMeT+XqtTbjyjwABVFHVb/dXeO19ELe87dIrOpHVqxMQxtTydAlRsHbIR9nR ddW7Kx9jtoyE3khGKXtkdvOi0jmy1QJozb6qFwA5sPRnp4Fsy0H0FJD78v8k0HN5 o3stF8E5oDd+zBDdfQuHBF3QnNBBgZVOvob8NCnCVTdgDuMfamO+E3n/mIy3KbW0 /Qf/IsrtJvjDdUheR+Ipi1XcekBtt9+Wuwx96snIlEjf3o8DNUrFihUMbnCv/rBz fDU4F2P7299K9qs7/zepR0vAdbjozBfmx/C/4v1Jpc0mN87HbgmdP2I6HTXDKWV+ EyV0VjP+ZHo3CSHCjCyFxJtLSskCAwEAAaOCAcswggHHMB0GA1UdDgQWBBR9wjms hcz9La6F+6/bXRWXUTlQgjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTg0MDQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJ7/RwwDQYJKoZIhvcNAQELBQADggEBAE8mSDGqJLzduBCPRxXi3oviCzep H2LFB58NPms8fQmVA/H5dWiwELX5zMg+YJyngXb/yVpe26JjVRsHptyZPG1QlUDl 8P3Mqrw8CQRzcTg5cc46TmGGV/GpjJHbnKe6VX/exf9fg2VA52SHBoNrm8olF7O0 ISZC5Dup85TXhXOV7SgMcz0hcTd5VoJAV49+k9v+1S8SUCF8tRbWUqId6mPTU09e mgaLuqAnVHhgKUQ2LRh2l9upMThRnZHc9WavNQDWH/x6vB60RpWtJW+xSWsRr7sV wkQrjyNR5UJbJ+tDHHu6TtUfaIEPCe9yH3IvuCcMyJ1U5GOkHRfZgNO8jpk= -----END CERTIFICATE-----Generated at Sun May 3 00:40:24 2026 by rpki-client