$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS58819.roa File: AS58819.roa (raw, json) Hash identifier: +0W94aljPpSh5hJznFfPEkK0mqWqZDUixxYQq3sXalU= Subject key identifier: 72:29:8A:4F:8F:BE:9F:7F:DB:92:C3:5C:C2:78:19:D1:BB:FC:0D:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 190CC3C61FD9C8999B95A4458BFF7B7EBE55A76E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58819.roa Signing time: Sat 02 May 2026 08:35:51 +0000 ROA not before: Sat 02 May 2026 08:30:51 +0000 ROA not after: Sat 01 May 2027 08:35:51 +0000 asID: 58819 IP address blocks: 103.160.148.0/23 maxlen: 24 103.184.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0c:c3:c6:1f:d9:c8:99:9b:95:a4:45:8b:ff:7b:7e:be:55:a7:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:51 2026 GMT Not After : May 1 08:35:51 2027 GMT Subject: CN=72298A4F8FBE9F7FDB92C35CC27819D1BBFC0D9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7e:17:96:58:a7:a2:50:73:0e:25:76:47:97: 10:8d:26:43:24:ea:84:f1:e6:0b:66:ad:7a:db:8a: c6:1d:3c:69:02:88:4f:a4:7b:c7:fd:9f:c1:70:40: 4f:14:80:0c:43:3d:ab:15:95:a5:47:d2:3b:c3:b0: d7:c8:99:9c:4d:6e:b9:82:88:0b:af:cb:4c:bb:12: 78:e5:35:b1:58:bf:35:af:5a:3e:53:52:29:16:c6: 64:24:03:0c:8d:0d:d5:62:ae:e9:2f:fb:dc:ba:a0: 3b:81:1d:06:b2:6d:62:0f:62:49:56:32:c6:78:57: 2b:33:f5:ff:39:f1:c7:01:e9:27:bf:fd:73:41:f4: 2b:35:db:64:a6:e2:43:bd:49:4f:6c:8f:56:96:36: 77:6d:b6:b2:85:3d:f9:94:60:d1:04:2e:8f:0c:fd: 72:45:d8:14:0e:50:57:eb:83:60:42:38:f4:5b:e8: d6:08:34:61:6e:e6:3e:03:16:82:b9:f8:a0:9b:fd: 5d:3b:f7:ad:37:30:88:9b:7e:ce:7d:2b:91:b5:db: d8:49:95:a0:95:2a:05:10:1d:07:46:c8:47:03:6c: 9e:77:c2:19:8f:da:bd:25:a9:a7:b3:c3:3c:4d:4e: f4:70:ca:64:2d:79:98:60:79:0c:f6:3a:65:02:17: a5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:29:8A:4F:8F:BE:9F:7F:DB:92:C3:5C:C2:78:19:D1:BB:FC:0D:9E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58819.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.148.0/23 103.184.31.0/24 Signature Algorithm: sha256WithRSAEncryption 73:eb:9b:8d:4a:24:10:c4:58:b5:f2:12:36:50:ba:d7:28:9d: 8b:34:df:46:5c:1b:b9:65:e9:15:52:0d:77:28:01:ca:c0:ae: e6:1f:e6:fd:fb:cb:6e:9c:d1:40:6b:e6:60:70:3c:cb:ad:dd: d2:59:a7:aa:3c:35:5d:5d:19:50:cd:b1:0d:37:ee:9b:7e:d2: 08:68:19:03:79:34:ff:fd:23:60:14:a6:36:a8:5e:c8:f1:86: e6:c0:66:43:fe:0d:4f:43:df:71:4c:45:8e:12:1f:59:30:b5: e0:75:3f:93:4a:5d:c3:56:9b:03:3c:4f:68:b4:60:e5:ea:ad: 55:00:c2:ee:7a:32:26:95:6d:cd:3c:2f:83:cb:b5:7b:d3:01: b6:9b:a1:f0:ed:2e:fa:53:5d:a4:39:f7:c8:c8:fa:54:84:b3: 94:e0:60:31:09:34:5b:29:e9:16:cb:d3:6b:be:0e:eb:fa:74: 3c:7a:6f:a3:8a:90:a3:74:1f:92:08:26:3c:9a:88:10:3c:98: 4c:bb:38:89:4e:24:f8:7c:c1:82:69:69:2d:85:8c:0b:f8:d8: 7d:5d:17:5a:f1:19:89:57:f6:6b:94:86:61:12:16:d1:ac:c5: 0e:70:34:75:47:6d:fa:91:ec:6a:f0:fc:6f:36:cf:f1:12:e3: 31:32:e0:53 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUGQzDxh/ZyJmblaRFi/97fr5Vp24wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzA1MVoX DTI3MDUwMTA4MzU1MVowMzExMC8GA1UEAxMoNzIyOThBNEY4RkJFOUY3RkRCOTJD MzVDQzI3ODE5RDFCQkZDMEQ5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIl+F5ZYp6JQcw4ldkeXEI0mQyTqhPHmC2atetuKxh08aQKIT6R7x/2fwXBA TxSADEM9qxWVpUfSO8Ow18iZnE1uuYKIC6/LTLsSeOU1sVi/Na9aPlNSKRbGZCQD DI0N1WKu6S/73LqgO4EdBrJtYg9iSVYyxnhXKzP1/znxxwHpJ7/9c0H0KzXbZKbi Q71JT2yPVpY2d222soU9+ZRg0QQujwz9ckXYFA5QV+uDYEI49Fvo1gg0YW7mPgMW grn4oJv9XTv3rTcwiJt+zn0rkbXb2EmVoJUqBRAdB0bIRwNsnnfCGY/avSWpp7PD PE1O9HDKZC15mGB5DPY6ZQIXpaMCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBRyKYpP j76ff9uSw1zCeBnRu/wNnjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTg4MTkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB MAwDBAFnoJQDBABnuB8wDQYJKoZIhvcNAQELBQADggEBAHPrm41KJBDEWLXyEjZQ utconYs030ZcG7ll6RVSDXcoAcrAruYf5v37y26c0UBr5mBwPMut3dJZp6o8NV1d GVDNsQ037pt+0ghoGQN5NP/9I2AUpjaoXsjxhubAZkP+DU9D33FMRY4SH1kwteB1 P5NKXcNWmwM8T2i0YOXqrVUAwu56MiaVbc08L4PLtXvTAbabofDtLvpTXaQ598jI +lSEs5TgYDEJNFsp6RbL02u+Duv6dDx6b6OKkKN0H5IIJjyaiBA8mEy7OIlOJPh8 wYJpaS2FjAv42H1dF1rxGYlX9muUhmESFtGsxQ5wNHVHbfqR7Grw/G82z/ES4zEy 4FM= -----END CERTIFICATE-----Generated at Sun May 3 00:40:35 2026 by rpki-client