$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS59132.roa File: AS59132.roa (raw, json) Hash identifier: QPwlaouuY33G2A1kRU8faFB0TS1ycsDnyQk+5GDL86c= Subject key identifier: 80:DF:68:98:E7:03:16:80:B6:5B:35:75:B5:0E:C1:30:52:A0:23:AC Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 66DA308ED3FE460297921A2CC59DD2239505EE04 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS59132.roa Signing time: Sat 02 May 2026 08:36:11 +0000 ROA not before: Sat 02 May 2026 08:31:11 +0000 ROA not after: Sat 01 May 2027 08:36:11 +0000 asID: 59132 IP address blocks: 103.183.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:da:30:8e:d3:fe:46:02:97:92:1a:2c:c5:9d:d2:23:95:05:ee:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:11 2026 GMT Not After : May 1 08:36:11 2027 GMT Subject: CN=80DF6898E7031680B65B3575B50EC13052A023AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:1b:9f:92:74:71:6b:71:25:fb:c3:cc:33: c8:6a:9f:fa:69:30:39:32:5a:4c:1d:d2:e7:ff:66: 9b:eb:67:2b:ba:e5:66:f0:1e:eb:3d:19:ca:19:48: 69:da:de:30:66:29:14:4a:90:a7:2a:c3:d4:64:db: d1:9f:ba:d7:05:33:fd:25:48:17:34:07:5b:df:30: 71:11:27:72:ec:6b:72:8a:49:9f:be:57:86:95:72: 04:0b:a7:94:74:7a:6f:69:59:f3:36:eb:d6:c1:3b: 42:9c:54:a2:e6:3e:d3:58:04:98:e0:b7:28:90:64: ab:6c:2c:33:f1:e3:fd:14:36:6f:37:62:f7:59:73: 10:e6:5f:95:34:a6:54:e8:5d:32:4e:a9:c0:54:52: d8:b4:a1:e1:c8:9f:02:d3:df:c8:1d:6f:7b:b8:12: 1d:6a:a3:fd:d1:57:69:1a:2e:6c:74:28:d5:67:8f: 07:39:3e:96:8f:fb:88:0f:9f:9c:aa:74:d9:19:9d: bb:1b:61:82:2f:41:f2:bc:99:e5:67:a8:3b:9e:51: 3a:f2:bb:df:e0:5a:c2:d4:98:31:7e:bd:3e:93:37: e5:53:ad:81:cb:77:49:1d:d5:75:c3:8a:ac:b1:05: 38:4b:49:be:d8:bb:7a:04:a9:cb:d5:dc:9e:87:dc: cc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DF:68:98:E7:03:16:80:B6:5B:35:75:B5:0E:C1:30:52:A0:23:AC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS59132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.255.0/24 Signature Algorithm: sha256WithRSAEncryption a1:61:68:6c:cb:fc:0e:fa:84:6e:9d:b9:79:dc:de:9a:9d:ae: 56:d7:2b:ac:0e:4d:33:c8:22:9f:37:f6:f5:59:a4:1d:b1:a5: 3e:b5:2c:27:5a:ae:bd:60:d8:bf:34:68:32:c2:5f:34:68:32: b3:5f:24:95:a7:d2:33:76:c1:aa:e6:c8:ff:4d:b2:d5:f7:70: f3:76:4a:74:54:13:93:17:47:35:69:3f:92:ca:24:c8:e3:11: 26:db:f3:d7:d6:50:58:7c:f5:7f:fc:ba:fe:d7:23:e6:42:60: e2:47:3c:06:42:f0:88:af:1a:48:b5:63:c5:d2:10:5d:3a:85: af:74:44:bb:67:47:7e:d8:fa:18:5d:91:a6:f8:30:ef:33:8d: 9c:a2:26:df:3d:eb:19:c2:6e:07:fd:de:37:2b:44:e8:57:f6: 2d:f9:a5:1a:9d:6e:cb:6f:63:f7:db:6d:fe:6e:ba:37:c5:e6: 08:33:75:30:81:b6:dd:77:76:f0:24:91:9d:99:f4:82:af:d9: b7:a0:33:6c:f1:6a:46:bf:1d:4b:4f:79:09:47:bc:75:95:0f: 35:8c:14:0f:f8:ac:2f:5b:58:ab:40:89:c1:51:05:42:fb:b3: 77:aa:7e:03:77:10:c0:d9:44:75:bc:94:7f:34:37:3d:61:c7: 78:1a:12:56 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUZtowjtP+RgKXkhosxZ3SI5UF7gQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzExMVoX DTI3MDUwMTA4MzYxMVowMzExMC8GA1UEAxMoODBERjY4OThFNzAzMTY4MEI2NUIz NTc1QjUwRUMxMzA1MkEwMjNBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsiG5+SdHFrcSX7w8wzyGqf+mkwOTJaTB3S5/9mm+tnK7rlZvAe6z0ZyhlI adreMGYpFEqQpyrD1GTb0Z+61wUz/SVIFzQHW98wcREncuxrcopJn75XhpVyBAun lHR6b2lZ8zbr1sE7QpxUouY+01gEmOC3KJBkq2wsM/Hj/RQ2bzdi91lzEOZflTSm VOhdMk6pwFRS2LSh4cifAtPfyB1ve7gSHWqj/dFXaRoubHQo1WePBzk+lo/7iA+f nKp02Rmduxthgi9B8ryZ5WeoO55ROvK73+BawtSYMX69PpM35VOtgct3SR3VdcOK rLEFOEtJvti7egSpy9XcnofczE0CAwEAAaOCAcswggHHMB0GA1UdDgQWBBSA32iY 5wMWgLZbNXW1DsEwUqAjrDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTkxMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnt/8wDQYJKoZIhvcNAQELBQADggEBAKFhaGzL/A76hG6duXnc3pqdrlbX K6wOTTPIIp839vVZpB2xpT61LCdarr1g2L80aDLCXzRoMrNfJJWn0jN2warmyP9N stX3cPN2SnRUE5MXRzVpP5LKJMjjESbb89fWUFh89X/8uv7XI+ZCYOJHPAZC8Iiv Gki1Y8XSEF06ha90RLtnR37Y+hhdkab4MO8zjZyiJt896xnCbgf93jcrROhX9i35 pRqdbstvY/fbbf5uujfF5ggzdTCBtt13dvAkkZ2Z9IKv2begM2zxaka/HUtPeQlH vHWVDzWMFA/4rC9bWKtAicFRBUL7s3eqfgN3EMDZRHW8lH80Nz1hx3gaElY= -----END CERTIFICATE-----Generated at Sun May 3 00:40:35 2026 by rpki-client