$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS59276.roa File: AS59276.roa (raw, json) Hash identifier: yXEtkMoT4N0bUTiYj7Ykvw1fGwrclJ33cI34N+gHUOw= Subject key identifier: C9:22:44:1C:51:2C:3B:FD:72:C2:0F:54:7F:A3:CE:0B:03:D9:AC:DB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 29093283C9A561CE15A5613F65767CA4DEF5A1B2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS59276.roa Signing time: Sat 02 May 2026 16:18:31 +0000 ROA not before: Sat 02 May 2026 16:13:31 +0000 ROA not after: Sat 01 May 2027 16:18:31 +0000 asID: 59276 IP address blocks: 103.226.232.0/22 maxlen: 24 103.226.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:09:32:83:c9:a5:61:ce:15:a5:61:3f:65:76:7c:a4:de:f5:a1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 16:13:31 2026 GMT Not After : May 1 16:18:31 2027 GMT Subject: CN=C922441C512C3BFD72C20F547FA3CE0B03D9ACDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a4:6a:21:0e:d5:2b:05:4e:26:f8:b4:18:31: 65:7e:f8:3c:36:85:ed:b7:ac:08:ee:f4:f1:10:fb: ba:c4:0e:98:4e:7d:a1:69:76:c7:69:28:ed:e5:53: c8:5f:50:dd:48:7b:31:31:cb:1e:dc:c5:a2:24:c6: 16:cc:ee:cc:b5:39:a6:c1:c1:ae:33:f6:59:78:f7: cc:c3:8f:0b:9b:83:8c:49:10:82:9b:04:d6:68:c0: 49:37:66:c2:a0:23:4c:85:35:6a:93:b2:ee:86:47: 6c:ae:5e:1c:3b:0f:ad:0b:f8:ca:65:f3:5a:54:48: 44:ed:03:f4:e5:e5:78:02:d5:de:58:51:0f:93:4f: 4b:31:80:6c:d1:a5:35:61:7e:01:df:11:22:43:8a: 1b:86:7c:26:b0:71:43:42:ec:c7:bb:4f:f9:19:af: 48:01:ec:7b:e9:dd:45:97:48:32:c7:53:4a:0a:70: c9:6d:91:8a:e3:cb:17:07:8a:d4:11:34:fc:86:9c: 2e:00:e9:0e:c9:86:62:d8:cd:66:0c:a5:13:ef:35: d1:44:5e:f8:12:ee:f2:4d:5d:45:ab:75:2b:e2:a8: ba:5a:d6:db:fb:f7:6e:e3:24:81:04:10:78:50:fc: cd:76:07:95:70:f4:e3:50:31:2f:3e:90:57:15:ea: 3a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:22:44:1C:51:2C:3B:FD:72:C2:0F:54:7F:A3:CE:0B:03:D9:AC:DB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS59276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.226.232.0/22 Signature Algorithm: sha256WithRSAEncryption a7:f3:8b:02:e4:7c:86:33:a7:92:24:e4:ca:cf:de:17:31:22: 87:b5:85:a5:8e:ab:03:25:19:0c:e6:69:20:6a:a0:e2:12:48: 7d:2e:fe:f9:28:ba:5c:75:84:9a:3b:c1:10:a1:b5:a1:d3:aa: d2:a3:b7:02:fa:56:52:bf:6b:54:bf:67:c6:10:cd:26:ab:62: 89:9a:f7:63:67:88:28:67:d6:78:8a:76:b6:b8:99:3d:5c:b9: d2:0c:77:7d:ad:71:d4:37:06:8b:c1:a6:74:cb:4f:c7:20:db: f8:62:f2:98:e4:b2:a4:4c:2e:6d:3a:e6:91:34:b0:64:cb:fb: ab:e5:83:31:d5:d2:a6:1a:13:dd:34:aa:92:af:99:49:d5:be: 27:98:c5:de:2a:e3:78:30:87:65:41:65:b9:95:bf:39:e4:44: 94:3b:bd:4b:5d:39:e0:27:ca:68:9f:10:d0:e5:1f:c7:0f:7c: 2e:36:70:f8:02:87:22:e9:7c:8e:3c:f0:fb:93:22:8b:64:9b: 12:74:bb:6c:37:1e:58:68:a3:46:cb:7b:36:15:56:09:9c:3f: b2:c7:64:61:2b:15:fd:13:43:9c:65:bc:9e:dd:9b:e2:0b:ee: 5d:96:45:20:3b:bc:d1:0e:06:ec:65:c6:c3:64:0b:6a:a9:4c: 65:c3:61:56 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUKQkyg8mlYc4VpWE/ZXZ8pN71obIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE2MTMzMVoX DTI3MDUwMTE2MTgzMVowMzExMC8GA1UEAxMoQzkyMjQ0MUM1MTJDM0JGRDcyQzIw RjU0N0ZBM0NFMEIwM0Q5QUNEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOkaiEO1SsFTib4tBgxZX74PDaF7besCO708RD7usQOmE59oWl2x2ko7eVT yF9Q3Uh7MTHLHtzFoiTGFszuzLU5psHBrjP2WXj3zMOPC5uDjEkQgpsE1mjASTdm wqAjTIU1apOy7oZHbK5eHDsPrQv4ymXzWlRIRO0D9OXleALV3lhRD5NPSzGAbNGl NWF+Ad8RIkOKG4Z8JrBxQ0Lsx7tP+RmvSAHse+ndRZdIMsdTSgpwyW2RiuPLFweK 1BE0/IacLgDpDsmGYtjNZgylE+810URe+BLu8k1dRat1K+KoulrW2/v3buMkgQQQ eFD8zXYHlXD041AxLz6QVxXqOjsCAwEAAaOCAcswggHHMB0GA1UdDgQWBBTJIkQc USw7/XLCD1R/o84LA9ms2zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTkyNzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJn4ugwDQYJKoZIhvcNAQELBQADggEBAKfziwLkfIYzp5Ik5MrP3hcxIoe1 haWOqwMlGQzmaSBqoOISSH0u/vkoulx1hJo7wRChtaHTqtKjtwL6VlK/a1S/Z8YQ zSarYoma92NniChn1niKdra4mT1cudIMd32tcdQ3BovBpnTLT8cg2/hi8pjksqRM Lm065pE0sGTL+6vlgzHV0qYaE900qpKvmUnVvieYxd4q43gwh2VBZbmVvznkRJQ7 vUtdOeAnymifENDlH8cPfC42cPgChyLpfI488PuTIotkmxJ0u2w3Hlhoo0bLezYV VgmcP7LHZGErFf0TQ5xlvJ7dm+IL7l2WRSA7vNEOBuxlxsNkC2qpTGXDYVY= -----END CERTIFICATE-----Generated at Sun May 3 00:40:30 2026 by rpki-client