$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS59282.roa File: AS59282.roa (raw, json) Hash identifier: KSx2Y+dlHC4xFPC9d5ZdoIO70VywBv/8uPY7QA70yd4= Subject key identifier: 18:25:33:AD:C8:5D:5B:45:0A:53:B8:57:10:64:73:9D:67:57:DF:F4 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6EA2EB7BC9D6E6D6DC5598D551DFEA941949A148 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS59282.roa Signing time: Sat 02 May 2026 21:19:01 +0000 ROA not before: Sat 02 May 2026 21:14:01 +0000 ROA not after: Sat 01 May 2027 21:19:01 +0000 asID: 59282 IP address blocks: 103.254.104.0/22 maxlen: 24 202.74.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a2:eb:7b:c9:d6:e6:d6:dc:55:98:d5:51:df:ea:94:19:49:a1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:14:01 2026 GMT Not After : May 1 21:19:01 2027 GMT Subject: CN=182533ADC85D5B450A53B8571064739D6757DFF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:68:eb:33:40:75:63:d9:5f:12:e2:ab:65: b0:25:b8:bc:5c:ad:2c:7b:78:34:ff:8a:35:ad:a3: 67:59:99:30:8d:73:fa:ca:39:e0:63:fc:c6:91:70: 15:a4:30:5d:37:1c:2a:0f:d8:19:6d:ab:e0:d1:23: dc:9b:b3:f7:ea:44:0f:b0:f6:17:67:79:bd:cd:3a: 81:93:60:03:49:92:5a:79:ec:d4:2f:dd:03:8f:06: 72:c9:a4:4e:1b:a7:6d:a9:d2:18:ac:55:f3:fa:a9: 40:20:6f:2d:c4:ac:28:32:2a:bb:20:24:ea:2a:ea: 27:d6:31:c1:ab:a0:ae:c8:63:24:56:0a:f6:19:98: 3d:a5:53:49:be:5f:76:17:94:6e:91:ed:b3:65:05: 23:d3:d7:57:68:ef:b3:d8:35:07:08:1b:91:55:00: 17:7f:c1:7e:66:96:fd:2f:f5:e6:aa:09:7a:20:79: 28:38:13:6b:de:59:74:92:26:76:cd:34:7f:13:f7: b3:ce:22:87:1a:dc:0e:cd:2a:b8:a0:70:4e:08:36: 7a:08:34:4e:4f:6e:14:06:4c:3e:63:7d:51:3d:08: 93:27:eb:d0:a1:ec:80:77:d6:fe:1d:6c:1f:8c:17: 2c:aa:46:0c:7a:32:40:84:e8:14:be:fc:c1:5a:9a: c3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:25:33:AD:C8:5D:5B:45:0A:53:B8:57:10:64:73:9D:67:57:DF:F4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS59282.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.254.104.0/22 202.74.76.0/22 Signature Algorithm: sha256WithRSAEncryption 67:bf:49:56:cf:be:bb:7a:95:83:d1:d1:6b:9c:fd:d3:a5:c6: 31:32:b9:d6:bf:03:6a:49:20:f6:dc:65:e1:12:1e:de:4e:c9: b7:73:eb:69:d1:bc:b1:bd:40:a8:ed:d5:46:cf:20:52:85:d2: 76:a9:c2:5c:81:26:eb:ce:1e:c2:f5:98:d4:d0:0f:9a:f2:44: 22:9d:b6:2a:7d:d8:3f:e8:d7:32:6f:39:72:50:36:91:db:da: c0:94:9b:4c:70:68:c4:95:1b:54:9d:cf:db:26:dc:bb:24:39: 4b:ee:9b:19:ca:8b:ef:21:ff:e0:3b:03:27:18:08:aa:a1:16: 95:73:e7:54:86:e1:a9:2f:9c:cb:b0:c0:1f:4a:29:1a:6c:13: 8e:e6:e6:c5:ef:00:dd:8b:be:05:eb:92:63:f0:91:98:2f:4d: ee:70:0c:92:22:8f:f0:f0:93:b2:41:00:5c:a7:bc:98:54:bb: f8:4b:b9:59:3a:10:50:3b:15:78:43:eb:02:08:ef:38:1c:ba: f7:7d:79:36:8a:47:e8:ce:ee:1d:87:b4:08:3f:d0:ef:9c:09: f3:6d:36:10:1f:cc:39:0c:19:d5:43:1a:33:ab:03:6a:1a:d9: e2:41:b5:75:ee:2e:bf:2a:d7:74:41:12:8c:a7:b2:ec:c8:0b: 5a:89:82:88 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUbqLre8nW5tbcVZjVUd/qlBlJoUgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTQwMVoX DTI3MDUwMTIxMTkwMVowMzExMC8GA1UEAxMoMTgyNTMzQURDODVENUI0NTBBNTNC ODU3MTA2NDczOUQ2NzU3REZGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANDxaOszQHVj2V8S4qtlsCW4vFytLHt4NP+KNa2jZ1mZMI1z+so54GP8xpFw FaQwXTccKg/YGW2r4NEj3Juz9+pED7D2F2d5vc06gZNgA0mSWnns1C/dA48Gcsmk ThunbanSGKxV8/qpQCBvLcSsKDIquyAk6irqJ9YxwaugrshjJFYK9hmYPaVTSb5f dheUbpHts2UFI9PXV2jvs9g1BwgbkVUAF3/BfmaW/S/15qoJeiB5KDgTa95ZdJIm ds00fxP3s84ihxrcDs0quKBwTgg2egg0Tk9uFAZMPmN9UT0Ikyfr0KHsgHfW/h1s H4wXLKpGDHoyQIToFL78wVqawzECAwEAAaOCAdEwggHNMB0GA1UdDgQWBBQYJTOt yF1bRQpTuFcQZHOdZ1ff9DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTkyODIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB MAwDBAJn/mgDBALKSkwwDQYJKoZIhvcNAQELBQADggEBAGe/SVbPvrt6lYPR0Wuc /dOlxjEyuda/A2pJIPbcZeESHt5Oybdz62nRvLG9QKjt1UbPIFKF0napwlyBJuvO HsL1mNTQD5ryRCKdtip92D/o1zJvOXJQNpHb2sCUm0xwaMSVG1Sdz9sm3LskOUvu mxnKi+8h/+A7AycYCKqhFpVz51SG4akvnMuwwB9KKRpsE47m5sXvAN2LvgXrkmPw kZgvTe5wDJIij/Dwk7JBAFynvJhUu/hLuVk6EFA7FXhD6wII7zgcuvd9eTaKR+jO 7h2HtAg/0O+cCfNtNhAfzDkMGdVDGjOrA2oa2eJBtXXuLr8q13RBEoynsuzIC1qJ gog= -----END CERTIFICATE-----Generated at Sun May 3 01:40:57 2026 by rpki-client