$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58485.roa File: AS58485.roa (raw, json) Hash identifier: oqx+thtPRVl0tsxZKJwAGQa87lp7NeasT9bnk6AIkU4= Subject key identifier: 58:4C:AB:8C:8F:A6:E0:05:AE:BD:00:CD:1D:D6:D2:BD:2B:6D:96:40 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7FA8A027D675255CC9DCC8B2D1AFDC072EB34618 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58485.roa Signing time: Thu 09 Apr 2026 07:00:00 +0000 ROA not before: Thu 09 Apr 2026 06:55:00 +0000 ROA not after: Thu 08 Apr 2027 07:00:00 +0000 asID: 58485 IP address blocks: 103.247.20.0/24 maxlen: 24 103.247.21.0/24 maxlen: 24 103.247.22.0/24 maxlen: 24 103.247.23.0/24 maxlen: 24 2402:e100::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a8:a0:27:d6:75:25:5c:c9:dc:c8:b2:d1:af:dc:07:2e:b3:46:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 9 06:55:00 2026 GMT Not After : Apr 8 07:00:00 2027 GMT Subject: CN=584CAB8C8FA6E005AEBD00CD1DD6D2BD2B6D9640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:6c:8e:d4:be:84:57:1f:80:e7:bc:7d:ed: 23:80:01:26:8b:5c:68:13:be:ad:14:2f:3f:0b:b2: 1f:de:56:98:39:71:45:66:be:7c:ff:b0:70:a1:fd: 09:b8:7f:d8:b2:b1:22:8b:0d:1b:97:98:7c:ee:52: dc:f6:da:16:de:95:7a:87:46:58:95:85:3e:76:db: fd:fc:1d:d5:27:58:c9:31:d7:73:2e:11:6e:b5:3d: df:9b:c4:ab:26:c6:96:ce:bf:a4:dd:06:50:d9:53: 0a:f5:cc:35:3d:2a:6a:1b:8f:df:63:8d:c9:0b:e9: 9b:9a:fc:72:ee:2b:05:ea:f0:51:d8:b8:8e:13:b5: 3a:d2:d7:b1:b0:e4:d8:8a:cc:db:ff:57:15:78:98: c0:e9:82:a2:54:2f:01:9e:1d:15:e6:be:2b:4e:b0: 3b:85:63:27:1b:f0:ee:46:ca:41:32:7a:b6:75:1a: f6:ad:f4:93:8f:f6:51:5b:8a:3b:62:12:d5:ab:0a: 02:6a:e6:0d:71:c6:59:fd:a0:3c:e8:d1:e6:71:60: 46:33:bd:8c:42:c9:41:a4:97:a3:0b:c2:ea:f6:83: aa:3a:c8:fc:b6:87:67:1d:54:6c:f1:e3:9d:e1:21: 80:92:73:5a:c0:34:f4:b5:2f:7e:be:a5:22:1f:35: 26:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4C:AB:8C:8F:A6:E0:05:AE:BD:00:CD:1D:D6:D2:BD:2B:6D:96:40 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58485.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.20.0/22 IPv6: 2402:e100::/32 Signature Algorithm: sha256WithRSAEncryption 36:27:95:f8:5f:e6:8b:2d:53:4f:ad:de:b5:e2:12:bd:71:27: 16:d3:2e:0e:b6:61:f3:bb:bc:c3:9d:0c:aa:f8:27:76:a2:6b: 81:7b:d4:34:48:25:28:ea:c7:ed:4b:7e:15:ca:01:84:bd:f9: b6:79:d7:ff:43:16:b6:99:70:ef:a5:72:36:9c:f8:9e:5b:37: 8a:ae:56:7d:72:c5:d2:89:f0:74:ea:16:bb:a6:1b:fb:18:df: 48:bb:58:43:8c:c9:fd:ea:e1:a7:18:4f:68:9c:e1:63:75:67: 30:6c:e4:97:5b:3c:fb:73:3e:12:c5:19:f8:25:f1:9f:93:b5: 25:36:9a:c9:41:c1:d9:59:45:72:38:66:05:68:60:e4:d8:2b: 80:1b:a6:87:ad:1c:66:83:c7:f7:fb:7f:0c:15:95:a1:0e:c8: 56:17:02:e7:41:00:70:a4:e9:bf:3a:db:5b:cc:dd:aa:12:71: 41:ee:79:9d:89:3e:30:12:65:0e:96:a1:da:c7:14:fe:b6:1d: c9:70:11:2a:bc:13:96:a0:e7:a6:50:64:c2:e2:bf:2c:ec:c4: 00:c4:b7:8b:d6:3d:5a:4f:27:e8:aa:70:f9:fb:e2:7f:ea:ea: 05:31:87:80:82:22:95:3d:ca:9b:e9:58:75:5b:ee:07:c8:42: 06:d8:18:5a -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUf6igJ9Z1JVzJ3Miy0a/cBy6zRhgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwOTA2NTUwMFoX DTI3MDQwODA3MDAwMFowMzExMC8GA1UEAxMoNTg0Q0FCOEM4RkE2RTAwNUFFQkQw MENEMURENkQyQkQyQjZEOTY0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALP9bI7UvoRXH4DnvH3tI4ABJotcaBO+rRQvPwuyH95WmDlxRWa+fP+wcKH9 Cbh/2LKxIosNG5eYfO5S3PbaFt6VeodGWJWFPnbb/fwd1SdYyTHXcy4RbrU935vE qybGls6/pN0GUNlTCvXMNT0qahuP32ONyQvpm5r8cu4rBerwUdi4jhO1OtLXsbDk 2IrM2/9XFXiYwOmColQvAZ4dFea+K06wO4VjJxvw7kbKQTJ6tnUa9q30k4/2UVuK O2IS1asKAmrmDXHGWf2gPOjR5nFgRjO9jELJQaSXowvC6vaDqjrI/LaHZx1UbPHj neEhgJJzWsA09LUvfr6lIh81JiMCAwEAAaOCAd4wggHaMB0GA1UdDgQWBBRYTKuM j6bgBa69AM0d1tK9K22WQDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU4NDg1LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ/cUMA0EAgACMAcDBQAkAuEAMA0GCSqGSIb3DQEBCwUAA4IBAQA2 J5X4X+aLLVNPrd614hK9cScW0y4OtmHzu7zDnQyq+Cd2omuBe9Q0SCUo6sftS34V ygGEvfm2edf/Qxa2mXDvpXI2nPieWzeKrlZ9csXSifB06ha7phv7GN9Iu1hDjMn9 6uGnGE9onOFjdWcwbOSXWzz7cz4SxRn4JfGfk7UlNprJQcHZWUVyOGYFaGDk2CuA G6aHrRxmg8f3+38MFZWhDshWFwLnQQBwpOm/OttbzN2qEnFB7nmdiT4wEmUOlqHa xxT+th3JcBEqvBOWoOemUGTC4r8s7MQAxLeL1j1aTyfoqnD5++J/6uoFMYeAgiKV Pcqb6Vh1W+4HyEIG2Bha -----END CERTIFICATE-----Generated at Fri Apr 17 11:11:09 2026 by rpki-client