$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58816.roa File: AS58816.roa (raw, json) Hash identifier: gFdFO2+BnYzSws8BtwTzxQD6M7jji20y62ScsbPHPq4= Subject key identifier: AC:B3:EB:E0:48:78:E7:A9:18:8E:8F:34:16:3B:92:42:C6:47:2E:BF Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1622C474A494D18FC466DE93BF726E5F989EAB45 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58816.roa Signing time: Tue 01 Apr 2025 03:00:00 +0000 ROA not before: Tue 01 Apr 2025 02:55:00 +0000 ROA not after: Tue 31 Mar 2026 03:00:00 +0000 asID: 58816 IP address blocks: 124.158.134.0/23 maxlen: 24 124.158.142.0/23 maxlen: 24 202.181.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:22:c4:74:a4:94:d1:8f:c4:66:de:93:bf:72:6e:5f:98:9e:ab:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 1 02:55:00 2025 GMT Not After : Mar 31 03:00:00 2026 GMT Subject: CN=ACB3EBE04878E7A9188E8F34163B9242C6472EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:df:ad:45:68:b8:ff:80:f1:26:3d:ee:7b: e1:3b:b6:22:5c:42:2e:6e:5e:1d:79:2b:fc:64:da: f2:ed:58:f4:1b:de:02:a1:b3:69:78:99:b9:86:24: d6:5c:59:fb:89:6d:a7:a8:04:6f:a5:d0:56:03:15: d6:19:de:f6:f0:03:ef:3c:a4:48:26:99:ff:88:9b: f5:19:16:1a:c9:e8:ad:e2:ee:13:bd:c0:0e:69:3e: f5:46:9c:4c:4e:e9:46:68:64:27:6f:3b:d0:32:99: 2e:13:2c:eb:8b:bd:3a:95:ff:c4:9a:6d:dd:a0:a7: 2e:24:2c:18:cc:0d:ad:15:86:20:e1:34:97:28:2f: 8b:c3:44:88:d8:65:a6:53:d9:3c:ba:75:88:bb:b0: 01:f5:c0:08:98:9c:3e:44:5b:f5:16:c8:54:90:03: d4:16:01:83:f7:64:ff:01:58:a8:56:a7:d1:d8:91: c0:e8:e6:7e:09:59:84:57:00:2b:fc:65:cc:67:ad: 3a:49:d3:d1:64:5e:5f:45:b4:d3:9d:65:7d:c9:14: 87:35:65:32:53:65:c6:33:ff:5a:87:aa:33:bf:84: ca:96:8d:89:22:a6:3c:8d:c6:4d:a6:1c:9d:30:aa: 53:00:46:7e:33:c5:a4:73:1c:de:de:d2:c5:15:40: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B3:EB:E0:48:78:E7:A9:18:8E:8F:34:16:3B:92:42:C6:47:2E:BF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.158.134.0/23 124.158.142.0/23 202.181.80.0/21 Signature Algorithm: sha256WithRSAEncryption 15:c0:c1:e1:e7:b5:6c:ac:33:81:9c:c1:e9:94:7d:37:2c:a0: 6c:4c:42:1d:b0:0c:4d:55:e9:e5:a0:8b:43:fe:3c:ab:21:7a: 38:9f:b6:40:fb:74:f9:37:0e:0c:49:2b:05:05:48:6b:12:76: 8f:07:a6:fa:a0:66:61:89:92:8e:8f:54:b6:ea:0c:3d:60:78: 23:e7:d4:de:3b:85:91:6a:8e:c5:52:4e:b3:4f:24:b6:4d:8d: 2b:02:7b:74:cc:f4:67:55:ec:53:f3:77:87:9a:2a:c3:b8:e9: f1:b3:59:2e:94:0a:02:56:f2:18:74:8b:79:3e:0c:e7:03:f5: d4:37:44:77:e9:47:e0:a4:7a:19:e6:f3:d7:03:81:4e:a8:4e: 4c:eb:98:9b:65:b9:13:55:f6:00:fd:59:eb:25:b2:2a:15:19: 80:29:2a:47:5a:5f:dc:39:32:f1:85:2c:fd:cb:27:39:dc:e5: 05:0c:7b:9e:d5:2b:af:b2:4a:44:a1:8d:e4:c1:ca:a9:b9:64: 86:72:8b:2c:4c:d2:03:9d:1c:7b:4a:a2:3a:fb:bb:34:0d:6b: 90:ae:19:95:48:79:e3:19:a4:45:54:4b:56:6a:0f:7c:63:1a: 9c:8e:5f:87:23:1f:2a:3d:35:b1:48:67:85:57:2d:53:1b:a4: ce:f3:6f:11 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUFiLEdKSU0Y/EZt6Tv3JuX5ieq0UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQwMTAyNTUwMFoX DTI2MDMzMTAzMDAwMFowMzExMC8GA1UEAxMoQUNCM0VCRTA0ODc4RTdBOTE4OEU4 RjM0MTYzQjkyNDJDNjQ3MkVCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9n361FaLj/gPEmPe574Tu2IlxCLm5eHXkr/GTa8u1Y9BveAqGzaXiZuYYk 1lxZ+4ltp6gEb6XQVgMV1hne9vAD7zykSCaZ/4ib9RkWGsnoreLuE73ADmk+9Uac TE7pRmhkJ2870DKZLhMs64u9OpX/xJpt3aCnLiQsGMwNrRWGIOE0lygvi8NEiNhl plPZPLp1iLuwAfXACJicPkRb9RbIVJAD1BYBg/dk/wFYqFan0diRwOjmfglZhFcA K/xlzGetOknT0WReX0W0051lfckUhzVlMlNlxjP/WoeqM7+EypaNiSKmPI3GTaYc nTCqUwBGfjPFpHMc3t7SxRVAaF8CAwEAAaOCAdswggHXMB0GA1UdDgQWBBSss+vg SHjnqRiOjzQWO5JCxkcuvzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU4ODE2LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBfJ6GAwQBfJ6OAwQDyrVQMA0GCSqGSIb3DQEBCwUAA4IBAQAVwMHh 57VsrDOBnMHplH03LKBsTEIdsAxNVenloItD/jyrIXo4n7ZA+3T5Nw4MSSsFBUhr EnaPB6b6oGZhiZKOj1S26gw9YHgj59TeO4WRao7FUk6zTyS2TY0rAnt0zPRnVexT 83eHmirDuOnxs1kulAoCVvIYdIt5PgznA/XUN0R36UfgpHoZ5vPXA4FOqE5M65ib ZbkTVfYA/VnrJbIqFRmAKSpHWl/cOTLxhSz9yyc53OUFDHue1SuvskpEoY3kwcqp uWSGcossTNIDnRx7SqI6+7s0DWuQrhmVSHnjGaRFVEtWag98Yxqcjl+HIx8qPTWx SGeFVy1TG6TO828R -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:35 2025 by rpki-client