$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS58816.roa File: AS58816.roa (raw, json) Hash identifier: 2HJZQjPPqL4P6+5AZkMmgcWc7sF7y/8ZO5IJxq4NJxQ= Subject key identifier: E0:4C:34:76:5B:6C:6C:4B:08:94:67:25:A9:6B:32:C9:FB:30:E5:2F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1416A226D4CA2E5ABDC7156D71763E0069ED90C4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58816.roa Signing time: Wed 09 Sep 2026 04:37:35 +0000 ROA not before: Wed 09 Sep 2026 04:32:35 +0000 ROA not after: Wed 08 Sep 2027 04:37:35 +0000 asID: 58816 IP address blocks: 124.158.133.0/24 maxlen: 24 124.158.134.0/23 maxlen: 24 124.158.142.0/23 maxlen: 24 202.181.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:16:a2:26:d4:ca:2e:5a:bd:c7:15:6d:71:76:3e:00:69:ed:90:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 9 04:32:35 2026 GMT Not After : Sep 8 04:37:35 2027 GMT Subject: CN=E04C34765B6C6C4B08946725A96B32C9FB30E52F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:04:b6:d7:44:c8:8a:de:58:d2:07:3d:c3:73: d6:03:08:50:44:1f:78:4d:50:d6:e4:1a:d9:0d:da: 8c:28:ba:5b:eb:54:2f:44:00:f4:30:da:66:e0:d4: cb:43:9d:b7:fd:df:b4:9d:ed:d1:65:f0:72:47:f0: 22:72:70:fa:97:70:f3:f8:6f:c0:cb:af:3b:89:3d: 0d:08:6c:d9:85:e4:11:e2:20:0b:22:3a:53:56:00: 49:c5:7a:9e:b8:df:79:8a:d3:4a:0e:0d:48:ba:45: b1:cb:b9:d8:ca:b3:7c:22:cb:50:9c:18:29:8f:b9: 4b:f3:07:59:32:7b:df:48:3d:8d:90:c2:40:10:53: 41:6b:e0:f6:f0:52:42:39:2f:63:59:3a:c1:e6:e0: c5:5c:11:a3:e3:8c:96:e8:80:99:c6:a8:39:a6:ea: c3:62:77:7c:69:a3:e6:b5:3e:d1:d7:fc:d5:6d:69: d0:f7:a7:1d:23:3f:b6:d1:3e:47:c9:a4:45:12:1d: 63:38:8a:a0:a2:86:35:45:5a:d7:ab:14:51:9f:81: 4a:58:25:98:68:8c:28:fa:cf:d3:5a:f8:a5:f1:71: 15:f9:bf:f8:8b:c3:33:42:ac:65:10:67:11:f2:48: d6:5f:e8:3e:75:73:7d:28:99:04:91:52:95:73:3f: ae:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4C:34:76:5B:6C:6C:4B:08:94:67:25:A9:6B:32:C9:FB:30:E5:2F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.158.133.0-124.158.135.255 124.158.142.0/23 202.181.80.0/21 Signature Algorithm: sha256WithRSAEncryption 98:42:bf:20:ed:03:42:5b:45:fd:54:ef:b5:0b:17:b4:a2:63: 75:63:be:81:85:b8:d6:0a:29:ae:47:34:17:fc:c8:e5:e6:88: ba:6a:3a:e2:1f:a6:05:e0:db:52:42:51:ab:64:c2:5b:56:7f: 4d:b0:ca:f5:7d:45:80:36:5d:42:ff:00:d6:18:e3:32:cc:bc: 6a:51:51:f4:89:b6:3c:16:be:e3:a6:83:7b:80:aa:7c:18:a0: 9b:86:7c:0a:77:25:1a:ee:8a:21:87:33:d0:16:84:5e:06:c3: 53:cb:94:ae:6f:55:fe:fb:f2:13:14:fc:2c:85:45:5e:eb:01: 6c:55:33:68:0c:d3:78:cb:2e:b0:1e:e8:50:6c:55:64:de:02: 49:d4:88:06:7f:d8:fb:f7:62:db:75:73:c5:59:fb:a4:e6:75: dd:14:44:84:60:cf:7c:23:49:97:23:56:f9:60:88:61:1e:1c: 7b:bf:f9:cd:cf:04:96:7c:dd:b9:74:68:96:5e:e1:0c:f3:86: ca:dc:0b:29:20:98:ef:a7:de:d8:d0:db:2d:5d:f9:7e:da:a3: 40:85:45:7b:10:a4:f8:49:8f:a4:32:c9:10:c2:40:ad:f5:b3: f1:e6:95:be:a8:01:b6:75:09:a1:5e:89:4a:60:07:b8:0a:01: df:b8:a6:94 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUFBaiJtTKLlq9xxVtcXY+AGntkMQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkwOTA0MzIzNVoX DTI3MDkwODA0MzczNVowMzExMC8GA1UEAxMoRTA0QzM0NzY1QjZDNkM0QjA4OTQ2 NzI1QTk2QjMyQzlGQjMwRTUyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEEttdEyIreWNIHPcNz1gMIUEQfeE1Q1uQa2Q3ajCi6W+tUL0QA9DDaZuDU y0Odt/3ftJ3t0WXwckfwInJw+pdw8/hvwMuvO4k9DQhs2YXkEeIgCyI6U1YAScV6 nrjfeYrTSg4NSLpFscu52MqzfCLLUJwYKY+5S/MHWTJ730g9jZDCQBBTQWvg9vBS QjkvY1k6webgxVwRo+OMluiAmcaoOabqw2J3fGmj5rU+0df81W1p0PenHSM/ttE+ R8mkRRIdYziKoKKGNUVa16sUUZ+BSlglmGiMKPrP01r4pfFxFfm/+IvDM0KsZRBn EfJI1l/oPnVzfSiZBJFSlXM/rhcCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBTgTDR2 W2xsSwiUZyWpazLJ+zDlLzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTg4MTYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgAB MBowDAMEAHyehQMEA3yegAMEAXyejgMEA8q1UDANBgkqhkiG9w0BAQsFAAOCAQEA mEK/IO0DQltF/VTvtQsXtKJjdWO+gYW41goprkc0F/zI5eaIumo64h+mBeDbUkJR q2TCW1Z/TbDK9X1FgDZdQv8A1hjjMsy8alFR9Im2PBa+46aDe4CqfBigm4Z8Cncl Gu6KIYcz0BaEXgbDU8uUrm9V/vvyExT8LIVFXusBbFUzaAzTeMsusB7oUGxVZN4C SdSIBn/Y+/di23VzxVn7pOZ13RREhGDPfCNJlyNW+WCIYR4ce7/5zc8ElnzduXRo ll7hDPOGytwLKSCY76fe2NDbLV35ftqjQIVFexCk+EmPpDLJEMJArfWz8eaVvqgB tnUJoV6JSmAHuAoB37imlA== -----END CERTIFICATE-----Generated at Mon Sep 21 12:11:29 2026 by rpki-client