$ rpki-client -vvf rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/3130332e32392e3231322e302f32322d3234203d3e203538333737.roa File: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (raw, json) Hash identifier: nSsVilLmRiJa0+a7BBDxlGj708JBl0xDsJ3rq/l4Ock= Subject key identifier: 1C:B0:31:67:5D:5D:56:C6:30:CC:FE:8E:48:BE:D6:B1:B8:F5:A2:B9 Certificate issuer: /CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Certificate serial: 2BF16C9A8F1BECFD4F2A8CCFF80FDF9E22E33B9F Authority key identifier: 1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/3130332e32392e3231322e302f32322d3234203d3e203538333737.roa Signing time: Sun 03 May 2026 02:10:40 +0000 ROA not before: Sun 03 May 2026 02:05:40 +0000 ROA not after: Sun 02 May 2027 02:10:40 +0000 asID: 58377 IP address blocks: 103.29.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f1:6c:9a:8f:1b:ec:fd:4f:2a:8c:cf:f8:0f:df:9e:22:e3:3b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Validity Not Before: May 3 02:05:40 2026 GMT Not After : May 2 02:10:40 2027 GMT Subject: CN=1CB031675D5D56C630CCFE8E48BED6B1B8F5A2B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f4:aa:ad:f3:fc:c4:44:fc:95:41:85:95:9f: 4e:86:1e:ce:b7:d1:55:51:00:69:e9:66:3c:be:d6: e1:20:bf:f6:eb:f9:d9:7e:4b:a6:0b:44:ac:7e:9c: b8:c0:e2:bb:5f:03:ec:46:04:a6:3d:af:1a:57:07: cb:83:17:3b:63:e9:a0:b4:02:00:bf:b0:d0:b1:2b: bf:2b:76:bb:e1:37:ee:7f:0c:a9:05:2b:b2:6a:c4: 05:a6:30:97:a7:2d:7d:f8:f7:e1:d2:85:4c:f4:b3: c0:d1:97:cb:53:18:be:20:7d:5e:73:25:ef:24:4a: 06:cf:27:95:a6:47:64:42:37:31:65:cc:5f:d5:27: bd:a3:ca:fb:f2:30:81:cb:fc:38:9e:31:c8:b8:df: e3:9d:63:41:96:ce:21:33:c5:a2:2e:0f:4e:cb:08: 7b:96:69:27:6a:ff:48:21:9f:e1:e4:8c:e7:88:82: b0:e7:97:75:17:b2:59:86:79:09:f0:45:a9:d6:3d: 80:d1:bc:bb:0e:06:70:6b:73:63:35:d3:fb:9f:21: d7:b2:55:b6:2d:63:ae:83:99:81:fc:33:49:88:4b: 5e:dd:2d:0f:65:38:e8:76:95:4d:a4:ce:01:5c:ed: 52:4d:48:0a:d0:c1:e7:a9:ca:d0:28:77:82:3c:63: c6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B0:31:67:5D:5D:56:C6:30:CC:FE:8E:48:BE:D6:B1:B8:F5:A2:B9 X509v3 Authority Key Identifier: keyid:1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/3130332e32392e3231322e302f32322d3234203d3e203538333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.212.0/22 Signature Algorithm: sha256WithRSAEncryption 30:9e:96:57:b5:26:ed:67:cc:d2:70:ea:1c:cb:42:8a:49:a6: a6:5c:8a:c8:6b:50:f8:e5:1d:da:0d:84:69:b5:b8:e6:fe:b4: 75:b8:b9:c6:bb:7f:46:65:56:5c:74:fd:f4:52:d6:99:45:39: 4c:c0:30:7a:af:70:c6:41:fd:77:8c:a8:9c:e2:28:b6:a7:f5: 8a:9a:c8:8c:db:0b:36:ed:f9:f6:53:68:48:74:fb:47:d1:33: 09:a0:d7:a9:ca:e2:bc:3d:c9:48:40:27:0a:26:55:2f:65:57: 5d:36:99:bc:db:b8:7c:88:0e:16:0b:a3:65:26:60:ee:60:ba: 05:97:cc:bc:6a:58:fe:86:fc:90:69:e5:e4:36:86:19:f1:c5: 90:f2:ed:32:36:b6:4f:2a:2c:f8:3a:e1:9d:7a:5b:5d:3d:9c: 7f:a5:e4:8b:00:b4:dc:65:d9:a8:50:5b:ee:e7:47:fb:f1:7e: b9:91:82:9b:ae:42:b1:e2:17:88:ae:34:52:58:b6:ac:b4:54: 9d:89:e3:2f:ad:d0:6b:58:67:63:26:2e:16:ea:ab:71:06:e2: f5:d1:6e:6a:27:e4:48:9a:0a:e9:41:f7:5d:66:85:87:cd:4b: 88:09:82:60:4c:11:f4:ef:2d:ea:6d:b2:7c:5e:98:62:a8:ea: dc:f6:c5:aa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUK/Fsmo8b7P1PKozP+A/fniLjO58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhD MTA0NTFGQTAeFw0yNjA1MDMwMjA1NDBaFw0yNzA1MDIwMjEwNDBaMDMxMTAvBgNV BAMTKDFDQjAzMTY3NUQ1RDU2QzYzMENDRkU4RTQ4QkVENkIxQjhGNUEyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe9Kqt8/zERPyVQYWVn06GHs63 0VVRAGnpZjy+1uEgv/br+dl+S6YLRKx+nLjA4rtfA+xGBKY9rxpXB8uDFztj6aC0 AgC/sNCxK78rdrvhN+5/DKkFK7JqxAWmMJenLX349+HShUz0s8DRl8tTGL4gfV5z Je8kSgbPJ5WmR2RCNzFlzF/VJ72jyvvyMIHL/DieMci43+OdY0GWziEzxaIuD07L CHuWaSdq/0ghn+HkjOeIgrDnl3UXslmGeQnwRanWPYDRvLsOBnBrc2M10/ufIdey VbYtY66DmYH8M0mIS17dLQ9lOOh2lU2kzgFc7VJNSArQweepytAod4I8Y8YpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUHLAxZ11dVsYwzP6OSL7Wsbj1orkwHwYDVR0j BBgwFoAUHUVzJchfP+4t5X/T7SUm2MEEUfowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQwMWIyZDEtMDFjYS00MGU4LWJmNzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVD ODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhDMTA0NTFGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDQ1NzMyNUM4NUYzRkVFMkRFNTdGRDNFRDI1MjZEOEMxMDQ1 MUZBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0MDFiMmQxLTAxY2EtNDBlOC1i Zjc3LTk4NjE1OTg2N2EwNC8wLzMxMzAzMzJlMzIzOTJlMzIzMTMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzUzODMzMzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcd1DANBgkqhkiG 9w0BAQsFAAOCAQEAMJ6WV7Um7WfM0nDqHMtCikmmplyKyGtQ+OUd2g2EabW45v60 dbi5xrt/RmVWXHT99FLWmUU5TMAweq9wxkH9d4yonOIotqf1iprIjNsLNu359lNo SHT7R9EzCaDXqcrivD3JSEAnCiZVL2VXXTaZvNu4fIgOFgujZSZg7mC6BZfMvGpY /ob8kGnl5DaGGfHFkPLtMja2Tyos+DrhnXpbXT2cf6XkiwC03GXZqFBb7udH+/F+ uZGCm65CseIXiK40Uli2rLRUnYnjL63Qa1hnYyYuFuqrcQbi9dFuaifkSJoK6UH3 XWaFh81LiAmCYEwR9O8t6m2yfF6YYqjq3PbFqg== -----END CERTIFICATE-----Generated at Wed May 13 04:47:59 2026 by rpki-client