$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa File: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (raw, json) Hash identifier: m7Frx9lSqsLf1s8zbJ/qpER1sGLgEtc9hyQy6nCFDhY= Subject key identifier: AD:0F:18:06:6E:E5:CA:B0:F0:D0:B7:64:31:55:9A:0E:D4:48:FB:F4 Certificate issuer: /CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Certificate serial: 5CBAD7850E6AF174D3B757A5B19DD3A58D47F413 Authority key identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa Signing time: Sun 03 May 2026 02:13:01 +0000 ROA not before: Sun 03 May 2026 02:08:01 +0000 ROA not after: Sun 02 May 2027 02:13:01 +0000 asID: 135636 IP address blocks: 103.125.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ba:d7:85:0e:6a:f1:74:d3:b7:57:a5:b1:9d:d3:a5:8d:47:f4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Validity Not Before: May 3 02:08:01 2026 GMT Not After : May 2 02:13:01 2027 GMT Subject: CN=AD0F18066EE5CAB0F0D0B76431559A0ED448FBF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:59:ef:08:9c:d5:37:7e:39:ad:e9:bb:62: 82:9f:0e:43:ef:d9:fd:54:b3:d8:98:5c:25:dc:75: a7:2a:62:91:6d:ff:0a:14:5a:ef:99:17:27:42:26: b1:87:e5:77:a9:a6:42:54:78:f6:9a:28:24:e9:9a: 28:fe:64:c7:1d:02:74:f4:fd:ef:82:07:f7:70:c5: 80:cd:9a:b9:bc:1b:14:d8:f1:cb:f4:ca:ff:a9:48: 03:5c:87:33:a0:ec:c4:68:70:87:e7:65:ff:c9:75: 76:a1:7b:31:d2:f1:1a:93:32:66:11:df:aa:cd:90: b9:69:9a:9c:b4:eb:0c:b0:4e:5f:f4:f9:e8:99:2a: 88:63:b2:22:69:21:44:da:74:e9:51:4e:e6:f3:4a: d8:33:99:4e:c0:94:aa:81:51:a2:03:ee:d0:cf:31: 6c:34:97:d0:18:94:4d:9a:1b:e8:dc:c7:0c:54:c5: 41:7f:60:c3:d7:48:92:42:d9:7b:ff:f6:48:05:54: 29:8e:8b:f2:9c:d2:96:95:51:ab:5d:1a:5e:56:93: 6f:d6:1c:d3:f9:be:6e:0d:46:ec:85:45:da:7e:ce: c1:85:51:c5:3d:bc:23:28:72:1b:7d:57:cb:96:48: 38:8b:c9:e1:32:3c:b0:e4:71:7d:de:f7:ec:eb:66: 00:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0F:18:06:6E:E5:CA:B0:F0:D0:B7:64:31:55:9A:0E:D4:48:FB:F4 X509v3 Authority Key Identifier: keyid:A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.14.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:49:e9:03:a3:0e:dc:c3:0c:5f:79:99:a0:33:a0:b4:9d:91: 14:72:e6:2f:59:97:4d:39:ae:23:1c:1a:a1:e2:47:01:10:bb: c2:f7:0d:8b:16:9f:a2:13:7d:51:15:3f:29:7a:ed:19:f1:ff: 42:17:e9:7c:d8:f4:58:f6:32:19:78:b3:7d:b0:67:b8:67:7a: 2a:26:51:d6:51:2d:35:52:16:e7:f2:18:00:48:ac:99:a5:d5: cc:de:bb:fb:bb:22:7c:c2:0f:69:57:e9:7a:31:53:1d:93:1b: ee:d0:d1:2a:d7:bd:22:f3:cc:90:8e:00:e5:2c:64:04:16:c6: 6c:d4:ff:64:82:77:d7:6f:a1:44:e9:4d:54:fb:c5:8d:fd:f9: ee:21:82:a0:85:e1:54:f6:9c:69:1d:25:38:58:43:8b:af:28: 8f:2b:53:19:2b:28:ce:ce:9b:aa:02:d0:b2:69:de:4e:60:e4: 93:c4:6f:4d:55:29:5e:37:05:0a:95:f4:b5:87:43:19:4f:dc: ff:4e:08:88:33:e8:36:c9:db:0d:ea:b9:9a:47:4a:f9:af:25: 8a:de:c8:c1:48:45:fb:2d:51:e8:31:1a:3d:e2:8b:04:2b:f9: f4:7f:20:41:61:4d:88:4a:f6:62:ce:c4:48:84:5d:22:55:41: 40:6e:56:d3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXLrXhQ5q8XTTt1elsZ3TpY1H9BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5QzVF MjJBQjgwMDAeFw0yNjA1MDMwMjA4MDFaFw0yNzA1MDIwMjEzMDFaMDMxMTAvBgNV BAMTKEFEMEYxODA2NkVFNUNBQjBGMEQwQjc2NDMxNTU5QTBFRDQ0OEZCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwX1nvCJzVN345rem7YoKfDkPv 2f1Us9iYXCXcdacqYpFt/woUWu+ZFydCJrGH5XeppkJUePaaKCTpmij+ZMcdAnT0 /e+CB/dwxYDNmrm8GxTY8cv0yv+pSANchzOg7MRocIfnZf/JdXahezHS8RqTMmYR 36rNkLlpmpy06wywTl/0+eiZKohjsiJpIUTadOlRTubzStgzmU7AlKqBUaID7tDP MWw0l9AYlE2aG+jcxwxUxUF/YMPXSJJC2Xv/9kgFVCmOi/Kc0paVUatdGl5Wk2/W HNP5vm4NRuyFRdp+zsGFUcU9vCMocht9V8uWSDiLyeEyPLDkcX3e9+zrZgA9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUrQ8YBm7lyrDw0LdkMVWaDtRI+/QwHwYDVR0j BBgwFoAUpTNv7/ER1bklqJVOU8TJxeIquAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM1NGJlOWEtOWI1ZC00YzY0LWI0ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZG MTExRDVCOTI1QTg5NTRFNTNDNEM5QzVFMjJBQjgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTMzNkZFRkYxMTFENUI5MjVBODk1NEU1M0M0QzlDNUUyMkFC ODAwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBjNTRiZTlhLTliNWQtNGM2NC1i NGU4LTYxYzc0ZTllY2VkYy8wLzMxMzAzMzJlMzEzMjM1MmUzMTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzYzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ30OMA0GCSqG SIb3DQEBCwUAA4IBAQBdSekDow7cwwxfeZmgM6C0nZEUcuYvWZdNOa4jHBqh4kcB ELvC9w2LFp+iE31RFT8peu0Z8f9CF+l82PRY9jIZeLN9sGe4Z3oqJlHWUS01Uhbn 8hgASKyZpdXM3rv7uyJ8wg9pV+l6MVMdkxvu0NEq170i88yQjgDlLGQEFsZs1P9k gnfXb6FE6U1U+8WN/fnuIYKgheFU9pxpHSU4WEOLryiPK1MZKyjOzpuqAtCyad5O YOSTxG9NVSleNwUKlfS1h0MZT9z/TgiIM+g2ydsN6rmaR0r5ryWK3sjBSEX7LVHo MRo94osEK/n0fyBBYU2ISvZizsRIhF0iVUFAblbT -----END CERTIFICATE-----Generated at Wed May 13 00:45:16 2026 by rpki-client