$ rpki-client -vvf rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa File: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (raw, json) Hash identifier: k9nD44XinJnJpBwRMmDV5yfpMBTjz+PYwIGe6HEFz9s= Subject key identifier: ED:39:81:20:B2:66:49:49:1F:27:E6:80:06:A1:81:F7:59:EC:63:04 Certificate issuer: /CN=10553E9FBD62D012FC01AA60343F1431B2A6A334 Certificate serial: 2E3292E9DAE5719065CE83625C8C57332306BB7E Authority key identifier: 10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa Signing time: Sun 03 May 2026 02:15:42 +0000 ROA not before: Sun 03 May 2026 02:10:42 +0000 ROA not after: Sun 02 May 2027 02:15:42 +0000 asID: 149344 IP address blocks: 103.176.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:32:92:e9:da:e5:71:90:65:ce:83:62:5c:8c:57:33:23:06:bb:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10553E9FBD62D012FC01AA60343F1431B2A6A334 Validity Not Before: May 3 02:10:42 2026 GMT Not After : May 2 02:15:42 2027 GMT Subject: CN=ED398120B26649491F27E68006A181F759EC6304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c9:ce:20:bb:da:91:b4:56:13:b2:3a:58:41: 0b:64:ea:35:ad:df:26:02:ee:32:82:50:e6:4b:8e: 2c:d8:4e:ac:70:e9:5b:29:50:35:68:dc:cb:ef:dc: 8a:38:00:48:b6:ca:e2:b2:6f:7b:f2:ab:fb:f5:ae: e0:f6:7c:11:1a:2c:0b:db:59:de:2e:cb:06:62:2b: 84:6c:a8:0f:3b:4d:00:96:59:da:ea:fb:8d:cd:e8: fa:be:81:6b:83:24:5e:4c:7a:dc:e6:11:98:99:1e: 38:27:3c:1f:d9:a9:c0:f9:fe:e4:f9:bf:2b:b6:ed: aa:20:e2:35:e3:22:01:b4:a8:7e:09:2c:c1:0c:bf: c8:50:37:aa:f9:ea:c1:77:7a:4b:ed:13:cc:b5:e1: 48:fc:41:c6:b7:d3:7c:2f:b1:d0:bd:2a:c7:a7:41: da:14:66:84:70:04:f9:5b:32:39:b9:a0:33:cb:1d: 94:af:69:c1:41:13:c2:31:6c:a3:1e:52:ba:70:39: ae:a2:10:09:68:8a:a6:89:16:f2:27:54:a0:cc:1b: 08:c2:aa:a7:54:78:40:14:69:c9:7f:8c:fe:89:3b: a5:25:30:d0:57:81:c6:0a:19:70:47:d1:45:6c:d1: ae:9f:f5:eb:0a:91:d6:f1:50:d1:fe:e6:d1:fb:fe: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:39:81:20:B2:66:49:49:1F:27:E6:80:06:A1:81:F7:59:EC:63:04 X509v3 Authority Key Identifier: keyid:10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.98.0/23 Signature Algorithm: sha256WithRSAEncryption 12:13:e5:d4:2a:dc:64:91:d7:39:1e:c6:2c:17:c4:f8:f4:1f: 33:62:14:7f:fb:e7:c6:1a:a9:9b:a2:4b:eb:e9:e1:7b:d6:23: be:b9:60:85:12:cc:4b:6a:62:02:eb:b1:20:13:ae:00:ae:2c: 9f:9d:9d:37:1a:ea:06:e8:55:a2:6d:b8:f9:43:aa:1a:dc:da: 32:4f:3a:29:11:e7:9c:66:1c:82:75:73:75:d4:88:24:da:5e: 7b:5f:7e:97:f1:d4:91:e2:9e:cc:34:2c:f1:79:bc:07:08:59: ec:b5:68:d1:5a:84:8e:83:e9:93:13:e3:f4:26:55:02:2b:9f: d5:19:68:f6:7e:e7:af:e2:9e:2f:d2:41:ae:b4:25:7c:48:0a: 4f:fc:e2:fe:69:f7:36:44:27:0c:8e:c2:b4:5b:4a:12:12:6f: a0:d1:77:14:33:68:3b:dc:e2:23:3a:85:74:67:11:5f:64:c8: 77:bb:52:14:38:a9:c4:6d:5e:bb:db:d5:e1:27:62:90:7e:d2: a5:76:1a:be:80:37:90:09:ff:ab:3e:11:75:1d:c4:c7:1b:84: 53:42:cb:fc:ec:4c:d0:14:eb:96:f1:47:35:6f:a8:3c:56:51: cc:5b:6c:7c:78:d7:80:74:19:40:36:3b:c4:c0:96:d6:2f:d6: bf:e7:66:db -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULjKS6drlcZBlzoNiXIxXMyMGu34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA1NTNFOUZCRDYyRDAxMkZDMDFBQTYwMzQzRjE0MzFC MkE2QTMzNDAeFw0yNjA1MDMwMjEwNDJaFw0yNzA1MDIwMjE1NDJaMDMxMTAvBgNV BAMTKEVEMzk4MTIwQjI2NjQ5NDkxRjI3RTY4MDA2QTE4MUY3NTlFQzYzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoyc4gu9qRtFYTsjpYQQtk6jWt 3yYC7jKCUOZLjizYTqxw6VspUDVo3Mvv3Io4AEi2yuKyb3vyq/v1ruD2fBEaLAvb Wd4uywZiK4RsqA87TQCWWdrq+43N6Pq+gWuDJF5MetzmEZiZHjgnPB/ZqcD5/uT5 vyu27aog4jXjIgG0qH4JLMEMv8hQN6r56sF3ekvtE8y14Uj8Qca303wvsdC9Ksen QdoUZoRwBPlbMjm5oDPLHZSvacFBE8IxbKMeUrpwOa6iEAloiqaJFvInVKDMGwjC qqdUeEAUacl/jP6JO6UlMNBXgcYKGXBH0UVs0a6f9esKkdbxUNH+5tH7/kRdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU7TmBILJmSUkfJ+aABqGB91nsYwQwHwYDVR0j BBgwFoAUEFU+n71i0BL8AapgND8UMbKmozQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTcyMTY0MjUtNmFhMy00NDI5LWIxNzUtODY5MDFiYjBjYjFmLzAvMTA1NTNFOUZC RDYyRDAxMkZDMDFBQTYwMzQzRjE0MzFCMkE2QTMzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDU1M0U5RkJENjJEMDEyRkMwMUFBNjAzNDNGMTQzMUIyQTZB MzM0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3MjE2NDI1LTZhYTMtNDQyOS1i MTc1LTg2OTAxYmIwY2IxZi8wLzMxMzAzMzJlMzEzNzM2MmUzOTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7BiMA0GCSqG SIb3DQEBCwUAA4IBAQASE+XUKtxkkdc5HsYsF8T49B8zYhR/++fGGqmbokvr6eF7 1iO+uWCFEsxLamIC67EgE64AriyfnZ03GuoG6FWibbj5Q6oa3NoyTzopEeecZhyC dXN11Igk2l57X36X8dSR4p7MNCzxebwHCFnstWjRWoSOg+mTE+P0JlUCK5/VGWj2 fuev4p4v0kGutCV8SApP/OL+afc2RCcMjsK0W0oSEm+g0XcUM2g73OIjOoV0ZxFf ZMh3u1IUOKnEbV6729XhJ2KQftKldhq+gDeQCf+rPhF1HcTHG4RTQsv87EzQFOuW 8Uc1b6g8VlHMW2x8eNeAdBlANjvEwJbWL9a/52bb -----END CERTIFICATE-----Generated at Wed May 13 13:04:43 2026 by rpki-client