$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa File: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (raw, json) Hash identifier: H3eiKQ1rH4KKbSKlbbugmJZ0bk81cXXLmDh4ZWXXp9o= Subject key identifier: 35:C9:D0:3C:A2:49:1D:E6:20:BD:03:71:16:C1:48:DD:56:BD:3A:26 Certificate issuer: /CN=58775F16B86C66299D9AF904F73786CD365D8787 Certificate serial: A8AAC3EDDC1796FF5A9FB15D80AFA033D9789D Authority key identifier: 58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa Signing time: Sun 03 May 2026 02:17:28 +0000 ROA not before: Sun 03 May 2026 02:12:28 +0000 ROA not after: Sun 02 May 2027 02:17:28 +0000 asID: 141596 IP address blocks: 103.179.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a8:aa:c3:ed:dc:17:96:ff:5a:9f:b1:5d:80:af:a0:33:d9:78:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58775F16B86C66299D9AF904F73786CD365D8787 Validity Not Before: May 3 02:12:28 2026 GMT Not After : May 2 02:17:28 2027 GMT Subject: CN=35C9D03CA2491DE620BD037116C148DD56BD3A26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:f0:6a:8e:ca:5f:dd:8b:66:29:d3:c5:1a: ea:a7:b1:ff:3d:8d:33:e2:8b:69:29:18:d6:ff:36: 5b:7d:f8:4a:b4:82:6c:12:0b:4a:6d:f6:77:df:c2: 02:30:01:5d:ef:30:1b:8c:f8:10:15:58:c5:29:b8: a4:05:83:d0:b6:a1:95:7b:34:aa:a0:6f:20:c0:74: 0c:e3:c8:a8:78:3b:1c:67:59:40:62:18:c6:db:21: 35:22:38:38:e2:38:20:c7:f3:48:b9:a1:79:21:89: 1d:60:2e:64:87:49:9a:7b:90:a8:6e:a2:8b:f5:0d: db:f7:a4:7c:9f:1a:46:8e:c9:60:cb:70:4e:be:fd: 54:ba:78:a1:7a:db:eb:03:a5:d7:6b:64:2a:a7:01: 18:a5:95:98:89:08:0b:8e:d5:29:dd:38:28:a3:25: 3a:e3:ef:27:80:7b:60:84:76:55:37:13:2e:08:1f: e8:c7:ed:7f:45:84:e7:cd:45:07:f6:f9:1a:66:cf: 74:3a:60:53:5e:f5:f2:93:19:00:04:b8:55:dd:8c: 62:d1:9a:75:3f:af:f5:31:b0:fe:ff:08:08:8f:89: a8:d5:94:b3:7c:b2:68:8e:73:ef:18:cd:ff:9f:e1: c8:8f:f8:04:6b:dc:22:d7:9f:b6:00:13:b5:b0:df: 08:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C9:D0:3C:A2:49:1D:E6:20:BD:03:71:16:C1:48:DD:56:BD:3A:26 X509v3 Authority Key Identifier: keyid:58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.218.0/23 Signature Algorithm: sha256WithRSAEncryption 99:17:6f:66:ac:1a:07:80:7f:84:a2:49:bc:dc:01:01:ca:89: 37:20:2a:be:52:9d:fe:5e:10:cb:2b:24:ea:1c:d3:53:f0:b4: ef:44:09:14:c4:b2:2a:1e:a8:6f:cf:73:d3:51:f4:47:3a:da: d6:43:ae:f2:60:6a:29:71:b8:54:df:ea:e6:db:bc:b0:15:ad: cf:8b:94:6f:75:63:57:e0:7f:ef:07:6a:ba:06:ea:e3:cd:b5: 3c:48:4a:a9:5a:a7:f6:d4:c1:9f:f9:5a:fe:96:50:49:f0:ae: 57:47:2a:c1:26:1b:47:34:b1:b3:3b:15:70:f8:c1:4b:ff:ed: 31:68:c6:1c:a1:19:89:10:f8:11:99:b3:2d:d9:3b:ec:7c:62: 45:22:b5:50:4e:76:99:c0:ea:2a:96:28:99:22:ae:7b:3d:0d: b2:ef:23:16:ff:1d:a4:36:d8:69:46:24:4a:59:87:f3:42:7d: 8a:f4:6b:f7:fa:39:c3:9a:ad:95:25:27:65:6a:fe:d7:5b:b0: be:a9:dd:96:3e:62:8a:ea:80:3a:7e:c5:d1:44:36:76:ab:68: 34:02:50:6f:60:da:ca:63:b3:a0:53:91:3a:ce:0c:e8:f6:35: a3:99:77:a0:10:ab:c7:ed:1d:ca:50:74:31:bb:fb:a3:c8:43: b7:97:c3:56 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAKiqw+3cF5b/Wp+xXYCvoDPZeJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3NzVGMTZCODZDNjYyOTlEOUFGOTA0RjczNzg2Q0Qz NjVEODc4NzAeFw0yNjA1MDMwMjEyMjhaFw0yNzA1MDIwMjE3MjhaMDMxMTAvBgNV BAMTKDM1QzlEMDNDQTI0OTFERTYyMEJEMDM3MTE2QzE0OERENTZCRDNBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2vBqjspf3YtmKdPFGuqnsf89 jTPii2kpGNb/Nlt9+Eq0gmwSC0pt9nffwgIwAV3vMBuM+BAVWMUpuKQFg9C2oZV7 NKqgbyDAdAzjyKh4OxxnWUBiGMbbITUiODjiOCDH80i5oXkhiR1gLmSHSZp7kKhu oov1Ddv3pHyfGkaOyWDLcE6+/VS6eKF62+sDpddrZCqnARillZiJCAuO1SndOCij JTrj7yeAe2CEdlU3Ey4IH+jH7X9FhOfNRQf2+Rpmz3Q6YFNe9fKTGQAEuFXdjGLR mnU/r/UxsP7/CAiPiajVlLN8smiOc+8Yzf+f4ciP+ARr3CLXn7YAE7Ww3whTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUNcnQPKJJHeYgvQNxFsFI3Va9OiYwHwYDVR0j BBgwFoAUWHdfFrhsZimdmvkE9zeGzTZdh4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWNhMjkyYjItNGFlNC00MWRmLTg4N2EtYzE3MmMzZTFhZTczLzAvNTg3NzVGMTZC ODZDNjYyOTlEOUFGOTA0RjczNzg2Q0QzNjVEODc4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODc3NUYxNkI4NkM2NjI5OUQ5QUY5MDRGNzM3ODZDRDM2NUQ4 Nzg3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFjYTI5MmIyLTRhZTQtNDFkZi04 ODdhLWMxNzJjM2UxYWU3My8wLzMxMzAzMzJlMzEzNzM5MmUzMjMxMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNTM5MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFns9owDQYJ KoZIhvcNAQELBQADggEBAJkXb2asGgeAf4SiSbzcAQHKiTcgKr5Snf5eEMsrJOoc 01PwtO9ECRTEsioeqG/Pc9NR9Ec62tZDrvJgailxuFTf6ubbvLAVrc+LlG91Y1fg f+8HaroG6uPNtTxISqlap/bUwZ/5Wv6WUEnwrldHKsEmG0c0sbM7FXD4wUv/7TFo xhyhGYkQ+BGZsy3ZO+x8YkUitVBOdpnA6iqWKJkirns9DbLvIxb/HaQ22GlGJEpZ h/NCfYr0a/f6OcOarZUlJ2Vq/tdbsL6p3ZY+YorqgDp+xdFENnaraDQCUG9g2spj s6BTkTrODOj2NaOZd6AQq8ftHcpQdDG7+6PIQ7eXw1Y= -----END CERTIFICATE-----Generated at Wed May 13 05:43:20 2026 by rpki-client