$ rpki-client -vvf rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa File: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (raw, json) Hash identifier: hq7t6IGdrToWC5Y/u0/ln3majWig7C7xPRHwOMHho0s= Subject key identifier: 35:9D:E6:C6:3C:DD:16:0D:A8:3F:8C:63:B7:D4:21:42:CD:3E:E1:D2 Certificate issuer: /CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Certificate serial: 29BD584E32763C9B137113AF17558B91AB1D9BEA Authority key identifier: 2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa Signing time: Sun 03 May 2026 02:19:26 +0000 ROA not before: Sun 03 May 2026 02:14:26 +0000 ROA not after: Sun 02 May 2027 02:19:26 +0000 asID: 149897 IP address blocks: 103.187.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:bd:58:4e:32:76:3c:9b:13:71:13:af:17:55:8b:91:ab:1d:9b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Validity Not Before: May 3 02:14:26 2026 GMT Not After : May 2 02:19:26 2027 GMT Subject: CN=359DE6C63CDD160DA83F8C63B7D42142CD3EE1D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:94:49:33:b1:47:e3:f6:1c:f3:c9:cf:71:72: 4b:2c:95:f0:cd:f2:2c:1a:42:05:08:df:d3:bf:09: 9d:78:66:07:77:5a:4d:35:6e:0a:1b:49:dc:85:af: 88:a3:bb:a3:22:d2:65:37:99:04:4f:7a:c1:22:ec: c2:b5:1e:b1:52:fd:86:bd:45:b9:c3:b4:b9:73:bf: 6a:b6:df:1d:9a:7e:51:cc:3f:69:61:a8:ed:ca:6d: 92:09:d6:cb:c4:86:d2:07:3e:c4:ab:45:10:40:d1: 7c:e3:86:16:06:ee:6f:99:76:f7:3d:49:eb:4c:c5: ba:da:33:ff:4e:95:40:28:9d:11:0d:f3:17:ec:ae: 9f:91:d9:c2:bf:53:b9:75:48:85:f3:4f:e0:b8:5c: 2a:7b:0a:22:02:f1:d1:e8:5a:24:42:f0:70:49:0c: 49:8a:7c:28:69:0e:ef:80:5a:81:25:ab:d7:b8:49: 34:89:6d:eb:06:ef:54:ce:c2:21:e7:73:19:27:79: ab:51:1a:73:8e:61:3f:2a:65:68:40:36:0b:94:5c: 02:b6:77:34:a3:52:7f:7a:9c:f9:7e:48:e7:88:ed: d3:b7:12:77:99:f1:b8:85:49:87:ea:c7:80:09:37: d8:20:b5:95:93:da:14:8c:f7:c0:4c:3a:65:9e:7e: 60:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9D:E6:C6:3C:DD:16:0D:A8:3F:8C:63:B7:D4:21:42:CD:3E:E1:D2 X509v3 Authority Key Identifier: keyid:2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.164.0/24 Signature Algorithm: sha256WithRSAEncryption 32:b3:cd:82:1a:8d:57:fc:e4:54:31:ae:42:cc:41:8c:f6:74: 7e:ba:9f:98:b7:19:ba:7d:13:55:7b:09:d3:9e:33:a9:35:23: 4e:19:11:47:bd:9e:ee:1c:6a:6d:fd:2e:2e:9b:75:60:fe:9d: f4:2a:4c:21:ff:d1:57:ec:8e:49:df:91:a5:e5:e7:d0:ba:90: de:39:66:70:57:08:65:d6:aa:b9:5a:30:5b:3e:8d:52:41:6d: 19:cb:03:d0:ca:97:e4:26:96:5b:74:e5:68:ba:ba:fe:96:ad: 76:d0:34:f1:7a:38:eb:f2:14:aa:81:10:83:46:5c:2f:26:83: 02:89:de:ff:f9:51:ae:30:92:3a:42:1a:b9:37:ad:4e:a6:fa: 8e:d5:2e:54:8c:6a:50:a4:e8:0d:48:40:79:3e:b7:9f:e0:4a: 6e:c0:17:20:e0:f9:fb:0b:93:68:52:80:a7:c0:9b:89:ad:f9: 3e:4c:81:e5:50:dc:d3:7c:fe:3f:42:42:45:bb:41:3f:08:cd: ec:0b:b6:6c:b7:95:ea:fd:0f:2b:d7:1c:2a:7c:13:27:13:8f: b3:09:98:ea:12:c3:ff:49:69:b4:bb:ee:1e:1a:c1:00:45:57: c4:8e:91:50:97:6b:af:fe:1e:d3:f7:5f:36:29:6f:ed:9b:38: da:d0:7f:9f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKb1YTjJ2PJsTcROvF1WLkasdm+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3 QTE4NjcxNDAeFw0yNjA1MDMwMjE0MjZaFw0yNzA1MDIwMjE5MjZaMDMxMTAvBgNV BAMTKDM1OURFNkM2M0NERDE2MERBODNGOEM2M0I3RDQyMTQyQ0QzRUUxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDElEkzsUfj9hzzyc9xcksslfDN 8iwaQgUI39O/CZ14Zgd3Wk01bgobSdyFr4iju6Mi0mU3mQRPesEi7MK1HrFS/Ya9 RbnDtLlzv2q23x2aflHMP2lhqO3KbZIJ1svEhtIHPsSrRRBA0XzjhhYG7m+Zdvc9 SetMxbraM/9OlUAonREN8xfsrp+R2cK/U7l1SIXzT+C4XCp7CiIC8dHoWiRC8HBJ DEmKfChpDu+AWoElq9e4STSJbesG71TOwiHncxkneatRGnOOYT8qZWhANguUXAK2 dzSjUn96nPl+SOeI7dO3EneZ8biFSYfqx4AJN9ggtZWT2hSM98BMOmWefmDHAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUNZ3mxjzdFg2oP4xjt9QhQs0+4dIwHwYDVR0j BBgwFoAULa/CUDBQmtcSa72Tq8y5XnoYZxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0YmI0YzgtNmZjZi00ZmZmLWJkY2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAz MDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3QTE4NjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREFGQzI1MDMwNTA5QUQ3MTI2QkJEOTNBQkNDQjk1RTdBMTg2 NzE0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIxNGJiNGM4LTZmY2YtNGZmZi1i ZGNjLWZlMWZjY2VlMTA0NS8wLzMxMzAzMzJlMzEzODM3MmUzMTM2MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzODM5Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnu6QwDQYJ KoZIhvcNAQELBQADggEBADKzzYIajVf85FQxrkLMQYz2dH66n5i3Gbp9E1V7CdOe M6k1I04ZEUe9nu4cam39Li6bdWD+nfQqTCH/0VfsjknfkaXl59C6kN45ZnBXCGXW qrlaMFs+jVJBbRnLA9DKl+Qmllt05Wi6uv6WrXbQNPF6OOvyFKqBEINGXC8mgwKJ 3v/5Ua4wkjpCGrk3rU6m+o7VLlSMalCk6A1IQHk+t5/gSm7AFyDg+fsLk2hSgKfA m4mt+T5MgeVQ3NN8/j9CQkW7QT8IzewLtmy3ler9DyvXHCp8EycTj7MJmOoSw/9J abS77h4awQBFV8SOkVCXa6/+HtP3XzYpb+2bONrQf58= -----END CERTIFICATE-----Generated at Wed May 13 02:50:47 2026 by rpki-client