$ rpki-client -vvf rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa File: 3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa (raw, json) Hash identifier: sa+2OLXeMisaXlspLkiNEhUy00BFh3YNahDju9Re7zk= Subject key identifier: 28:7E:83:E1:D0:BE:B2:40:66:44:DE:42:E5:5C:96:6F:DE:36:7D:02 Certificate issuer: /CN=055B63D1B5F66B71EA3283775B07777CB0E06BCB Certificate serial: 2867BA7153B148394CAE0BE9F845A26B22079B29 Authority key identifier: 05:5B:63:D1:B5:F6:6B:71:EA:32:83:77:5B:07:77:7C:B0:E0:6B:CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa Signing time: Sun 03 May 2026 02:21:22 +0000 ROA not before: Sun 03 May 2026 02:16:22 +0000 ROA not after: Sun 02 May 2027 02:21:22 +0000 asID: 55664 IP address blocks: 103.236.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.crl rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:67:ba:71:53:b1:48:39:4c:ae:0b:e9:f8:45:a2:6b:22:07:9b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=055B63D1B5F66B71EA3283775B07777CB0E06BCB Validity Not Before: May 3 02:16:22 2026 GMT Not After : May 2 02:21:22 2027 GMT Subject: CN=287E83E1D0BEB2406644DE42E55C966FDE367D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6f:3f:37:a4:ac:b0:bd:29:e4:1d:d1:a5:d1: 85:90:73:d2:d6:e0:45:6c:c0:e2:af:df:37:6f:74: 17:fc:6a:8b:eb:23:86:6d:02:7c:84:3f:28:85:ad: 0c:78:92:0a:3f:6f:f0:6f:64:49:e3:68:db:9c:b8: 2c:cb:bb:87:6f:3b:59:51:73:f0:23:e3:69:b7:55: 71:c3:20:6c:8c:10:b6:a3:d7:4f:06:a7:df:9b:d0: c5:0d:8c:f9:8f:87:7d:e1:d9:f9:1d:11:e0:a3:a4: c3:f5:98:d6:6c:ff:b9:18:71:59:dd:fc:2a:9f:57: 9d:7f:1f:db:86:a5:17:ca:66:7c:f6:8a:31:3a:72: a6:2c:dc:00:b9:2e:94:25:c9:f1:2b:aa:a6:92:dc: dc:3f:43:7d:af:31:f9:58:51:53:59:0c:b6:69:7b: 7f:5b:71:b3:d9:88:c1:22:29:1f:95:8b:c5:ba:18: fa:a5:a0:d1:ab:a2:21:95:eb:5e:2b:dc:ac:1e:f6: ff:da:8c:f5:62:07:2f:53:d1:4c:1b:7d:47:24:bb: 16:33:d4:08:1c:ed:36:0d:9b:4d:88:5d:94:8f:e5: 01:d5:6b:d4:5b:a7:9b:60:78:f3:9e:dd:ee:19:a1: 73:8c:39:b3:99:1e:db:0f:ed:9f:cb:b2:14:3f:6b: dd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7E:83:E1:D0:BE:B2:40:66:44:DE:42:E5:5C:96:6F:DE:36:7D:02 X509v3 Authority Key Identifier: keyid:05:5B:63:D1:B5:F6:6B:71:EA:32:83:77:5B:07:77:7C:B0:E0:6B:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.148.0/24 Signature Algorithm: sha256WithRSAEncryption 76:22:11:fe:6c:7b:2e:e2:a9:71:88:08:43:56:fa:8d:dc:e3: ed:59:25:c1:33:8d:cf:98:e1:40:87:6b:02:a7:08:54:4e:6d: b7:e9:6f:06:e2:b1:92:72:1c:44:b8:04:2f:42:c8:31:20:33: dd:60:ef:dd:92:8f:72:a6:08:74:cf:6b:94:0d:be:bb:8f:95: 24:f0:cb:2e:a7:da:5e:86:76:af:e3:f7:77:cc:dd:8b:4b:37: 76:78:0f:08:1f:15:d6:47:07:8a:d4:06:45:cf:59:54:a5:05: c2:41:6e:1b:f6:0a:b7:f0:d9:55:39:99:e1:73:13:d5:44:3a: 2f:b3:6c:ef:55:13:0c:d7:d2:4b:03:21:1e:31:ef:48:36:9e: ff:51:6e:c2:51:dd:f8:c4:91:f9:e3:01:a4:1f:f6:74:0a:4c: 22:2a:1f:06:0e:2e:11:15:f5:b2:0b:cd:33:83:f1:97:15:97: 83:4b:50:6d:3b:3f:92:5d:c8:df:f6:ec:58:75:91:0a:c6:c4: 34:0b:e4:80:28:d9:71:0f:06:dd:eb:66:1e:3c:70:93:15:7c: fb:87:72:4a:99:6c:60:c1:49:9b:21:61:f6:3e:98:ea:bb:78: 7a:f1:13:f6:57:b7:ec:02:36:63:cf:08:71:90:5b:80:a1:a7: a9:25:2d:7e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKGe6cVOxSDlMrgvp+EWiayIHmykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU1QjYzRDFCNUY2NkI3MUVBMzI4Mzc3NUIwNzc3N0NC MEUwNkJDQjAeFw0yNjA1MDMwMjE2MjJaFw0yNzA1MDIwMjIxMjJaMDMxMTAvBgNV BAMTKDI4N0U4M0UxRDBCRUIyNDA2NjQ0REU0MkU1NUM5NjZGREUzNjdEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIbz83pKywvSnkHdGl0YWQc9LW 4EVswOKv3zdvdBf8aovrI4ZtAnyEPyiFrQx4kgo/b/BvZEnjaNucuCzLu4dvO1lR c/Aj42m3VXHDIGyMELaj108Gp9+b0MUNjPmPh33h2fkdEeCjpMP1mNZs/7kYcVnd /CqfV51/H9uGpRfKZnz2ijE6cqYs3AC5LpQlyfErqqaS3Nw/Q32vMflYUVNZDLZp e39bcbPZiMEiKR+Vi8W6GPqloNGroiGV614r3Kwe9v/ajPViBy9T0UwbfUckuxYz 1Agc7TYNm02IXZSP5QHVa9Rbp5tgePOe3e4ZoXOMObOZHtsP7Z/LshQ/a915AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKH6D4dC+skBmRN5C5VyWb942fQIwHwYDVR0j BBgwFoAUBVtj0bX2a3HqMoN3Wwd3fLDga8swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhhNzk3NTUtMjM4YS00NmQyLWIwNTItMzA1ODdiZjllZmY3LzAvMDU1QjYzRDFC NUY2NkI3MUVBMzI4Mzc3NUIwNzc3N0NCMEUwNkJDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNTVCNjNEMUI1RjY2QjcxRUEzMjgzNzc1QjA3Nzc3Q0IwRTA2 QkNCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI4YTc5NzU1LTIzOGEtNDZkMi1i MDUyLTMwNTg3YmY5ZWZmNy8wLzMxMzAzMzJlMzIzMzM2MmUzMTM0MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+yUMA0GCSqG SIb3DQEBCwUAA4IBAQB2IhH+bHsu4qlxiAhDVvqN3OPtWSXBM43PmOFAh2sCpwhU Tm236W8G4rGSchxEuAQvQsgxIDPdYO/dko9ypgh0z2uUDb67j5Uk8Msup9pehnav 4/d3zN2LSzd2eA8IHxXWRweK1AZFz1lUpQXCQW4b9gq38NlVOZnhcxPVRDovs2zv VRMM19JLAyEeMe9INp7/UW7CUd34xJH54wGkH/Z0CkwiKh8GDi4RFfWyC80zg/GX FZeDS1BtOz+SXcjf9uxYdZEKxsQ0C+SAKNlxDwbd62YePHCTFXz7h3JKmWxgwUmb IWH2Ppjqu3h68RP2V7fsAjZjzwhxkFuAoaepJS1+ -----END CERTIFICATE-----Generated at Wed May 13 12:40:04 2026 by rpki-client