$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31302e302f32332d3234203d3e203535363632.roa File: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (raw, json) Hash identifier: 0kmlYn3U9dmyxdriKnU2KVYL6nRWvq4iRJ06VUJD99I= Subject key identifier: E2:21:EF:F2:FB:95:9F:32:2A:A9:4B:AF:12:36:83:ED:E7:8B:45:90 Certificate issuer: /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Certificate serial: 0B8A175E31C5425193C0B380EB92D17C0C2551EF Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31302e302f32332d3234203d3e203535363632.roa Signing time: Sun 03 May 2026 02:21:48 +0000 ROA not before: Sun 03 May 2026 02:16:48 +0000 ROA not after: Sun 02 May 2027 02:21:48 +0000 asID: 55662 IP address blocks: 103.71.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8a:17:5e:31:c5:42:51:93:c0:b3:80:eb:92:d1:7c:0c:25:51:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Validity Not Before: May 3 02:16:48 2026 GMT Not After : May 2 02:21:48 2027 GMT Subject: CN=E221EFF2FB959F322AA94BAF123683EDE78B4590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:49:be:81:ce:c7:c6:ae:50:2c:98:c3:f9: 4e:79:7b:30:e2:e6:bb:29:65:6a:09:32:a4:f3:d1: 99:a4:43:af:17:fb:96:35:90:32:6e:13:cb:55:18: c1:8b:3a:8a:c3:5a:c3:bc:78:2f:ed:de:3d:06:e9: 3d:79:36:a3:9d:0f:35:d9:01:4a:75:ed:94:f3:33: a5:3c:cc:1b:22:68:34:06:2a:2b:c8:29:ba:6c:7f: 18:6a:0a:e7:1d:e8:f1:cb:69:7d:fe:37:8f:f3:e6: a3:52:06:d7:9b:6a:e0:5a:df:46:29:70:e3:6b:57: ff:db:53:55:26:15:37:e3:3d:9d:ef:29:c9:1f:18: 2c:f7:1f:f0:a1:a4:91:b2:b3:f3:43:dd:6c:ab:d5: 41:f0:17:e3:0a:e4:7c:24:db:1f:87:4e:10:54:5a: b4:24:7e:97:45:72:33:1c:ce:4a:52:e7:bf:3c:d6: 8d:c4:6e:97:91:b4:50:54:e7:90:6c:da:e2:8a:fc: 54:70:11:18:d0:4c:ab:2e:98:f1:3b:c0:f1:19:35: b1:38:b2:40:19:6b:59:b0:ea:a8:d7:d9:3b:11:f4: bb:49:62:d3:e4:97:ef:34:82:a1:bf:21:5d:2c:e4: 94:d5:5a:2e:77:4c:66:39:0e:d2:26:af:fd:0a:6f: 1a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:21:EF:F2:FB:95:9F:32:2A:A9:4B:AF:12:36:83:ED:E7:8B:45:90 X509v3 Authority Key Identifier: keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31302e302f32332d3234203d3e203535363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.10.0/23 Signature Algorithm: sha256WithRSAEncryption 23:eb:be:f3:66:cf:b7:26:4e:9f:58:b5:f2:73:d5:b8:e9:6f: 08:96:3e:c4:c4:0c:40:d5:2f:32:fe:6b:c3:e7:20:ab:14:75: 4e:df:2d:95:9a:57:76:86:83:1c:56:2d:fe:47:ae:58:5e:d2: bb:70:b0:9f:c8:a3:b1:0f:f6:5f:7b:36:76:49:81:a0:8e:c5: 86:ae:51:cb:ef:03:44:b6:f1:df:e2:ea:38:c3:54:69:e6:75: e9:93:ec:85:13:f1:51:2c:a9:1b:99:bc:c8:74:a6:9e:8e:e8: df:84:3d:d0:15:8c:f6:fd:57:89:9a:03:ea:12:39:fe:13:d1: da:6f:41:fa:ff:2d:ae:2d:d1:5b:03:59:b0:40:80:76:e7:e3: 8a:d7:7d:9f:8b:f6:ba:63:d0:fe:81:3b:95:05:7e:9a:43:0b: e9:04:08:0a:8d:66:d7:27:d1:0a:8e:ca:19:26:87:74:04:1a: 6a:fb:9e:4a:ff:14:6f:3f:92:35:7c:bc:49:c4:8a:5e:6b:44: 52:6a:43:3b:a7:f4:96:da:6c:5c:9d:76:61:b0:f2:26:53:b1: d3:3d:b3:58:f0:24:79:7d:51:42:5f:75:9a:1e:4c:54:b8:f3: 7a:e4:77:f9:1f:77:1a:e9:b6:81:d2:04:e3:de:3e:a0:4c:8f: be:02:26:38 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUC4oXXjHFQlGTwLOA65LRfAwlUe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhBMEQz QkFEMUY5NDAeFw0yNjA1MDMwMjE2NDhaFw0yNzA1MDIwMjIxNDhaMDMxMTAvBgNV BAMTKEUyMjFFRkYyRkI5NTlGMzIyQUE5NEJBRjEyMzY4M0VERTc4QjQ1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaj0m+gc7Hxq5QLJjD+U55ezDi 5rspZWoJMqTz0ZmkQ68X+5Y1kDJuE8tVGMGLOorDWsO8eC/t3j0G6T15NqOdDzXZ AUp17ZTzM6U8zBsiaDQGKivIKbpsfxhqCucd6PHLaX3+N4/z5qNSBtebauBa30Yp cONrV//bU1UmFTfjPZ3vKckfGCz3H/ChpJGys/ND3Wyr1UHwF+MK5Hwk2x+HThBU WrQkfpdFcjMczkpS57881o3EbpeRtFBU55Bs2uKK/FRwERjQTKsumPE7wPEZNbE4 skAZa1mw6qjX2TsR9LtJYtPkl+80gqG/IV0s5JTVWi53TGY5DtImr/0KbxrVAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU4iHv8vuVnzIqqUuvEjaD7eeLRZAwHwYDVR0j BBgwFoAUgRBXDOVdhRL8vfAoGfuKDTutH5QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE0OTYwODItYTBhYS00ODM2LWI1ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENF NTVEODUxMkZDQkRGMDI4MTlGQjhBMEQzQkFEMUY5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTEwNTcwQ0U1NUQ4NTEyRkNCREYwMjgxOUZCOEEwRDNCQUQx Rjk0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJhNDk2MDgyLWEwYWEtNDgzNi1i NTg3LTk3M2RkN2UyOTdhZi8wLzMxMzAzMzJlMzczMTJlMzEzMDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDM1MzUzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnRwowDQYJKoZIhvcN AQELBQADggEBACPrvvNmz7cmTp9YtfJz1bjpbwiWPsTEDEDVLzL+a8PnIKsUdU7f LZWaV3aGgxxWLf5Hrlhe0rtwsJ/Io7EP9l97NnZJgaCOxYauUcvvA0S28d/i6jjD VGnmdemT7IUT8VEsqRuZvMh0pp6O6N+EPdAVjPb9V4maA+oSOf4T0dpvQfr/La4t 0VsDWbBAgHbn44rXfZ+L9rpj0P6BO5UFfppDC+kECAqNZtcn0QqOyhkmh3QEGmr7 nkr/FG8/kjV8vEnEil5rRFJqQzun9JbabFyddmGw8iZTsdM9s1jwJHl9UUJfdZoe TFS483rkd/kfdxrptoHSBOPePqBMj74CJjg= -----END CERTIFICATE-----Generated at Wed May 13 02:50:50 2026 by rpki-client