$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa File: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (raw, json) Hash identifier: 3vdIVahG9RTfTLGTYsntjI3pmo9GulTq1yl7EBwWw9o= Subject key identifier: 63:8C:2B:E3:FB:10:08:C0:0F:26:40:B1:62:C2:60:B4:FA:F6:5B:A9 Certificate issuer: /CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Certificate serial: 248A1DE304E214F1DFEDC92EAC9BBA00142244C5 Authority key identifier: DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa Signing time: Sun 03 May 2026 02:21:56 +0000 ROA not before: Sun 03 May 2026 02:16:56 +0000 ROA not after: Sun 02 May 2027 02:21:56 +0000 asID: 59149 IP address blocks: 103.254.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8a:1d:e3:04:e2:14:f1:df:ed:c9:2e:ac:9b:ba:00:14:22:44:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Validity Not Before: May 3 02:16:56 2026 GMT Not After : May 2 02:21:56 2027 GMT Subject: CN=638C2BE3FB1008C00F2640B162C260B4FAF65BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:17:05:1c:54:76:70:b8:cf:b3:dd:15:a0: 9e:47:18:9b:82:c5:29:bd:6b:18:33:9e:6b:5b:84: 07:5b:ca:6b:81:c8:ee:9b:46:ae:d9:f2:69:f6:d0: 12:31:a2:3f:8e:5b:3c:90:65:d8:7a:fb:b2:1d:06: db:89:8f:c1:8c:7d:b3:5e:10:55:45:69:11:78:0a: 09:17:e2:d6:68:81:7d:37:5c:d7:2c:15:67:4e:b2: e9:11:33:ef:b6:ca:60:df:f1:40:f8:8d:a8:ee:23: 28:9a:72:4c:4e:10:cb:30:5f:1e:e8:4e:a8:54:04: ed:13:e2:4c:14:e4:6b:07:b0:3d:6f:37:37:6b:cf: 77:af:a9:d3:1f:e2:f7:f7:46:d0:50:29:84:da:6e: 5c:fe:fe:f7:c4:cb:15:e1:20:3c:a7:73:a4:78:e2: 3a:93:4d:31:17:04:f9:97:12:f5:0f:4e:b9:35:f2: 6e:22:41:f5:56:7b:35:d6:74:ae:f1:6c:20:0a:55: 4f:17:89:1f:90:60:7f:6d:79:5b:d7:c8:06:84:4d: 78:57:df:a7:b3:bb:0c:ba:5c:06:cc:f5:df:a2:65: 98:f1:34:a1:b5:de:62:ce:1e:74:d7:14:79:04:de: 56:79:63:b3:58:5f:94:2d:b9:3d:9c:ae:3d:0f:38: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8C:2B:E3:FB:10:08:C0:0F:26:40:B1:62:C2:60:B4:FA:F6:5B:A9 X509v3 Authority Key Identifier: keyid:DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.254.169.0/24 Signature Algorithm: sha256WithRSAEncryption 27:06:e0:59:c7:c6:2a:10:a0:75:5e:54:a5:23:b2:8b:2e:d2: 92:a9:a2:26:a8:5e:15:a1:05:b5:3a:8d:ae:57:61:bc:44:47: ea:ce:13:3e:ee:4f:7c:aa:d8:d6:c2:19:8b:fa:28:26:c4:bf: fa:a9:09:a3:14:cd:77:74:e4:39:87:9f:79:71:8e:96:e5:ff: 81:a7:21:31:b7:19:35:1d:23:3c:95:5b:0c:62:98:83:fe:9e: 29:a3:88:c6:f9:f0:e5:1f:66:2d:2e:af:1e:71:80:55:03:1b: 0a:d5:47:d7:2c:38:1e:0d:06:24:47:85:34:66:b4:37:85:73: 99:af:f9:52:fc:92:ca:b0:47:ac:9e:2f:20:ca:65:9e:94:d2: 31:12:5a:bc:b4:01:0a:e1:d8:94:a7:6e:88:d3:20:1c:df:1a: 2a:23:51:40:ee:d2:a7:2a:af:02:36:8c:d3:f9:b6:25:e0:44: 3a:82:68:41:2b:5b:e9:5a:84:37:e8:27:1a:94:d5:af:15:b0: 86:c2:f3:34:73:a7:ff:c7:59:a4:72:d9:46:6e:71:2a:aa:d4: e8:3f:60:85:23:6e:18:53:f4:76:40:5d:db:74:cd:70:6f:93: 33:86:36:09:e4:3b:c2:e0:69:29:c2:04:92:05:cd:02:2d:8e: 12:18:ba:2a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJIod4wTiFPHf7ckurJu6ABQiRMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4 OUE4M0JGMDAeFw0yNjA1MDMwMjE2NTZaFw0yNzA1MDIwMjIxNTZaMDMxMTAvBgNV BAMTKDYzOEMyQkUzRkIxMDA4QzAwRjI2NDBCMTYyQzI2MEI0RkFGNjVCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbtRcFHFR2cLjPs90VoJ5HGJuC xSm9axgznmtbhAdbymuByO6bRq7Z8mn20BIxoj+OWzyQZdh6+7IdBtuJj8GMfbNe EFVFaRF4CgkX4tZogX03XNcsFWdOsukRM++2ymDf8UD4jajuIyiackxOEMswXx7o TqhUBO0T4kwU5GsHsD1vNzdrz3evqdMf4vf3RtBQKYTablz+/vfEyxXhIDync6R4 4jqTTTEXBPmXEvUPTrk18m4iQfVWezXWdK7xbCAKVU8XiR+QYH9teVvXyAaETXhX 36ezuwy6XAbM9d+iZZjxNKG13mLOHnTXFHkE3lZ5Y7NYX5QtuT2crj0POBPLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUY4wr4/sQCMAPJkCxYsJgtPr2W6kwHwYDVR0j BBgwFoAU3b5YnmoCty2DCGs/VpfatomoO/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmFlN2Q0NjEtMGUzMi00ZTY1LWJiODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2 QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4OUE4M0JGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREJFNTg5RTZBMDJCNzJEODMwODZCM0Y1Njk3REFCNjg5QTgz QkYwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJhZTdkNDYxLTBlMzItNGU2NS1i Yjg4LWQ3MjQwNWIyNDQ1MS8wLzMxMzAzMzJlMzIzNTM0MmUzMTM2MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzEzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/6pMA0GCSqG SIb3DQEBCwUAA4IBAQAnBuBZx8YqEKB1XlSlI7KLLtKSqaImqF4VoQW1Oo2uV2G8 REfqzhM+7k98qtjWwhmL+igmxL/6qQmjFM13dOQ5h595cY6W5f+BpyExtxk1HSM8 lVsMYpiD/p4po4jG+fDlH2YtLq8ecYBVAxsK1UfXLDgeDQYkR4U0ZrQ3hXOZr/lS /JLKsEesni8gymWelNIxElq8tAEK4diUp26I0yAc3xoqI1FA7tKnKq8CNozT+bYl 4EQ6gmhBK1vpWoQ36CcalNWvFbCGwvM0c6f/x1mkctlGbnEqqtToP2CFI24YU/R2 QF3bdM1wb5MzhjYJ5DvC4GkpwgSSBc0CLY4SGLoq -----END CERTIFICATE-----Generated at Wed May 13 04:26:08 2026 by rpki-client