$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa File: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (raw, json) Hash identifier: yIQlqFtzEyBabQj8ZV+fU4FgzaMPkBblM9AQE0hk6TU= Subject key identifier: 8B:24:33:AD:E2:58:45:C8:78:40:36:20:4F:3B:34:E4:FF:90:54:FD Certificate issuer: /CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Certificate serial: 350F26F60D2CADB27452D5417A58E64BF5625EAD Authority key identifier: DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa Signing time: Sun 03 May 2026 02:21:58 +0000 ROA not before: Sun 03 May 2026 02:16:58 +0000 ROA not after: Sun 02 May 2027 02:21:58 +0000 asID: 59149 IP address blocks: 103.254.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0f:26:f6:0d:2c:ad:b2:74:52:d5:41:7a:58:e6:4b:f5:62:5e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Validity Not Before: May 3 02:16:58 2026 GMT Not After : May 2 02:21:58 2027 GMT Subject: CN=8B2433ADE25845C8784036204F3B34E4FF9054FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:e3:9a:15:78:93:57:4a:4c:d4:30:fc:38: c7:ab:c9:8e:bc:41:eb:58:2d:56:7f:42:eb:35:2e: 7f:d4:09:20:ba:43:31:41:be:d9:5b:b1:a8:36:c0: 5f:5c:f8:0d:a6:c7:10:31:a4:66:89:35:25:9b:6d: 9a:bc:57:4d:2e:6d:8a:c6:62:1d:41:d1:10:43:61: d4:82:84:e7:13:2d:81:9c:4a:49:df:22:75:7b:09: c9:aa:30:63:67:15:7d:08:28:94:d6:47:e4:2c:7c: 13:c8:9f:30:3e:65:fd:aa:11:b0:fa:32:0e:c9:c8: 62:5e:03:39:93:7b:b5:03:97:28:56:95:71:d2:db: d3:7c:e6:f3:53:6f:e7:34:34:49:2f:11:0e:0a:ee: 62:48:14:ee:7a:38:a1:17:bb:10:be:22:6b:96:7a: e4:66:c0:fc:a1:09:9a:93:c3:48:31:7c:27:bd:f6: 07:bf:76:63:45:74:c1:47:74:d1:fd:66:c0:a7:82: 5b:0b:86:7b:bc:71:89:b8:21:bb:a3:99:57:35:fa: b8:62:34:31:08:84:a8:05:99:d0:04:4b:1f:eb:65: 8e:60:29:de:9f:38:f9:66:e5:67:f2:b8:5c:c1:d7: 5f:c2:c0:44:25:d0:17:b9:24:5d:cb:7a:c7:f3:7c: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:24:33:AD:E2:58:45:C8:78:40:36:20:4F:3B:34:E4:FF:90:54:FD X509v3 Authority Key Identifier: keyid:DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.254.171.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:1d:14:a1:51:6e:c9:dd:7b:a1:ed:4b:30:76:d7:c4:8b:9c: cf:48:89:ff:6b:72:7d:cc:c1:cf:2d:64:d7:bc:5a:d1:cc:b1: e2:7b:0a:95:f1:6d:99:8b:99:5e:46:31:c6:4d:49:f2:82:7f: 73:9f:6f:91:bc:ec:23:c5:8b:0f:00:8e:9a:af:07:03:fa:a1: b0:29:b1:37:91:07:52:a0:71:36:49:e7:10:ed:5c:53:5f:9c: eb:e7:70:1e:47:78:7e:d4:ba:5e:d4:5b:24:a7:83:b8:ab:ad: fc:e5:f1:41:a1:b2:44:16:03:a3:11:e7:85:64:52:fe:75:72: ec:a1:25:c6:3e:1f:8d:a4:b4:37:92:94:df:d9:c8:52:b4:ac: d5:77:ec:1b:ed:6b:df:b0:39:b9:42:3a:18:08:2e:9d:b2:26: 8e:94:7c:91:b6:d7:54:74:55:d3:84:64:42:e0:60:19:de:44: bb:0f:61:d0:ba:fa:c5:7f:38:f5:e0:2f:a7:4d:c6:76:f9:31: 1f:f8:6d:9f:44:54:ba:04:a3:fa:2e:83:33:cb:2c:26:e3:71: f9:ce:9a:0e:3a:dc:2e:ac:62:e0:ad:7f:20:7c:6c:e7:e3:5f: ec:db:90:78:bf:69:1f:d5:f9:77:e7:b2:bb:4c:da:2b:a0:d1: 49:6f:d4:d7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNQ8m9g0srbJ0UtVBeljmS/ViXq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4 OUE4M0JGMDAeFw0yNjA1MDMwMjE2NThaFw0yNzA1MDIwMjIxNThaMDMxMTAvBgNV BAMTKDhCMjQzM0FERTI1ODQ1Qzg3ODQwMzYyMDRGM0IzNEU0RkY5MDU0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+eOaFXiTV0pM1DD8OMeryY68 QetYLVZ/Qus1Ln/UCSC6QzFBvtlbsag2wF9c+A2mxxAxpGaJNSWbbZq8V00ubYrG Yh1B0RBDYdSChOcTLYGcSknfInV7CcmqMGNnFX0IKJTWR+QsfBPInzA+Zf2qEbD6 Mg7JyGJeAzmTe7UDlyhWlXHS29N85vNTb+c0NEkvEQ4K7mJIFO56OKEXuxC+ImuW euRmwPyhCZqTw0gxfCe99ge/dmNFdMFHdNH9ZsCnglsLhnu8cYm4IbujmVc1+rhi NDEIhKgFmdAESx/rZY5gKd6fOPlm5WfyuFzB11/CwEQl0Be5JF3LesfzfCrHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUiyQzreJYRch4QDYgTzs05P+QVP0wHwYDVR0j BBgwFoAU3b5YnmoCty2DCGs/VpfatomoO/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmFlN2Q0NjEtMGUzMi00ZTY1LWJiODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2 QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4OUE4M0JGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREJFNTg5RTZBMDJCNzJEODMwODZCM0Y1Njk3REFCNjg5QTgz QkYwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJhZTdkNDYxLTBlMzItNGU2NS1i Yjg4LWQ3MjQwNWIyNDQ1MS8wLzMxMzAzMzJlMzIzNTM0MmUzMTM3MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzEzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/6rMA0GCSqG SIb3DQEBCwUAA4IBAQAKHRShUW7J3Xuh7UswdtfEi5zPSIn/a3J9zMHPLWTXvFrR zLHiewqV8W2Zi5leRjHGTUnygn9zn2+RvOwjxYsPAI6arwcD+qGwKbE3kQdSoHE2 SecQ7VxTX5zr53AeR3h+1Lpe1Fskp4O4q6385fFBobJEFgOjEeeFZFL+dXLsoSXG Ph+NpLQ3kpTf2chStKzVd+wb7WvfsDm5QjoYCC6dsiaOlHyRttdUdFXThGRC4GAZ 3kS7D2HQuvrFfzj14C+nTcZ2+TEf+G2fRFS6BKP6LoMzyywm43H5zpoOOtwurGLg rX8gfGzn41/s25B4v2kf1fl357K7TNoroNFJb9TX -----END CERTIFICATE-----Generated at Wed May 13 02:27:15 2026 by rpki-client