$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32342d3234203d3e203538343837.roa File: 3130332e3235332e3231322e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: pLawXbkYKxokhCiGu4htgBjnF2duVmR81lZEpVfXqtE= Subject key identifier: B8:86:B7:66:46:FE:21:72:2E:EE:18:73:73:22:02:24:AD:DC:9C:9A Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Certificate serial: 2576BFDAA6A7DA48373D07A7489E938925C25284 Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32342d3234203d3e203538343837.roa Signing time: Sun 03 May 2026 02:22:49 +0000 ROA not before: Sun 03 May 2026 02:17:49 +0000 ROA not after: Sun 02 May 2027 02:22:49 +0000 asID: 58487 IP address blocks: 103.253.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:76:bf:da:a6:a7:da:48:37:3d:07:a7:48:9e:93:89:25:c2:52:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Validity Not Before: May 3 02:17:49 2026 GMT Not After : May 2 02:22:49 2027 GMT Subject: CN=B886B76646FE21722EEE187373220224ADDC9C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ba:2a:df:a1:7c:32:c0:c6:d7:98:86:36:a2: 47:0f:dd:5e:6a:40:0f:b5:05:10:fa:1d:6d:5b:0e: f7:0e:8d:6d:83:48:f8:34:47:ce:09:2b:12:76:36: e5:b5:3d:4b:c3:ff:02:0e:0c:2c:74:bd:68:40:9d: af:96:e0:2c:40:6f:a2:d3:db:9e:d4:16:23:93:d7: 93:40:71:2f:08:22:09:48:18:d1:05:3a:45:f1:8a: 51:1b:53:74:3a:ad:a1:b8:a6:0d:7e:ed:c1:48:c9: e3:71:72:1c:3e:de:81:4c:fe:bb:d4:73:ff:6e:80: de:37:0f:43:d2:42:dd:c8:e5:7b:ff:35:2e:aa:1f: 12:b1:43:1b:1b:b5:92:3f:d0:e7:9b:61:54:64:97: 00:fd:38:57:13:03:69:b4:46:6a:79:b9:ec:2b:b9: 2a:2f:61:21:f5:d7:f5:e0:e7:b8:1e:f8:74:d7:b3: bd:7f:a2:3a:fe:fd:94:3c:00:69:8b:a9:ef:85:c2: 9a:03:50:95:4b:d3:1d:3e:e5:fb:24:89:00:cd:e7: 3c:93:79:93:8d:0d:50:6c:03:e3:37:4a:5d:9b:0e: cf:ff:54:7e:4a:39:e8:b1:f6:af:a6:3d:8b:56:05: 1e:69:d0:46:ac:64:46:69:ea:7f:44:00:d9:d2:01: 2e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:86:B7:66:46:FE:21:72:2E:EE:18:73:73:22:02:24:AD:DC:9C:9A X509v3 Authority Key Identifier: keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.212.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:5a:a7:e2:77:d0:b5:04:06:cc:59:db:a8:53:bc:2e:8a:bd: c2:e4:6e:9b:26:78:a4:4a:59:03:cf:fa:b7:d0:00:5f:b2:33: 39:c2:9b:e4:f7:d9:5d:ef:05:0b:bb:92:03:6f:ed:16:36:3a: bc:f0:5b:4b:9a:82:db:9e:2c:bc:e7:29:8e:81:8d:17:97:a3: 80:f4:cd:59:61:47:2f:d4:96:de:d6:71:fe:a4:ed:26:89:c7: ab:91:5b:c1:c7:c7:7d:76:2e:57:52:73:c1:53:dd:3d:7c:1c: 0a:66:a8:bb:27:fb:64:e9:ae:f1:66:64:10:d4:41:96:0b:27: 56:43:98:3a:40:2e:ee:37:2b:e9:f1:33:b9:e7:d3:be:80:91: ed:cb:4d:50:de:f8:cb:82:2e:df:3b:0f:8a:ff:70:91:0a:f3: 17:2b:1d:8e:93:0c:b3:fe:67:54:cd:0d:91:96:a8:f8:1c:96: 3a:d3:f5:4c:f3:1f:47:18:35:cc:bf:d6:13:72:95:7b:06:3c: f3:30:d1:07:d6:7f:8c:12:9e:07:e2:71:bb:03:d9:d4:81:6a: af:d7:bc:b3:c4:4a:1b:60:04:35:85:d0:02:35:80:6a:5f:67: c4:ea:ed:38:ca:bc:69:31:7a:a3:08:24:db:5b:41:f4:3d:b0: d7:48:dc:95 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJXa/2qan2kg3PQenSJ6TiSXCUoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEOEI4QkY0NjdGRThFQUMxOTNERjREMjYzQzg3RjVB OTEyNTlBOTAeFw0yNjA1MDMwMjE3NDlaFw0yNzA1MDIwMjIyNDlaMDMxMTAvBgNV BAMTKEI4ODZCNzY2NDZGRTIxNzIyRUVFMTg3MzczMjIwMjI0QUREQzlDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpuirfoXwywMbXmIY2okcP3V5q QA+1BRD6HW1bDvcOjW2DSPg0R84JKxJ2NuW1PUvD/wIODCx0vWhAna+W4CxAb6LT 257UFiOT15NAcS8IIglIGNEFOkXxilEbU3Q6raG4pg1+7cFIyeNxchw+3oFM/rvU c/9ugN43D0PSQt3I5Xv/NS6qHxKxQxsbtZI/0OebYVRklwD9OFcTA2m0Rmp5uewr uSovYSH11/Xg57ge+HTXs71/ojr+/ZQ8AGmLqe+FwpoDUJVL0x0+5fskiQDN5zyT eZONDVBsA+M3Sl2bDs//VH5KOeix9q+mPYtWBR5p0EasZEZp6n9EANnSAS7tAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUuIa3Zkb+IXIu7hhzcyICJK3cnJowHwYDVR0j BBgwFoAUkdi4v0Z/6OrBk99NJjyH9akSWakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ4ZjA2MGYtZTRiMy00YTRlLTk3ZmQtZjYxYWIxN2RlZWVkLzAvOTFEOEI4QkY0 NjdGRThFQUMxOTNERjREMjYzQzg3RjVBOTEyNTlBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUQ4QjhCRjQ2N0ZFOEVBQzE5M0RGNEQyNjNDODdGNUE5MTI1 OUE5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMxMzAzMzJlMzIzNTMzMmUzMjMxMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzQzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/3UMA0GCSqG SIb3DQEBCwUAA4IBAQCMWqfid9C1BAbMWduoU7wuir3C5G6bJnikSlkDz/q30ABf sjM5wpvk99ld7wULu5IDb+0WNjq88FtLmoLbniy85ymOgY0Xl6OA9M1ZYUcv1Jbe 1nH+pO0micerkVvBx8d9di5XUnPBU909fBwKZqi7J/tk6a7xZmQQ1EGWCydWQ5g6 QC7uNyvp8TO559O+gJHty01Q3vjLgi7fOw+K/3CRCvMXKx2Okwyz/mdUzQ2Rlqj4 HJY60/VM8x9HGDXMv9YTcpV7BjzzMNEH1n+MEp4H4nG7A9nUgWqv17yzxEobYAQ1 hdACNYBqX2fE6u04yrxpMXqjCCTbW0H0PbDXSNyV -----END CERTIFICATE-----Generated at Wed May 13 01:45:22 2026 by rpki-client