$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa File: 3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa (raw, json) Hash identifier: /dy1vpCusUxjx9tOrWaCKRl2KSXA8yenkPc1J3oKgv0= Subject key identifier: 6C:25:DE:19:D7:89:B1:D6:49:AC:F0:74:A8:A8:BB:57:6D:82:C9:F8 Certificate issuer: /CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Certificate serial: 1EEFD32EFFE1012AB10AE70AFBE294F3398E2C8C Authority key identifier: D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa Signing time: Sun 03 May 2026 02:23:08 +0000 ROA not before: Sun 03 May 2026 02:18:08 +0000 ROA not after: Sun 02 May 2027 02:23:08 +0000 asID: 139456 IP address blocks: 103.185.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ef:d3:2e:ff:e1:01:2a:b1:0a:e7:0a:fb:e2:94:f3:39:8e:2c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Validity Not Before: May 3 02:18:08 2026 GMT Not After : May 2 02:23:08 2027 GMT Subject: CN=6C25DE19D789B1D649ACF074A8A8BB576D82C9F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:41:68:fa:f4:c3:16:53:6a:75:2a:6d:08:94: a9:30:b3:f9:5a:7a:06:7f:26:72:23:66:43:a9:3c: ed:2b:75:3c:68:5e:0c:3e:4e:9d:84:30:cb:23:b9: 86:66:94:0e:ba:c9:bf:7b:7b:3f:a5:3c:17:ba:f3: 96:fe:c3:34:8e:ec:f3:53:7f:b4:7f:b9:d7:ea:63: aa:6f:32:99:a7:73:22:c5:f6:ee:3c:51:2a:94:7a: 79:11:b4:1f:9a:3c:fa:b2:38:c8:38:23:32:c2:81: 6e:8e:d1:cb:a1:f6:da:a9:62:26:6d:82:53:81:7c: a7:70:ed:4b:16:b7:36:7c:1b:54:ec:0d:18:87:a7: 85:bb:6e:3c:c7:8a:98:8b:3e:6c:a5:38:f1:7a:b3: 72:31:31:9a:29:84:92:4e:9f:c1:30:f9:f6:14:50: 2a:b8:b8:48:97:59:d5:dd:33:c2:b9:37:72:6f:4b: f3:e8:d0:a8:3e:19:da:b4:7a:13:fc:4a:01:fe:3d: 0c:f9:c2:26:69:62:ea:dc:01:ed:4e:4e:74:0d:5d: 11:dd:c9:17:32:fe:a3:ca:f0:10:42:30:3f:50:61: b8:d3:b3:78:e1:99:6d:29:3e:92:48:95:e9:34:30: dd:94:5e:33:21:4e:02:dc:5c:9e:c1:f1:89:57:e4: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:25:DE:19:D7:89:B1:D6:49:AC:F0:74:A8:A8:BB:57:6D:82:C9:F8 X509v3 Authority Key Identifier: keyid:D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.38.0/23 Signature Algorithm: sha256WithRSAEncryption 93:3a:0d:00:d1:e1:1b:d3:1f:a1:8e:17:65:37:25:e6:f2:0f: 8a:f8:32:49:9f:9b:d4:5b:35:ce:41:1f:2d:74:42:b6:b4:af: 01:1a:53:0d:7b:75:c1:fe:91:4d:35:30:b9:30:4c:6d:3f:e5: d2:db:d2:c0:b9:78:59:1a:cd:6a:fb:06:29:09:b2:f3:57:13: 3f:4c:82:83:bb:52:18:61:80:0e:8f:71:3b:b6:3e:1d:7a:82: fa:cb:fb:85:eb:55:d7:86:de:25:4d:c2:9e:b4:ff:42:70:96: 58:4b:32:10:d5:97:01:02:10:72:8c:02:23:27:8c:31:96:48: 18:3d:93:06:49:04:81:aa:67:12:01:d5:84:d1:a3:e7:af:e9: b3:5e:2d:95:e8:77:b0:47:81:36:9a:c6:8e:f0:e9:2a:a2:b9: de:d4:ab:c0:ea:dc:5c:62:bc:b2:ed:ce:f1:bb:2a:ec:fb:fc: 01:d8:3f:7c:6d:32:61:12:12:73:9a:cd:32:4a:c7:ad:d8:0f: f0:81:c4:94:25:26:cd:88:5d:fe:72:fa:27:8c:42:0b:9a:4c: a3:80:b3:e6:28:2d:da:f8:ea:48:4d:b0:cc:26:4b:73:a7:74: d5:03:cb:bf:89:b6:98:96:eb:be:b9:58:07:8d:f3:b1:1e:5e: e6:26:fe:0e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHu/TLv/hASqxCucK++KU8zmOLIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2 QzdGN0UxNTAeFw0yNjA1MDMwMjE4MDhaFw0yNzA1MDIwMjIzMDhaMDMxMTAvBgNV BAMTKDZDMjVERTE5RDc4OUIxRDY0OUFDRjA3NEE4QThCQjU3NkQ4MkM5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQWj69MMWU2p1Km0IlKkws/la egZ/JnIjZkOpPO0rdTxoXgw+Tp2EMMsjuYZmlA66yb97ez+lPBe685b+wzSO7PNT f7R/udfqY6pvMpmncyLF9u48USqUenkRtB+aPPqyOMg4IzLCgW6O0cuh9tqpYiZt glOBfKdw7UsWtzZ8G1TsDRiHp4W7bjzHipiLPmylOPF6s3IxMZophJJOn8Ew+fYU UCq4uEiXWdXdM8K5N3JvS/Po0Kg+Gdq0ehP8SgH+PQz5wiZpYurcAe1OTnQNXRHd yRcy/qPK8BBCMD9QYbjTs3jhmW0pPpJIlek0MN2UXjMhTgLcXJ7B8YlX5D/zAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbCXeGdeJsdZJrPB0qKi7V22CyfgwHwYDVR0j BBgwFoAU0P9Q0iFxVJ2P+pqrPoH4dmx/fhUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwNWFiNjYtNjZhZi00MGE0LTg5YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIy MTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2QzdGN0UxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEZGNTBEMjIxNzE1NDlEOEZGQTlBQUIzRTgxRjg3NjZDN0Y3 RTE1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJlMDVhYjY2LTY2YWYtNDBhNC04 OWE1LTgwNjk0MDI4MzlhOS8wLzMxMzAzMzJlMzEzODM1MmUzMzM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7kmMA0GCSqG SIb3DQEBCwUAA4IBAQCTOg0A0eEb0x+hjhdlNyXm8g+K+DJJn5vUWzXOQR8tdEK2 tK8BGlMNe3XB/pFNNTC5MExtP+XS29LAuXhZGs1q+wYpCbLzVxM/TIKDu1IYYYAO j3E7tj4deoL6y/uF61XXht4lTcKetP9CcJZYSzIQ1ZcBAhByjAIjJ4wxlkgYPZMG SQSBqmcSAdWE0aPnr+mzXi2V6HewR4E2msaO8Okqorne1KvA6txcYryy7c7xuyrs +/wB2D98bTJhEhJzms0ySset2A/wgcSUJSbNiF3+cvonjEILmkyjgLPmKC3a+OpI TbDMJktzp3TVA8u/ibaYluu+uVgHjfOxHl7mJv4O -----END CERTIFICATE-----Generated at Wed May 13 04:26:23 2026 by rpki-client