$ rpki-client -vvf rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa File: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (raw, json) Hash identifier: S7aZljmglE5xN0p6gxyZ/h445nngm6FqwRnmfuS0RS0= Subject key identifier: 07:2D:63:4E:AC:D6:2F:6D:74:EC:7D:C6:6B:F3:FF:2E:4E:23:4B:AF Certificate issuer: /CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Certificate serial: 23ED6BAC05AD23B9E3F8556195A8A7AB406D666B Authority key identifier: 48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa Signing time: Sun 03 May 2026 02:24:40 +0000 ROA not before: Sun 03 May 2026 02:19:40 +0000 ROA not after: Sun 02 May 2027 02:24:40 +0000 asID: 150218 IP address blocks: 103.218.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ed:6b:ac:05:ad:23:b9:e3:f8:55:61:95:a8:a7:ab:40:6d:66:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Validity Not Before: May 3 02:19:40 2026 GMT Not After : May 2 02:24:40 2027 GMT Subject: CN=072D634EACD62F6D74EC7DC66BF3FF2E4E234BAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:63:cc:30:8b:6d:4f:cb:73:41:f4:11:ab:52: 2a:14:95:00:11:a2:69:90:df:a6:05:cd:c5:30:17: 6e:a2:49:87:f1:3f:04:53:3c:15:e4:38:0a:c2:f9: e0:a9:4a:4e:e6:45:e2:b1:a3:c2:db:1b:9e:95:ec: f1:d2:f0:33:50:1d:a3:b5:e1:33:15:41:9a:37:50: d3:dd:ff:b5:99:1b:bb:1f:c9:14:fa:2d:83:f9:93: 62:81:99:f5:9f:ef:15:92:29:bb:71:80:11:26:ab: d4:07:50:a0:46:97:e7:59:2e:b2:39:23:c3:c9:f1: 23:51:9e:04:98:92:0a:ab:9e:6b:db:44:9e:99:30: 12:9d:64:22:ca:08:c7:1c:39:36:ce:f7:1d:68:af: b3:d5:6a:4b:30:c5:4f:77:f2:46:e8:2a:c7:99:de: 2d:17:ec:d5:fe:ee:9e:db:55:94:98:ce:28:7a:78: 57:ea:81:4f:d1:d5:d2:2a:5c:4e:09:ec:74:be:5f: ef:15:7a:3c:50:11:66:94:f5:bf:32:30:4b:0a:12: 88:f9:3c:1b:a7:3e:08:be:b9:96:65:0b:f4:1a:03: f8:d3:52:81:f3:0a:28:e5:26:72:1b:c5:a3:54:76: ef:45:bb:89:f4:dd:7f:0d:77:9f:99:b2:83:71:fa: 6b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2D:63:4E:AC:D6:2F:6D:74:EC:7D:C6:6B:F3:FF:2E:4E:23:4B:AF X509v3 Authority Key Identifier: keyid:48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.218.104.0/24 Signature Algorithm: sha256WithRSAEncryption 12:32:8b:89:11:99:c2:28:ce:6a:9d:9f:7c:fe:25:3e:17:7c: 24:cc:76:76:3d:83:7c:5e:78:5e:4c:a4:39:48:ac:aa:1a:8e: c7:98:29:58:b9:a0:e9:ec:3d:55:cc:16:e8:a3:ee:19:e9:f4: 3a:97:7c:85:db:8e:39:9c:70:5c:b2:83:26:8a:36:9e:2f:a1: da:be:fe:22:06:48:b7:a4:03:a8:bf:7a:57:5c:28:f9:2a:d7: db:58:eb:a7:6a:2d:d3:72:26:e5:0d:da:88:f9:c8:8e:bc:cf: 7d:67:1f:00:22:3a:b3:68:cf:d5:fb:32:37:12:14:16:c4:7b: f0:88:fc:8e:4a:e1:76:0f:68:c5:3f:a6:7b:fc:02:82:af:9f: 7e:a2:82:30:e7:be:84:aa:ca:6c:a7:d3:8c:7e:8d:b3:89:d3: 9c:48:bb:0d:f4:ab:26:a9:ac:51:68:ce:b8:56:cb:5b:6f:be: 16:bd:e1:f6:4b:65:1b:6d:b2:c7:9d:9e:d9:76:f7:0c:e9:32: 95:2e:75:c7:94:0c:f5:21:e3:a6:da:c2:f8:60:91:27:28:ca: 86:9d:4d:70:2d:74:e9:32:34:02:f6:96:64:40:af:a1:71:7b: c8:53:ad:f6:95:fa:85:d9:92:5a:fa:15:01:4e:d9:ee:fe:23: 5c:00:bc:9f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUI+1rrAWtI7nj+FVhlainq0BtZmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0MjBF RUZEODM1MTAeFw0yNjA1MDMwMjE5NDBaFw0yNzA1MDIwMjI0NDBaMDMxMTAvBgNV BAMTKDA3MkQ2MzRFQUNENjJGNkQ3NEVDN0RDNjZCRjNGRjJFNEUyMzRCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPY8wwi21Py3NB9BGrUioUlQAR ommQ36YFzcUwF26iSYfxPwRTPBXkOArC+eCpSk7mReKxo8LbG56V7PHS8DNQHaO1 4TMVQZo3UNPd/7WZG7sfyRT6LYP5k2KBmfWf7xWSKbtxgBEmq9QHUKBGl+dZLrI5 I8PJ8SNRngSYkgqrnmvbRJ6ZMBKdZCLKCMccOTbO9x1or7PVakswxU938kboKseZ 3i0X7NX+7p7bVZSYzih6eFfqgU/R1dIqXE4J7HS+X+8VejxQEWaU9b8yMEsKEoj5 PBunPgi+uZZlC/QaA/jTUoHzCijlJnIbxaNUdu9Fu4n03X8Nd5+ZsoNx+mvbAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUBy1jTqzWL2107H3Ga/P/Lk4jS68wHwYDVR0j BBgwFoAUSIfnIdqQe4IjAl/94PEUIO79g1EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM0MGRmMTMtYzRlOS00MjE4LWIxMTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFE QTkwN0I4MjIzMDI1RkZERTBGMTE0MjBFRUZEODM1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg3RTcyMURBOTA3QjgyMjMwMjVGRkRFMEYxMTQyMEVFRkQ4 MzUxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMzNDBkZjEzLWM0ZTktNDIxOC1i MTE0LWRlYWQxNjQ4Mjg1Yy8wLzMxMzAzMzJlMzIzMTM4MmUzMTMwMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzMjMxMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn2mgwDQYJ KoZIhvcNAQELBQADggEBABIyi4kRmcIozmqdn3z+JT4XfCTMdnY9g3xeeF5MpDlI rKoajseYKVi5oOnsPVXMFuij7hnp9DqXfIXbjjmccFyygyaKNp4vodq+/iIGSLek A6i/eldcKPkq19tY66dqLdNyJuUN2oj5yI68z31nHwAiOrNoz9X7MjcSFBbEe/CI /I5K4XYPaMU/pnv8AoKvn36igjDnvoSqymyn04x+jbOJ05xIuw30qyaprFFozrhW y1tvvha94fZLZRttssedntl29wzpMpUudceUDPUh46bawvhgkScoyoadTXAtdOky NAL2lmRAr6Fxe8hTrfaV+oXZklr6FQFO2e7+I1wAvJ8= -----END CERTIFICATE-----Generated at Wed May 13 08:48:52 2026 by rpki-client