$ rpki-client -vvf rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa File: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (raw, json) Hash identifier: ZGy+loCXTZu4lKXZ9Xy1tyQd/a/a5ZNJkzDyvD+H2Qo= Subject key identifier: C8:71:AC:18:DC:91:04:17:52:2D:5C:4A:87:C2:A6:47:F4:45:42:DA Certificate issuer: /CN=8F6B228755F970273B8D779247A1AE56FE0C9587 Certificate serial: 316ABE149893B063753C38D71B1B376A497380B6 Authority key identifier: 8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa Signing time: Sun 03 May 2026 02:25:20 +0000 ROA not before: Sun 03 May 2026 02:20:20 +0000 ROA not after: Sun 02 May 2027 02:25:20 +0000 asID: 151553 IP address blocks: 103.255.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6a:be:14:98:93:b0:63:75:3c:38:d7:1b:1b:37:6a:49:73:80:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F6B228755F970273B8D779247A1AE56FE0C9587 Validity Not Before: May 3 02:20:20 2026 GMT Not After : May 2 02:25:20 2027 GMT Subject: CN=C871AC18DC910417522D5C4A87C2A647F44542DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:04:44:be:76:40:d1:a1:ad:2c:7b:c4:25:02: db:a5:a1:4e:a3:63:ed:4b:2d:aa:f1:a7:2b:99:eb: 4a:b7:62:86:3e:99:20:c3:10:70:6d:18:e0:5e:f5: 57:cb:d2:19:f5:38:86:0f:ba:3e:38:1a:88:f7:0d: f1:f9:a9:31:43:cd:cc:67:64:c8:d2:35:e1:3d:ab: 2f:f2:cb:43:0f:5c:c3:19:b1:30:ef:02:bd:0e:34: b1:b4:24:ac:40:47:40:5c:01:41:51:27:69:33:e4: d4:2c:89:10:eb:81:98:89:12:96:26:2d:5d:93:b5: 9b:e1:3f:ca:c5:00:6e:79:17:e7:66:8b:bc:b8:6a: 28:d5:70:39:32:bf:b2:88:a6:85:7c:5f:dc:f4:9c: 86:53:82:3e:13:2a:f7:d9:e7:f0:f1:ec:65:a7:ea: 45:3d:25:de:b5:8f:10:e7:29:28:0b:2a:c3:13:ec: 46:38:e4:d8:29:7e:67:6b:eb:39:e1:de:79:cd:e5: eb:fe:e2:1d:05:ca:d2:a3:62:6f:5b:f7:c1:f5:6e: 01:86:9f:b2:21:f8:5f:70:85:75:28:a0:e0:72:4a: 57:99:e9:5c:c8:15:9d:23:23:c9:81:49:1a:d8:e1: 1f:8b:13:6f:8e:f6:16:e5:ef:36:da:5a:09:78:c1: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:71:AC:18:DC:91:04:17:52:2D:5C:4A:87:C2:A6:47:F4:45:42:DA X509v3 Authority Key Identifier: keyid:8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.99.0/24 Signature Algorithm: sha256WithRSAEncryption 18:e0:29:83:6d:37:4f:32:d6:78:d3:57:03:0c:e4:82:57:11: 1c:03:43:ba:26:07:59:fc:0b:c0:56:1c:fc:43:9c:df:73:91: d3:e8:ba:ee:fc:c2:5b:3b:09:d7:99:1c:cf:b1:4e:8f:fb:e0: 14:dd:d7:24:e5:66:4f:67:e8:2f:a2:7e:eb:fe:16:ce:0e:d1: f8:1e:a7:b9:46:5a:14:a4:ad:28:21:ce:05:24:08:c1:4b:46: db:8b:0f:71:67:3e:5d:a2:07:f8:05:cf:16:f1:ae:7f:50:fa: 27:81:ce:6a:76:48:a8:d4:7b:39:21:bf:f5:92:83:fa:8d:94: 9d:08:b8:4f:8c:53:03:05:67:7c:1f:21:87:45:cd:5d:03:b8: 2e:34:98:c9:a7:85:55:b1:f4:cd:0d:aa:0b:07:63:42:82:02: e6:78:78:89:5b:b2:c9:6f:31:9c:a3:7b:0b:74:36:7d:b7:61: 88:ed:1f:67:75:d6:34:71:38:6d:c2:e1:16:a4:2c:6c:49:c0: dd:3c:32:b8:c1:45:df:d9:fe:e2:fc:65:6a:0a:8a:36:62:9f: a7:7e:ff:50:49:31:02:df:96:fd:64:31:ea:2b:40:e1:94:ab: 38:ab:f7:77:f3:96:e9:a3:ae:23:24:cd:09:f6:cd:a9:03:70: 76:e7:a7:66 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMWq+FJiTsGN1PDjXGxs3aklzgLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY2QjIyODc1NUY5NzAyNzNCOEQ3NzkyNDdBMUFFNTZG RTBDOTU4NzAeFw0yNjA1MDMwMjIwMjBaFw0yNzA1MDIwMjI1MjBaMDMxMTAvBgNV BAMTKEM4NzFBQzE4REM5MTA0MTc1MjJENUM0QTg3QzJBNjQ3RjQ0NTQyREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6BES+dkDRoa0se8QlAtuloU6j Y+1LLarxpyuZ60q3YoY+mSDDEHBtGOBe9VfL0hn1OIYPuj44Goj3DfH5qTFDzcxn ZMjSNeE9qy/yy0MPXMMZsTDvAr0ONLG0JKxAR0BcAUFRJ2kz5NQsiRDrgZiJEpYm LV2TtZvhP8rFAG55F+dmi7y4aijVcDkyv7KIpoV8X9z0nIZTgj4TKvfZ5/Dx7GWn 6kU9Jd61jxDnKSgLKsMT7EY45Ngpfmdr6znh3nnN5ev+4h0FytKjYm9b98H1bgGG n7Ih+F9whXUooOBySleZ6VzIFZ0jI8mBSRrY4R+LE2+O9hbl7zbaWgl4wbZZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyHGsGNyRBBdSLVxKh8KmR/RFQtowHwYDVR0j BBgwFoAUj2sih1X5cCc7jXeSR6GuVv4MlYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU3ZmIxN2UtOWQ1OC00ZDUxLTg0NmUtMGE4NGM4Njk5MTQyLzAvOEY2QjIyODc1 NUY5NzAyNzNCOEQ3NzkyNDdBMUFFNTZGRTBDOTU4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjZCMjI4NzU1Rjk3MDI3M0I4RDc3OTI0N0ExQUU1NkZFMEM5 NTg3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM1N2ZiMTdlLTlkNTgtNGQ1MS04 NDZlLTBhODRjODY5OTE0Mi8wLzMxMzAzMzJlMzIzNTM1MmUzOTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/9jMA0GCSqG SIb3DQEBCwUAA4IBAQAY4CmDbTdPMtZ401cDDOSCVxEcA0O6JgdZ/AvAVhz8Q5zf c5HT6Lru/MJbOwnXmRzPsU6P++AU3dck5WZPZ+gvon7r/hbODtH4Hqe5RloUpK0o Ic4FJAjBS0bbiw9xZz5dogf4Bc8W8a5/UPongc5qdkio1Hs5Ib/1koP6jZSdCLhP jFMDBWd8HyGHRc1dA7guNJjJp4VVsfTNDaoLB2NCggLmeHiJW7LJbzGco3sLdDZ9 t2GI7R9nddY0cThtwuEWpCxsScDdPDK4wUXf2f7i/GVqCoo2Yp+nfv9QSTEC35b9 ZDHqK0DhlKs4q/d385bpo64jJM0J9s2pA3B256dm -----END CERTIFICATE-----Generated at Wed May 13 10:04:07 2026 by rpki-client