$ rpki-client -vvf rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa File: 3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (raw, json) Hash identifier: PHU5h1LHUlDbfO+kxPjDf9ATbrrXtorAw7bNDenM+FM= Subject key identifier: 25:08:E8:3B:B0:1F:48:BE:CA:19:E5:AF:CB:26:E4:08:13:92:A0:CC Certificate issuer: /CN=71BEA54A40125136212043443871943E11E47CE8 Certificate serial: 55089B93B5B3A665FE9A470EF2DABA341D6F3D48 Authority key identifier: 71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa Signing time: Sun 03 May 2026 02:26:03 +0000 ROA not before: Sun 03 May 2026 02:21:03 +0000 ROA not after: Sun 02 May 2027 02:26:03 +0000 asID: 151506 IP address blocks: 103.234.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:08:9b:93:b5:b3:a6:65:fe:9a:47:0e:f2:da:ba:34:1d:6f:3d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71BEA54A40125136212043443871943E11E47CE8 Validity Not Before: May 3 02:21:03 2026 GMT Not After : May 2 02:26:03 2027 GMT Subject: CN=2508E83BB01F48BECA19E5AFCB26E4081392A0CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b7:e4:53:c7:46:89:0e:81:01:0f:f3:67:fb: c3:48:61:94:fa:68:1f:1a:8c:c3:8f:51:18:53:46: e2:ce:8b:c2:90:3d:13:df:c7:d7:d2:1c:49:bc:e5: 1f:e0:1e:61:53:b2:ea:c6:49:64:21:41:bc:dc:3d: b0:82:0b:9d:48:c7:50:d8:fb:61:e9:3e:ea:b3:3d: 7d:62:64:31:1a:60:20:2f:6f:98:d4:52:e4:22:c9: 74:17:ed:0d:39:42:a3:65:33:33:fa:5b:ba:c3:23: a5:73:1d:eb:e5:ed:12:48:69:c8:61:67:cd:e9:98: b7:f4:16:83:18:8b:e8:24:d7:26:60:07:36:ff:03: 02:95:b0:45:f8:fe:82:84:fa:99:32:e4:7f:5f:28: e8:0e:84:41:8a:4d:ca:7e:de:19:22:49:13:11:de: a3:1e:a5:32:09:6e:10:0a:c2:81:30:0e:eb:60:f0: f0:47:d6:63:16:49:e5:7c:21:14:24:54:32:69:fd: b9:a9:3c:dd:b9:4a:a0:72:62:8d:ca:2a:70:be:4c: 2e:7b:00:42:8a:91:e0:ce:fb:27:a6:bc:5f:40:75: ec:d7:b6:33:af:dc:9e:18:dc:a6:64:41:14:9f:64: a1:2b:fb:9f:09:a3:b7:6f:50:c6:af:d5:2a:40:55: 2c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:08:E8:3B:B0:1F:48:BE:CA:19:E5:AF:CB:26:E4:08:13:92:A0:CC X509v3 Authority Key Identifier: keyid:71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.18.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:15:d0:9b:27:d8:82:6e:3c:ce:db:17:5c:4a:e8:79:d7:7f: a4:3c:f0:52:56:70:a3:21:dc:b4:11:f0:5d:9d:15:b6:19:3c: b6:5d:2d:a7:80:77:ed:9b:bc:16:37:e3:73:da:ce:c3:cc:d4: 1d:03:d1:b0:15:69:c6:4e:27:f8:24:d1:c8:66:63:a9:01:d3: 0d:3f:53:f3:fa:64:2c:54:3b:c8:de:d1:0b:f3:3e:04:aa:24: 71:db:29:57:9d:32:21:95:e8:8b:fa:b3:48:ee:5f:39:6f:ca: 4d:b0:98:3d:72:18:98:8b:07:62:6e:c2:d2:01:53:41:0b:c5: 7d:3d:ea:19:d2:46:1c:2e:3f:3f:49:6e:54:94:45:03:ba:c7: 57:84:46:30:e5:47:96:2b:1a:97:92:4c:7e:f0:06:bd:03:6e: b6:e8:2a:f5:77:c6:18:c9:40:8e:a5:b9:6f:e3:5d:f5:54:a3: c1:48:a0:af:74:b6:dd:98:2d:5e:46:59:26:4f:fd:71:6d:cd: 46:1e:05:8f:7b:9a:b5:9b:8e:6c:a8:e4:1f:66:6b:d4:bb:6c: 82:28:f3:45:68:72:dc:79:13:7a:f1:4c:da:63:ff:31:fc:ac: 00:5d:5d:18:a4:3d:d6:3e:71:1d:ac:47:fe:2d:83:e9:cc:3e: 28:9e:2b:19 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVQibk7WzpmX+mkcO8tq6NB1vPUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0Ux MUU0N0NFODAeFw0yNjA1MDMwMjIxMDNaFw0yNzA1MDIwMjI2MDNaMDMxMTAvBgNV BAMTKDI1MDhFODNCQjAxRjQ4QkVDQTE5RTVBRkNCMjZFNDA4MTM5MkEwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDut+RTx0aJDoEBD/Nn+8NIYZT6 aB8ajMOPURhTRuLOi8KQPRPfx9fSHEm85R/gHmFTsurGSWQhQbzcPbCCC51Ix1DY +2HpPuqzPX1iZDEaYCAvb5jUUuQiyXQX7Q05QqNlMzP6W7rDI6VzHevl7RJIachh Z83pmLf0FoMYi+gk1yZgBzb/AwKVsEX4/oKE+pky5H9fKOgOhEGKTcp+3hkiSRMR 3qMepTIJbhAKwoEwDutg8PBH1mMWSeV8IRQkVDJp/bmpPN25SqByYo3KKnC+TC57 AEKKkeDO+yemvF9AdezXtjOv3J4Y3KZkQRSfZKEr+58Jo7dvUMav1SpAVSyVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJQjoO7AfSL7KGeWvyybkCBOSoMwwHwYDVR0j BBgwFoAUcb6lSkASUTYhIENEOHGUPhHkfOgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg4MzI5Y2EtZThmNy00ZDNkLWFjZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0 MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0UxMUU0N0NFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUJFQTU0QTQwMTI1MTM2MjEyMDQzNDQzODcxOTQzRTExRTQ3 Q0U4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM4ODMyOWNhLWU4ZjctNGQzZC1h Y2U0LTgwN2Y4YWE1OGFlMC8wLzMxMzAzMzJlMzIzMzM0MmUzMTM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMxMzUzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+oSMA0GCSqG SIb3DQEBCwUAA4IBAQCOFdCbJ9iCbjzO2xdcSuh513+kPPBSVnCjIdy0EfBdnRW2 GTy2XS2ngHftm7wWN+Nz2s7DzNQdA9GwFWnGTif4JNHIZmOpAdMNP1Pz+mQsVDvI 3tEL8z4EqiRx2ylXnTIhleiL+rNI7l85b8pNsJg9chiYiwdibsLSAVNBC8V9PeoZ 0kYcLj8/SW5UlEUDusdXhEYw5UeWKxqXkkx+8Aa9A2626Cr1d8YYyUCOpblv4131 VKPBSKCvdLbdmC1eRlkmT/1xbc1GHgWPe5q1m45sqOQfZmvUu2yCKPNFaHLceRN6 8UzaY/8x/KwAXV0YpD3WPnEdrEf+LYPpzD4onisZ -----END CERTIFICATE-----Generated at Wed May 13 02:34:58 2026 by rpki-client