$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa File: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (raw, json) Hash identifier: tK3BCEgCj8v33DN7k7o6YbHDtq6HBaeP5Xix6hm+Kxc= Subject key identifier: 64:1C:AB:3A:DF:54:FE:C6:DB:02:6A:8F:8A:2F:18:8C:9C:08:BD:AF Certificate issuer: /CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Certificate serial: 78742B1C6C0DD96B1F6963D351426565726AFD3C Authority key identifier: 7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa Signing time: Sun 03 May 2026 02:27:00 +0000 ROA not before: Sun 03 May 2026 02:22:00 +0000 ROA not after: Sun 02 May 2027 02:27:00 +0000 asID: 132652 IP address blocks: 103.25.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:74:2b:1c:6c:0d:d9:6b:1f:69:63:d3:51:42:65:65:72:6a:fd:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Validity Not Before: May 3 02:22:00 2026 GMT Not After : May 2 02:27:00 2027 GMT Subject: CN=641CAB3ADF54FEC6DB026A8F8A2F188C9C08BDAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8f:08:2d:dc:f4:b2:38:94:14:7f:70:3f:e0: 71:3f:e9:fa:b3:6a:1d:b7:f5:df:91:ee:23:d2:18: 2d:b1:c6:57:29:ff:ef:42:58:5b:6e:38:cc:23:eb: 1d:18:8a:fb:f9:08:ec:f7:17:81:26:56:e4:9d:1d: 3c:e2:e3:35:f3:11:94:62:ac:fc:5d:04:5c:61:af: 01:aa:f0:f6:d7:20:2a:5e:19:67:ae:73:88:a6:f6: 8f:d0:63:99:ac:66:17:ef:04:54:3c:4b:62:c2:f8: f9:56:d5:a1:93:90:bc:04:97:5a:ea:d6:f6:b4:cd: a5:14:a5:fd:1d:2c:d4:5a:3f:e6:84:da:f4:44:46: fb:77:74:79:02:65:bc:93:31:8d:63:92:8b:f8:93: 67:8f:e6:39:e9:8a:94:9b:32:3e:37:e0:eb:7a:fa: ab:bc:87:05:d7:7d:9b:e4:3c:da:69:64:4e:ef:30: e8:3a:95:19:71:93:28:46:4d:8d:50:79:f9:64:ef: f8:85:73:81:0c:5f:f7:66:8b:d1:b4:d2:56:df:4e: d7:27:fc:30:f2:4b:05:24:87:09:43:f8:a1:e7:5d: 7d:a8:ce:cd:bc:9b:88:e0:94:96:60:81:54:ff:f6: c4:0d:61:d9:76:d7:5b:8c:d5:1d:1d:09:9d:44:c9: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1C:AB:3A:DF:54:FE:C6:DB:02:6A:8F:8A:2F:18:8C:9C:08:BD:AF X509v3 Authority Key Identifier: keyid:7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.192.0/22 Signature Algorithm: sha256WithRSAEncryption 20:5e:a5:ef:e1:48:a5:72:71:c5:37:cf:d6:dc:57:e0:aa:fe: d5:b6:61:19:d5:69:52:6d:41:c2:4b:ef:10:33:98:20:4d:ab: 92:67:1a:8e:51:c1:53:a0:f5:15:ac:60:c9:e0:ea:eb:65:74: 96:aa:1d:5d:e3:75:8c:49:59:12:fb:a1:a9:3a:e6:60:ca:ac: 76:b8:b6:64:3d:df:06:ce:f0:1b:0f:a7:8e:bd:92:14:d0:37: cc:73:bf:81:ba:7d:78:70:74:c0:bf:3e:b7:f3:0c:c3:bb:6d: c4:b6:36:98:55:c5:45:9d:50:50:cb:57:b7:7f:48:69:2b:49: 86:06:7b:c8:42:04:09:a9:b4:c6:be:9b:c0:15:b6:3e:c3:31: 9c:1e:ea:c2:9a:af:0d:3b:fe:a7:d6:06:a6:ec:88:a8:c5:bd: c8:8a:02:a0:ee:52:e6:66:bf:30:3f:ca:51:c5:61:4f:aa:d8: d4:60:7a:aa:72:04:22:85:ac:44:45:24:0d:53:df:0b:cc:1b: 55:20:43:a2:88:22:bd:88:e4:4c:5f:5b:00:ae:d9:a3:37:be: af:94:75:c9:39:83:dc:01:9d:f4:8c:9c:19:2c:c5:1f:dd:62: 0d:70:87:3d:f8:2b:14:18:74:e7:0f:c6:a8:ee:85:08:9d:16: 4e:94:88:9c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeHQrHGwN2WsfaWPTUUJlZXJq/TwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQzM0NkRFM0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4 MUZBMEVFMTAeFw0yNjA1MDMwMjIyMDBaFw0yNzA1MDIwMjI3MDBaMDMxMTAvBgNV BAMTKDY0MUNBQjNBREY1NEZFQzZEQjAyNkE4RjhBMkYxODhDOUMwOEJEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDijwgt3PSyOJQUf3A/4HE/6fqz ah239d+R7iPSGC2xxlcp/+9CWFtuOMwj6x0Yivv5COz3F4EmVuSdHTzi4zXzEZRi rPxdBFxhrwGq8PbXICpeGWeuc4im9o/QY5msZhfvBFQ8S2LC+PlW1aGTkLwEl1rq 1va0zaUUpf0dLNRaP+aE2vRERvt3dHkCZbyTMY1jkov4k2eP5jnpipSbMj434Ot6 +qu8hwXXfZvkPNppZE7vMOg6lRlxkyhGTY1Qeflk7/iFc4EMX/dmi9G00lbfTtcn /DDySwUkhwlD+KHnXX2ozs28m4jglJZggVT/9sQNYdl211uM1R0dCZ1EyeR/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZByrOt9U/sbbAmqPii8YjJwIva8wHwYDVR0j BBgwFoAUfvw0beOhTDAwN9Pzv6QfzYH6DuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I2MzJhMmMtNDA2ZS00NWQ3LWEwMjgtMjYwNDc0Yzc3MDM4LzAvN0VGQzM0NkRF M0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4MUZBMEVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUZDMzQ2REUzQTE0QzMwMzAzN0QzRjNCRkE0MUZDRDgxRkEw RUUxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiNjMyYTJjLTQwNmUtNDVkNy1h MDI4LTI2MDQ3NGM3NzAzOC8wLzMxMzAzMzJlMzIzNTJlMzEzOTMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxnAMA0GCSqG SIb3DQEBCwUAA4IBAQAgXqXv4UilcnHFN8/W3Ffgqv7VtmEZ1WlSbUHCS+8QM5gg TauSZxqOUcFToPUVrGDJ4OrrZXSWqh1d43WMSVkS+6GpOuZgyqx2uLZkPd8GzvAb D6eOvZIU0DfMc7+Bun14cHTAvz638wzDu23EtjaYVcVFnVBQy1e3f0hpK0mGBnvI QgQJqbTGvpvAFbY+wzGcHurCmq8NO/6n1gam7Iioxb3IigKg7lLmZr8wP8pRxWFP qtjUYHqqcgQihaxERSQNU98LzBtVIEOiiCK9iORMX1sArtmjN76vlHXJOYPcAZ30 jJwZLMUf3WINcIc9+CsUGHTnD8ao7oUInRZOlIic -----END CERTIFICATE-----Generated at Wed May 13 09:20:30 2026 by rpki-client