$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa File: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (raw, json) Hash identifier: Gp5/rWdRIu6ScqVU154gXkTtG4fAxGJvRR3MmRVopqg= Subject key identifier: 40:A7:45:1E:DC:CF:5A:A7:C2:8A:E5:E4:55:08:69:09:F5:DE:91:3C Certificate issuer: /CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Certificate serial: 2205654D3B720FE2822B96F79B1C33BE80848175 Authority key identifier: 7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa Signing time: Sun 03 May 2026 02:27:38 +0000 ROA not before: Sun 03 May 2026 02:22:38 +0000 ROA not after: Sun 02 May 2027 02:27:38 +0000 asID: 151994 IP address blocks: 103.255.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:05:65:4d:3b:72:0f:e2:82:2b:96:f7:9b:1c:33:be:80:84:81:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Validity Not Before: May 3 02:22:38 2026 GMT Not After : May 2 02:27:38 2027 GMT Subject: CN=40A7451EDCCF5AA7C28AE5E455086909F5DE913C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:f7:64:cf:8c:52:06:8a:ca:9b:44:2c:0e: 53:0a:2a:61:d9:93:a6:85:cd:1e:e2:2b:f5:63:ba: 5b:10:d7:c6:01:bf:a8:bb:a2:fe:b9:89:d3:48:17: 26:ec:59:8b:5f:66:27:c6:e2:76:b2:f4:15:86:cd: b4:0e:9a:a8:81:7a:3e:72:cb:4b:51:66:78:4d:a6: 97:1d:58:3b:4a:d0:1b:14:37:cc:75:e9:00:a5:a6: 4b:e4:fe:5d:d3:ea:3e:49:c4:97:5f:2d:a1:d3:e1: 8e:ab:5c:a5:0f:c5:d3:07:3f:a6:f6:ca:43:f9:c8: de:0b:b9:04:a8:ed:c5:00:d6:c2:af:bf:a3:da:1d: 7e:68:cd:79:cb:5f:6b:64:cf:be:30:ad:74:a0:ee: b9:f3:e5:46:ac:0f:f3:66:9a:c4:f1:82:14:ff:68: 62:c7:08:97:40:cb:97:52:f9:88:d1:2b:69:05:db: ef:8f:4e:33:31:ec:6c:09:a9:e8:0d:5c:fd:16:b6: 6a:69:ec:31:b7:31:f4:3d:ca:6a:8f:99:31:08:58: 30:f6:5b:06:57:50:aa:6b:3a:20:79:6c:a8:cb:57: 46:a4:99:40:1a:4f:b8:6c:19:93:d6:9a:8e:86:32: 9d:4d:b0:d7:57:78:7c:29:0b:78:c3:19:df:f9:64: ae:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A7:45:1E:DC:CF:5A:A7:C2:8A:E5:E4:55:08:69:09:F5:DE:91:3C X509v3 Authority Key Identifier: keyid:7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.164.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:92:de:39:7d:2c:2c:29:1d:7a:58:5e:c2:e7:d6:25:85:2b: b8:02:03:31:b4:29:98:83:3e:e2:6a:c3:ee:1a:3c:24:ba:7a: b9:c9:be:38:b1:fe:80:6a:7b:b3:58:dc:50:52:ad:e6:de:c0: 91:11:79:b0:2f:f8:e7:69:59:ff:68:07:ad:93:79:cd:83:e6: 97:ac:1a:de:4c:62:49:f0:e4:e4:14:5d:7f:8a:eb:db:61:d8: 65:c2:4b:e9:a8:74:66:4a:5a:65:61:e6:c9:db:ca:93:ce:70: 71:c2:a2:7b:bf:ec:37:da:cf:26:b0:2c:12:7b:77:a7:d2:62: c8:79:f4:e7:7b:9a:9a:ef:00:21:3d:ee:7e:f4:42:26:07:9f: 29:8f:ed:cc:f7:3d:72:d4:dd:fa:7a:8f:5f:21:a4:7a:9e:78: ce:38:89:5c:a7:39:fc:d7:93:05:63:f1:de:07:a4:81:e9:a9: fa:aa:58:ff:9a:76:01:da:e9:0c:bb:f3:af:7e:7d:c1:d3:75: b2:5e:7c:00:6d:d4:9a:2e:fa:fc:e7:6b:c8:57:63:3c:9a:1d: 88:8c:14:44:71:3f:51:f9:8c:88:8c:89:7d:49:ac:67:22:0a: 07:d6:e5:11:9d:7e:17:40:b2:e9:e9:85:83:c5:bc:4b:78:89: 33:13:33:05 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIgVlTTtyD+KCK5b3mxwzvoCEgXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2 QkM2NUVFNDAeFw0yNjA1MDMwMjIyMzhaFw0yNzA1MDIwMjI3MzhaMDMxMTAvBgNV BAMTKDQwQTc0NTFFRENDRjVBQTdDMjhBRTVFNDU1MDg2OTA5RjVERTkxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoLfdkz4xSBorKm0QsDlMKKmHZ k6aFzR7iK/VjulsQ18YBv6i7ov65idNIFybsWYtfZifG4nay9BWGzbQOmqiBej5y y0tRZnhNppcdWDtK0BsUN8x16QClpkvk/l3T6j5JxJdfLaHT4Y6rXKUPxdMHP6b2 ykP5yN4LuQSo7cUA1sKvv6PaHX5ozXnLX2tkz74wrXSg7rnz5UasD/NmmsTxghT/ aGLHCJdAy5dS+YjRK2kF2++PTjMx7GwJqegNXP0Wtmpp7DG3MfQ9ymqPmTEIWDD2 WwZXUKprOiB5bKjLV0akmUAaT7hsGZPWmo6GMp1NsNdXeHwpC3jDGd/5ZK7xAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUQKdFHtzPWqfCiuXkVQhpCfXekTwwHwYDVR0j BBgwFoAUer0r4gn84qNvo+XNhkv3D2vGXuQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M0N2VmNWMtNWJiYS00Y2QxLThkYzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIw OUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2QkM2NUVFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUJEMkJFMjA5RkNFMkEzNkZBM0U1Q0Q4NjRCRjcwRjZCQzY1 RUU0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNjNDdlZjVjLTViYmEtNGNkMS04 ZGM5LTE3M2UyNzUxZjRmNC8wLzMxMzAzMzJlMzIzNTM1MmUzMTM2MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzEzOTM5MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn/6QwDQYJ KoZIhvcNAQELBQADggEBAF6S3jl9LCwpHXpYXsLn1iWFK7gCAzG0KZiDPuJqw+4a PCS6ernJvjix/oBqe7NY3FBSrebewJERebAv+OdpWf9oB62Tec2D5pesGt5MYknw 5OQUXX+K69th2GXCS+modGZKWmVh5snbypPOcHHConu/7DfazyawLBJ7d6fSYsh5 9Od7mprvACE97n70QiYHnymP7cz3PXLU3fp6j18hpHqeeM44iVynOfzXkwVj8d4H pIHpqfqqWP+adgHa6Qy7869+fcHTdbJefABt1Jou+vzna8hXYzyaHYiMFERxP1H5 jIiMiX1JrGciCgfW5RGdfhdAsunphYPFvEt4iTMTMwU= -----END CERTIFICATE-----Generated at Wed May 13 07:01:35 2026 by rpki-client