$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa File: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (raw, json) Hash identifier: XAlXWmMjaTIgPpDDe6g4p0/8EhTXLUGxpCwgLN6Nis0= Subject key identifier: AE:40:63:2D:39:D7:B9:E9:B4:91:E5:6A:A1:DE:B7:5E:C4:21:F8:57 Certificate issuer: /CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Certificate serial: 4BDB702B44A5F91B197126B6B5EB290ECC51BB93 Authority key identifier: 7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa Signing time: Sun 03 May 2026 02:27:38 +0000 ROA not before: Sun 03 May 2026 02:22:38 +0000 ROA not after: Sun 02 May 2027 02:27:38 +0000 asID: 151994 IP address blocks: 103.255.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:db:70:2b:44:a5:f9:1b:19:71:26:b6:b5:eb:29:0e:cc:51:bb:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Validity Not Before: May 3 02:22:38 2026 GMT Not After : May 2 02:27:38 2027 GMT Subject: CN=AE40632D39D7B9E9B491E56AA1DEB75EC421F857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:04:2f:5b:56:9d:fe:44:9f:a8:45:e8:40:42: 17:56:e2:76:39:02:a9:2d:fb:5f:ae:53:5a:c3:6d: 6e:12:68:d8:8f:aa:37:c4:d0:8b:d6:95:9a:00:a2: fc:2b:29:b5:43:da:db:fe:06:ee:02:ac:06:54:71: 11:d7:ad:bf:1e:35:8a:18:48:85:db:c6:d1:81:8f: 3c:a0:3d:12:ce:86:8f:70:f9:45:c8:59:63:19:64: e9:6e:e9:08:21:d9:be:73:1a:75:45:fd:06:08:23: 4b:05:83:b9:d0:35:b8:07:02:ea:c0:e9:78:6f:41: 9b:fa:9c:0d:47:e0:f7:95:6d:a9:d3:b0:76:32:05: 59:91:a5:2c:c3:da:e9:d3:b7:54:61:f2:98:07:8f: c0:70:32:c7:8a:b9:6a:88:42:17:28:ec:e8:e8:a2: 4e:3b:52:5c:40:10:fa:8f:9c:d6:36:6d:89:b6:49: 4a:9d:a0:20:49:42:8f:74:75:1f:dd:c1:5a:b9:7e: 6d:0a:18:09:47:f1:80:a0:22:08:90:0c:ec:bf:46: f1:af:69:7f:b6:a5:b5:f6:76:b4:aa:69:20:4f:91: 33:99:46:1e:c6:e5:4c:89:a2:55:9c:c3:c1:dc:15: 7b:80:97:51:69:dd:59:df:bd:29:e9:22:c6:07:4b: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:40:63:2D:39:D7:B9:E9:B4:91:E5:6A:A1:DE:B7:5E:C4:21:F8:57 X509v3 Authority Key Identifier: keyid:7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.164.0/24 Signature Algorithm: sha256WithRSAEncryption 73:e4:f8:5e:69:82:d7:c2:50:9e:6c:b7:aa:7d:75:28:a3:56: 8d:69:6f:72:08:6b:92:d7:6b:68:99:9f:25:61:5a:64:a3:a4: 33:6f:96:98:d7:c8:44:4b:00:30:6f:fd:c0:b4:ec:e0:66:7a: 4d:52:fa:40:27:c4:3c:2b:71:ae:11:56:e6:eb:c5:18:e5:c4: 54:60:dd:28:ca:fa:2b:bf:c8:d4:58:e6:ef:61:9b:53:92:bb: 4e:1b:92:44:b3:4a:ea:6a:d1:30:52:39:c6:76:8a:61:ca:6b: a6:95:71:21:34:94:1a:a2:a8:d4:58:e3:42:7b:49:b9:35:f8: aa:cf:d7:49:84:a7:1c:d6:13:d0:89:ff:8c:c0:35:a4:58:25: fe:6e:07:a0:ee:34:67:66:40:c0:87:3e:99:8f:d3:28:86:54: da:92:f2:48:05:90:8e:37:b8:eb:08:6e:0e:9f:e7:0d:57:64: 46:d9:1b:01:a4:6f:ef:b8:5a:cb:91:32:ec:19:c0:72:87:3f: bd:d3:3d:f9:16:9d:48:a6:98:3c:bb:d0:5e:52:a0:57:12:2b: 7a:eb:8f:0f:91:fb:6c:65:99:1d:cb:6e:74:8b:0a:07:29:b7: 0e:31:ec:51:47:01:b7:fe:da:6e:d2:29:8b:d0:f8:a3:67:4b: 09:ff:ab:73 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUS9twK0Sl+RsZcSa2tespDsxRu5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2 QkM2NUVFNDAeFw0yNjA1MDMwMjIyMzhaFw0yNzA1MDIwMjI3MzhaMDMxMTAvBgNV BAMTKEFFNDA2MzJEMzlEN0I5RTlCNDkxRTU2QUExREVCNzVFQzQyMUY4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEBC9bVp3+RJ+oRehAQhdW4nY5 Aqkt+1+uU1rDbW4SaNiPqjfE0IvWlZoAovwrKbVD2tv+Bu4CrAZUcRHXrb8eNYoY SIXbxtGBjzygPRLOho9w+UXIWWMZZOlu6Qgh2b5zGnVF/QYII0sFg7nQNbgHAurA 6XhvQZv6nA1H4PeVbanTsHYyBVmRpSzD2unTt1Rh8pgHj8BwMseKuWqIQhco7Ojo ok47UlxAEPqPnNY2bYm2SUqdoCBJQo90dR/dwVq5fm0KGAlH8YCgIgiQDOy/RvGv aX+2pbX2drSqaSBPkTOZRh7G5UyJolWcw8HcFXuAl1Fp3VnfvSnpIsYHS7JLAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUrkBjLTnXuem0keVqod63XsQh+FcwHwYDVR0j BBgwFoAUer0r4gn84qNvo+XNhkv3D2vGXuQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M0N2VmNWMtNWJiYS00Y2QxLThkYzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIw OUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2QkM2NUVFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUJEMkJFMjA5RkNFMkEzNkZBM0U1Q0Q4NjRCRjcwRjZCQzY1 RUU0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNjNDdlZjVjLTViYmEtNGNkMS04 ZGM5LTE3M2UyNzUxZjRmNC8wLzMxMzAzMzJlMzIzNTM1MmUzMTM2MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzOTM5MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn/6QwDQYJ KoZIhvcNAQELBQADggEBAHPk+F5pgtfCUJ5st6p9dSijVo1pb3IIa5LXa2iZnyVh WmSjpDNvlpjXyERLADBv/cC07OBmek1S+kAnxDwrca4RVubrxRjlxFRg3SjK+iu/ yNRY5u9hm1OSu04bkkSzSupq0TBSOcZ2imHKa6aVcSE0lBqiqNRY40J7Sbk1+KrP 10mEpxzWE9CJ/4zANaRYJf5uB6DuNGdmQMCHPpmP0yiGVNqS8kgFkI43uOsIbg6f 5w1XZEbZGwGkb++4WsuRMuwZwHKHP73TPfkWnUimmDy70F5SoFcSK3rrjw+R+2xl mR3LbnSLCgcptw4x7FFHAbf+2m7SKYvQ+KNnSwn/q3M= -----END CERTIFICATE-----Generated at Wed May 13 09:57:38 2026 by rpki-client