$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa File: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (raw, json) Hash identifier: /DtJd8dT2bjoU0kUlHmis7kzNqsj8Fecx0D1VoaowR0= Subject key identifier: D6:A7:1A:E4:AA:A9:22:3B:2C:98:F8:53:E3:66:72:74:68:31:59:87 Certificate issuer: /CN=5C0C0165C2202336BADFB9247E38D0C985467004 Certificate serial: 758D0589BC3C976C504E0C0EAF7D8D7A5B0C11EA Authority key identifier: 5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa Signing time: Sun 03 May 2026 02:28:28 +0000 ROA not before: Sun 03 May 2026 02:23:28 +0000 ROA not after: Sun 02 May 2027 02:28:28 +0000 asID: 4800 IP address blocks: 103.239.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8d:05:89:bc:3c:97:6c:50:4e:0c:0e:af:7d:8d:7a:5b:0c:11:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C0C0165C2202336BADFB9247E38D0C985467004 Validity Not Before: May 3 02:23:28 2026 GMT Not After : May 2 02:28:28 2027 GMT Subject: CN=D6A71AE4AAA9223B2C98F853E366727468315987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:38:5f:b0:f0:46:06:eb:83:2c:2d:52:4f: fa:2f:dd:e7:e0:65:dc:88:d5:86:54:30:7c:56:9d: 54:93:81:bf:d3:23:bc:ce:56:49:d3:61:b1:b9:9a: 89:99:b1:6c:3f:c0:9c:7a:c0:1e:b2:b4:83:a6:1f: c9:dd:f5:eb:8a:82:31:4a:da:b1:a8:05:60:f7:b5: 18:c6:4c:29:15:ec:d0:8f:60:4b:47:f0:0a:b2:a4: e4:b5:4d:35:0b:d3:b6:7e:29:4c:e3:29:46:5e:78: 7f:4f:55:d4:0a:dc:6f:f7:22:f7:a8:59:a7:1e:d6: 1f:23:97:47:b0:74:7d:ac:dc:6f:38:f8:11:5e:15: 35:21:9b:18:d3:1f:83:27:1b:8c:78:c5:db:33:4b: 95:e2:c2:07:87:84:ca:4e:a7:75:be:f7:2b:bf:45: 2c:60:cc:d0:25:df:31:13:02:52:83:62:13:59:ca: ce:b2:66:2f:aa:d4:5a:51:c6:03:bd:3e:c1:a5:f9: fa:c7:01:b6:00:f9:82:bc:00:28:8c:d2:1f:73:18: cd:30:5e:2b:c7:21:49:72:ec:f2:4b:0b:fe:e0:47: fa:3c:f4:87:3e:ea:d7:17:84:24:2f:d3:1e:e9:32: 08:d4:dd:e1:f3:fd:cc:dc:63:5f:4c:ad:37:47:1e: 81:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A7:1A:E4:AA:A9:22:3B:2C:98:F8:53:E3:66:72:74:68:31:59:87 X509v3 Authority Key Identifier: keyid:5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.214.0/23 Signature Algorithm: sha256WithRSAEncryption 88:14:00:b7:7e:83:86:bd:48:81:6b:e6:12:1a:be:46:18:ee: e5:f1:a2:b7:e3:91:ed:dc:62:44:7e:f5:e9:c2:24:c9:5b:2a: a3:33:55:be:eb:63:be:85:25:36:40:ba:b2:23:75:0e:e4:74: f8:de:2f:c3:b9:db:2e:d5:60:52:b3:95:7d:24:76:1d:aa:46: b5:cf:9c:d6:92:58:e6:2c:01:2e:a0:bd:b2:8a:b7:44:b7:6e: 54:96:69:67:66:5c:5f:b9:e2:fd:51:6e:40:19:76:e2:2c:92: ee:f3:0d:6a:a9:bd:b6:b3:44:76:a7:11:b3:d6:a1:e0:1d:45: 58:79:5f:88:c1:76:1f:d3:47:be:d4:2a:4e:f9:3f:b0:00:e3: 5c:bb:b7:7c:bb:d1:f8:f9:a1:91:b4:d6:a2:be:ad:1c:d0:41: 35:e8:93:e7:39:f3:6d:0c:83:7c:80:46:5e:d9:6d:3d:96:15: da:e4:52:fe:ef:42:ac:8f:6d:1b:1a:75:d6:d5:ed:0c:7a:27: 2f:66:d1:ed:43:44:95:bf:70:56:8e:29:07:12:fa:0e:01:a0: f8:16:a9:74:9e:0a:51:8e:9f:5c:02:50:e0:74:2a:89:e9:e5: 75:88:69:60:73:2d:b5:3e:e1:53:55:30:80:b4:87:ec:ac:af: 80:4a:6b:0c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdY0Fibw8l2xQTgwOr32NelsMEeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMwQzAxNjVDMjIwMjMzNkJBREZCOTI0N0UzOEQwQzk4 NTQ2NzAwNDAeFw0yNjA1MDMwMjIzMjhaFw0yNzA1MDIwMjI4MjhaMDMxMTAvBgNV BAMTKEQ2QTcxQUU0QUFBOTIyM0IyQzk4Rjg1M0UzNjY3Mjc0NjgzMTU5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKjhfsPBGBuuDLC1ST/ov3efg ZdyI1YZUMHxWnVSTgb/TI7zOVknTYbG5momZsWw/wJx6wB6ytIOmH8nd9euKgjFK 2rGoBWD3tRjGTCkV7NCPYEtH8AqypOS1TTUL07Z+KUzjKUZeeH9PVdQK3G/3Iveo Wace1h8jl0ewdH2s3G84+BFeFTUhmxjTH4MnG4x4xdszS5XiwgeHhMpOp3W+9yu/ RSxgzNAl3zETAlKDYhNZys6yZi+q1FpRxgO9PsGl+frHAbYA+YK8ACiM0h9zGM0w XivHIUly7PJLC/7gR/o89Ic+6tcXhCQv0x7pMgjU3eHz/czcY19MrTdHHoFVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU1qca5KqpIjssmPhT42ZydGgxWYcwHwYDVR0j BBgwFoAUXAwBZcIgIza637kkfjjQyYVGcAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U1MTZlNmUtYzY3OS00ZTUwLWI3YWItMWU0MDY3OTEyNWNkLzAvNUMwQzAxNjVD MjIwMjMzNkJBREZCOTI0N0UzOEQwQzk4NTQ2NzAwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzBDMDE2NUMyMjAyMzM2QkFERkI5MjQ3RTM4RDBDOTg1NDY3 MDA0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNlNTE2ZTZlLWM2NzktNGU1MC1i N2FiLTFlNDA2NzkxMjVjZC8wLzMxMzAzMzJlMzIzMzM5MmUzMjMxMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWfv1jANBgkqhkiG 9w0BAQsFAAOCAQEAiBQAt36Dhr1IgWvmEhq+Rhju5fGit+OR7dxiRH716cIkyVsq ozNVvutjvoUlNkC6siN1DuR0+N4vw7nbLtVgUrOVfSR2HapGtc+c1pJY5iwBLqC9 soq3RLduVJZpZ2ZcX7ni/VFuQBl24iyS7vMNaqm9trNEdqcRs9ah4B1FWHlfiMF2 H9NHvtQqTvk/sADjXLu3fLvR+PmhkbTWor6tHNBBNeiT5znzbQyDfIBGXtltPZYV 2uRS/u9CrI9tGxp11tXtDHonL2bR7UNElb9wVo4pBxL6DgGg+BapdJ4KUY6fXAJQ 4HQqienldYhpYHMttT7hU1UwgLSH7KyvgEprDA== -----END CERTIFICATE-----Generated at Wed May 13 01:14:46 2026 by rpki-client