$ rpki-client -vvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32322d3232203d3e203435373233.roa File: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (raw, json) Hash identifier: lwZi0IQOzBkg5Jj3Quf3uQ8uDEGUC6KSV1rKBtsm4K4= Subject key identifier: 4C:4C:A7:AD:B4:7F:15:38:BB:7A:81:B5:C0:20:CE:E1:F8:B5:D5:24 Certificate issuer: /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Certificate serial: 4D159D9E2BB7279234B433AD78F6EED645150BF8 Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32322d3232203d3e203435373233.roa Signing time: Sun 03 May 2026 02:29:03 +0000 ROA not before: Sun 03 May 2026 02:24:03 +0000 ROA not after: Sun 02 May 2027 02:29:03 +0000 asID: 45723 IP address blocks: 103.28.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:15:9d:9e:2b:b7:27:92:34:b4:33:ad:78:f6:ee:d6:45:15:0b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Validity Not Before: May 3 02:24:03 2026 GMT Not After : May 2 02:29:03 2027 GMT Subject: CN=4C4CA7ADB47F1538BB7A81B5C020CEE1F8B5D524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:ba:d7:3d:fa:06:4d:8e:0d:e1:95:8f:bc: 31:43:44:97:0a:4a:14:cf:c3:22:7e:58:8d:9c:92: 63:fc:55:37:5d:d3:9d:46:9a:07:63:cc:b9:a0:1a: 5e:a7:16:73:e7:6c:bc:b0:3d:19:34:38:b2:0b:bc: 43:b6:1d:93:94:0f:20:0c:68:cf:47:5b:bc:46:b3: 6d:59:e8:8d:db:a1:9d:70:c9:bf:16:11:a6:6f:c0: 10:17:7f:05:7d:0e:88:73:4d:fb:66:da:72:75:6f: 2b:c0:ba:eb:b6:02:37:ab:f9:2c:3f:8d:3e:66:b5: 4d:7c:2f:76:65:75:41:db:ad:5b:4c:b4:9b:aa:98: d5:97:12:c1:37:0f:10:ff:1f:13:1c:40:ac:e6:92: cc:8d:3c:65:a4:cc:e0:1e:c4:f5:2a:a7:3a:94:95: 57:d0:81:d1:1f:0c:50:1a:0f:8b:e1:ff:58:ba:05: 84:a9:42:8a:9c:a8:46:73:7a:d6:40:7e:59:04:42: 70:99:98:45:1e:da:8e:31:76:f6:92:0e:b1:fd:7b: 38:3f:07:79:24:dc:ec:44:4e:44:b0:9b:f6:15:13: 28:e6:98:d3:a1:78:32:39:2f:72:a8:33:ff:12:af: fc:7b:7a:3c:b4:bb:55:20:1f:d9:9a:99:cb:10:2e: e9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4C:A7:AD:B4:7F:15:38:BB:7A:81:B5:C0:20:CE:E1:F8:B5:D5:24 X509v3 Authority Key Identifier: keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32322d3232203d3e203435373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.80.0/22 Signature Algorithm: sha256WithRSAEncryption 22:bc:c4:77:dd:11:ac:c5:3c:f4:08:58:f8:5a:f6:40:36:41: 5c:91:a8:db:75:01:f8:8d:1e:e1:67:7e:ac:1e:0a:0f:12:04: bd:ff:b5:79:77:a2:1c:46:4b:7c:3a:ce:be:72:91:d2:30:3f: f7:04:c8:14:d5:69:ce:be:02:f3:cb:31:38:1a:d7:8b:c3:65: 4e:55:2a:b2:ac:c3:c8:ba:8e:d9:e0:63:32:12:db:3b:5f:8f: 05:68:75:23:c7:54:14:ab:45:6d:b0:9b:13:a4:b5:e2:2b:36: 3b:8a:e2:3b:0e:8d:fb:08:6c:1b:3f:8a:fe:a8:46:43:1a:08: eb:72:5e:ae:65:6c:71:e3:e1:c4:19:6b:5d:5e:34:33:d3:25: bd:1b:67:e9:3e:d8:f0:7e:3c:64:ae:b6:08:51:b8:d3:46:8f: a7:e0:c9:8c:41:95:f8:1a:fb:ab:b9:9b:ea:f7:61:11:58:72: 5a:55:ae:4c:94:66:8a:68:ed:ca:a8:ca:85:7d:35:65:cb:59: f5:48:6e:22:7d:20:6b:23:1d:c2:77:26:0d:14:6d:46:80:a9: 9c:f9:f8:27:65:72:b7:e1:ce:09:fa:bf:1d:01:56:8a:7e:f7: 08:f8:d6:3b:a5:d0:b8:48:a0:3e:4a:cc:d5:41:d5:db:a0:3b: cb:09:21:b6 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUTRWdniu3J5I0tDOtePbu1kUVC/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5 Qzg4Q0M2MDAeFw0yNjA1MDMwMjI0MDNaFw0yNzA1MDIwMjI5MDNaMDMxMTAvBgNV BAMTKDRDNENBN0FEQjQ3RjE1MzhCQjdBODFCNUMwMjBDRUUxRjhCNUQ1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvY7rXPfoGTY4N4ZWPvDFDRJcK ShTPwyJ+WI2ckmP8VTdd051GmgdjzLmgGl6nFnPnbLywPRk0OLILvEO2HZOUDyAM aM9HW7xGs21Z6I3boZ1wyb8WEaZvwBAXfwV9DohzTftm2nJ1byvAuuu2Ajer+Sw/ jT5mtU18L3ZldUHbrVtMtJuqmNWXEsE3DxD/HxMcQKzmksyNPGWkzOAexPUqpzqU lVfQgdEfDFAaD4vh/1i6BYSpQoqcqEZzetZAflkEQnCZmEUe2o4xdvaSDrH9ezg/ B3kk3OxETkSwm/YVEyjmmNOheDI5L3KoM/8Sr/x7ejy0u1UgH9mamcsQLul9AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUTEynrbR/FTi7eoG1wCDO4fi11SQwHwYDVR0j BBgwFoAUJTX2qaZTlbWIGtsLQyoWZ5yIzGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkYjM3MzAtZjQ5OS00NDlmLWI2ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlB NjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5Qzg4Q0M2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM1RjZBOUE2NTM5NUI1ODgxQURCMEI0MzJBMTY2NzlDODhD QzYwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQxZGIzNzMwLWY0OTktNDQ5Zi1i NmYyLTdhNWRlYjUzMmIwYy8wLzMxMzAzMzJlMzIzODJlMzgzMDJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDM0MzUzNzMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnHFAwDQYJKoZIhvcN AQELBQADggEBACK8xHfdEazFPPQIWPha9kA2QVyRqNt1AfiNHuFnfqweCg8SBL3/ tXl3ohxGS3w6zr5ykdIwP/cEyBTVac6+AvPLMTga14vDZU5VKrKsw8i6jtngYzIS 2ztfjwVodSPHVBSrRW2wmxOkteIrNjuK4jsOjfsIbBs/iv6oRkMaCOtyXq5lbHHj 4cQZa11eNDPTJb0bZ+k+2PB+PGSutghRuNNGj6fgyYxBlfga+6u5m+r3YRFYclpV rkyUZopo7cqoyoV9NWXLWfVIbiJ9IGsjHcJ3Jg0UbUaAqZz5+Cdlcrfhzgn6vx0B Vop+9wj41jul0LhIoD5KzNVB1dugO8sJIbY= -----END CERTIFICATE-----Generated at Wed May 13 13:31:19 2026 by rpki-client