$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa File: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (raw, json) Hash identifier: yogWy6TCKxhBmgshrPe2hKjITHvdTQkqQBDI5rFuoa0= Subject key identifier: 35:D4:17:37:D7:2D:E5:EC:86:A4:E8:09:4F:02:C6:C1:22:33:57:83 Certificate issuer: /CN=B625426C356E15C795153BAD3E2215D65F219A5E Certificate serial: 4D125E3C05DED60A5D578AC067F1C94EEE1D0244 Authority key identifier: B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa Signing time: Sun 03 May 2026 02:31:17 +0000 ROA not before: Sun 03 May 2026 02:26:17 +0000 ROA not after: Sun 02 May 2027 02:31:17 +0000 asID: 135472 IP address blocks: 103.71.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:12:5e:3c:05:de:d6:0a:5d:57:8a:c0:67:f1:c9:4e:ee:1d:02:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B625426C356E15C795153BAD3E2215D65F219A5E Validity Not Before: May 3 02:26:17 2026 GMT Not After : May 2 02:31:17 2027 GMT Subject: CN=35D41737D72DE5EC86A4E8094F02C6C122335783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:8a:09:10:d9:00:6d:49:68:31:6d:f1:c3: e1:b5:25:56:eb:e3:21:fa:55:9a:8c:51:ad:48:5d: 2b:0c:6a:00:38:95:a7:a7:24:56:27:82:66:34:c0: 5c:d5:d9:ec:a6:aa:32:15:0a:b8:06:3f:e2:35:22: 58:28:22:37:95:2d:7c:b3:37:c7:f5:ae:6d:5f:19: 6e:08:aa:05:00:78:16:4c:6e:10:58:b7:ed:5e:6e: b0:a5:7a:fd:49:ef:e5:2f:e8:35:7b:51:62:e5:29: 08:a4:a2:91:09:43:df:ee:a5:d5:4b:38:b9:91:08: 3c:8d:34:95:46:af:a4:e5:ba:4c:59:f3:70:65:10: be:22:9d:57:b4:95:5c:f7:fd:c3:90:70:c5:13:97: c1:b0:c3:fc:7d:4a:c1:bd:d6:fa:70:75:55:83:52: 93:78:02:a8:7f:b1:ef:1a:63:bf:49:db:27:02:79: 31:df:bb:9b:ee:31:b3:b9:02:ce:db:07:38:11:83: 39:34:65:9e:9a:b1:5f:26:42:aa:ae:36:80:b5:fb: da:eb:7f:71:4f:a4:70:1a:28:e9:3d:6c:2d:89:e5: 4d:a9:1b:8f:59:10:ba:c2:50:21:a5:6d:06:93:b4: a8:1c:df:dc:be:13:74:c7:7a:f3:2f:e3:ec:87:31: bf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D4:17:37:D7:2D:E5:EC:86:A4:E8:09:4F:02:C6:C1:22:33:57:83 X509v3 Authority Key Identifier: keyid:B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.191.0/24 Signature Algorithm: sha256WithRSAEncryption 87:e5:d8:e3:5d:33:23:cf:3c:94:1c:47:f6:77:78:68:2e:02: 07:e8:d6:94:e5:21:bb:a9:51:17:e2:78:1b:97:d5:ec:88:83: 23:ca:3d:cd:5b:02:d7:42:b0:e2:73:bd:01:fa:7c:99:1f:f6: 0e:65:d5:2f:74:40:9e:8a:f0:dc:5d:d5:ff:be:17:8d:75:2f: d4:f9:1f:5f:e6:1a:e5:4f:61:42:97:13:60:7c:74:e2:8b:c4: 4e:79:15:cc:f5:a1:19:cc:07:fc:53:63:4b:d0:f5:cb:76:66: 41:56:67:7d:6e:9a:cf:20:d5:0f:99:fa:ef:30:24:6d:9d:75: 69:80:c3:21:79:26:df:45:c2:52:46:23:cf:5c:9f:f1:e6:d1: 94:d9:76:c2:38:2e:5e:6a:46:da:48:9b:68:ed:ea:69:78:2c: eb:e0:8b:81:8f:5b:d0:51:b3:10:54:ce:7e:aa:1f:62:1b:d6: bd:2f:bc:ce:88:31:e7:aa:88:02:7a:70:55:f8:1d:4b:b2:e8: b6:56:d3:50:c1:e9:0c:49:5a:15:29:a0:1b:1e:af:e6:f7:35: eb:4c:5b:60:bf:a2:88:87:8a:04:f9:c7:3a:37:be:c1:a6:fa: 65:ff:56:ba:aa:89:37:9c:c3:b8:38:c1:21:c1:e1:c5:88:ac: 0a:39:99:c5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTRJePAXe1gpdV4rAZ/HJTu4dAkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1 RjIxOUE1RTAeFw0yNjA1MDMwMjI2MTdaFw0yNzA1MDIwMjMxMTdaMDMxMTAvBgNV BAMTKDM1RDQxNzM3RDcyREU1RUM4NkE0RTgwOTRGMDJDNkMxMjIzMzU3ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PooJENkAbUloMW3xw+G1JVbr 4yH6VZqMUa1IXSsMagA4laenJFYngmY0wFzV2eymqjIVCrgGP+I1IlgoIjeVLXyz N8f1rm1fGW4IqgUAeBZMbhBYt+1ebrClev1J7+Uv6DV7UWLlKQikopEJQ9/updVL OLmRCDyNNJVGr6TlukxZ83BlEL4inVe0lVz3/cOQcMUTl8Gww/x9SsG91vpwdVWD UpN4Aqh/se8aY79J2ycCeTHfu5vuMbO5As7bBzgRgzk0ZZ6asV8mQqquNoC1+9rr f3FPpHAaKOk9bC2J5U2pG49ZELrCUCGlbQaTtKgc39y+E3THevMv4+yHMb9BAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUNdQXN9ct5eyGpOgJTwLGwSIzV4MwHwYDVR0j BBgwFoAUtiVCbDVuFceVFTutPiIV1l8hml4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIwNDgwNjQtODdkZS00ZGU3LWIwYmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMz NTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1RjIxOUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjI1NDI2QzM1NkUxNUM3OTUxNTNCQUQzRTIyMTVENjVGMjE5 QTVFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRiMDQ4MDY0LTg3ZGUtNGRlNy1i MGJkLTEyZmEwZGViOGUzMi8wLzMxMzAzMzJlMzczMTJlMzEzOTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0e/MA0GCSqG SIb3DQEBCwUAA4IBAQCH5djjXTMjzzyUHEf2d3hoLgIH6NaU5SG7qVEX4ngbl9Xs iIMjyj3NWwLXQrDic70B+nyZH/YOZdUvdECeivDcXdX/vheNdS/U+R9f5hrlT2FC lxNgfHTii8ROeRXM9aEZzAf8U2NL0PXLdmZBVmd9bprPINUPmfrvMCRtnXVpgMMh eSbfRcJSRiPPXJ/x5tGU2XbCOC5eakbaSJto7eppeCzr4IuBj1vQUbMQVM5+qh9i G9a9L7zOiDHnqogCenBV+B1Lsui2VtNQwekMSVoVKaAbHq/m9zXrTFtgv6KIh4oE +cc6N77Bpvpl/1a6qok3nMO4OMEhweHFiKwKOZnF -----END CERTIFICATE-----Generated at Wed May 13 02:16:22 2026 by rpki-client