$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa File: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (raw, json) Hash identifier: BTC7YzwbdoGAbmcrsnbzNKCpEK4Zt6hEW7QOy7PH3X4= Subject key identifier: CC:6F:04:25:D8:7A:FE:AE:F8:61:EC:D2:99:78:51:E5:E3:3A:E2:05 Certificate issuer: /CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Certificate serial: 791C48413D2C51A61E0E0AB3A2CBF8B4617058FF Authority key identifier: 22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa Signing time: Sun 03 May 2026 02:32:26 +0000 ROA not before: Sun 03 May 2026 02:27:26 +0000 ROA not after: Sun 02 May 2027 02:32:26 +0000 asID: 58369 IP address blocks: 103.136.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1c:48:41:3d:2c:51:a6:1e:0e:0a:b3:a2:cb:f8:b4:61:70:58:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Validity Not Before: May 3 02:27:26 2026 GMT Not After : May 2 02:32:26 2027 GMT Subject: CN=CC6F0425D87AFEAEF861ECD2997851E5E33AE205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2b:ca:ab:0c:3d:b8:03:b8:bc:3b:a6:c9:8a: 3d:9e:6c:34:3f:aa:87:22:65:4f:33:e3:f8:1f:7d: ad:bf:aa:0a:c4:b0:2b:01:24:cc:db:eb:1c:d9:81: 7d:c1:32:90:db:d9:40:18:82:24:b2:08:bb:24:c6: 2a:cd:ba:f6:b0:57:3b:db:db:be:9f:45:e0:90:60: 34:3f:85:eb:15:d9:4d:b4:6c:4f:7d:ce:de:a8:4a: 8f:dc:5c:9e:1c:13:b0:72:10:72:a8:b6:3e:4c:94: 1a:dc:a1:84:48:51:10:a9:76:3e:d4:fa:14:24:54: f1:7b:0c:a4:fd:19:c8:3f:16:a9:36:7f:11:c2:ab: 31:37:23:e4:ec:4c:07:28:33:3c:e4:7e:57:31:16: ea:91:1f:23:2c:6a:74:8a:90:74:19:b2:c2:73:71: 20:25:a9:81:92:28:73:24:99:f1:10:aa:86:fc:c5: 3f:c4:c1:33:72:73:8a:59:41:e0:67:44:df:45:af: 8b:c0:1d:9a:b1:6f:2e:1d:88:47:3a:a5:8b:3c:ff: 8f:fd:5f:cd:4f:c0:2d:13:68:72:dc:38:06:d5:98: bf:b7:36:77:fb:ba:85:06:7a:f9:57:9e:1f:a6:af: 59:6c:8c:5e:c7:02:8c:45:66:60:1d:73:c9:72:90: c2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6F:04:25:D8:7A:FE:AE:F8:61:EC:D2:99:78:51:E5:E3:3A:E2:05 X509v3 Authority Key Identifier: keyid:22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.170.0/23 Signature Algorithm: sha256WithRSAEncryption 83:15:81:85:52:4a:64:0e:5c:37:e0:b8:14:07:6e:73:7e:ec: 89:6a:21:a1:8a:a4:50:9c:11:17:32:27:ca:cb:31:62:42:37: 7f:b7:f4:41:72:a0:89:84:4f:a3:36:c3:d3:9e:31:03:ac:1f: 10:8c:6f:4d:a9:9c:6e:80:7c:47:f1:68:70:09:4d:15:5c:04: 26:8a:df:e6:f2:36:a2:18:1c:8c:db:fc:18:6b:e9:98:66:95: f3:e6:ad:b3:b4:ce:20:d5:b5:0d:e9:0c:9e:31:1f:69:5f:b3: 41:09:29:85:e8:5d:62:8e:1e:db:65:4e:90:8d:92:4d:5b:4c: d9:ae:2e:cc:f3:8e:38:e3:2a:f0:0b:c1:84:73:5a:8f:66:a7: 2e:b0:9f:ff:f8:79:a4:2e:02:5b:69:b9:e0:4d:4e:08:64:08: 65:9d:0a:9e:1c:bb:28:ba:fd:56:0b:dc:4b:91:b1:39:0a:ec: 92:62:59:3e:69:d8:7b:e7:ba:84:ba:37:03:3a:c3:0c:51:bd: 08:7f:3e:d6:4d:79:60:60:f5:03:aa:5d:91:c9:80:18:bd:4f: 6b:c5:27:7f:c8:20:1e:29:6b:49:60:3a:f5:e5:49:d0:9d:b5: 44:3a:72:1f:b1:73:6b:89:a8:b5:5e:13:16:bb:e8:29:73:49: 40:57:cd:82 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeRxIQT0sUaYeDgqzosv4tGFwWP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdF OUNGQUZCRTAeFw0yNjA1MDMwMjI3MjZaFw0yNzA1MDIwMjMyMjZaMDMxMTAvBgNV BAMTKENDNkYwNDI1RDg3QUZFQUVGODYxRUNEMjk5Nzg1MUU1RTMzQUUyMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqK8qrDD24A7i8O6bJij2ebDQ/ qociZU8z4/gffa2/qgrEsCsBJMzb6xzZgX3BMpDb2UAYgiSyCLskxirNuvawVzvb 276fReCQYDQ/hesV2U20bE99zt6oSo/cXJ4cE7ByEHKotj5MlBrcoYRIURCpdj7U +hQkVPF7DKT9Gcg/Fqk2fxHCqzE3I+TsTAcoMzzkflcxFuqRHyMsanSKkHQZssJz cSAlqYGSKHMkmfEQqob8xT/EwTNyc4pZQeBnRN9Fr4vAHZqxby4diEc6pYs8/4/9 X81PwC0TaHLcOAbVmL+3Nnf7uoUGevlXnh+mr1lsjF7HAoxFZmAdc8lykMLVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzG8EJdh6/q74YezSmXhR5eM64gUwHwYDVR0j BBgwFoAUIt2EAaxriKWX6QPP12BEF+nPr74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2MWYwNGQtMThlNy00MmZmLWFlODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFB QzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdFOUNGQUZCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMkREODQwMUFDNkI4OEE1OTdFOTAzQ0ZENzYwNDQxN0U5Q0ZB RkJFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRmNjFmMDRkLTE4ZTctNDJmZi1h ZTgyLWQ1NjU1NGY5MjY0Yy8wLzMxMzAzMzJlMzEzMzM2MmUzMTM3MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4iqMA0GCSqG SIb3DQEBCwUAA4IBAQCDFYGFUkpkDlw34LgUB25zfuyJaiGhiqRQnBEXMifKyzFi Qjd/t/RBcqCJhE+jNsPTnjEDrB8QjG9NqZxugHxH8WhwCU0VXAQmit/m8jaiGByM 2/wYa+mYZpXz5q2ztM4g1bUN6QyeMR9pX7NBCSmF6F1ijh7bZU6QjZJNW0zZri7M 84444yrwC8GEc1qPZqcusJ//+HmkLgJbabngTU4IZAhlnQqeHLsouv1WC9xLkbE5 CuySYlk+adh757qEujcDOsMMUb0Ifz7WTXlgYPUDql2RyYAYvU9rxSd/yCAeKWtJ YDr15UnQnbVEOnIfsXNriai1XhMWu+gpc0lAV82C -----END CERTIFICATE-----Generated at Wed May 13 05:47:11 2026 by rpki-client