$ rpki-client -vvf rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa File: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (raw, json) Hash identifier: 3Berm5Gapt1UeoI40U+e3+MMW9FgSwdKP2f8X5GE7qo= Subject key identifier: 49:0C:12:D9:D6:F0:B0:39:3C:0C:14:13:A7:F1:17:A7:2F:46:E7:15 Certificate issuer: /CN=78E6D392CED2116E3E5167D5206B5FC375EA9F35 Certificate serial: 0305623CCE7954DAA60697FDA4C5D9185E35A672 Authority key identifier: 78:E6:D3:92:CE:D2:11:6E:3E:51:67:D5:20:6B:5F:C3:75:EA:9F:35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa Signing time: Sun 03 May 2026 02:35:01 +0000 ROA not before: Sun 03 May 2026 02:30:01 +0000 ROA not after: Sun 02 May 2027 02:35:01 +0000 asID: 136052 IP address blocks: 103.214.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:05:62:3c:ce:79:54:da:a6:06:97:fd:a4:c5:d9:18:5e:35:a6:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78E6D392CED2116E3E5167D5206B5FC375EA9F35 Validity Not Before: May 3 02:30:01 2026 GMT Not After : May 2 02:35:01 2027 GMT Subject: CN=490C12D9D6F0B0393C0C1413A7F117A72F46E715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b6:89:b6:1e:a3:93:21:54:b6:f9:e4:95:84: 2c:f7:fe:21:e9:df:1a:10:d5:34:c4:82:cf:0a:74: 07:2c:31:46:49:c2:9d:ec:a2:d3:3c:e5:59:26:9c: 8b:58:2e:47:9f:a8:e6:d6:ca:69:d5:e7:23:3c:ad: 11:4a:1a:a3:3b:b5:81:24:98:52:32:a5:61:74:0d: 90:29:da:69:3d:b8:56:34:be:2b:1e:99:10:d6:6c: ba:22:e1:7f:ad:c8:86:5b:fb:c9:e3:41:e4:92:39: 90:d4:e9:93:8b:b9:d2:dd:cb:12:a3:f5:9c:cb:67: 2b:59:f9:49:5a:6b:94:65:d1:d3:e6:62:39:08:24: 3f:0a:d0:88:d5:01:3b:6e:63:df:41:57:0f:66:09: f8:59:de:cf:27:4f:19:a2:ae:79:99:98:3b:a9:d5: 10:31:aa:8c:5f:79:30:d7:46:09:ef:c4:2e:c8:50: 9e:e7:da:83:75:cb:69:ad:d8:dc:be:74:e9:d0:20: 94:4d:8b:3c:01:c4:9f:8a:0c:97:52:92:5a:5d:2c: a4:03:59:5b:08:0b:2c:24:51:6c:41:99:1c:b1:63: 71:c4:67:f1:86:29:18:0f:8f:9a:1d:27:6a:1c:d4: 39:e3:3f:c0:74:b6:f9:c1:e2:59:cf:19:92:54:bf: fb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0C:12:D9:D6:F0:B0:39:3C:0C:14:13:A7:F1:17:A7:2F:46:E7:15 X509v3 Authority Key Identifier: keyid:78:E6:D3:92:CE:D2:11:6E:3E:51:67:D5:20:6B:5F:C3:75:EA:9F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.214.112.0/23 Signature Algorithm: sha256WithRSAEncryption 19:c1:97:19:49:c8:7d:4f:42:4e:77:05:50:60:75:d0:00:f7: 48:91:13:82:24:4b:8c:a1:b2:94:93:42:4c:51:09:4c:27:bc: 1f:7f:df:2a:42:79:0a:65:a3:70:8d:ea:1c:9b:12:3b:86:38: f2:62:c5:30:29:5e:99:4c:53:dd:f9:b9:a1:a0:9a:56:4f:e9: 1b:1c:0a:b6:89:71:61:7e:47:1c:6d:83:b9:09:d3:b3:85:39: b3:50:64:fe:f8:7f:ea:7e:ef:1f:24:0a:ab:dd:50:44:e2:05: 01:35:64:13:56:d4:04:ea:2c:91:51:a6:76:3a:67:e5:95:ca: bf:23:8a:e1:63:f2:57:4f:7f:d8:e8:a2:08:c7:59:82:e7:5f: 2a:cf:db:58:fb:cd:4f:f0:f8:fe:7c:c3:56:60:20:65:a2:dc: 31:c8:fd:de:99:c0:a7:a7:d4:e2:73:9c:54:15:1c:67:e1:a6: f8:3d:3e:61:6a:11:7c:b6:33:fb:fe:81:58:2d:76:91:c9:21: b0:46:2c:ea:39:df:bf:81:f5:f0:1c:c2:84:a2:74:bc:73:d0: e5:35:c3:86:44:be:e4:b9:ee:29:84:52:0d:31:55:64:6d:f0: 2f:65:fe:ec:a6:36:c3:23:66:9b:11:25:fb:cd:23:62:dd:df: bf:c2:10:21 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAwViPM55VNqmBpf9pMXZGF41pnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhFNkQzOTJDRUQyMTE2RTNFNTE2N0Q1MjA2QjVGQzM3 NUVBOUYzNTAeFw0yNjA1MDMwMjMwMDFaFw0yNzA1MDIwMjM1MDFaMDMxMTAvBgNV BAMTKDQ5MEMxMkQ5RDZGMEIwMzkzQzBDMTQxM0E3RjExN0E3MkY0NkU3MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtom2HqOTIVS2+eSVhCz3/iHp 3xoQ1TTEgs8KdAcsMUZJwp3sotM85VkmnItYLkefqObWymnV5yM8rRFKGqM7tYEk mFIypWF0DZAp2mk9uFY0visemRDWbLoi4X+tyIZb+8njQeSSOZDU6ZOLudLdyxKj 9ZzLZytZ+Ulaa5Rl0dPmYjkIJD8K0IjVATtuY99BVw9mCfhZ3s8nTxmirnmZmDup 1RAxqoxfeTDXRgnvxC7IUJ7n2oN1y2mt2Ny+dOnQIJRNizwBxJ+KDJdSklpdLKQD WVsICywkUWxBmRyxY3HEZ/GGKRgPj5odJ2oc1DnjP8B0tvnB4lnPGZJUv/sXAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUSQwS2dbwsDk8DBQTp/EXpy9G5xUwHwYDVR0j BBgwFoAUeObTks7SEW4+UWfVIGtfw3XqnzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk1ZGQ1NzMtMzFmNC00MTZjLWExYjctNjk4ZDZiMTY5N2FkLzAvNzhFNkQzOTJD RUQyMTE2RTNFNTE2N0Q1MjA2QjVGQzM3NUVBOUYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEU2RDM5MkNFRDIxMTZFM0U1MTY3RDUyMDZCNUZDMzc1RUE5 RjM1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU5NWRkNTczLTMxZjQtNDE2Yy1h MWI3LTY5OGQ2YjE2OTdhZC8wLzMxMzAzMzJlMzIzMTM0MmUzMTMxMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzYzMDM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn1nAwDQYJ KoZIhvcNAQELBQADggEBABnBlxlJyH1PQk53BVBgddAA90iRE4IkS4yhspSTQkxR CUwnvB9/3ypCeQplo3CN6hybEjuGOPJixTApXplMU935uaGgmlZP6RscCraJcWF+ Rxxtg7kJ07OFObNQZP74f+p+7x8kCqvdUETiBQE1ZBNW1ATqLJFRpnY6Z+WVyr8j iuFj8ldPf9joogjHWYLnXyrP21j7zU/w+P58w1ZgIGWi3DHI/d6ZwKen1OJznFQV HGfhpvg9PmFqEXy2M/v+gVgtdpHJIbBGLOo537+B9fAcwoSidLxz0OU1w4ZEvuS5 7imEUg0xVWRt8C9l/uymNsMjZpsRJfvNI2Ld37/CECE= -----END CERTIFICATE-----Generated at Wed May 13 03:51:09 2026 by rpki-client