$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa File: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (raw, json) Hash identifier: gHaL9xm6upsCMiwuTIzMiljzjIKdP3tM2s5bdfg68uM= Subject key identifier: BF:F8:52:7D:F3:39:38:45:6B:FB:56:F2:C3:FE:6B:51:B8:03:5A:3F Certificate issuer: /CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Certificate serial: 500EAF2823D1F1C1F857DDA76005F4F83B8D1B96 Authority key identifier: 8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa Signing time: Sun 03 May 2026 02:36:46 +0000 ROA not before: Sun 03 May 2026 02:31:46 +0000 ROA not after: Sun 02 May 2027 02:36:46 +0000 asID: 151545 IP address blocks: 103.236.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0e:af:28:23:d1:f1:c1:f8:57:dd:a7:60:05:f4:f8:3b:8d:1b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Validity Not Before: May 3 02:31:46 2026 GMT Not After : May 2 02:36:46 2027 GMT Subject: CN=BFF8527DF33938456BFB56F2C3FE6B51B8035A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:02:fd:2e:ed:ba:46:73:a6:39:20:fe:14: 41:dc:88:a8:eb:2e:89:26:b4:ab:af:10:1c:a2:d5: ba:fe:a6:fe:ac:00:72:30:7a:fe:25:42:c2:50:8c: 9c:17:8d:99:3c:30:7f:26:52:4e:4e:51:14:04:a1: e5:c2:26:34:10:57:c8:ee:ee:00:0b:14:20:35:8f: 22:17:a6:d6:e4:fe:4a:91:84:86:db:a3:0a:75:c9: 15:ec:fd:f8:60:bd:1e:3f:26:76:90:cf:89:64:30: 7d:4b:4a:e2:a4:f4:c4:ce:2a:28:c6:57:b6:3a:20: 7e:3f:cf:bd:33:e9:da:b5:e8:d1:3d:05:7f:7a:78: e4:c5:56:bf:f6:09:f3:39:b7:21:90:07:46:86:5c: 78:81:82:af:fa:b7:c6:a6:49:15:d9:4b:18:be:a8: 25:d2:84:56:57:d6:3d:07:8c:6b:cf:9a:10:8d:9b: 83:35:ae:58:04:5c:69:a1:6e:62:03:51:f6:7d:f4: 02:1a:72:e6:99:12:1a:bd:9e:8f:a6:bc:8d:1a:a2: 3f:37:06:c9:4f:28:53:88:16:01:7c:74:e2:da:93: dc:47:cb:ae:d5:3b:9f:75:a2:fa:3b:81:12:ee:4b: 17:9d:37:8a:48:ab:4e:dc:b0:e8:30:da:58:fa:bf: 6e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F8:52:7D:F3:39:38:45:6B:FB:56:F2:C3:FE:6B:51:B8:03:5A:3F X509v3 Authority Key Identifier: keyid:8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.130.0/23 Signature Algorithm: sha256WithRSAEncryption b5:23:0d:5d:da:c4:43:89:8d:29:39:c4:3e:81:05:2e:8d:d4: 15:bc:c0:fb:4f:34:f2:a9:e2:af:53:e6:b3:e3:7e:63:79:b8: 4d:4d:4d:01:24:68:06:4c:00:33:44:1c:35:45:10:d7:72:0b: 36:63:15:77:95:ca:b3:e0:49:eb:83:8d:fa:76:0c:88:cb:70: 05:32:70:43:70:7d:f8:72:63:f5:a8:dd:6e:f0:be:a6:2d:42: 39:53:9d:4c:47:34:c6:42:c5:8f:2e:34:0c:24:80:fb:98:8e: 42:1a:3e:84:cd:2c:f5:de:95:7a:1a:63:2d:72:57:86:7c:dd: fc:bf:c0:26:74:ab:98:a6:6f:11:31:58:39:cb:f9:08:67:a7: e3:4c:ca:4d:14:c5:a2:e4:63:0f:88:e7:5f:28:f1:4f:81:f2: d4:ff:24:ec:87:77:ec:c8:73:a3:94:fe:50:a6:82:d7:8f:f0: 51:b2:cc:2a:91:ff:87:01:41:41:f2:ca:15:d0:80:9d:66:aa: cc:1f:52:38:ed:3a:6d:e8:9f:94:40:b1:cd:7e:db:a2:03:c8: 57:4f:06:d1:4c:23:e7:48:4a:59:78:0e:10:94:ee:b0:51:11: 97:3b:8c:ca:b0:94:19:71:a5:1b:92:da:a0:e6:67:b1:8c:d0: f2:a2:cc:d3 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUA6vKCPR8cH4V92nYAX0+DuNG5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVC MTRDODk2QzAeFw0yNjA1MDMwMjMxNDZaFw0yNzA1MDIwMjM2NDZaMDMxMTAvBgNV BAMTKEJGRjg1MjdERjMzOTM4NDU2QkZCNTZGMkMzRkU2QjUxQjgwMzVBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/AL9Lu26RnOmOSD+FEHciKjr LokmtKuvEByi1br+pv6sAHIwev4lQsJQjJwXjZk8MH8mUk5OURQEoeXCJjQQV8ju 7gALFCA1jyIXptbk/kqRhIbbowp1yRXs/fhgvR4/JnaQz4lkMH1LSuKk9MTOKijG V7Y6IH4/z70z6dq16NE9BX96eOTFVr/2CfM5tyGQB0aGXHiBgq/6t8amSRXZSxi+ qCXShFZX1j0HjGvPmhCNm4M1rlgEXGmhbmIDUfZ99AIacuaZEhq9no+mvI0aoj83 BslPKFOIFgF8dOLak9xHy67VO591ovo7gRLuSxedN4pIq07csOgw2lj6v27bAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUv/hSffM5OEVr+1byw/5rUbgDWj8wHwYDVR0j BBgwFoAUj/qLucCdxMpCyVyBfA/9lbFMiWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ1YWYyMmMtN2UzZS00MGI1LWFjNTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlD MDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVCMTRDODk2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBOEJCOUMwOURDNENBNDJDOTVDODE3QzBGRkQ5NUIxNEM4 OTZDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkNWFmMjJjLTdlM2UtNDBiNS1h YzUwLTYzNzc3MmE5NWMyMS8wLzMxMzAzMzJlMzIzMzM2MmUzMTMzMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzEzNTM0MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn7IIwDQYJ KoZIhvcNAQELBQADggEBALUjDV3axEOJjSk5xD6BBS6N1BW8wPtPNPKp4q9T5rPj fmN5uE1NTQEkaAZMADNEHDVFENdyCzZjFXeVyrPgSeuDjfp2DIjLcAUycENwffhy Y/Wo3W7wvqYtQjlTnUxHNMZCxY8uNAwkgPuYjkIaPoTNLPXelXoaYy1yV4Z83fy/ wCZ0q5imbxExWDnL+Qhnp+NMyk0UxaLkYw+I518o8U+B8tT/JOyHd+zIc6OU/lCm gteP8FGyzCqR/4cBQUHyyhXQgJ1mqswfUjjtOm3on5RAsc1+26IDyFdPBtFMI+dI Sll4DhCU7rBREZc7jMqwlBlxpRuS2qDmZ7GM0PKizNM= -----END CERTIFICATE-----Generated at Wed May 13 10:40:05 2026 by rpki-client