$ rpki-client -vvf rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa File: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (raw, json) Hash identifier: zgUoXY12HmCoiLv/YyPkviXHygAhdx3kmWkfk7KOXTU= Subject key identifier: 3B:51:73:03:C6:E5:10:05:23:EF:2D:D9:58:B8:CA:FC:97:79:38:A9 Certificate issuer: /CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Certificate serial: 0656023109DBC2D32367104EAF0A261B480D9870 Authority key identifier: 7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa Signing time: Sun 03 May 2026 02:39:25 +0000 ROA not before: Sun 03 May 2026 02:34:25 +0000 ROA not after: Sun 02 May 2027 02:39:25 +0000 asID: 150261 IP address blocks: 103.22.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:56:02:31:09:db:c2:d3:23:67:10:4e:af:0a:26:1b:48:0d:98:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Validity Not Before: May 3 02:34:25 2026 GMT Not After : May 2 02:39:25 2027 GMT Subject: CN=3B517303C6E5100523EF2DD958B8CAFC977938A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:24:ca:f2:19:b0:a9:f4:13:46:46:5c:ba: 94:ce:b5:eb:ac:26:ab:a1:21:82:b8:b4:21:1d:ff: a7:7c:75:be:ba:69:76:52:f9:c8:a4:12:27:d1:c3: aa:20:43:2f:88:03:11:98:d4:39:c7:19:45:cd:e6: f9:73:d6:61:d2:80:cb:51:fe:56:6b:ed:d3:f8:a0: 99:37:1e:f6:3b:d4:4d:65:ab:60:1d:b6:78:58:de: 59:65:32:3c:db:3d:67:c3:0d:26:aa:37:ad:84:0d: fa:2d:d3:5d:66:a8:08:ba:2a:8c:80:fb:bc:6a:d1: b4:2a:42:d5:9c:a2:21:ce:96:46:73:26:ce:3d:0a: a5:16:ff:3c:1d:00:cf:ff:2a:b0:d1:14:98:e7:09: ff:1b:bf:5a:67:f4:b3:d1:61:22:b7:6f:4f:45:92: 4d:7a:ed:34:f9:41:c0:b0:c8:4d:3c:cd:94:23:c2: 83:8a:62:f9:bb:8c:73:39:8a:7a:a1:da:15:4c:c0: e9:0e:df:75:8d:37:b8:e0:da:5c:49:25:27:56:14: bf:0c:61:52:8f:a3:e9:8a:05:c0:34:48:f9:6c:df: 75:99:ef:a8:6f:a8:ab:6b:0c:12:75:6c:91:b2:ac: 91:bc:c6:8b:ec:24:04:d8:7c:30:24:05:d6:c1:a9: 62:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:51:73:03:C6:E5:10:05:23:EF:2D:D9:58:B8:CA:FC:97:79:38:A9 X509v3 Authority Key Identifier: keyid:7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.22.217.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:60:5d:63:d3:a6:b2:e6:97:3b:32:61:a7:f7:85:7c:71:82: 22:a7:5b:17:b6:2c:94:da:21:64:96:55:19:27:7d:80:ae:62: 91:79:1e:57:ff:fc:b3:27:92:92:7d:87:f6:64:9b:fd:eb:48: 7f:61:86:92:3e:47:71:03:1a:f8:c9:42:19:74:08:ff:7b:44: 88:e2:b5:fc:5f:1a:fa:20:d3:25:6c:e4:35:67:71:55:44:98: d3:9d:d1:59:4e:36:76:73:34:3f:4f:8b:36:29:65:e1:2b:6c: 1c:ab:fd:9b:7f:03:d3:2d:72:e4:04:0a:a0:7c:b9:95:92:01: 6f:df:a6:48:c9:e4:52:e6:5e:cc:29:6d:36:0f:36:b3:dd:9d: 25:0d:bc:44:85:45:3f:1a:9a:29:5e:63:24:74:c7:fe:ba:5e: 13:c5:f9:81:66:f8:96:c9:0e:13:70:f3:b8:bf:72:1d:98:f0: 8b:73:99:ed:76:e7:44:69:38:c7:f3:e2:5a:ad:0d:f2:5b:43: bf:bd:24:27:87:2b:19:49:e5:f1:44:00:17:af:61:43:9e:26: d1:df:86:cf:00:40:4a:36:2d:b5:bf:36:28:44:28:94:65:d2: d6:ea:f6:40:82:9b:92:83:12:90:68:c3:c0:48:39:99:5d:aa: 0c:6b:ae:3c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBlYCMQnbwtMjZxBOrwomG0gNmHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U1ODUyNjQwQUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIw NjcxMURERDAeFw0yNjA1MDMwMjM0MjVaFw0yNzA1MDIwMjM5MjVaMDMxMTAvBgNV BAMTKDNCNTE3MzAzQzZFNTEwMDUyM0VGMkREOTU4QjhDQUZDOTc3OTM4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nCTK8hmwqfQTRkZcupTOteus JquhIYK4tCEd/6d8db66aXZS+cikEifRw6ogQy+IAxGY1DnHGUXN5vlz1mHSgMtR /lZr7dP4oJk3HvY71E1lq2AdtnhY3lllMjzbPWfDDSaqN62EDfot011mqAi6KoyA +7xq0bQqQtWcoiHOlkZzJs49CqUW/zwdAM//KrDRFJjnCf8bv1pn9LPRYSK3b09F kk167TT5QcCwyE08zZQjwoOKYvm7jHM5inqh2hVMwOkO33WNN7jg2lxJJSdWFL8M YVKPo+mKBcA0SPls33WZ76hvqKtrDBJ1bJGyrJG8xovsJATYfDAkBdbBqWKdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUO1FzA8blEAUj7y3ZWLjK/Jd5OKkwHwYDVR0j BBgwFoAUflhSZArLJ85KxGblM4sw4gZxHd0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU0NjA3ZjAtMTcwMS00OWIxLTkxZmYtYjFiZWQ1Y2JkZWQxLzAvN0U1ODUyNjQw QUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIwNjcxMURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RTU4NTI2NDBBQ0IyN0NFNEFDNDY2RTUzMzhCMzBFMjA2NzEx RERELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY1NDYwN2YwLTE3MDEtNDliMS05 MWZmLWIxYmVkNWNiZGVkMS8wLzMxMzAzMzJlMzIzMjJlMzIzMTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxbZMA0GCSqG SIb3DQEBCwUAA4IBAQA8YF1j06ay5pc7MmGn94V8cYIip1sXtiyU2iFkllUZJ32A rmKReR5X//yzJ5KSfYf2ZJv960h/YYaSPkdxAxr4yUIZdAj/e0SI4rX8Xxr6INMl bOQ1Z3FVRJjTndFZTjZ2czQ/T4s2KWXhK2wcq/2bfwPTLXLkBAqgfLmVkgFv36ZI yeRS5l7MKW02Dzaz3Z0lDbxEhUU/GpopXmMkdMf+ul4TxfmBZviWyQ4TcPO4v3Id mPCLc5ntdudEaTjH8+JarQ3yW0O/vSQnhysZSeXxRAAXr2FDnibR34bPAEBKNi21 vzYoRCiUZdLW6vZAgpuSgxKQaMPASDmZXaoMa648 -----END CERTIFICATE-----Generated at Wed May 13 10:20:45 2026 by rpki-client