$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa File: 3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa (raw, json) Hash identifier: qPi2DbwlpnARz52vfaoi9ZsG5VNI3Ocl35NJsifT55A= Subject key identifier: 44:31:D1:24:22:DD:AD:A9:7E:BE:13:07:29:D6:11:92:B8:C8:8D:E2 Certificate issuer: /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0 Certificate serial: 48203A9E055F3D115CEBED0E0F9909D0963ACD5E Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa Signing time: Sun 03 May 2026 02:39:48 +0000 ROA not before: Sun 03 May 2026 02:34:48 +0000 ROA not after: Sun 02 May 2027 02:39:48 +0000 asID: 9251 IP address blocks: 103.253.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:20:3a:9e:05:5f:3d:11:5c:eb:ed:0e:0f:99:09:d0:96:3a:cd:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0 Validity Not Before: May 3 02:34:48 2026 GMT Not After : May 2 02:39:48 2027 GMT Subject: CN=4431D12422DDADA97EBE130729D61192B8C88DE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:6a:1b:bd:4f:59:6e:42:30:4c:60:b9:10: 41:8c:6a:5a:3b:ff:83:c1:32:cd:8d:c4:f1:43:62: bc:e7:a7:7d:25:b2:f0:4c:66:1d:3e:f7:db:35:1c: 77:c2:7d:89:24:ad:25:ac:01:ac:9f:40:15:3a:e7: 46:f2:c3:80:d4:99:62:1a:bc:9a:6d:e6:9a:98:ef: 7f:11:cf:47:77:16:a4:c0:68:2c:92:fc:96:58:bb: 5c:3b:af:41:1a:ae:5d:2a:62:0a:54:b7:fc:90:55: d1:b4:0d:0c:70:b5:24:e4:67:9a:17:3c:09:d8:d6: 4c:c4:2b:0e:6c:31:b1:b9:1a:44:e9:3d:3c:21:72: ea:ac:3a:fa:b0:d9:64:41:28:a8:b9:de:cd:85:5d: d5:3f:94:b7:ca:1a:6d:56:9c:89:d1:e5:3f:33:b7: 0a:b7:b9:fa:71:b4:0b:a8:02:48:1a:3a:e6:43:8b: 1e:68:cd:d3:a0:2f:e7:90:89:e5:81:f2:b1:70:a4: 77:25:d8:7f:b9:d5:fd:bf:03:f1:e1:c3:62:a6:3e: 9c:55:af:28:9a:ad:db:ee:61:35:e8:75:6a:4f:02: dc:2c:ab:80:c4:87:62:a8:1c:c4:27:9c:de:cc:93: 31:a6:7a:29:20:ad:91:4d:79:0a:05:15:8c:c4:37: e3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:31:D1:24:22:DD:AD:A9:7E:BE:13:07:29:D6:11:92:B8:C8:8D:E2 X509v3 Authority Key Identifier: keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.107.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:be:66:11:02:4d:96:69:e7:bc:d5:f6:ea:67:cc:48:c3:27: 09:68:c7:b1:43:72:72:73:70:af:5a:54:b2:50:4a:37:32:a7: 20:94:f3:92:30:25:73:69:bd:9f:1c:3f:f4:ff:37:ef:0f:6b: 5e:ec:9b:73:8a:40:85:33:4c:41:34:5d:e4:66:ce:9c:49:f9: 2d:37:b7:73:0e:ea:2c:bf:a2:87:0b:89:02:d4:81:9a:c9:a2: f2:68:52:4f:03:4f:d4:c5:66:0b:22:6e:c1:50:83:20:44:23: e5:1b:f3:35:2c:69:c2:18:33:2c:d1:bd:1a:1c:0a:a8:86:bf: 0c:51:2f:e6:4c:80:7a:27:05:9f:24:a6:e7:4b:d9:7f:d2:6c: fd:d8:30:53:a2:3e:be:25:03:44:53:ed:01:c1:5e:9d:98:b6: ac:40:15:9d:da:e6:f7:96:cb:ed:9e:5f:b9:33:b7:dc:cc:2a: 28:35:9a:31:4b:e5:db:e1:5b:03:d7:88:93:a3:fe:38:58:79: 0b:46:c4:44:2d:5c:b6:ed:6c:12:66:26:7c:81:49:7d:93:05: 98:ec:24:b0:99:70:30:ae:26:7a:f5:12:bc:5e:22:74:a3:95: 76:ac:e0:1f:8f:c5:8f:f2:36:4f:7b:2e:b6:e7:b7:65:b8:23: f3:fe:60:ce -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSCA6ngVfPRFc6+0OD5kJ0JY6zV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0RUFFNkRGN0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NG MjcwRjdBMDAeFw0yNjA1MDMwMjM0NDhaFw0yNzA1MDIwMjM5NDhaMDMxMTAvBgNV BAMTKDQ0MzFEMTI0MjJEREFEQTk3RUJFMTMwNzI5RDYxMTkyQjhDODhERTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ02obvU9ZbkIwTGC5EEGMalo7 /4PBMs2NxPFDYrznp30lsvBMZh0+99s1HHfCfYkkrSWsAayfQBU650byw4DUmWIa vJpt5pqY738Rz0d3FqTAaCyS/JZYu1w7r0Earl0qYgpUt/yQVdG0DQxwtSTkZ5oX PAnY1kzEKw5sMbG5GkTpPTwhcuqsOvqw2WRBKKi53s2FXdU/lLfKGm1WnInR5T8z twq3ufpxtAuoAkgaOuZDix5ozdOgL+eQieWB8rFwpHcl2H+51f2/A/Hhw2KmPpxV ryiardvuYTXodWpPAtwsq4DEh2KoHMQnnN7MkzGmeikgrZFNeQoFFYzEN+M/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQURDHRJCLdral+vhMHKdYRkrjIjeIwHwYDVR0j BBgwFoAUSk6ubffr+NW0QE265IdIzPJw96AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVlYzI1ZTQtOWFhOC00YmVmLTkwOTctYzBiZWMwYjI2NmE3LzAvNEE0RUFFNkRG N0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NGMjcwRjdBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTRFQUU2REY3RUJGOEQ1QjQ0MDREQkFFNDg3NDhDQ0YyNzBG N0EwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMxMzAzMzJlMzIzNTMzMmUzMTMwMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMyMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf9azANBgkqhkiG 9w0BAQsFAAOCAQEAO75mEQJNlmnnvNX26mfMSMMnCWjHsUNycnNwr1pUslBKNzKn IJTzkjAlc2m9nxw/9P837w9rXuybc4pAhTNMQTRd5GbOnEn5LTe3cw7qLL+ihwuJ AtSBmsmi8mhSTwNP1MVmCyJuwVCDIEQj5RvzNSxpwhgzLNG9GhwKqIa/DFEv5kyA eicFnySm50vZf9Js/dgwU6I+viUDRFPtAcFenZi2rEAVndrm95bL7Z5fuTO33Mwq KDWaMUvl2+FbA9eIk6P+OFh5C0bERC1ctu1sEmYmfIFJfZMFmOwksJlwMK4mevUS vF4idKOVdqzgH4/Fj/I2T3sutue3Zbgj8/5gzg== -----END CERTIFICATE-----Generated at Wed May 13 06:47:31 2026 by rpki-client