$ rpki-client -vvf rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa File: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (raw, json) Hash identifier: sjq69LFtU6bk76TnhR0cZc6EeNyTMnt01vwHn/mhzio= Subject key identifier: 7D:CB:08:30:0E:A5:95:64:58:91:74:7A:76:33:CE:6A:DE:37:34:7E Certificate issuer: /CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Certificate serial: 328F1A88DACC97536CC4849DE1ADD9A215F6E733 Authority key identifier: 7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa Signing time: Sun 03 May 2026 02:40:56 +0000 ROA not before: Sun 03 May 2026 02:35:56 +0000 ROA not after: Sun 02 May 2027 02:40:56 +0000 asID: 131746 IP address blocks: 103.21.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:8f:1a:88:da:cc:97:53:6c:c4:84:9d:e1:ad:d9:a2:15:f6:e7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Validity Not Before: May 3 02:35:56 2026 GMT Not After : May 2 02:40:56 2027 GMT Subject: CN=7DCB08300EA595645891747A7633CE6ADE37347E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:08:cd:44:f8:42:66:17:05:3d:e2:9c:f7:3a: 80:60:08:a8:1c:1f:e0:48:65:bf:d0:d1:d8:96:b5: 79:57:73:3a:cb:fb:22:0d:7e:bc:b9:cd:0e:0e:13: 70:69:63:62:60:1e:0d:f6:88:ae:d4:43:7f:60:5e: ad:ea:fd:c6:02:e6:80:0b:9d:fd:4c:83:fc:90:ad: ef:55:f3:75:62:64:dd:ba:de:20:1e:d1:83:db:39: 35:e4:b9:8c:5d:73:3f:03:2f:1a:f2:e9:ca:f1:ae: 99:75:ef:ca:ee:2f:0c:e2:f7:b5:be:fb:c5:ca:df: de:da:de:57:77:ee:24:32:13:ed:58:72:79:f4:9e: d9:fe:fc:5c:c8:4b:07:e5:72:1e:ff:cb:84:66:cf: 52:2a:c2:ff:b3:2e:97:79:17:4e:8e:fa:da:91:f8: c5:aa:b8:cc:d6:0e:91:af:85:94:10:49:82:b0:e2: 0c:be:4d:63:1a:03:55:d0:25:13:30:f7:40:12:d6: 40:75:8e:e0:9a:5c:61:04:05:de:52:05:34:a7:90: 26:dc:f3:84:08:cd:91:db:d0:2c:95:6a:fb:4a:9b: 75:a1:f2:d5:49:64:3b:11:8b:2a:98:8e:c3:47:45: da:a0:c1:5a:d1:db:78:d6:09:36:fe:c8:61:a2:09: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CB:08:30:0E:A5:95:64:58:91:74:7A:76:33:CE:6A:DE:37:34:7E X509v3 Authority Key Identifier: keyid:7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.204.0/22 Signature Algorithm: sha256WithRSAEncryption 91:bf:79:bd:00:da:73:71:8f:ad:c1:cf:b9:d9:d1:cd:ef:02: ac:e7:5c:0b:f4:fc:ef:ec:0f:fc:af:65:50:3f:c4:77:c2:89: 79:6a:67:3a:6a:05:03:82:06:1d:5e:4b:18:ab:d2:67:28:2e: 60:28:31:c0:f5:d8:45:59:5f:75:a3:06:79:36:ad:33:83:81: 85:df:84:b7:37:19:35:30:ce:39:c0:1c:52:32:9c:e8:3e:e4: f7:4d:33:07:f1:9b:82:a2:fa:4d:33:8c:52:49:83:09:67:a7: f3:ff:a2:84:4d:b9:50:f4:35:50:1c:fa:1d:5a:2e:50:74:d9: 70:c2:37:29:bd:13:b1:7a:6d:c0:58:8c:7f:82:af:95:c1:81: 11:0e:a3:c0:fa:6a:ed:f5:7b:4d:57:74:73:7f:3a:ca:7e:1d: d1:59:c5:d6:08:33:b3:a1:9e:ab:a4:78:8f:9c:74:51:df:7a: 1b:ff:5b:43:d7:ae:e1:24:89:2b:70:5f:2a:74:05:f0:7b:7f: ce:ec:58:59:9b:c1:24:30:12:3a:a0:35:60:f7:f1:01:51:36: 11:db:78:44:55:85:87:df:0c:84:43:37:fc:44:5a:4f:4a:3d: f5:73:a5:63:aa:5a:d1:f6:6d:7b:ea:e1:9b:c6:99:f3:d0:4e: 5e:9a:fd:57 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMo8aiNrMl1NsxISd4a3ZohX25zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0 RjY1RjVEMTAeFw0yNjA1MDMwMjM1NTZaFw0yNzA1MDIwMjQwNTZaMDMxMTAvBgNV BAMTKDdEQ0IwODMwMEVBNTk1NjQ1ODkxNzQ3QTc2MzNDRTZBREUzNzM0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLCM1E+EJmFwU94pz3OoBgCKgc H+BIZb/Q0diWtXlXczrL+yINfry5zQ4OE3BpY2JgHg32iK7UQ39gXq3q/cYC5oAL nf1Mg/yQre9V83ViZN263iAe0YPbOTXkuYxdcz8DLxry6crxrpl178ruLwzi97W+ +8XK397a3ld37iQyE+1Ycnn0ntn+/FzISwflch7/y4Rmz1Iqwv+zLpd5F06O+tqR +MWquMzWDpGvhZQQSYKw4gy+TWMaA1XQJRMw90AS1kB1juCaXGEEBd5SBTSnkCbc 84QIzZHb0CyVavtKm3Wh8tVJZDsRiyqYjsNHRdqgwVrR23jWCTb+yGGiCbxjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUfcsIMA6llWRYkXR6djPOat43NH4wHwYDVR0j BBgwFoAUfKmRq4WZn0FRwipjEO8IN09l9dEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJlNTc4ZDAtZDNhYS00ZjBmLWJiOWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4 NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0RjY1RjVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E5OTFBQjg1OTk5RjQxNTFDMjJBNjMxMEVGMDgzNzRGNjVG NUQxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZiZTU3OGQwLWQzYWEtNGYwZi1i YjlkLWY3NGI0OWM2YTY1NS8wLzMxMzAzMzJlMzIzMTJlMzIzMDM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxXMMA0GCSqG SIb3DQEBCwUAA4IBAQCRv3m9ANpzcY+twc+52dHN7wKs51wL9Pzv7A/8r2VQP8R3 wol5amc6agUDggYdXksYq9JnKC5gKDHA9dhFWV91owZ5Nq0zg4GF34S3Nxk1MM45 wBxSMpzoPuT3TTMH8ZuCovpNM4xSSYMJZ6fz/6KETblQ9DVQHPodWi5QdNlwwjcp vROxem3AWIx/gq+VwYERDqPA+mrt9XtNV3RzfzrKfh3RWcXWCDOzoZ6rpHiPnHRR 33ob/1tD167hJIkrcF8qdAXwe3/O7FhZm8EkMBI6oDVg9/EBUTYR23hEVYWH3wyE Qzf8RFpPSj31c6VjqlrR9m176uGbxpnz0E5emv1X -----END CERTIFICATE-----Generated at Wed May 13 09:14:48 2026 by rpki-client