$ rpki-client -vvf rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa File: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (raw, json) Hash identifier: vv5Cos9qjIQTiJSbLjTdmGt6+eV8UT6ZYwAxqnFGFFo= Subject key identifier: AF:40:77:21:CC:E2:34:78:75:86:97:5C:7B:68:51:5C:D9:7F:E2:1F Certificate issuer: /CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Certificate serial: 339045BAF179FCC06B47273E4A4B409840C18EF1 Authority key identifier: 7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa Signing time: Sun 03 May 2026 02:40:56 +0000 ROA not before: Sun 03 May 2026 02:35:56 +0000 ROA not after: Sun 02 May 2027 02:40:56 +0000 asID: 131746 IP address blocks: 103.248.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:90:45:ba:f1:79:fc:c0:6b:47:27:3e:4a:4b:40:98:40:c1:8e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Validity Not Before: May 3 02:35:56 2026 GMT Not After : May 2 02:40:56 2027 GMT Subject: CN=AF407721CCE234787586975C7B68515CD97FE21F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:ba:48:c3:e8:b5:8f:60:ce:ee:63:79:b4: 3e:e5:82:21:bb:41:e0:41:71:3f:05:2b:d3:18:97: f4:59:91:16:a2:46:a7:c5:c8:30:da:4e:0e:73:0a: 15:85:15:e5:c7:58:e4:07:58:0f:54:fe:e7:3c:f4: bd:3c:8a:36:16:e2:5d:42:d3:e7:41:65:4b:83:83: bc:71:28:96:a4:8a:f9:b0:2d:0d:55:c1:73:36:62: 37:a9:08:3d:45:e1:b4:69:f4:00:75:43:04:aa:80: e0:6c:37:c8:96:cc:e0:d9:f0:5e:42:42:b6:71:a6: dc:ec:4c:3f:2a:e9:5e:86:33:71:d8:16:bc:4c:48: d0:d3:81:c7:1d:75:5a:42:71:c7:b2:ac:d7:f6:d5: 43:dc:22:d6:53:9d:0a:71:b2:7f:26:9e:2f:6d:21: c5:c7:58:d8:b3:f6:62:47:2c:e8:d2:c1:14:50:3e: c0:0d:ed:07:31:d0:4b:f4:ad:8a:21:1d:80:cc:1f: d2:d4:69:e3:20:c1:f8:28:2d:3b:08:53:85:6a:3e: 71:2a:04:f7:03:56:a9:81:fc:13:2a:40:51:69:9f: b7:a1:4c:83:b2:3c:82:02:ad:f6:19:22:b8:2a:eb: 73:d0:5b:3f:92:f5:4a:37:23:3d:30:b3:57:ab:2c: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:40:77:21:CC:E2:34:78:75:86:97:5C:7B:68:51:5C:D9:7F:E2:1F X509v3 Authority Key Identifier: keyid:7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.248.196.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:47:b1:6c:ec:15:0d:b3:b1:6d:43:a6:f7:52:31:17:5b:79: 08:a9:0b:5a:91:7b:a5:fc:99:7b:74:c0:5c:b1:01:e6:88:72: 61:94:e3:c8:bc:d1:31:38:44:ea:13:4e:52:2f:92:cf:bc:44: e0:e6:d5:47:77:fa:4d:7f:4c:f3:41:32:e0:14:44:44:43:18: 20:68:60:9a:7e:51:e8:77:58:c0:e5:9d:ba:01:c8:e2:7b:1d: 7a:e1:62:be:52:60:f9:c2:b3:c1:bc:aa:b2:c4:ed:c9:a9:5e: 24:a2:6f:51:07:68:b5:4c:a6:0e:ab:71:3e:a1:1a:33:d3:2f: 6f:08:6f:1c:be:a1:e0:1d:d4:fb:c7:94:44:20:ed:e3:6c:53: 7a:2d:fc:9f:e6:89:5d:17:d5:e3:c9:f1:cf:71:d6:74:74:a6: 6b:69:92:7e:43:bc:0f:65:fc:fd:af:f6:56:fe:89:bd:92:73: e7:f2:43:f1:07:48:5c:87:4b:23:7e:64:b7:8b:0c:0c:54:bd: 79:23:ba:6c:38:ec:06:2b:37:58:37:d3:2d:ab:f4:7b:7d:5f: 30:52:44:e1:4c:1d:90:a6:84:00:e7:e2:e5:20:ae:83:03:42: f1:cc:f2:08:7d:82:e1:a9:06:8f:e0:73:20:29:2e:ea:eb:51: ee:00:0f:32 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUM5BFuvF5/MBrRyc+SktAmEDBjvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0 RjY1RjVEMTAeFw0yNjA1MDMwMjM1NTZaFw0yNzA1MDIwMjQwNTZaMDMxMTAvBgNV BAMTKEFGNDA3NzIxQ0NFMjM0Nzg3NTg2OTc1QzdCNjg1MTVDRDk3RkUyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCum7pIw+i1j2DO7mN5tD7lgiG7 QeBBcT8FK9MYl/RZkRaiRqfFyDDaTg5zChWFFeXHWOQHWA9U/uc89L08ijYW4l1C 0+dBZUuDg7xxKJakivmwLQ1VwXM2YjepCD1F4bRp9AB1QwSqgOBsN8iWzODZ8F5C QrZxptzsTD8q6V6GM3HYFrxMSNDTgccddVpCcceyrNf21UPcItZTnQpxsn8mni9t IcXHWNiz9mJHLOjSwRRQPsAN7Qcx0Ev0rYohHYDMH9LUaeMgwfgoLTsIU4VqPnEq BPcDVqmB/BMqQFFpn7ehTIOyPIICrfYZIrgq63PQWz+S9Uo3Iz0ws1erLOS5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUr0B3IcziNHh1hpdce2hRXNl/4h8wHwYDVR0j BBgwFoAUfKmRq4WZn0FRwipjEO8IN09l9dEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJlNTc4ZDAtZDNhYS00ZjBmLWJiOWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4 NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0RjY1RjVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E5OTFBQjg1OTk5RjQxNTFDMjJBNjMxMEVGMDgzNzRGNjVG NUQxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZiZTU3OGQwLWQzYWEtNGYwZi1i YjlkLWY3NGI0OWM2YTY1NS8wLzMxMzAzMzJlMzIzNDM4MmUzMTM5MzYyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM0MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn+MQwDQYJ KoZIhvcNAQELBQADggEBAAxHsWzsFQ2zsW1DpvdSMRdbeQipC1qRe6X8mXt0wFyx AeaIcmGU48i80TE4ROoTTlIvks+8RODm1Ud3+k1/TPNBMuAURERDGCBoYJp+Ueh3 WMDlnboByOJ7HXrhYr5SYPnCs8G8qrLE7cmpXiSib1EHaLVMpg6rcT6hGjPTL28I bxy+oeAd1PvHlEQg7eNsU3ot/J/miV0X1ePJ8c9x1nR0pmtpkn5DvA9l/P2v9lb+ ib2Sc+fyQ/EHSFyHSyN+ZLeLDAxUvXkjumw47AYrN1g30y2r9Ht9XzBSROFMHZCm hADn4uUgroMDQvHM8gh9guGpBo/gcyApLurrUe4ADzI= -----END CERTIFICATE-----Generated at Wed May 13 13:24:27 2026 by rpki-client