$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa File: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (raw, json) Hash identifier: QuFmVmJ2dd3gMmUQt4P6SAtpf/EY7B6QH+WkpK0hIbk= Subject key identifier: 5A:1E:A9:83:7B:F9:A9:22:AD:13:05:52:9A:F8:A9:0C:6E:65:21:3C Certificate issuer: /CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Certificate serial: 3C699AA704C16FC2CF868FE76C218D55F5F3D9EA Authority key identifier: EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa Signing time: Sun 03 May 2026 02:41:52 +0000 ROA not before: Sun 03 May 2026 02:36:52 +0000 ROA not after: Sun 02 May 2027 02:41:52 +0000 asID: 139456 IP address blocks: 103.167.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:69:9a:a7:04:c1:6f:c2:cf:86:8f:e7:6c:21:8d:55:f5:f3:d9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Validity Not Before: May 3 02:36:52 2026 GMT Not After : May 2 02:41:52 2027 GMT Subject: CN=5A1EA9837BF9A922AD1305529AF8A90C6E65213C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:96:98:7d:17:cb:ad:47:f4:bb:dd:e1:c0:27: 84:1a:a0:67:48:e7:09:51:86:10:0b:f9:41:2c:2f: e7:5a:62:26:a3:85:16:f3:59:07:3a:fb:e3:f8:cf: 3f:f4:11:71:18:44:7c:e9:a9:a1:f0:0e:a7:97:55: e6:4d:4f:0d:50:d2:0e:dc:95:3e:2d:5b:79:a3:3d: d5:04:ed:68:83:31:f3:a2:c0:c8:1e:29:f2:92:5d: c2:66:a6:ef:45:29:eb:d9:f2:7a:e8:ee:bd:f6:87: ba:c3:f5:06:3b:0c:15:c0:f0:93:7d:d2:20:3d:cb: 7a:77:0d:d5:c8:52:48:0a:ed:25:77:a1:6e:af:d9: 9b:cf:80:5e:c9:3e:15:32:87:51:c5:0b:af:26:55: 24:0e:39:57:14:d0:8d:03:5e:32:7c:f8:2d:67:7a: 98:24:22:d6:23:7d:41:85:45:ab:d3:28:59:c5:db: 53:e8:6d:dd:d0:94:1e:6d:d3:db:f1:11:af:ad:ce: 88:05:e8:ab:5c:af:d6:ad:28:6f:bd:c9:1c:ba:b2: 51:fe:ce:29:58:49:b8:21:6b:b7:c9:7b:7f:4a:9e: a9:e7:56:27:06:6e:1f:40:6f:75:60:39:2b:f7:76: 9f:16:fa:8b:44:15:c7:d1:41:00:44:f3:3a:f8:65: 18:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1E:A9:83:7B:F9:A9:22:AD:13:05:52:9A:F8:A9:0C:6E:65:21:3C X509v3 Authority Key Identifier: keyid:EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.132.0/23 Signature Algorithm: sha256WithRSAEncryption 83:c6:d5:bb:78:96:4f:5e:3f:f0:87:fc:dc:02:75:3c:da:70: cc:50:28:61:90:91:c0:66:53:ab:bf:61:13:14:07:5e:e3:91: 61:b2:cd:0f:1b:01:db:44:31:b6:64:92:46:8a:c0:94:1d:b1: 51:a2:5c:f2:74:a7:8a:2d:fe:34:80:33:be:08:b1:a0:22:a6: bd:59:48:2f:16:e3:37:7b:ff:a0:b5:b8:7a:26:94:65:94:17: e7:73:af:49:1c:f9:00:32:ca:81:60:e2:83:eb:a1:a1:c7:2c: 57:dd:eb:d7:64:ba:28:41:3c:61:f1:ae:24:13:26:80:c3:3d: 0c:b2:2b:b7:28:be:e9:ae:24:72:99:8a:de:22:a3:8f:d5:e1: c6:42:00:62:8d:bf:ca:6a:e5:20:23:e7:fc:00:11:d5:07:96: 27:d7:81:8c:4e:72:41:79:d7:5a:b4:a6:ed:a0:ad:7f:0b:f0: 5b:13:a3:9f:71:f5:6e:98:fb:3b:37:de:3e:33:b1:32:31:ae: 23:2c:1e:29:71:bb:97:56:c8:bc:80:d8:bb:7a:47:62:b7:41: c3:3a:fa:01:a0:5b:b4:b1:69:a2:1e:02:1a:b1:40:e1:11:42: cc:78:0b:ee:79:b5:ce:2d:81:ba:31:e3:06:8e:e0:57:49:79: b5:02:ba:9c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPGmapwTBb8LPho/nbCGNVfXz2eowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdC MUI0QkNBOTAeFw0yNjA1MDMwMjM2NTJaFw0yNzA1MDIwMjQxNTJaMDMxMTAvBgNV BAMTKDVBMUVBOTgzN0JGOUE5MjJBRDEzMDU1MjlBRjhBOTBDNkU2NTIxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblph9F8utR/S73eHAJ4QaoGdI 5wlRhhAL+UEsL+daYiajhRbzWQc6++P4zz/0EXEYRHzpqaHwDqeXVeZNTw1Q0g7c lT4tW3mjPdUE7WiDMfOiwMgeKfKSXcJmpu9FKevZ8nro7r32h7rD9QY7DBXA8JN9 0iA9y3p3DdXIUkgK7SV3oW6v2ZvPgF7JPhUyh1HFC68mVSQOOVcU0I0DXjJ8+C1n epgkItYjfUGFRavTKFnF21Pobd3QlB5t09vxEa+tzogF6Ktcr9atKG+9yRy6slH+ zilYSbgha7fJe39KnqnnVicGbh9Ab3VgOSv3dp8W+otEFcfRQQBE8zr4ZRgnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUWh6pg3v5qSKtEwVSmvipDG5lITwwHwYDVR0j BBgwFoAU79QpB7KB552Ts6Vb535pV7G0vKkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVkNDcyMDItZGU2MC00N2YzLWEyYTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdC MjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdCMUI0QkNBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkQ0MjkwN0IyODFFNzlEOTNCM0E1NUJFNzdFNjk1N0IxQjRC Q0E5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZlZDQ3MjAyLWRlNjAtNDdmMy1h MmE3LTYwOGE3NGExZTg3NC8wLzMxMzAzMzJlMzEzNjM3MmUzMTMzMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzNDM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnp4QwDQYJ KoZIhvcNAQELBQADggEBAIPG1bt4lk9eP/CH/NwCdTzacMxQKGGQkcBmU6u/YRMU B17jkWGyzQ8bAdtEMbZkkkaKwJQdsVGiXPJ0p4ot/jSAM74IsaAipr1ZSC8W4zd7 /6C1uHomlGWUF+dzr0kc+QAyyoFg4oProaHHLFfd69dkuihBPGHxriQTJoDDPQyy K7covumuJHKZit4io4/V4cZCAGKNv8pq5SAj5/wAEdUHlifXgYxOckF511q0pu2g rX8L8FsTo59x9W6Y+zs33j4zsTIxriMsHilxu5dWyLyA2Lt6R2K3QcM6+gGgW7Sx aaIeAhqxQOERQsx4C+55tc4tgbox4waO4FdJebUCupw= -----END CERTIFICATE-----Generated at Wed May 13 08:28:44 2026 by rpki-client