$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa File: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (raw, json) Hash identifier: KyTDN/npdCxMnf6sB8d1UiCU7Ow9yE5T+dZIKGap4fI= Subject key identifier: 83:C0:2A:A3:F8:E7:09:A1:1A:7C:D4:3C:3B:0E:97:E6:5A:54:56:C8 Certificate issuer: /CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Certificate serial: 78369ED3FF1F85DB46D72EF14E36E902A3E42594 Authority key identifier: 2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa Signing time: Sun 03 May 2026 02:41:53 +0000 ROA not before: Sun 03 May 2026 02:36:53 +0000 ROA not after: Sun 02 May 2027 02:41:53 +0000 asID: 142347 IP address blocks: 103.101.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:36:9e:d3:ff:1f:85:db:46:d7:2e:f1:4e:36:e9:02:a3:e4:25:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Validity Not Before: May 3 02:36:53 2026 GMT Not After : May 2 02:41:53 2027 GMT Subject: CN=83C02AA3F8E709A11A7CD43C3B0E97E65A5456C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:74:e8:68:7c:89:2a:c6:f7:08:1d:81:c3:00: 58:3a:28:df:8b:a2:ed:10:d8:e5:fb:2d:25:c9:42: 74:51:88:f3:95:58:3a:04:d4:d3:fc:11:1e:0a:61: 07:a6:2e:d6:39:6f:cd:39:cf:f7:8d:0f:13:a2:7a: c1:07:85:1a:37:7a:14:e4:71:87:44:0f:c2:63:e2: a8:93:a1:9a:6a:42:2b:05:7f:e2:dc:47:9b:b9:81: 12:32:1d:7f:59:a8:bb:75:5f:7f:c6:82:d1:20:a7: ff:36:12:38:27:bd:8b:d7:11:e5:12:6d:65:d0:3c: bc:f1:1e:06:c2:01:9c:39:91:f6:a5:fb:4c:63:bb: 27:2a:4f:8f:8e:96:53:c2:f0:a6:47:d2:ba:70:a2: e9:1b:f9:6a:18:3d:09:b3:c6:2b:dc:43:82:76:c3: da:ec:24:a3:8a:39:99:23:c4:3e:ba:a7:74:8d:ac: eb:20:82:65:7d:b3:3b:56:84:86:26:17:cc:77:d5: 53:14:1a:74:f0:5c:03:b4:1a:4e:d8:61:e8:0b:db: 2e:b6:c4:9b:74:65:cb:0e:1a:d7:cf:8f:42:0b:a6: 44:e0:44:ad:7e:4f:2f:0a:85:22:79:d9:19:09:ed: 6d:5f:b6:19:59:fb:ad:b0:b6:0f:e2:45:e1:93:61: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C0:2A:A3:F8:E7:09:A1:1A:7C:D4:3C:3B:0E:97:E6:5A:54:56:C8 X509v3 Authority Key Identifier: keyid:2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.218.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:b2:39:35:8a:0f:26:ad:17:07:57:4e:5a:d8:bd:c6:7d:5a: f7:be:de:3b:ca:06:a7:b8:75:64:11:a0:24:5d:90:f8:f0:aa: d8:56:86:18:f3:50:c2:48:11:45:07:51:23:2b:77:a5:68:2b: 86:76:42:63:7b:3e:8c:43:0e:3b:28:16:f0:17:53:60:82:89: 6c:10:be:6d:33:68:83:a2:16:1a:b0:4f:03:c7:f7:19:01:c0: ae:e0:ef:99:12:80:d7:dc:1a:da:b9:44:20:3f:f2:f7:84:ca: 60:fe:68:30:47:ec:4e:ab:5d:ee:84:41:16:c9:99:b2:64:f3: d3:f7:11:eb:a3:29:0c:ac:93:fc:a9:67:24:f4:c1:98:44:03: 70:8c:5d:36:c5:05:38:81:40:78:7c:07:a9:66:0a:ef:d5:67: 4c:81:3a:68:dd:6b:60:69:ac:36:33:23:76:36:ee:cd:4a:01: 32:4f:32:95:9e:c9:aa:85:e3:d4:a1:88:a6:ee:b2:d8:91:e0: 1d:55:cc:ef:b9:ae:07:81:93:b1:2c:2d:80:7f:3d:63:77:fe: 65:d8:b6:e8:22:fc:86:a9:55:04:5d:a0:af:48:4e:bd:b5:6a: 79:59:81:90:67:50:30:8b:32:9a:da:cc:9d:66:45:d4:74:49: 6b:9f:80:56 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUeDae0/8fhdtG1y7xTjbpAqPkJZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1 RkY1MkRENzAeFw0yNjA1MDMwMjM2NTNaFw0yNzA1MDIwMjQxNTNaMDMxMTAvBgNV BAMTKDgzQzAyQUEzRjhFNzA5QTExQTdDRDQzQzNCMEU5N0U2NUE1NDU2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTdOhofIkqxvcIHYHDAFg6KN+L ou0Q2OX7LSXJQnRRiPOVWDoE1NP8ER4KYQemLtY5b805z/eNDxOiesEHhRo3ehTk cYdED8Jj4qiToZpqQisFf+LcR5u5gRIyHX9ZqLt1X3/GgtEgp/82EjgnvYvXEeUS bWXQPLzxHgbCAZw5kfal+0xjuycqT4+OllPC8KZH0rpwoukb+WoYPQmzxivcQ4J2 w9rsJKOKOZkjxD66p3SNrOsggmV9sztWhIYmF8x31VMUGnTwXAO0Gk7YYegL2y62 xJt0ZcsOGtfPj0ILpkTgRK1+Ty8KhSJ52RkJ7W1fthlZ+62wtg/iReGTYZflAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUg8Aqo/jnCaEafNQ8Ow6X5lpUVsgwHwYDVR0j BBgwFoAULfxcPTiC/m5/mp7+L2uWVV/1LdcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmMDAxM2ItNTlhNi00NzMzLTg5ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0Qz ODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1RkY1MkRENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZDNUMzRDM4ODJGRTZFN0Y5QTlFRkUyRjZCOTY1NTVGRjUy REQ3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZlZjAwMTNiLTU5YTYtNDczMy04 OWY4LTI4ZmEzZDg4NTc5Zi8wLzMxMzAzMzJlMzEzMDMxMmUzMjMxMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnZdowDQYJ KoZIhvcNAQELBQADggEBAAqyOTWKDyatFwdXTlrYvcZ9Wve+3jvKBqe4dWQRoCRd kPjwqthWhhjzUMJIEUUHUSMrd6VoK4Z2QmN7PoxDDjsoFvAXU2CCiWwQvm0zaIOi FhqwTwPH9xkBwK7g75kSgNfcGtq5RCA/8veEymD+aDBH7E6rXe6EQRbJmbJk89P3 EeujKQysk/ypZyT0wZhEA3CMXTbFBTiBQHh8B6lmCu/VZ0yBOmjda2BprDYzI3Y2 7s1KATJPMpWeyaqF49ShiKbustiR4B1VzO+5rgeBk7EsLYB/PWN3/mXYtugi/Iap VQRdoK9ITr21anlZgZBnUDCLMprazJ1mRdR0SWufgFY= -----END CERTIFICATE-----Generated at Wed May 13 05:37:47 2026 by rpki-client