$ rpki-client -vvf rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e32382e32312e302f32342d3234203d3e203536323536.roa File: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (raw, json) Hash identifier: YAhRb5MLLPBq7GLmsdwukjSGrR09NAZjb7/Q0IbDPGs= Subject key identifier: A8:3A:2F:6C:8D:52:45:97:DA:04:C2:68:2A:49:04:CE:D9:BF:47:14 Certificate issuer: /CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Certificate serial: 3F1832260BB87E59DCA899C1A2BE7401D00A7A3B Authority key identifier: C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e32382e32312e302f32342d3234203d3e203536323536.roa Signing time: Sun 03 May 2026 02:43:51 +0000 ROA not before: Sun 03 May 2026 02:38:51 +0000 ROA not after: Sun 02 May 2027 02:43:51 +0000 asID: 56256 IP address blocks: 103.28.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:18:32:26:0b:b8:7e:59:dc:a8:99:c1:a2:be:74:01:d0:0a:7a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Validity Not Before: May 3 02:38:51 2026 GMT Not After : May 2 02:43:51 2027 GMT Subject: CN=A83A2F6C8D524597DA04C2682A4904CED9BF4714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:2c:78:bb:f4:17:32:51:7e:9d:d0:d7:3c: ae:fb:74:57:37:bb:2a:0f:64:f2:b0:99:6d:18:43: 75:fd:0d:1d:f2:ac:b7:f8:2a:c9:6b:3b:d3:1a:2c: c1:3d:2a:10:32:01:80:75:0d:09:26:31:6d:a0:ea: 54:6d:33:35:f7:b7:a6:d1:c8:33:a6:21:05:52:39: 25:88:67:50:c7:00:b8:6f:a2:e7:e3:8f:3b:06:89: 47:6f:d5:af:89:3b:d2:bc:a6:48:3c:b1:e5:e9:d0: 08:a5:5c:78:67:94:e5:32:29:68:db:f9:87:1e:69: 77:bc:ff:5d:1c:48:fa:48:74:3b:a2:32:bf:1b:9a: c7:35:55:82:03:d8:a3:91:c4:06:f8:68:9b:a5:ec: aa:b1:6b:dd:bd:55:66:85:18:d3:ec:6e:81:50:3d: 87:b3:62:f4:9b:9e:b9:17:10:0a:aa:85:f4:30:8d: 11:6b:d4:24:a3:c7:b5:a6:35:69:3f:b4:7e:ec:58: 4c:10:f2:ca:bc:79:02:d5:2f:09:39:f1:26:8a:44: 61:5a:f7:45:f2:14:dd:d5:a7:e0:1b:4d:b9:3f:3e: 96:5a:52:e3:01:c3:94:46:cd:d8:e0:4d:00:b2:8f: 92:7a:8e:7e:62:8c:c7:40:7f:d6:64:9b:c1:b9:12: 3a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3A:2F:6C:8D:52:45:97:DA:04:C2:68:2A:49:04:CE:D9:BF:47:14 X509v3 Authority Key Identifier: keyid:C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e32382e32312e302f32342d3234203d3e203536323536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.21.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:80:e6:73:ae:0e:ad:1f:1e:60:58:81:73:75:dd:1d:70:4e: 79:a7:22:12:bc:75:1b:c6:1f:a0:95:e4:c0:57:cc:29:3f:63: 9d:ca:63:23:5e:5c:fc:af:ab:33:dd:80:42:22:47:56:c3:8d: 5b:74:cf:63:c1:61:b3:2a:55:82:54:18:de:51:21:fa:cb:72: 80:18:8b:6e:91:6d:05:c8:3d:29:cc:7e:15:9b:c4:19:62:ec: 56:b9:84:07:3c:0f:24:97:ed:62:95:d5:e8:8c:da:93:e4:e3: ed:4d:07:74:3b:86:de:12:8e:64:8b:4b:81:cf:27:6e:2b:d5: 1d:72:dc:ed:fb:10:b2:58:a9:a7:61:79:40:40:cd:2a:77:dc: 0f:f5:a3:90:42:17:6f:59:72:87:aa:f9:aa:6a:d2:12:2a:c7: 42:4d:0d:5e:1d:86:c5:c1:80:9f:f2:18:f9:97:8d:58:e4:3e: f5:56:72:94:32:21:c0:69:ae:91:87:17:b1:14:5d:45:99:2f: 27:36:c4:34:23:bf:e1:2a:c9:25:04:84:da:51:5c:a3:9f:dd: 5b:f3:57:a0:9c:83:87:f7:3b:82:03:71:7b:05:6a:37:ed:6e: a3:5f:7e:e5:bd:0a:ed:e0:b9:46:2d:d2:94:eb:f6:1a:fd:51: 4a:07:b0:bb -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUPxgyJgu4flncqJnBor50AdAKejswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0 MjhDNEQzNzAeFw0yNjA1MDMwMjM4NTFaFw0yNzA1MDIwMjQzNTFaMDMxMTAvBgNV BAMTKEE4M0EyRjZDOEQ1MjQ1OTdEQTA0QzI2ODJBNDkwNENFRDlCRjQ3MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLSx4u/QXMlF+ndDXPK77dFc3 uyoPZPKwmW0YQ3X9DR3yrLf4KslrO9MaLME9KhAyAYB1DQkmMW2g6lRtMzX3t6bR yDOmIQVSOSWIZ1DHALhvoufjjzsGiUdv1a+JO9K8pkg8seXp0AilXHhnlOUyKWjb +YceaXe8/10cSPpIdDuiMr8bmsc1VYID2KORxAb4aJul7Kqxa929VWaFGNPsboFQ PYezYvSbnrkXEAqqhfQwjRFr1CSjx7WmNWk/tH7sWEwQ8sq8eQLVLwk58SaKRGFa 90XyFN3Vp+AbTbk/PpZaUuMBw5RGzdjgTQCyj5J6jn5ijMdAf9Zkm8G5EjrJAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUqDovbI1SRZfaBMJoKkkEztm/RxQwHwYDVR0j BBgwFoAUxodGOzHR4pgCC84Fw5yLTEKMTTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZjMDAzNzYtMzM1MS00ZmEzLTk3ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0Iz MUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0MjhDNEQzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg3NDYzQjMxRDFFMjk4MDIwQkNFMDVDMzlDOEI0QzQyOEM0 RDM3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc2YzAwMzc2LTMzNTEtNGZhMy05 N2VlLTUyMzg1YmE0ZDkwMy8wLzMxMzAzMzJlMzIzODJlMzIzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzYzMjM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnHBUwDQYJKoZIhvcN AQELBQADggEBAG6A5nOuDq0fHmBYgXN13R1wTnmnIhK8dRvGH6CV5MBXzCk/Y53K YyNeXPyvqzPdgEIiR1bDjVt0z2PBYbMqVYJUGN5RIfrLcoAYi26RbQXIPSnMfhWb xBli7Fa5hAc8DySX7WKV1eiM2pPk4+1NB3Q7ht4SjmSLS4HPJ24r1R1y3O37ELJY qadheUBAzSp33A/1o5BCF29Zcoeq+apq0hIqx0JNDV4dhsXBgJ/yGPmXjVjkPvVW cpQyIcBprpGHF7EUXUWZLyc2xDQjv+EqySUEhNpRXKOf3VvzV6Ccg4f3O4IDcXsF ajftbqNffuW9Cu3guUYt0pTr9hr9UUoHsLs= -----END CERTIFICATE-----Generated at Wed May 13 12:40:25 2026 by rpki-client