$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3138382e302f32342d3234203d3e203535363835.roa File: 3130332e32302e3138382e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: AdX/SbpOmCfZ9QwC8oYtmYCJDAS+Phh41drpYlmN36s= Subject key identifier: 7A:06:6E:D8:9C:34:F7:D1:4E:56:7A:D2:96:B0:D1:A5:6A:32:06:91 Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 1A28094040D75E6668D699D4CCEA3DDFCF9CE08A Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3138382e302f32342d3234203d3e203535363835.roa Signing time: Sun 03 May 2026 02:48:00 +0000 ROA not before: Sun 03 May 2026 02:43:00 +0000 ROA not after: Sun 02 May 2027 02:48:00 +0000 asID: 55685 IP address blocks: 103.20.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:28:09:40:40:d7:5e:66:68:d6:99:d4:cc:ea:3d:df:cf:9c:e0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:43:00 2026 GMT Not After : May 2 02:48:00 2027 GMT Subject: CN=7A066ED89C34F7D14E567AD296B0D1A56A320691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b4:1b:b5:53:20:be:cc:ff:d6:e0:75:58:6b: a1:e7:86:5a:6e:b4:35:07:d6:8b:e9:b0:f8:40:0e: ea:38:e3:0b:90:0f:26:4e:75:b0:9f:89:81:64:f7: 3f:b5:45:4d:75:d4:82:47:59:6b:92:7c:1b:39:23: 98:61:0d:ad:1b:ae:10:0d:36:77:fd:c9:aa:c1:8c: 79:a0:06:e5:11:4f:33:19:63:d5:58:fb:91:72:79: 1b:c4:5f:9b:ac:51:90:9d:33:c8:f8:42:eb:16:22: 3f:87:d3:e1:03:52:ac:50:ad:8d:bc:61:4f:fa:30: aa:d0:99:3a:3b:2d:4c:61:66:0e:77:43:ca:c3:7b: b6:38:f4:6d:4a:8b:99:6a:b3:7a:d7:21:a2:34:34: 5b:9c:3b:81:55:48:3d:be:7a:b8:a7:9b:80:6f:a0: 15:5c:06:37:d9:ed:75:89:29:89:66:ee:05:8e:96: fa:4b:90:3b:b4:04:2d:2c:ef:6a:dc:3f:78:28:b1: 14:6b:ae:ba:46:ae:ff:a7:a8:2c:9a:d2:3c:98:eb: dd:97:1f:08:0f:ad:8f:18:dc:3d:3e:30:fd:d6:06: aa:86:dc:33:ec:b4:c7:37:4d:9f:43:6c:18:6a:a6: df:06:69:30:7e:20:3f:e0:0a:cc:56:a3:47:4c:d5: 83:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:06:6E:D8:9C:34:F7:D1:4E:56:7A:D2:96:B0:D1:A5:6A:32:06:91 X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3138382e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.188.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:e9:b5:e2:74:12:7a:9d:a5:35:2c:25:94:a4:25:5e:b0:01: 6a:bf:0e:3a:2a:d9:a7:80:0c:f9:0d:c7:8b:56:19:3e:15:ba: c0:64:1e:3a:79:b7:3f:71:55:6e:b7:49:fa:66:93:a5:1d:36: e0:dc:d9:ec:51:b6:0d:8b:31:82:ab:26:4b:ae:97:b7:4c:7b: 6e:f4:d6:7b:5e:38:55:f9:5b:9f:f3:42:86:9e:2c:41:3f:a1: 61:d4:1d:be:93:be:ed:91:5e:a2:bf:ae:ed:27:1c:0b:1d:3c: 80:8e:55:b2:6b:bb:65:75:29:2c:d2:34:1f:1c:c6:2c:8e:d1: 0a:01:80:be:4e:d6:68:49:c0:53:2d:4a:37:e2:5f:7f:06:85: 28:28:36:98:33:10:e2:42:bf:30:ee:6d:63:44:85:93:5c:18: 77:68:94:16:1e:00:41:25:28:a6:30:4b:e4:59:9b:92:31:04: cd:b9:d9:82:d5:5c:7c:cb:2b:fe:cc:47:03:b4:10:89:dd:37: 36:99:90:bb:82:ff:27:80:86:e8:00:cf:be:5a:fe:1d:79:94: d4:98:d2:fd:9a:50:22:07:34:88:04:6e:2e:d1:14:f5:fa:39: 17:85:fb:3a:0b:d3:d9:2f:18:e7:03:de:b3:a6:3c:32:6f:6d: 77:15:c8:8f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGigJQEDXXmZo1pnUzOo938+c4IowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQzMDBaFw0yNzA1MDIwMjQ4MDBaMDMxMTAvBgNV BAMTKDdBMDY2RUQ4OUMzNEY3RDE0RTU2N0FEMjk2QjBEMUE1NkEzMjA2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDctBu1UyC+zP/W4HVYa6Hnhlpu tDUH1ovpsPhADuo44wuQDyZOdbCfiYFk9z+1RU111IJHWWuSfBs5I5hhDa0brhAN Nnf9yarBjHmgBuURTzMZY9VY+5FyeRvEX5usUZCdM8j4QusWIj+H0+EDUqxQrY28 YU/6MKrQmTo7LUxhZg53Q8rDe7Y49G1Ki5lqs3rXIaI0NFucO4FVSD2+erinm4Bv oBVcBjfZ7XWJKYlm7gWOlvpLkDu0BC0s72rcP3gosRRrrrpGrv+nqCya0jyY692X HwgPrY8Y3D0+MP3WBqqG3DPstMc3TZ9DbBhqpt8GaTB+ID/gCsxWo0dM1YNHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUegZu2Jw099FOVnrSlrDRpWoyBpEwHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzAzMzJlMzIzMDJlMzEzODM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcUvDANBgkqhkiG 9w0BAQsFAAOCAQEAm+m14nQSep2lNSwllKQlXrABar8OOirZp4AM+Q3Hi1YZPhW6 wGQeOnm3P3FVbrdJ+maTpR024NzZ7FG2DYsxgqsmS66Xt0x7bvTWe144Vflbn/NC hp4sQT+hYdQdvpO+7ZFeor+u7SccCx08gI5Vsmu7ZXUpLNI0HxzGLI7RCgGAvk7W aEnAUy1KN+JffwaFKCg2mDMQ4kK/MO5tY0SFk1wYd2iUFh4AQSUopjBL5FmbkjEE zbnZgtVcfMsr/sxHA7QQid03NpmQu4L/J4CG6ADPvlr+HXmU1JjS/ZpQIgc0iARu LtEU9fo5F4X7OgvT2S8Y5wPes6Y8Mm9tdxXIjw== -----END CERTIFICATE-----Generated at Wed May 13 02:13:35 2026 by rpki-client