$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3139312e302f32342d3234203d3e203535363835.roa File: 3130332e32302e3139312e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: oRAbrcr+/kuVQudloHVXhRXPkaF86LJCugKnZle6XyQ= Subject key identifier: 82:E1:51:5A:59:1A:6A:72:FB:2C:05:A6:56:1C:A4:7C:CC:EB:D8:C7 Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 7DEDF1E1BE9D17FAE20B01644F5F00446F52EB81 Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3139312e302f32342d3234203d3e203535363835.roa Signing time: Sun 03 May 2026 02:48:01 +0000 ROA not before: Sun 03 May 2026 02:43:01 +0000 ROA not after: Sun 02 May 2027 02:48:01 +0000 asID: 55685 IP address blocks: 103.20.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ed:f1:e1:be:9d:17:fa:e2:0b:01:64:4f:5f:00:44:6f:52:eb:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:43:01 2026 GMT Not After : May 2 02:48:01 2027 GMT Subject: CN=82E1515A591A6A72FB2C05A6561CA47CCCEBD8C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:4b:15:c8:ef:10:ee:b5:24:be:33:2e:ef: 8a:1d:24:e1:34:57:36:63:8b:13:b1:84:23:fc:32: 2f:03:7a:f1:43:2a:f9:5a:19:89:0c:19:7d:01:7b: b7:f1:49:e9:9d:a2:7f:1f:6c:37:10:77:4d:52:c6: 61:c9:f7:21:8c:43:c8:37:76:50:c5:5d:b3:a3:c5: b7:35:3f:2d:b7:c7:5d:50:d8:ae:7e:1f:e2:99:91: a0:e8:c9:c9:35:db:1b:bc:6c:5e:18:e0:b9:d5:d1: 23:8f:bd:8b:7c:32:fc:83:e7:22:49:08:da:0b:17: 30:33:ce:3d:b5:fc:ed:b0:83:47:36:27:51:35:01: b9:a1:a6:c5:58:e9:66:63:ac:ae:a4:29:32:00:fd: c1:36:a7:b7:ff:4c:5e:57:3f:fc:a8:55:d7:45:fe: 9c:90:cb:40:5f:f9:2a:39:5d:f7:47:1a:a1:bc:0b: 7a:d0:14:c1:57:0e:9e:cf:0a:78:c1:88:e1:25:4e: 45:dc:a6:3a:e3:85:6e:63:a9:51:06:3c:1a:07:aa: 8a:68:e6:f0:03:e5:f7:1a:be:1c:1f:6c:16:59:1b: 1b:85:09:8a:1b:fc:f7:de:0d:43:24:ed:6a:b1:aa: ff:d5:d9:21:e0:54:35:e9:6d:f9:7d:2a:9d:43:39: c7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E1:51:5A:59:1A:6A:72:FB:2C:05:A6:56:1C:A4:7C:CC:EB:D8:C7 X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3139312e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.191.0/24 Signature Algorithm: sha256WithRSAEncryption bb:88:e9:58:0b:4e:19:77:4e:87:3b:38:ab:4b:16:c3:55:b5: 44:88:10:cf:2f:2a:ad:9e:14:1b:3a:3a:9b:06:12:17:d2:5d: e7:fa:3d:12:e4:8b:a0:00:00:f3:a6:da:4e:8c:b0:c0:f4:55: 33:0e:02:b7:24:25:09:b6:09:fe:a9:f8:ef:f4:7a:91:cd:c0: c5:64:57:01:15:ec:8d:e5:08:f6:12:74:17:9f:98:fd:25:c7: b9:dd:18:ae:64:1e:66:dc:1c:ca:06:1b:7d:c8:ab:66:16:47: 08:b5:27:c1:31:cf:5d:28:f3:e5:96:e6:ce:54:01:9d:53:85: 94:c0:6d:69:19:af:93:9d:5f:9b:e1:9c:5a:41:2b:b7:aa:22: a4:4d:e2:8c:92:dd:3a:29:52:ae:94:87:12:b4:bc:a6:64:b0: 64:1f:e8:5c:f8:ee:59:47:41:36:6d:4c:16:c6:13:cd:b7:51: 7c:1b:dd:14:53:37:c4:3e:2c:04:97:0a:a5:42:03:c1:d6:80: f6:80:d3:e0:d1:4c:a5:6e:f4:aa:b3:f5:05:62:03:0e:a4:d1: 50:73:82:5f:26:2e:16:d7:14:f1:d2:c8:a1:41:7f:80:65:6f: a5:f8:75:86:f0:39:17:0d:fd:76:e6:82:56:5f:42:e3:9c:b5: 28:1c:94:36 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfe3x4b6dF/riCwFkT18ARG9S64EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQzMDFaFw0yNzA1MDIwMjQ4MDFaMDMxMTAvBgNV BAMTKDgyRTE1MTVBNTkxQTZBNzJGQjJDMDVBNjU2MUNBNDdDQ0NFQkQ4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wUsVyO8Q7rUkvjMu74odJOE0 VzZjixOxhCP8Mi8DevFDKvlaGYkMGX0Be7fxSemdon8fbDcQd01SxmHJ9yGMQ8g3 dlDFXbOjxbc1Py23x11Q2K5+H+KZkaDoyck12xu8bF4Y4LnV0SOPvYt8MvyD5yJJ CNoLFzAzzj21/O2wg0c2J1E1AbmhpsVY6WZjrK6kKTIA/cE2p7f/TF5XP/yoVddF /pyQy0Bf+So5XfdHGqG8C3rQFMFXDp7PCnjBiOElTkXcpjrjhW5jqVEGPBoHqopo 5vAD5fcavhwfbBZZGxuFCYob/PfeDUMk7Wqxqv/V2SHgVDXpbfl9Kp1DOcc3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUguFRWlkaanL7LAWmVhykfMzr2McwHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzAzMzJlMzIzMDJlMzEzOTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcUvzANBgkqhkiG 9w0BAQsFAAOCAQEAu4jpWAtOGXdOhzs4q0sWw1W1RIgQzy8qrZ4UGzo6mwYSF9Jd 5/o9EuSLoAAA86baToywwPRVMw4CtyQlCbYJ/qn47/R6kc3AxWRXARXsjeUI9hJ0 F5+Y/SXHud0YrmQeZtwcygYbfcirZhZHCLUnwTHPXSjz5ZbmzlQBnVOFlMBtaRmv k51fm+GcWkErt6oipE3ijJLdOilSrpSHErS8pmSwZB/oXPjuWUdBNm1MFsYTzbdR fBvdFFM3xD4sBJcKpUIDwdaA9oDT4NFMpW70qrP1BWIDDqTRUHOCXyYuFtcU8dLI oUF/gGVvpfh1hvA5Fw39duaCVl9C45y1KByUNg== -----END CERTIFICATE-----Generated at Wed May 13 02:33:47 2026 by rpki-client