$ rpki-client -vvf rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa File: 3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (raw, json) Hash identifier: PzDjWUX+MVj+6J7B1iRzlwiphKEYQz+nq2Fc4OsYou4= Subject key identifier: 5B:F7:D1:4E:F0:96:02:53:D8:48:AF:AC:67:3F:26:7A:AE:FB:41:84 Certificate issuer: /CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Certificate serial: 34FE9A34D4A4D7175EDA4761AD4E53A3D253809D Authority key identifier: 20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa Signing time: Sun 03 May 2026 02:48:29 +0000 ROA not before: Sun 03 May 2026 02:43:29 +0000 ROA not after: Sun 02 May 2027 02:48:29 +0000 asID: 131743 IP address blocks: 103.21.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fe:9a:34:d4:a4:d7:17:5e:da:47:61:ad:4e:53:a3:d2:53:80:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Validity Not Before: May 3 02:43:29 2026 GMT Not After : May 2 02:48:29 2027 GMT Subject: CN=5BF7D14EF0960253D848AFAC673F267AAEFB4184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:8a:90:4f:e8:2a:04:4f:43:82:44:cc:d2: e4:48:ec:8f:cf:11:ec:4a:d6:5b:e8:01:19:59:93: 12:34:3b:7c:0f:61:ec:53:3a:a8:e0:f6:f4:bd:ad: dd:ee:20:ce:b2:47:3d:3c:40:86:c4:58:5f:f0:2d: f3:19:69:a3:4b:b0:ff:67:b0:51:41:3b:9d:55:be: 17:c7:e2:63:05:59:64:53:01:a0:ad:8a:0b:b5:72: 02:bb:f2:ab:76:42:a0:3e:f0:e5:e6:87:8a:6b:7e: e5:d1:69:b3:7a:b1:08:59:cc:ef:7f:61:d5:5f:aa: c2:e7:f0:0b:7a:8e:26:c5:71:81:06:96:0e:11:c5: 60:27:70:ee:67:67:ad:26:32:f7:68:94:11:72:1c: 6b:dc:13:cb:3d:6c:6d:58:5b:0b:1f:f0:b2:16:40: 7b:8d:5f:85:e7:e5:e0:72:f3:38:50:70:b0:f5:56: 20:05:e8:da:9a:98:46:0e:e0:64:a0:9a:f1:6d:a7: 72:c8:a2:c2:0b:46:f0:92:5f:9a:8f:56:cd:c7:ba: cd:83:36:b0:0d:fc:a2:6d:90:bb:dc:04:14:f9:35: 38:e7:03:21:e4:9a:99:75:c6:11:e8:45:39:6f:d6: e2:d3:d4:f8:e0:64:da:73:04:1c:a1:f8:8c:1f:65: 1e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F7:D1:4E:F0:96:02:53:D8:48:AF:AC:67:3F:26:7A:AE:FB:41:84 X509v3 Authority Key Identifier: keyid:20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.229.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:52:9d:84:e6:21:14:04:99:f5:f3:cf:9c:af:ef:f2:e9:bb: cf:c4:02:e8:46:d1:65:bf:b2:13:28:4d:d2:ff:e7:e3:76:f9: c3:c0:c4:80:56:fa:91:ba:7c:13:30:06:42:6b:70:e4:77:66: b8:78:75:89:80:0b:42:4d:30:c4:62:cb:96:39:cd:91:f3:67: ce:1e:12:2b:34:c0:d0:c7:1e:ab:96:54:ab:7d:c7:40:3e:d5: e4:2d:34:8f:43:bd:b3:ed:87:6c:33:4e:7a:da:d1:0c:c9:33: e9:9f:9e:54:5f:86:a1:02:84:d8:8c:70:3b:fe:37:2e:02:69: 54:9d:71:91:22:80:d4:bb:a1:22:b4:53:30:c0:0c:3e:d6:e5: 9e:75:98:76:d3:f3:48:43:f5:12:54:fa:23:23:19:01:74:7c: 23:31:d7:91:7a:23:57:3e:64:1d:70:f6:de:7d:d4:9a:33:88: c5:e4:43:c9:2b:ec:22:b7:d4:2b:b7:23:14:ed:40:1c:97:a7: 70:e7:c3:2d:fb:f4:35:6e:b7:cf:7f:9b:a7:8b:79:a3:e0:8f: 6e:49:40:1e:82:0c:16:f2:7a:bc:db:2e:4a:31:9e:b8:cc:00: 3b:72:11:eb:fe:85:8a:3e:d7:09:c7:44:22:72:3d:37:3c:40: a4:00:30:d0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNP6aNNSk1xde2kdhrU5To9JTgJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFC M0FFQjI0NDAeFw0yNjA1MDMwMjQzMjlaFw0yNzA1MDIwMjQ4MjlaMDMxMTAvBgNV BAMTKDVCRjdEMTRFRjA5NjAyNTNEODQ4QUZBQzY3M0YyNjdBQUVGQjQxODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++oqQT+gqBE9DgkTM0uRI7I/P EexK1lvoARlZkxI0O3wPYexTOqjg9vS9rd3uIM6yRz08QIbEWF/wLfMZaaNLsP9n sFFBO51VvhfH4mMFWWRTAaCtigu1cgK78qt2QqA+8OXmh4prfuXRabN6sQhZzO9/ YdVfqsLn8At6jibFcYEGlg4RxWAncO5nZ60mMvdolBFyHGvcE8s9bG1YWwsf8LIW QHuNX4Xn5eBy8zhQcLD1ViAF6NqamEYO4GSgmvFtp3LIosILRvCSX5qPVs3Hus2D NrAN/KJtkLvcBBT5NTjnAyHkmpl1xhHoRTlv1uLT1PjgZNpzBByh+IwfZR7dAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUW/fRTvCWAlPYSK+sZz8meq77QYQwHwYDVR0j BBgwFoAUIH94SVuR3ZM6PGD7b186AbOuskQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3NDg1NmYtNzQ1My00ZDAyLWJjMzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1 QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFCM0FFQjI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDdGNzg0OTVCOTFERDkzM0EzQzYwRkI2RjVGM0EwMUIzQUVC MjQ0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg3NzQ4NTZmLTc0NTMtNGQwMi1i YzM1LTM0ODJlYjU2NDZhMi8wLzMxMzAzMzJlMzIzMTJlMzIzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxXlMA0GCSqG SIb3DQEBCwUAA4IBAQBtUp2E5iEUBJn188+cr+/y6bvPxALoRtFlv7ITKE3S/+fj dvnDwMSAVvqRunwTMAZCa3Dkd2a4eHWJgAtCTTDEYsuWOc2R82fOHhIrNMDQxx6r llSrfcdAPtXkLTSPQ72z7YdsM0562tEMyTPpn55UX4ahAoTYjHA7/jcuAmlUnXGR IoDUu6EitFMwwAw+1uWedZh20/NIQ/USVPojIxkBdHwjMdeReiNXPmQdcPbefdSa M4jF5EPJK+wit9QrtyMU7UAcl6dw58Mt+/Q1brfPf5uni3mj4I9uSUAeggwW8nq8 2y5KMZ64zAA7chHr/oWKPtcJx0Qicj03PECkADDQ -----END CERTIFICATE-----Generated at Wed May 13 10:20:51 2026 by rpki-client