$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa File: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (raw, json) Hash identifier: K/r8+XOLbe3N3PaK9Jky/67CaUJEmno5lG+o29nHH2c= Subject key identifier: 65:8D:E1:17:B8:0D:92:63:EC:31:DE:BD:F8:09:C4:11:0E:E0:B4:E1 Certificate issuer: /CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Certificate serial: 21A547C37C779C643A38D746D864521FD24E9AB4 Authority key identifier: 63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa Signing time: Sun 03 May 2026 02:51:19 +0000 ROA not before: Sun 03 May 2026 02:46:19 +0000 ROA not after: Sun 02 May 2027 02:51:19 +0000 asID: 138133 IP address blocks: 103.133.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a5:47:c3:7c:77:9c:64:3a:38:d7:46:d8:64:52:1f:d2:4e:9a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Validity Not Before: May 3 02:46:19 2026 GMT Not After : May 2 02:51:19 2027 GMT Subject: CN=658DE117B80D9263EC31DEBDF809C4110EE0B4E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:af:49:2c:29:c4:c6:66:14:23:89:29:ce:00: 79:c6:15:d0:df:6d:46:40:8b:b8:ff:03:e3:8a:18: 5f:c9:dc:3d:fa:6a:3a:ea:1d:c4:b0:90:59:f9:32: fd:3f:f9:96:5b:22:79:08:e2:f2:ef:64:19:85:1a: 4b:68:a3:39:27:a1:ba:c9:25:aa:72:1a:aa:e4:b9: 7e:6f:e7:63:db:e0:f3:75:d5:c9:aa:6e:6c:e6:51: d0:40:80:cb:59:8b:f9:59:31:b2:96:e3:f9:a1:35: 5d:e0:19:89:a0:95:19:78:d1:75:42:63:6d:e6:53: 46:19:3c:f8:4e:19:71:77:44:29:c1:3b:48:65:0e: 92:9b:44:29:8d:c4:ad:e1:7d:12:ac:7a:74:c3:e8: 59:81:d2:5c:d4:58:e1:c0:50:59:33:1e:a1:b4:49: 00:99:fe:d4:fd:db:c1:88:5c:9f:6a:6f:20:0f:f8: c7:b1:ee:0a:c7:a1:c4:67:e6:ba:8f:60:f3:a8:8b: 89:59:cb:9e:09:a9:9e:a9:4e:2f:dd:b6:e2:94:c9: bf:86:f5:b9:6b:72:24:fb:4b:1d:9d:96:c7:84:f0: a6:2b:75:14:76:e8:60:b5:a0:a5:76:5b:04:27:84: 78:73:e0:b1:c5:11:0b:89:e3:62:29:52:c9:f0:ce: 83:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8D:E1:17:B8:0D:92:63:EC:31:DE:BD:F8:09:C4:11:0E:E0:B4:E1 X509v3 Authority Key Identifier: keyid:63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.133.36.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:d0:f4:88:a4:aa:10:45:4c:ca:09:77:bd:ce:37:59:21:81: 1c:3e:b3:46:8e:12:1b:0c:f2:b9:7d:08:2d:b4:84:8d:45:5d: 34:ff:56:ab:6a:1a:37:63:bb:42:eb:f0:ce:c9:6d:af:3a:72: 92:11:4d:87:74:e2:7b:cd:96:b5:34:9e:fe:a5:d7:16:d6:9e: 53:9d:bc:e5:53:09:f5:eb:ce:51:ed:5a:fc:ff:05:93:d4:c6: 4e:ad:0a:8a:b8:68:d0:9b:4d:38:16:80:8e:75:e9:82:25:f1: 6c:3e:53:5a:0e:90:d4:92:4a:f9:d0:98:b6:1e:53:da:aa:9d: 07:1d:4c:cf:c1:a2:ca:45:65:6e:62:cf:9a:25:4f:be:05:6f: b5:dd:34:18:c6:e8:01:c4:83:b3:e5:ce:86:08:29:3f:99:54: d2:67:56:a6:b7:ce:5a:c1:6c:be:8f:24:e5:a4:80:62:14:3d: 07:50:92:01:f5:27:cf:96:96:7f:ca:ad:ad:5f:37:c5:30:67: db:dd:7c:2a:65:8e:46:a1:7b:27:25:0b:2a:af:d6:a1:6d:e9: 46:10:dd:30:f9:63:db:82:cc:76:9d:2a:bf:92:b7:62:fe:32: 36:22:ff:97:dd:61:b7:c2:fe:66:78:af:8b:17:c9:e4:44:9d: fd:c0:24:aa -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIaVHw3x3nGQ6ONdG2GRSH9JOmrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTczOTNF QUUyOUMzODAeFw0yNjA1MDMwMjQ2MTlaFw0yNzA1MDIwMjUxMTlaMDMxMTAvBgNV BAMTKDY1OERFMTE3QjgwRDkyNjNFQzMxREVCREY4MDlDNDExMEVFMEI0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsr0ksKcTGZhQjiSnOAHnGFdDf bUZAi7j/A+OKGF/J3D36ajrqHcSwkFn5Mv0/+ZZbInkI4vLvZBmFGktoozknobrJ JapyGqrkuX5v52Pb4PN11cmqbmzmUdBAgMtZi/lZMbKW4/mhNV3gGYmglRl40XVC Y23mU0YZPPhOGXF3RCnBO0hlDpKbRCmNxK3hfRKsenTD6FmB0lzUWOHAUFkzHqG0 SQCZ/tT928GIXJ9qbyAP+Mex7grHocRn5rqPYPOoi4lZy54JqZ6pTi/dtuKUyb+G 9blrciT7Sx2dlseE8KYrdRR26GC1oKV2WwQnhHhz4LHFEQuJ42IpUsnwzoMfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZY3hF7gNkmPsMd69+AnEEQ7gtOEwHwYDVR0j BBgwFoAUY02de/jvqlwG4bJdH0pzk+rinDgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY2YmYzN2MtZDhhZC00ZTAzLWEwNmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JG OEVGQUE1QzA2RTFCMjVEMUY0QTczOTNFQUUyOUMzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzREOUQ3QkY4RUZBQTVDMDZFMUIyNUQxRjRBNzM5M0VBRTI5 QzM4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhmNmJmMzdjLWQ4YWQtNGUwMy1h MDZhLTQ0MDgxNTdjZjU3ZS8wLzMxMzAzMzJlMzEzMzMzMmUzMzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4UkMA0GCSqG SIb3DQEBCwUAA4IBAQCN0PSIpKoQRUzKCXe9zjdZIYEcPrNGjhIbDPK5fQgttISN RV00/1araho3Y7tC6/DOyW2vOnKSEU2HdOJ7zZa1NJ7+pdcW1p5TnbzlUwn1685R 7Vr8/wWT1MZOrQqKuGjQm004FoCOdemCJfFsPlNaDpDUkkr50Ji2HlPaqp0HHUzP waLKRWVuYs+aJU++BW+13TQYxugBxIOz5c6GCCk/mVTSZ1amt85awWy+jyTlpIBi FD0HUJIB9SfPlpZ/yq2tXzfFMGfb3XwqZY5GoXsnJQsqr9ahbelGEN0w+WPbgsx2 nSq/krdi/jI2Iv+X3WG3wv5meK+LF8nkRJ39wCSq -----END CERTIFICATE-----Generated at Wed May 13 05:46:59 2026 by rpki-client