$ rpki-client -vvf rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa File: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (raw, json) Hash identifier: qWXJBwwFjRlNPlzGu34yKlzyWtSJkvJR6tTW+DXklsI= Subject key identifier: DA:4B:BD:A6:DF:FB:3B:1D:FD:BF:51:8A:CE:3D:58:52:B8:29:05:93 Certificate issuer: /CN=D51AA8B3D72CDB71C90345B767919665E60A217F Certificate serial: 28FCC308A09F56B6A0EDCDFA84282BAFCCE3F309 Authority key identifier: D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa Signing time: Sun 03 May 2026 02:51:32 +0000 ROA not before: Sun 03 May 2026 02:46:32 +0000 ROA not after: Sun 02 May 2027 02:51:32 +0000 asID: 137325 IP address blocks: 103.111.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:fc:c3:08:a0:9f:56:b6:a0:ed:cd:fa:84:28:2b:af:cc:e3:f3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51AA8B3D72CDB71C90345B767919665E60A217F Validity Not Before: May 3 02:46:32 2026 GMT Not After : May 2 02:51:32 2027 GMT Subject: CN=DA4BBDA6DFFB3B1DFDBF518ACE3D5852B8290593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:58:e4:84:08:e5:41:98:16:54:0e:5f:27: f5:3d:f7:2c:69:1d:0e:10:aa:da:91:83:11:de:8b: 62:76:a4:a4:52:7f:0e:49:c3:56:4f:ee:d4:07:9f: 06:e5:0f:df:a3:d2:86:e0:80:ff:a6:28:c8:ab:24: bc:ab:4f:fa:af:02:bc:88:d0:fa:19:78:d3:97:f7: a4:d6:21:2c:8d:49:30:9f:d6:6e:7a:07:c9:a2:a3: 49:33:05:e7:cf:a1:33:e3:f6:d5:60:73:6b:65:83: 06:99:27:59:d8:8b:b3:9d:42:39:df:9b:81:98:34: 54:d3:6c:ca:82:0f:43:dd:82:e2:df:99:59:f3:03: 95:e1:dd:2b:66:6d:1f:97:f1:c4:77:ff:aa:28:19: 27:05:ab:b7:f6:ed:38:56:e3:52:53:e9:a9:87:c6: 1e:ff:8d:61:d7:6e:11:7b:e3:13:19:aa:74:aa:f8: 5b:6e:ec:47:d9:4f:40:42:76:1f:40:53:9c:47:19: ae:50:9b:0e:71:fd:2a:ac:39:38:b7:a7:f4:92:ad: 65:db:f5:d1:48:c4:3e:35:bc:1a:a3:9e:4a:76:40: 20:93:37:60:e5:36:a2:93:c4:4f:41:f2:b8:50:b0: 0b:6b:a6:eb:3f:f1:1b:b7:38:ac:5c:00:0a:1c:66: c1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4B:BD:A6:DF:FB:3B:1D:FD:BF:51:8A:CE:3D:58:52:B8:29:05:93 X509v3 Authority Key Identifier: keyid:D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.217.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:32:84:12:71:ea:e0:46:36:d8:42:81:4b:a2:4b:9e:0d:29: 64:50:f3:43:d5:b0:0e:f9:e4:37:b9:66:69:14:b1:29:dc:76: 17:9b:cf:f6:be:3a:6b:36:99:1b:dc:e8:28:44:82:05:1a:c7: 74:51:ee:1f:51:34:cc:f6:3d:fe:47:bf:24:a8:34:35:33:cb: 7b:cf:12:fd:e9:b7:a0:f7:5c:0a:2b:27:d8:04:55:74:3a:12: 01:d9:ca:1d:3d:2a:5f:70:79:96:45:ff:f0:ed:8a:b4:b5:33: 7d:df:b9:48:aa:7a:04:5b:58:fc:2d:f1:57:86:30:35:a2:12: 22:45:22:2a:a9:a8:0f:df:b9:24:55:63:c5:ae:bc:ad:79:86: a3:e1:10:91:04:c6:40:4a:6e:d8:9b:5c:ac:9a:74:15:54:52: 1c:3d:5c:b9:20:fc:26:62:06:4e:81:bd:fd:ff:e7:55:e3:8e: 98:d5:91:cf:9a:b7:44:db:4e:d0:e3:15:83:e3:f7:ec:1b:e0: a1:c3:c5:c0:cb:30:b1:31:63:1b:4a:d4:a1:2b:d4:bd:dc:ad: 08:a9:68:cd:31:c3:86:ea:ac:53:55:b0:81:c6:0a:40:f5:fb: 14:71:1a:55:d9:be:56:44:83:39:d6:df:a4:95:55:9b:5b:62: b6:51:45:1c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKPzDCKCfVrag7c36hCgrr8zj8wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQUE4QjNENzJDREI3MUM5MDM0NUI3Njc5MTk2NjVF NjBBMjE3RjAeFw0yNjA1MDMwMjQ2MzJaFw0yNzA1MDIwMjUxMzJaMDMxMTAvBgNV BAMTKERBNEJCREE2REZGQjNCMURGREJGNTE4QUNFM0Q1ODUyQjgyOTA1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCunljkhAjlQZgWVA5fJ/U99yxp HQ4QqtqRgxHei2J2pKRSfw5Jw1ZP7tQHnwblD9+j0obggP+mKMirJLyrT/qvAryI 0PoZeNOX96TWISyNSTCf1m56B8mio0kzBefPoTPj9tVgc2tlgwaZJ1nYi7OdQjnf m4GYNFTTbMqCD0PdguLfmVnzA5Xh3StmbR+X8cR3/6ooGScFq7f27ThW41JT6amH xh7/jWHXbhF74xMZqnSq+Ftu7EfZT0BCdh9AU5xHGa5Qmw5x/SqsOTi3p/SSrWXb 9dFIxD41vBqjnkp2QCCTN2DlNqKTxE9B8rhQsAtrpus/8Ru3OKxcAAocZsHzAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU2ku9pt/7Ox39v1GKzj1YUrgpBZMwHwYDVR0j BBgwFoAU1Rqos9cs23HJA0W3Z5GWZeYKIX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NTJiYzYtOGJiNi00ZjI2LTg4YjEtMzgwZGFjMThlMjY4LzAvRDUxQUE4QjNE NzJDREI3MUM5MDM0NUI3Njc5MTk2NjVFNjBBMjE3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTFBQThCM0Q3MkNEQjcxQzkwMzQ1Qjc2NzkxOTY2NUU2MEEy MTdGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkwNjUyYmM2LThiYjYtNGYyNi04 OGIxLTM4MGRhYzE4ZTI2OC8wLzMxMzAzMzJlMzEzMTMxMmUzMjMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMyMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnb9kwDQYJ KoZIhvcNAQELBQADggEBAAsyhBJx6uBGNthCgUuiS54NKWRQ80PVsA755De5ZmkU sSncdhebz/a+Oms2mRvc6ChEggUax3RR7h9RNMz2Pf5HvySoNDUzy3vPEv3pt6D3 XAorJ9gEVXQ6EgHZyh09Kl9weZZF//DtirS1M33fuUiqegRbWPwt8VeGMDWiEiJF IiqpqA/fuSRVY8WuvK15hqPhEJEExkBKbtibXKyadBVUUhw9XLkg/CZiBk6Bvf3/ 51XjjpjVkc+at0TbTtDjFYPj9+wb4KHDxcDLMLExYxtK1KEr1L3crQipaM0xw4bq rFNVsIHGCkD1+xRxGlXZvlZEgznW36SVVZtbYrZRRRw= -----END CERTIFICATE-----Generated at Wed May 13 13:04:20 2026 by rpki-client