$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa File: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (raw, json) Hash identifier: ohA41RSForcViKph50xgqT5CqEd5p9C2x10sK3Y5aMA= Subject key identifier: 43:96:DF:10:17:2A:0A:9F:34:21:97:F7:EF:1A:35:54:BB:83:CB:F1 Certificate issuer: /CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Certificate serial: 1CB7C7D77F1E68FC6CF86EFDFF7AAF0411C3B4EF Authority key identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa Signing time: Sun 03 May 2026 02:56:45 +0000 ROA not before: Sun 03 May 2026 02:51:45 +0000 ROA not after: Sun 02 May 2027 02:56:45 +0000 asID: 136856 IP address blocks: 103.102.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b7:c7:d7:7f:1e:68:fc:6c:f8:6e:fd:ff:7a:af:04:11:c3:b4:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Validity Not Before: May 3 02:51:45 2026 GMT Not After : May 2 02:56:45 2027 GMT Subject: CN=4396DF10172A0A9F342197F7EF1A3554BB83CBF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:ba:2c:5e:f3:67:c4:bf:68:68:47:ee:ae: 77:ba:bc:00:d9:ed:0d:1d:7c:77:0a:4d:4a:05:92: b4:b7:53:bb:1c:fb:a4:cd:0d:b9:83:16:d4:a2:ec: ed:a6:4f:55:4f:00:ae:45:1b:96:7e:98:dd:fc:ef: fd:86:b1:c4:dc:1e:18:60:b4:03:29:c2:ed:2a:77: 45:44:fb:e0:76:9d:1b:7b:27:44:cf:05:8a:d4:d5: 81:25:67:8d:ee:26:81:9e:17:0d:c9:c3:de:e5:c5: 49:7b:90:32:96:39:c6:84:cc:d9:ac:4e:ed:17:4f: 4c:61:81:18:14:25:82:9c:ef:3c:e4:b0:50:09:d7: 1f:24:d1:a2:2d:05:06:d3:61:81:8c:b5:81:c6:c3: c3:fa:22:f1:00:49:aa:26:12:aa:c6:b5:12:8a:f7: 26:af:b9:ba:19:f2:54:78:dd:b1:1a:0f:e9:84:34: 3f:46:70:52:69:c1:53:ce:e0:8d:b8:97:19:0c:c0: 2e:7f:c9:74:b1:e8:08:59:e7:08:5e:05:9f:85:a3: 73:4f:7e:af:d5:48:6a:ad:8f:c1:1a:51:c9:b6:a9: a6:0a:1a:84:2d:48:9c:0d:3b:5d:c9:3c:be:06:df: a5:13:87:17:c8:fb:f1:eb:b6:d9:11:fb:01:34:48: a8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:96:DF:10:17:2A:0A:9F:34:21:97:F7:EF:1A:35:54:BB:83:CB:F1 X509v3 Authority Key Identifier: keyid:8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.112.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:57:04:d0:fc:a7:75:db:d9:84:97:b6:8f:a3:d9:9e:31:cc: 9e:6d:4c:39:21:80:ae:3a:2f:17:5d:68:93:d4:ce:87:36:36: 5e:43:49:bf:2f:9b:0c:c2:1c:e9:ef:28:1b:44:d6:c9:30:0b: d1:f8:53:68:cf:44:8f:f0:99:b4:cb:2c:10:40:7e:1e:60:41: 54:5e:b7:32:dc:7d:7e:a2:e8:0a:58:66:94:34:2c:06:5b:f9: 23:82:92:bc:6c:ba:38:ae:a0:2f:e3:57:90:55:7d:41:98:cf: 3b:f0:34:05:34:6e:71:3f:ab:4d:3d:01:0e:b2:1a:36:38:d5: f6:bc:fc:dc:e9:ea:7a:ed:bf:1e:a2:1c:1b:76:b8:bb:09:01: 6b:68:c0:f7:4f:3e:aa:9d:8b:43:a9:11:e1:03:17:a5:b2:32: 44:82:8a:a8:08:a8:ed:2b:c1:27:af:bc:a9:e7:58:ec:c1:cd: d8:f5:e7:b0:91:73:60:dc:74:8e:b8:61:e7:a1:1b:f4:a1:98: 8c:c5:40:a5:db:67:7d:e1:7c:2d:d7:cc:1e:b2:1f:00:bb:45: 00:f8:47:3e:85:ac:ad:1f:be:0e:17:ec:50:ae:17:52:5c:92: 8d:ab:62:52:97:8c:1b:93:8c:e8:f6:19:b7:b2:6e:73:8e:35: 02:51:90:22 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHLfH138eaPxs+G79/3qvBBHDtO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0 RTNBRTZFQzAeFw0yNjA1MDMwMjUxNDVaFw0yNzA1MDIwMjU2NDVaMDMxMTAvBgNV BAMTKDQzOTZERjEwMTcyQTBBOUYzNDIxOTdGN0VGMUEzNTU0QkI4M0NCRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCribosXvNnxL9oaEfurne6vADZ 7Q0dfHcKTUoFkrS3U7sc+6TNDbmDFtSi7O2mT1VPAK5FG5Z+mN387/2GscTcHhhg tAMpwu0qd0VE++B2nRt7J0TPBYrU1YElZ43uJoGeFw3Jw97lxUl7kDKWOcaEzNms Tu0XT0xhgRgUJYKc7zzksFAJ1x8k0aItBQbTYYGMtYHGw8P6IvEASaomEqrGtRKK 9yavuboZ8lR43bEaD+mEND9GcFJpwVPO4I24lxkMwC5/yXSx6AhZ5wheBZ+Fo3NP fq/VSGqtj8EaUcm2qaYKGoQtSJwNO13JPL4G36UThxfI+/HrttkR+wE0SKgJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUQ5bfEBcqCp80IZf37xo1VLuDy/EwHwYDVR0j BBgwFoAUjuNZiH7UeUfnTsw9Etfdh0465uwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTVjN2E0MDQtZWIzZi00Y2YxLTk5ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3 RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0RTNBRTZFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUUzNTk4ODdFRDQ3OTQ3RTc0RUNDM0QxMkQ3REQ4NzRFM0FF NkVDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E1YzdhNDA0LWViM2YtNGNmMS05 OWY5LTgyNzk2MTY2MWYzMS8wLzMxMzAzMzJlMzEzMDMyMmUzMTMxMzIyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMTMzMzYzODM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnZnAwDQYJ KoZIhvcNAQELBQADggEBACtXBND8p3Xb2YSXto+j2Z4xzJ5tTDkhgK46LxddaJPU zoc2Nl5DSb8vmwzCHOnvKBtE1skwC9H4U2jPRI/wmbTLLBBAfh5gQVRetzLcfX6i 6ApYZpQ0LAZb+SOCkrxsujiuoC/jV5BVfUGYzzvwNAU0bnE/q009AQ6yGjY41fa8 /Nzp6nrtvx6iHBt2uLsJAWtowPdPPqqdi0OpEeEDF6WyMkSCiqgIqO0rwSevvKnn WOzBzdj157CRc2DcdI64YeehG/ShmIzFQKXbZ33hfC3XzB6yHwC7RQD4Rz6FrK0f vg4X7FCuF1Jcko2rYlKXjBuTjOj2GbeybnOONQJRkCI= -----END CERTIFICATE-----Generated at Wed May 13 12:19:08 2026 by rpki-client