$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130382e302f32332d3233203d3e20313430343233.roa File: 3130332e3235352e3130382e302f32332d3233203d3e20313430343233.roa (raw, json) Hash identifier: lD4ekQjYWJEX/+XteQDNEzLVrijnUKOpZR8eykHExcM= Subject key identifier: 0E:DE:51:2D:4F:E7:A5:B9:3F:94:CF:C5:AB:DE:96:CA:2A:06:F1:64 Certificate issuer: /CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537 Certificate serial: 40B109277356FD7015AD3F7B8EE6C37DFC39B1D4 Authority key identifier: EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130382e302f32332d3233203d3e20313430343233.roa Signing time: Sun 03 May 2026 02:58:11 +0000 ROA not before: Sun 03 May 2026 02:53:11 +0000 ROA not after: Sun 02 May 2027 02:58:11 +0000 asID: 140423 IP address blocks: 103.255.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b1:09:27:73:56:fd:70:15:ad:3f:7b:8e:e6:c3:7d:fc:39:b1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537 Validity Not Before: May 3 02:53:11 2026 GMT Not After : May 2 02:58:11 2027 GMT Subject: CN=0EDE512D4FE7A5B93F94CFC5ABDE96CA2A06F164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fd:b8:44:1f:7c:f5:8b:d2:86:44:cd:2e:f4: 97:05:36:3d:a7:d9:56:03:b9:0d:c9:c7:26:cd:ef: a9:af:dd:05:44:22:b6:35:fe:17:22:1c:78:f4:1f: c1:5e:26:1d:13:94:c6:42:05:05:ca:77:f5:56:3b: 3f:54:f6:07:d2:9e:ac:b3:56:a6:bf:b3:37:b2:39: ec:f1:c5:0d:fe:e5:7e:de:6f:59:e9:2f:46:ed:a4: 93:28:d9:1f:e4:82:6e:b7:eb:06:30:41:bd:72:9c: 42:6f:28:58:f8:90:b0:9c:bd:95:02:57:36:df:33: 39:80:58:65:9f:df:8f:03:77:5a:1b:a6:3e:c4:8b: 10:4f:8a:0f:34:1b:b0:cb:5f:f6:14:0f:96:a7:92: d9:ab:4c:d7:f0:93:22:ae:aa:38:7c:f3:e0:ce:3e: 2b:91:0b:c4:ca:40:e9:ba:90:b1:5a:3a:45:38:da: 99:ac:21:b8:c6:ff:48:52:f8:45:eb:59:dd:47:1e: 29:96:31:ed:6a:49:73:a0:05:a0:0a:89:09:1f:14: b5:99:ab:12:a4:c0:d1:d1:09:5b:33:c2:b0:48:93: 89:27:7c:10:8d:df:f9:77:3c:0d:03:ce:99:09:60: 33:d0:c2:0a:03:cb:a0:b9:d8:75:22:82:b3:70:1f: fd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DE:51:2D:4F:E7:A5:B9:3F:94:CF:C5:AB:DE:96:CA:2A:06:F1:64 X509v3 Authority Key Identifier: keyid:EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130382e302f32332d3233203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.108.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:9c:f5:55:69:36:3d:40:76:e4:9a:a5:a4:d9:44:21:00:ea: 68:cc:34:93:8f:47:47:1f:50:73:4e:b1:ae:d5:45:4d:3a:a8: 82:39:56:a5:49:85:82:67:62:84:c8:97:17:9f:4d:bc:c0:19: e6:b3:31:24:ac:4a:a0:0f:0c:73:56:08:d3:41:d8:99:13:b0: 9e:55:35:20:3e:08:70:6f:82:4a:47:c9:8e:c2:a7:f9:af:f0: 69:37:8b:c5:2a:79:d2:6b:c7:55:66:4e:ef:0a:3c:ba:c8:ce: c4:94:56:9b:b2:4b:94:62:5b:bc:63:26:be:ab:28:6d:41:b2: 66:b9:fd:2b:5d:f9:da:df:bd:f2:2c:f8:98:ae:71:cb:e5:c0: 1b:16:fc:91:0f:cd:f5:bc:14:2a:65:64:be:a3:8c:39:4a:8c: e7:ae:5a:df:b3:0b:91:15:70:32:1a:18:75:44:45:38:49:c9: 51:ed:3e:35:da:1a:72:00:f9:1b:05:6e:68:29:bd:5e:fa:32: dd:89:40:73:07:95:f0:b1:62:7a:76:42:05:6f:19:f3:2b:ac: f1:6f:fc:cb:97:a2:70:23:4c:a9:16:71:ff:a9:be:c8:f2:4e: 67:cf:0b:b6:c0:d6:fd:7c:c1:02:49:18:63:48:66:6e:4d:41: dd:0d:46:45 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQLEJJ3NW/XAVrT97jubDffw5sdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIxQTdFRTUzOUU2RjFFRkEzRDMwQzYyMTQ5QzI2NUVC RjMwQjUzNzAeFw0yNjA1MDMwMjUzMTFaFw0yNzA1MDIwMjU4MTFaMDMxMTAvBgNV BAMTKDBFREU1MTJENEZFN0E1QjkzRjk0Q0ZDNUFCREU5NkNBMkEwNkYxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ/bhEH3z1i9KGRM0u9JcFNj2n 2VYDuQ3JxybN76mv3QVEIrY1/hciHHj0H8FeJh0TlMZCBQXKd/VWOz9U9gfSnqyz Vqa/szeyOezxxQ3+5X7eb1npL0btpJMo2R/kgm636wYwQb1ynEJvKFj4kLCcvZUC VzbfMzmAWGWf348Dd1obpj7EixBPig80G7DLX/YUD5anktmrTNfwkyKuqjh88+DO PiuRC8TKQOm6kLFaOkU42pmsIbjG/0hS+EXrWd1HHimWMe1qSXOgBaAKiQkfFLWZ qxKkwNHRCVszwrBIk4knfBCN3/l3PA0DzpkJYDPQwgoDy6C52HUigrNwH/1NAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUDt5RLU/npbk/lM/Fq96WyioG8WQwHwYDVR0j BBgwFoAU6xp+5Tnm8e+j0wxiFJwmXr8wtTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWExMWU2ZDctNTdhMS00OTM2LWI3YTctZGUwOTM1MjVjYjI3LzAvRUIxQTdFRTUz OUU2RjFFRkEzRDMwQzYyMTQ5QzI2NUVCRjMwQjUzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjFBN0VFNTM5RTZGMUVGQTNEMzBDNjIxNDlDMjY1RUJGMzBC NTM3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FhMTFlNmQ3LTU3YTEtNDkzNi1i N2E3LWRlMDkzNTI1Y2IyNy8wLzMxMzAzMzJlMzIzNTM1MmUzMTMwMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn/2wwDQYJ KoZIhvcNAQELBQADggEBAC+c9VVpNj1AduSapaTZRCEA6mjMNJOPR0cfUHNOsa7V RU06qII5VqVJhYJnYoTIlxefTbzAGeazMSSsSqAPDHNWCNNB2JkTsJ5VNSA+CHBv gkpHyY7Cp/mv8Gk3i8UqedJrx1VmTu8KPLrIzsSUVpuyS5RiW7xjJr6rKG1Bsma5 /Std+drfvfIs+JiuccvlwBsW/JEPzfW8FCplZL6jjDlKjOeuWt+zC5EVcDIaGHVE RThJyVHtPjXaGnIA+RsFbmgpvV76Mt2JQHMHlfCxYnp2QgVvGfMrrPFv/MuXonAj TKkWcf+pvsjyTmfPC7bA1v18wQJJGGNIZm5NQd0NRkU= -----END CERTIFICATE-----Generated at Wed May 13 09:21:02 2026 by rpki-client