$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa File: 3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa (raw, json) Hash identifier: BsPXa+UOut2Mbb+7M0ct2qI2C2+ME889eZGuggOi820= Subject key identifier: 3C:CB:DB:BE:CE:62:B9:0E:3B:71:1B:0E:04:07:CF:17:C3:01:07:14 Certificate issuer: /CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537 Certificate serial: 372A4ED2D09BA7B698659CC81281F2E0831E5E56 Authority key identifier: EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa Signing time: Sun 03 May 2026 02:58:11 +0000 ROA not before: Sun 03 May 2026 02:53:11 +0000 ROA not after: Sun 02 May 2027 02:58:11 +0000 asID: 150191 IP address blocks: 103.255.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2a:4e:d2:d0:9b:a7:b6:98:65:9c:c8:12:81:f2:e0:83:1e:5e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537 Validity Not Before: May 3 02:53:11 2026 GMT Not After : May 2 02:58:11 2027 GMT Subject: CN=3CCBDBBECE62B90E3B711B0E0407CF17C3010714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:25:46:ba:91:c7:88:86:26:0d:bd:f0:b1: 76:6c:6b:fe:56:a6:4b:31:28:06:f2:71:8e:ac:2d: 7c:4f:4d:66:3f:8a:3a:e3:32:46:45:e4:4b:b4:7e: 15:23:06:76:7c:3f:53:74:33:f5:43:10:58:95:bc: 0f:91:e3:a2:81:ac:26:e7:40:a2:70:6a:fc:d1:68: bc:f1:f0:b9:96:15:0f:80:eb:8d:0d:73:16:34:2a: 8c:f1:da:0e:fd:7a:66:7b:97:cd:18:0f:81:fd:41: 1f:a7:79:91:7d:a3:14:14:e9:ce:55:ad:bf:71:a1: 93:22:c3:e9:ac:5d:b1:2f:33:94:03:93:05:8b:ad: b8:2d:6e:23:92:84:4b:70:ec:31:69:95:c8:50:74: d2:61:c1:48:a5:ca:af:11:3c:fb:94:90:00:74:3a: 51:a2:e1:f5:99:28:40:31:fb:4b:0f:12:16:37:47: 83:ab:81:f7:11:18:f8:3f:41:82:25:93:87:40:80: c4:06:9a:f1:45:f5:82:f8:51:e1:29:7f:e1:03:7f: d8:ab:c9:0a:70:03:8d:2e:1e:b3:a7:b6:b7:58:98: 4b:59:da:71:1b:ea:24:60:79:76:7d:69:e9:ca:0a: d2:2f:76:e6:8b:6a:12:d0:0b:ed:b6:7f:53:c0:00: ac:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CB:DB:BE:CE:62:B9:0E:3B:71:1B:0E:04:07:CF:17:C3:01:07:14 X509v3 Authority Key Identifier: keyid:EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.109.0/24 Signature Algorithm: sha256WithRSAEncryption 59:86:8d:28:4f:f2:f1:ec:ec:af:de:ab:8e:72:a5:08:f0:ae: 27:d7:37:3e:62:3f:70:7f:e5:39:f6:dc:6b:9a:80:d3:00:1d: dd:ea:96:e7:f4:ab:c6:6e:8b:25:69:de:ff:80:df:ba:5d:e1: c0:a9:49:05:b0:e6:a3:51:c2:65:3a:dc:cc:ed:fe:49:57:ca: b5:a2:7a:ac:de:69:8a:b0:2d:14:67:38:7e:4e:c0:34:fe:1b: cf:51:7a:65:68:ae:33:31:eb:4c:26:61:c7:01:5c:ca:bc:49: 12:96:bd:23:e3:cd:31:1d:68:30:5e:06:84:dd:49:05:61:a5: 2b:1b:73:2a:01:5c:e8:ee:f2:18:52:37:a3:a4:1d:34:c2:a7: 69:6e:6e:67:bf:a8:e8:fe:9a:b4:87:bf:68:2b:99:c0:71:04: 91:af:40:47:b4:21:c7:c8:55:bf:10:c6:3b:45:6d:b0:2b:9a: bf:da:57:7b:55:cc:03:55:87:d5:c2:fb:8d:df:0d:b4:0b:6a: 66:c6:a2:ec:31:11:1b:05:28:b0:c7:05:ff:43:b1:0a:42:23: 2a:af:65:b2:61:f4:88:15:de:c8:c0:6d:26:31:0e:bf:89:a8: 25:c3:6e:df:8a:d9:d4:5e:e7:07:ca:e2:f1:57:af:ad:b4:f1: cf:d3:af:42 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNypO0tCbp7aYZZzIEoHy4IMeXlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIxQTdFRTUzOUU2RjFFRkEzRDMwQzYyMTQ5QzI2NUVC RjMwQjUzNzAeFw0yNjA1MDMwMjUzMTFaFw0yNzA1MDIwMjU4MTFaMDMxMTAvBgNV BAMTKDNDQ0JEQkJFQ0U2MkI5MEUzQjcxMUIwRTA0MDdDRjE3QzMwMTA3MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4SCVGupHHiIYmDb3wsXZsa/5W pksxKAbycY6sLXxPTWY/ijrjMkZF5Eu0fhUjBnZ8P1N0M/VDEFiVvA+R46KBrCbn QKJwavzRaLzx8LmWFQ+A640NcxY0Kozx2g79emZ7l80YD4H9QR+neZF9oxQU6c5V rb9xoZMiw+msXbEvM5QDkwWLrbgtbiOShEtw7DFplchQdNJhwUilyq8RPPuUkAB0 OlGi4fWZKEAx+0sPEhY3R4OrgfcRGPg/QYIlk4dAgMQGmvFF9YL4UeEpf+EDf9ir yQpwA40uHrOntrdYmEtZ2nEb6iRgeXZ9aenKCtIvduaLahLQC+22f1PAAKxLAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUPMvbvs5iuQ47cRsOBAfPF8MBBxQwHwYDVR0j BBgwFoAU6xp+5Tnm8e+j0wxiFJwmXr8wtTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWExMWU2ZDctNTdhMS00OTM2LWI3YTctZGUwOTM1MjVjYjI3LzAvRUIxQTdFRTUz OUU2RjFFRkEzRDMwQzYyMTQ5QzI2NUVCRjMwQjUzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjFBN0VFNTM5RTZGMUVGQTNEMzBDNjIxNDlDMjY1RUJGMzBC NTM3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FhMTFlNmQ3LTU3YTEtNDkzNi1i N2E3LWRlMDkzNTI1Y2IyNy8wLzMxMzAzMzJlMzIzNTM1MmUzMTMwMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn/20wDQYJ KoZIhvcNAQELBQADggEBAFmGjShP8vHs7K/eq45ypQjwrifXNz5iP3B/5Tn23Gua gNMAHd3qluf0q8ZuiyVp3v+A37pd4cCpSQWw5qNRwmU63Mzt/klXyrWieqzeaYqw LRRnOH5OwDT+G89RemVorjMx60wmYccBXMq8SRKWvSPjzTEdaDBeBoTdSQVhpSsb cyoBXOju8hhSN6OkHTTCp2lubme/qOj+mrSHv2grmcBxBJGvQEe0IcfIVb8QxjtF bbArmr/aV3tVzANVh9XC+43fDbQLambGouwxERsFKLDHBf9DsQpCIyqvZbJh9IgV 3sjAbSYxDr+JqCXDbt+K2dRe5wfK4vFXr6208c/Tr0I= -----END CERTIFICATE-----Generated at Wed May 13 14:24:44 2026 by rpki-client