$ rpki-client -vvf rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa File: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (raw, json) Hash identifier: THjdUj/zxX7Pt6OgYoGfW4AdRr45vtKFbMKetg/qeDc= Subject key identifier: 56:56:7A:66:2E:C0:FC:BD:C5:03:00:38:C8:1B:E2:03:C7:B9:F4:45 Certificate issuer: /CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4 Certificate serial: 5F1294B54F0B9827F348BF6ECF58963E26178EB8 Authority key identifier: 9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa Signing time: Sun 03 May 2026 03:03:10 +0000 ROA not before: Sun 03 May 2026 02:58:10 +0000 ROA not after: Sun 02 May 2027 03:03:10 +0000 asID: 150952 IP address blocks: 103.211.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:12:94:b5:4f:0b:98:27:f3:48:bf:6e:cf:58:96:3e:26:17:8e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4 Validity Not Before: May 3 02:58:10 2026 GMT Not After : May 2 03:03:10 2027 GMT Subject: CN=56567A662EC0FCBDC5030038C81BE203C7B9F445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:6d:49:1c:b9:1d:d0:a2:67:f3:bf:6d:05: 0e:6f:74:69:eb:6b:cc:14:0b:ae:ef:e5:9c:d3:05: f3:bd:fd:29:8b:12:d0:b6:c0:a8:ec:06:81:ee:a9: 29:c3:d8:a9:d0:b6:59:91:03:f6:a6:a0:b2:5e:6b: 95:b3:15:4e:56:21:66:30:b1:df:e2:d3:49:0e:d6: 8c:db:c4:95:b2:3b:a1:62:ac:19:3b:4f:2e:fd:7f: f9:db:3b:04:4f:db:1d:07:27:d5:c2:5b:b6:07:1b: 6d:28:78:72:eb:1b:c2:10:e2:7f:0d:7f:f6:4c:34: 9e:f6:7c:8e:bd:28:db:21:c3:55:ea:bc:23:9d:3c: ee:f2:a7:8b:e5:9b:27:48:c4:a6:9c:0a:cd:e1:98: d7:67:34:98:de:3f:10:07:26:c3:77:c2:05:95:7b: 0e:49:1a:ba:47:ee:fc:85:3e:b0:f8:af:7c:33:ab: c6:3a:c5:d0:a9:cb:41:d1:e2:14:ae:b5:8e:c4:30: 3d:5d:5e:ec:31:3c:b5:25:61:64:1e:a9:4d:9c:4c: b8:6c:c5:db:0d:87:7c:18:ab:8f:95:cc:d4:0c:18: 0b:c0:a7:2c:27:0b:6c:03:90:3a:1d:6a:28:8a:fc: ca:c6:3a:94:64:ec:a4:9b:35:03:aa:86:03:7b:12: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:56:7A:66:2E:C0:FC:BD:C5:03:00:38:C8:1B:E2:03:C7:B9:F4:45 X509v3 Authority Key Identifier: keyid:9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.196.0/24 Signature Algorithm: sha256WithRSAEncryption 18:1f:1e:a1:9c:f3:39:59:dd:81:ad:da:06:78:31:c1:8d:6a: ef:ba:ce:3c:64:c8:80:14:37:7b:5e:9f:50:b7:d1:8a:66:07: ca:69:c9:c1:9b:87:f5:6b:73:f4:5c:64:8a:3c:3f:3b:82:e0: a9:cb:c7:c6:af:e1:b6:08:d7:4c:95:c4:d2:e0:dc:8c:92:b4: 16:57:2d:fd:3f:75:cc:17:7b:6b:8d:c9:72:37:95:68:f0:e6: 52:aa:81:9f:24:c3:fd:f9:3a:eb:1a:ff:6f:8a:80:50:3f:91: 25:85:cf:ea:1f:54:66:26:45:1b:64:08:91:52:a7:3a:75:71: 73:38:e2:02:b7:16:9a:b6:34:86:50:28:28:c1:da:86:87:8e: 1d:22:19:a3:c2:3b:cc:50:17:8e:4f:e7:3f:da:4a:67:03:8e: ea:9a:8b:bb:8d:54:cf:3b:04:2b:56:49:8c:7e:ee:1b:17:3e: 4e:ca:7f:dc:00:6c:ee:e1:98:ff:d2:f2:81:b5:f9:96:14:98: f1:94:e2:89:8d:c0:af:79:36:55:b5:04:7b:4d:ab:48:79:c4: f8:47:3a:42:a2:59:b3:9a:9e:3a:a3:ff:fc:b6:66:64:ad:8c: 7a:0a:d4:52:6f:c8:2b:de:09:4e:2c:19:76:ff:3c:1f:a2:cc: ee:45:54:19 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXxKUtU8LmCfzSL9uz1iWPiYXjrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRURBOUJBM0Y3QjI0RDE4RjZFMTdBNUI2MTA4RjNF OUVDNDFFNDAeFw0yNjA1MDMwMjU4MTBaFw0yNzA1MDIwMzAzMTBaMDMxMTAvBgNV BAMTKDU2NTY3QTY2MkVDMEZDQkRDNTAzMDAzOEM4MUJFMjAzQzdCOUY0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDahG1JHLkd0KJn879tBQ5vdGnr a8wUC67v5ZzTBfO9/SmLEtC2wKjsBoHuqSnD2KnQtlmRA/amoLJea5WzFU5WIWYw sd/i00kO1ozbxJWyO6FirBk7Ty79f/nbOwRP2x0HJ9XCW7YHG20oeHLrG8IQ4n8N f/ZMNJ72fI69KNshw1XqvCOdPO7yp4vlmydIxKacCs3hmNdnNJjePxAHJsN3wgWV ew5JGrpH7vyFPrD4r3wzq8Y6xdCpy0HR4hSutY7EMD1dXuwxPLUlYWQeqU2cTLhs xdsNh3wYq4+VzNQMGAvApywnC2wDkDodaiiK/MrGOpRk7KSbNQOqhgN7EuwPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUVlZ6Zi7A/L3FAwA4yBviA8e59EUwHwYDVR0j BBgwFoAUnw7am6P3sk0Y9uF6W2EI8+nsQeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzAzODAyZTItMDNhZi00ZGQwLThkY2UtNTRjMjhhNzI1NjNkLzAvOUYwRURBOUJB M0Y3QjI0RDE4RjZFMTdBNUI2MTA4RjNFOUVDNDFFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjBFREE5QkEzRjdCMjREMThGNkUxN0E1QjYxMDhGM0U5RUM0 MUU0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MwMzgwMmUyLTAzYWYtNGRkMC04 ZGNlLTU0YzI4YTcyNTYzZC8wLzMxMzAzMzJlMzIzMTMxMmUzMTM5MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn08QwDQYJ KoZIhvcNAQELBQADggEBABgfHqGc8zlZ3YGt2gZ4McGNau+6zjxkyIAUN3ten1C3 0YpmB8ppycGbh/Vrc/RcZIo8PzuC4KnLx8av4bYI10yVxNLg3IyStBZXLf0/dcwX e2uNyXI3lWjw5lKqgZ8kw/35Ousa/2+KgFA/kSWFz+ofVGYmRRtkCJFSpzp1cXM4 4gK3Fpq2NIZQKCjB2oaHjh0iGaPCO8xQF45P5z/aSmcDjuqai7uNVM87BCtWSYx+ 7hsXPk7Kf9wAbO7hmP/S8oG1+ZYUmPGU4omNwK95NlW1BHtNq0h5xPhHOkKiWbOa njqj//y2ZmStjHoK1FJvyCveCU4sGXb/PB+izO5FVBk= -----END CERTIFICATE-----Generated at Wed May 13 04:48:07 2026 by rpki-client