$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa File: 3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (raw, json) Hash identifier: 8JHdIEqNbeJfT5OVw6EBi4k3e542O+VmKhuJlmXA+os= Subject key identifier: 04:C9:03:08:2F:FD:16:25:81:BB:DE:EF:C5:1A:41:50:09:2C:46:76 Certificate issuer: /CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D Certificate serial: 7510369DF3BDFFEDB66F114E1B03EE2D4FFF5FF2 Authority key identifier: 55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa Signing time: Sun 03 May 2026 03:04:41 +0000 ROA not before: Sun 03 May 2026 02:59:41 +0000 ROA not after: Sun 02 May 2027 03:04:41 +0000 asID: 38760 IP address blocks: 103.217.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:10:36:9d:f3:bd:ff:ed:b6:6f:11:4e:1b:03:ee:2d:4f:ff:5f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D Validity Not Before: May 3 02:59:41 2026 GMT Not After : May 2 03:04:41 2027 GMT Subject: CN=04C903082FFD162581BBDEEFC51A4150092C4676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:64:ec:38:76:d0:9e:12:25:04:71:71:7d: 4b:df:ca:4c:58:f8:bb:4f:de:76:21:cf:38:77:9b: 76:39:02:28:89:f7:e6:d3:a7:4f:71:66:44:d4:b0: fb:e2:16:0e:dc:07:d5:c7:7c:a7:39:77:ed:82:af: a7:0d:69:ac:a2:8e:bc:64:2b:10:24:8e:c3:b5:de: 8e:bd:fc:63:b0:75:59:90:3e:9b:84:6b:3a:47:38: 4c:5a:24:70:bc:38:75:e6:a3:44:6f:68:e7:ad:6f: 1d:b2:32:b5:3d:ab:5f:25:b5:ed:9b:fc:e6:19:aa: eb:74:19:45:32:91:0a:57:f4:4b:13:1c:b4:3f:f9: 41:fa:89:92:10:74:7f:4b:29:f5:dc:96:a1:d9:05: 7d:3a:a2:e7:2e:4c:2e:31:29:02:ab:ee:df:8d:8b: d6:e1:8c:86:5e:30:47:00:37:b1:db:9b:70:a3:11: 09:19:ed:71:4a:39:2a:59:35:f8:f6:6d:b5:31:6e: 86:2f:21:cb:4c:3b:08:5b:4b:1e:f3:72:3d:c2:90: fc:3c:bc:8b:43:68:27:e7:ea:d7:67:13:a6:b2:19: 40:b8:b2:86:5c:7b:45:ee:d1:41:ff:30:6c:e1:f0: a6:55:1b:5c:12:c6:49:29:a6:f3:dc:77:4c:61:41: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C9:03:08:2F:FD:16:25:81:BB:DE:EF:C5:1A:41:50:09:2C:46:76 X509v3 Authority Key Identifier: keyid:55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.217.208.0/22 Signature Algorithm: sha256WithRSAEncryption af:98:41:f5:f9:97:48:43:0c:1e:67:33:c5:97:69:9b:77:24: bb:c3:2e:61:40:3b:a2:7b:04:d4:84:a5:4a:26:b8:22:da:b1: 3d:c9:24:2c:21:3a:f9:2f:dd:f0:0e:38:f1:c8:47:3d:23:42: 56:1f:0a:92:2a:7d:33:64:3f:ed:86:8b:e1:ba:77:e3:09:c1: 7e:2c:a9:bb:44:00:34:67:69:e8:29:45:bf:cd:77:4c:d4:39: 7f:d3:e2:44:cc:5d:2e:9b:23:94:63:0b:f4:54:81:52:a9:2e: 23:42:6a:a2:e2:1a:e1:c3:77:20:b2:fa:1d:0e:8f:9c:7b:36: c6:85:06:9b:64:51:a0:dd:31:fb:6a:5b:54:97:b5:46:17:65: 46:f9:89:42:4a:40:19:53:4e:f8:62:f3:c2:99:02:54:42:2e: bf:1e:91:08:df:7f:0f:1a:de:63:f4:04:10:4d:dc:9a:37:ee: ce:f5:a2:a9:b6:ff:c4:32:b7:6a:00:f7:5a:1a:8a:31:62:45: 93:0b:31:ec:69:de:27:5d:fb:94:fb:0d:33:7b:fb:bd:ae:aa: 14:d4:55:a5:d5:2d:90:f8:d6:64:76:1f:41:af:f9:21:aa:ff: 34:61:76:25:9b:32:5b:d6:a1:56:3a:ac:d7:17:f2:c4:e9:59: f4:01:a5:d4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdRA2nfO9/+22bxFOGwPuLU//X/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwM0ZGNTY1NzAxMjMzN0VERjNBMzlDREE4QTIwRUZD RDlGNzI1RDAeFw0yNjA1MDMwMjU5NDFaFw0yNzA1MDIwMzA0NDFaMDMxMTAvBgNV BAMTKDA0QzkwMzA4MkZGRDE2MjU4MUJCREVFRkM1MUE0MTUwMDkyQzQ2NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKGTsOHbQnhIlBHFxfUvfykxY +LtP3nYhzzh3m3Y5AiiJ9+bTp09xZkTUsPviFg7cB9XHfKc5d+2Cr6cNaayijrxk KxAkjsO13o69/GOwdVmQPpuEazpHOExaJHC8OHXmo0RvaOetbx2yMrU9q18lte2b /OYZqut0GUUykQpX9EsTHLQ/+UH6iZIQdH9LKfXclqHZBX06oucuTC4xKQKr7t+N i9bhjIZeMEcAN7Hbm3CjEQkZ7XFKOSpZNfj2bbUxboYvIctMOwhbSx7zcj3CkPw8 vItDaCfn6tdnE6ayGUC4soZce0Xu0UH/MGzh8KZVG1wSxkkppvPcd0xhQRKTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBMkDCC/9FiWBu97vxRpBUAksRnYwHwYDVR0j BBgwFoAUVQP/VlcBIzft86Oc2oog782fcl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhNWZmZGMtMTUxYS00YWFkLWEyYjctNDMyNjQ5ZGU2ZGJlLzAvNTUwM0ZGNTY1 NzAxMjMzN0VERjNBMzlDREE4QTIwRUZDRDlGNzI1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NTAzRkY1NjU3MDEyMzM3RURGM0EzOUNEQThBMjBFRkNEOUY3 MjVELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzYTVmZmRjLTE1MWEtNGFhZC1h MmI3LTQzMjY0OWRlNmRiZS8wLzMxMzAzMzJlMzIzMTM3MmUzMjMwMzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMzM4MzczNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ9nQMA0GCSqG SIb3DQEBCwUAA4IBAQCvmEH1+ZdIQwweZzPFl2mbdyS7wy5hQDuiewTUhKVKJrgi 2rE9ySQsITr5L93wDjjxyEc9I0JWHwqSKn0zZD/thovhunfjCcF+LKm7RAA0Z2no KUW/zXdM1Dl/0+JEzF0umyOUYwv0VIFSqS4jQmqi4hrhw3cgsvodDo+cezbGhQab ZFGg3TH7altUl7VGF2VG+YlCSkAZU074YvPCmQJUQi6/HpEI338PGt5j9AQQTdya N+7O9aKptv/EMrdqAPdaGooxYkWTCzHsad4nXfuU+w0ze/u9rqoU1FWl1S2Q+NZk dh9Br/khqv80YXYlmzJb1qFWOqzXF/LE6Vn0AaXU -----END CERTIFICATE-----Generated at Wed May 13 02:40:10 2026 by rpki-client