$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa File: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (raw, json) Hash identifier: 5z0mLNjU28RRuMehTiGd0TZpTvoqOni8uwA3Q/9FXCA= Subject key identifier: 25:05:87:E9:D5:56:08:6F:76:71:38:71:DD:40:02:4B:46:2C:01:14 Certificate issuer: /CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Certificate serial: 21899B27084F2C5BF239981C956AB4458F8E6FE2 Authority key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa Signing time: Sun 03 May 2026 03:07:24 +0000 ROA not before: Sun 03 May 2026 03:02:24 +0000 ROA not after: Sun 02 May 2027 03:07:24 +0000 asID: 136820 IP address blocks: 103.98.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:89:9b:27:08:4f:2c:5b:f2:39:98:1c:95:6a:b4:45:8f:8e:6f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Validity Not Before: May 3 03:02:24 2026 GMT Not After : May 2 03:07:24 2027 GMT Subject: CN=250587E9D556086F76713871DD40024B462C0114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:f2:eb:87:92:17:dd:78:e1:bd:72:ff:75: f3:36:14:4d:a7:27:17:eb:5c:1a:63:fc:2c:e9:29: 2a:9a:d6:01:f8:8d:c9:35:42:52:2e:5e:af:a0:65: cd:fe:4a:78:a0:3e:a0:30:e0:a6:eb:c5:6c:2e:f0: 07:4f:94:63:36:30:92:9c:aa:2e:39:99:96:e9:61: ec:c6:36:13:35:82:28:63:2e:2a:97:8f:b1:bf:45: 94:51:48:01:36:09:fe:9b:14:db:ee:d5:0d:d0:49: f2:71:dc:d5:72:f0:5c:16:c4:85:d0:26:e4:60:58: 9c:6c:c2:80:7b:42:69:89:64:78:0a:52:1f:dd:50: 11:a7:7e:12:16:02:fa:76:fc:fa:77:f4:eb:ef:4f: 5e:4d:ce:6e:6e:02:1c:12:69:9e:3f:cf:f1:e0:b6: c5:89:93:a1:b1:68:96:0a:1c:d3:50:ee:65:cb:b5: 8d:5b:ce:af:d9:c0:aa:06:64:d2:49:dc:d8:62:c3: ac:6f:5b:65:61:dc:2d:da:78:7c:b8:aa:b9:85:d3: 51:1e:41:37:4b:5c:ea:e1:68:76:73:68:5a:59:76: 23:fd:40:d4:6b:bc:96:bf:ba:6b:30:76:80:f3:a9: 96:1b:4c:fe:83:17:c6:14:ff:30:92:e7:dd:0b:fa: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:05:87:E9:D5:56:08:6F:76:71:38:71:DD:40:02:4B:46:2C:01:14 X509v3 Authority Key Identifier: keyid:0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.116.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:7e:f0:8a:43:56:4b:55:c6:88:c7:38:18:26:8e:df:32:ba: 65:c4:dc:e5:c7:0c:ff:ea:a0:64:3f:d2:a4:b1:9b:5c:dd:b5: 50:f7:1e:3f:52:c4:f3:84:e7:2e:b9:62:ee:0b:23:88:b3:e8: 06:c9:41:5d:8a:ad:b3:32:f9:4a:29:a3:91:66:73:5b:32:9c: 43:33:4f:bb:61:bc:5a:43:20:2a:bd:e8:15:cf:23:f4:33:ae: 03:f6:20:31:04:49:d7:13:9f:1f:29:99:3b:1e:ec:ea:a4:41: ce:b3:1c:de:39:4d:c3:ae:4e:61:b6:02:6c:bd:25:73:f6:90: cb:98:03:1d:ff:e5:95:f6:0f:c3:8d:0c:d6:73:96:3e:a7:6a: b8:77:6b:0c:0c:df:6d:c2:15:c4:d1:a6:af:82:f6:7d:de:12: 8c:a6:7f:66:11:02:fa:4b:3f:4a:e1:d3:91:c0:00:b4:8e:0b: 5c:89:1d:50:50:af:94:b6:4f:c4:48:ae:92:8d:2a:19:07:59: 17:f6:6c:91:3b:5c:09:39:18:46:e0:5a:ab:05:9e:e7:ef:f6: 54:32:af:a0:e3:44:78:d0:7f:85:51:95:ca:e3:b2:c9:9e:5d: c2:24:ef:50:c8:67:2a:bc:9f:c5:3f:70:12:ae:2a:3c:5a:90: 44:02:5c:13 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIYmbJwhPLFvyOZgclWq0RY+Ob+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUy MTc2RUVDODAeFw0yNjA1MDMwMzAyMjRaFw0yNzA1MDIwMzA3MjRaMDMxMTAvBgNV BAMTKDI1MDU4N0U5RDU1NjA4NkY3NjcxMzg3MURENDAwMjRCNDYyQzAxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgvLrh5IX3XjhvXL/dfM2FE2n JxfrXBpj/CzpKSqa1gH4jck1QlIuXq+gZc3+SnigPqAw4KbrxWwu8AdPlGM2MJKc qi45mZbpYezGNhM1gihjLiqXj7G/RZRRSAE2Cf6bFNvu1Q3QSfJx3NVy8FwWxIXQ JuRgWJxswoB7QmmJZHgKUh/dUBGnfhIWAvp2/Pp39OvvT15Nzm5uAhwSaZ4/z/Hg tsWJk6GxaJYKHNNQ7mXLtY1bzq/ZwKoGZNJJ3Nhiw6xvW2Vh3C3aeHy4qrmF01Ee QTdLXOrhaHZzaFpZdiP9QNRrvJa/umswdoDzqZYbTP6DF8YU/zCS590L+pdLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJQWH6dVWCG92cThx3UACS0YsARQwHwYDVR0j BBgwFoAUD/4uoSrBVq94rC2aRZrxbiF27sgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NkNTM5NDgtZGRmMy00NDlhLWJmMmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEy QUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUyMTc2RUVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkZFMkVBMTJBQzE1NkFGNzhBQzJEOUE0NTlBRjE2RTIxNzZF RUM4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NjZDUzOTQ4LWRkZjMtNDQ5YS1i ZjJiLWNmM2Y3YWUxNzZkMy8wLzMxMzAzMzJlMzkzODJlMzEzMTM2MmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzEzMzM2MzgzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2J0MA0GCSqG SIb3DQEBCwUAA4IBAQAOfvCKQ1ZLVcaIxzgYJo7fMrplxNzlxwz/6qBkP9KksZtc 3bVQ9x4/UsTzhOcuuWLuCyOIs+gGyUFdiq2zMvlKKaORZnNbMpxDM0+7YbxaQyAq vegVzyP0M64D9iAxBEnXE58fKZk7HuzqpEHOsxzeOU3Drk5htgJsvSVz9pDLmAMd /+WV9g/DjQzWc5Y+p2q4d2sMDN9twhXE0aavgvZ93hKMpn9mEQL6Sz9K4dORwAC0 jgtciR1QUK+Utk/ESK6SjSoZB1kX9myRO1wJORhG4FqrBZ7n7/ZUMq+g40R40H+F UZXK47LJnl3CJO9QyGcqvJ/FP3ASrio8WpBEAlwT -----END CERTIFICATE-----Generated at Wed May 13 02:41:02 2026 by rpki-client