$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa File: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (raw, json) Hash identifier: RevoOpF5++1wWoPWwmQB4PPK000UixnKZHWg4wTOKek= Subject key identifier: 5E:79:7F:66:25:05:87:FD:28:28:8B:D7:5E:B7:0F:49:8B:76:47:76 Certificate issuer: /CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Certificate serial: 69C596D0A9B5746530C541B8262F1D96406E3564 Authority key identifier: 00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa Signing time: Sun 03 May 2026 03:09:11 +0000 ROA not before: Sun 03 May 2026 03:04:11 +0000 ROA not after: Sun 02 May 2027 03:09:11 +0000 asID: 138854 IP address blocks: 103.138.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c5:96:d0:a9:b5:74:65:30:c5:41:b8:26:2f:1d:96:40:6e:35:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Validity Not Before: May 3 03:04:11 2026 GMT Not After : May 2 03:09:11 2027 GMT Subject: CN=5E797F66250587FD28288BD75EB70F498B764776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:e9:14:3a:16:17:e2:52:47:a4:ab:8f:8f: 2d:df:2c:d9:02:f8:ce:e6:c0:1f:63:61:f2:ce:90: 5e:84:c5:7c:e3:51:ce:80:2a:ab:01:e5:93:c6:38: 1b:de:9b:6d:e7:2d:8f:0e:91:8d:ed:fb:8f:b0:b4: 33:70:fa:69:a9:3f:0c:6c:6d:6c:70:8c:bd:55:9e: 4f:da:18:0a:c6:f7:97:5d:02:ea:64:d1:a4:fb:0d: 3a:71:0b:2a:22:de:f4:2b:17:a6:16:66:80:fa:e1: e6:36:97:4d:4d:2c:2b:6d:1f:bc:d6:86:9e:0d:89: 58:fb:7a:eb:b2:84:9d:5d:6a:7b:ba:46:f4:ce:92: f6:a6:1f:54:3d:30:8d:86:b6:6d:c4:cf:4e:86:7c: ab:05:5f:2f:ef:39:0b:90:9b:67:29:c2:74:04:97: 71:40:02:4e:8f:73:e0:7b:0a:7f:1e:8b:dc:d2:99: 6c:53:69:ab:bc:23:ea:b1:30:b7:0a:71:4e:09:46: 65:40:a4:97:22:a1:2b:5c:04:f6:72:ef:cb:06:a7: 8b:e0:0f:c5:29:92:66:f7:3f:06:94:b8:9e:cc:09: 09:b1:b2:11:e6:e6:ad:a6:08:b6:db:d7:a2:c1:23: 3e:46:3e:5e:c9:09:b2:06:44:cf:58:eb:de:bf:57: de:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:79:7F:66:25:05:87:FD:28:28:8B:D7:5E:B7:0F:49:8B:76:47:76 X509v3 Authority Key Identifier: keyid:00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.218.0/23 Signature Algorithm: sha256WithRSAEncryption 09:79:b6:3f:97:7b:06:19:ab:f8:ee:0d:d9:a8:a8:6e:85:75: f6:eb:33:de:e2:58:2f:62:72:fe:93:63:ff:b7:8e:c4:2c:4a: 7b:2e:3b:ec:76:3f:c3:4b:f5:6e:e5:d4:ad:a6:ee:17:6a:a1: d5:68:91:ad:3e:d4:30:e7:93:23:b9:78:ea:3d:b8:2e:0b:10: 5a:6e:fb:40:60:d2:fe:80:b9:73:81:7c:67:48:06:ba:ec:ad: 3f:b0:ad:16:b6:7c:23:67:d3:b6:24:7a:69:dc:0c:0f:e1:4f: 52:f8:ca:c1:31:92:2f:81:46:d0:bc:60:ef:08:d1:ca:5e:af: 1d:a8:41:d7:94:44:0f:b8:b6:48:c5:28:42:94:d2:34:6c:38: 90:49:3f:54:c5:ff:96:15:26:e4:9a:ba:43:d0:ae:f2:95:5a: e0:c4:fe:7f:c7:aa:5d:e1:93:e9:b5:87:fa:f7:fa:ba:bb:de: 75:e8:24:2b:6f:94:5d:a9:eb:8f:4b:36:f7:56:11:3c:aa:d9: 6e:7f:f0:6c:5c:a0:ec:04:19:0d:4e:41:3b:fc:4a:d2:4b:be: 67:49:ca:48:10:74:8e:c6:a2:fb:b6:54:a0:f8:ce:cd:9d:d6: 25:ff:1c:08:9a:c6:21:72:75:90:da:b4:1e:b3:34:ee:ae:ad: 26:9e:b5:66 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUacWW0Km1dGUwxUG4Ji8dlkBuNWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2 RTIxNTJDRjAeFw0yNjA1MDMwMzA0MTFaFw0yNzA1MDIwMzA5MTFaMDMxMTAvBgNV BAMTKDVFNzk3RjY2MjUwNTg3RkQyODI4OEJENzVFQjcwRjQ5OEI3NjQ3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1r+kUOhYX4lJHpKuPjy3fLNkC +M7mwB9jYfLOkF6ExXzjUc6AKqsB5ZPGOBvem23nLY8OkY3t+4+wtDNw+mmpPwxs bWxwjL1Vnk/aGArG95ddAupk0aT7DTpxCyoi3vQrF6YWZoD64eY2l01NLCttH7zW hp4NiVj7euuyhJ1danu6RvTOkvamH1Q9MI2Gtm3Ez06GfKsFXy/vOQuQm2cpwnQE l3FAAk6Pc+B7Cn8ei9zSmWxTaau8I+qxMLcKcU4JRmVApJcioStcBPZy78sGp4vg D8Upkmb3PwaUuJ7MCQmxshHm5q2mCLbb16LBIz5GPl7JCbIGRM9Y696/V94hAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUXnl/ZiUFh/0oKIvXXrcPSYt2R3YwHwYDVR0j BBgwFoAUAIQdveX2zr+MlP3uIndxlG4hUs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDI1MDIyMDUtNWM1NC00N2RiLWFlNmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRF NUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2RTIxNTJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDg0MURCREU1RjZDRUJGOEM5NEZERUUyMjc3NzE5NDZFMjE1 MkNGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QyNTAyMjA1LTVjNTQtNDdkYi1h ZTZmLTlkNDhlMTgzMjQxYy8wLzMxMzAzMzJlMzEzMzM4MmUzMjMxMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM1MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnitowDQYJ KoZIhvcNAQELBQADggEBAAl5tj+XewYZq/juDdmoqG6FdfbrM97iWC9icv6TY/+3 jsQsSnsuO+x2P8NL9W7l1K2m7hdqodVoka0+1DDnkyO5eOo9uC4LEFpu+0Bg0v6A uXOBfGdIBrrsrT+wrRa2fCNn07YkemncDA/hT1L4ysExki+BRtC8YO8I0cperx2o QdeURA+4tkjFKEKU0jRsOJBJP1TF/5YVJuSaukPQrvKVWuDE/n/Hql3hk+m1h/r3 +rq73nXoJCtvlF2p649LNvdWETyq2W5/8GxcoOwEGQ1OQTv8StJLvmdJykgQdI7G ovu2VKD4zs2d1iX/HAiaxiFydZDatB6zNO6urSaetWY= -----END CERTIFICATE-----Generated at Wed May 13 09:09:26 2026 by rpki-client