$ rpki-client -vvf rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa File: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (raw, json) Hash identifier: Mz/HLsc5z0NW9is9cK/jPV/c2edacNGieAld99v6XRg= Subject key identifier: D0:BB:7D:69:44:CB:EE:66:A3:A4:10:7D:EE:ED:E0:6C:28:3A:CC:4F Certificate issuer: /CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Certificate serial: 2186E2632791DFD12EFB85F9FDE1D1C6D9A337B9 Authority key identifier: D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa Signing time: Sun 03 May 2026 03:09:45 +0000 ROA not before: Sun 03 May 2026 03:04:45 +0000 ROA not after: Sun 02 May 2027 03:09:45 +0000 asID: 141947 IP address blocks: 103.166.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:86:e2:63:27:91:df:d1:2e:fb:85:f9:fd:e1:d1:c6:d9:a3:37:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Validity Not Before: May 3 03:04:45 2026 GMT Not After : May 2 03:09:45 2027 GMT Subject: CN=D0BB7D6944CBEE66A3A4107DEEEDE06C283ACC4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:6f:64:4b:d2:2b:2a:27:ca:bd:67:51:53: e9:74:75:75:65:11:79:5b:32:ca:42:9f:1c:59:cf: 9e:66:a5:d4:4a:44:95:c0:d0:9a:31:cc:e9:ab:f1: 56:24:97:54:ff:52:f2:64:8d:cb:99:65:a6:ad:61: 57:9f:5f:3c:99:9c:04:f3:18:a7:5e:d6:74:a0:a8: 5a:a1:b8:0b:46:f4:11:4b:5a:f5:28:24:ed:27:e1: 51:dc:22:49:13:b6:4a:1c:6c:b6:ce:55:72:a7:8b: 27:27:85:85:48:fa:87:3a:0a:9b:00:29:90:3b:9c: 44:ac:f1:46:42:8f:05:3b:8b:ed:f1:59:9b:20:45: 49:1d:3c:29:0a:cd:0f:e2:a1:06:f8:ac:fb:a0:14: 6e:d2:22:74:f5:d5:e6:ca:68:52:87:b2:3a:a6:a4: 02:60:97:69:f0:fe:49:19:1d:9a:92:9a:7f:2f:30: 94:cc:29:bc:8f:92:f0:e6:8d:70:ed:35:87:b8:69: b0:d3:ab:f2:79:d1:31:f8:2f:7c:6a:ae:85:f8:ec: a3:96:0b:67:c4:1e:4d:e8:a9:01:f9:13:d6:f2:74: 39:96:61:f9:c8:c5:67:08:2b:2f:a9:a0:49:f3:9b: 6b:5e:7a:26:17:03:6a:14:8d:f5:90:d3:c1:bb:0f: 99:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BB:7D:69:44:CB:EE:66:A3:A4:10:7D:EE:ED:E0:6C:28:3A:CC:4F X509v3 Authority Key Identifier: keyid:D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.124.0/23 Signature Algorithm: sha256WithRSAEncryption a7:5f:f6:9d:fc:8b:81:bc:ac:bc:1c:49:37:b5:60:c2:2b:99: c5:96:32:5e:dc:0b:d9:af:ad:e2:d5:37:ed:a2:4d:38:ea:91: ee:46:9d:87:9a:c6:54:5c:70:28:70:c0:c0:3f:86:fb:03:86: 52:13:32:9c:cb:63:17:76:35:78:4a:93:85:4e:12:98:78:87: ed:69:11:ac:0b:15:66:db:61:38:7e:2f:2c:26:cf:50:8e:9b: 77:17:ef:85:67:be:c9:e8:73:f9:ca:9b:e6:8a:ff:de:0e:31: ae:51:ac:6e:40:3b:89:de:9e:a4:c2:b0:82:4b:f5:52:22:4f: bd:98:41:e6:d8:49:21:e9:0b:70:67:6a:65:93:31:da:7c:64: 0a:66:82:10:ea:9a:6c:4d:ab:60:8c:60:e6:a4:84:0f:c7:20: d0:23:db:72:d8:fe:d5:ee:0f:5a:4e:32:25:06:ae:8a:04:b4: 1a:c6:b0:69:da:96:2a:b4:fb:4b:33:f7:8a:ca:d6:41:71:77: 1b:e0:7d:e4:70:45:69:6a:ea:7a:d4:98:26:0b:7f:f6:de:5b: 1b:91:24:73:69:26:1f:26:23:03:e2:c8:4a:e7:4c:01:26:c6: f9:1e:42:f4:4c:d6:b2:73:b5:5e:d1:ea:1d:1b:fb:19:97:5e: 69:17:47:43 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIYbiYyeR39Eu+4X5/eHRxtmjN7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNF MUQyQjJDMDAeFw0yNjA1MDMwMzA0NDVaFw0yNzA1MDIwMzA5NDVaMDMxMTAvBgNV BAMTKEQwQkI3RDY5NDRDQkVFNjZBM0E0MTA3REVFRURFMDZDMjgzQUNDNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtm9kS9IrKifKvWdRU+l0dXVl EXlbMspCnxxZz55mpdRKRJXA0JoxzOmr8VYkl1T/UvJkjcuZZaatYVefXzyZnATz GKde1nSgqFqhuAtG9BFLWvUoJO0n4VHcIkkTtkocbLbOVXKniycnhYVI+oc6CpsA KZA7nESs8UZCjwU7i+3xWZsgRUkdPCkKzQ/ioQb4rPugFG7SInT11ebKaFKHsjqm pAJgl2nw/kkZHZqSmn8vMJTMKbyPkvDmjXDtNYe4abDTq/J50TH4L3xqroX47KOW C2fEHk3oqQH5E9bydDmWYfnIxWcIKy+poEnzm2teeiYXA2oUjfWQ08G7D5ldAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU0Lt9aUTL7majpBB97u3gbCg6zE8wHwYDVR0j BBgwFoAU1xDkdDjgmeaw7SRWdO0iM+HSssAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU0ZTQ1NmQtZGJlMi00NjBjLTg2ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQz OEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNFMUQyQjJDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEwRTQ3NDM4RTA5OUU2QjBFRDI0NTY3NEVEMjIzM0UxRDJC MkMwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q1NGU0NTZkLWRiZTItNDYwYy04 NmQ0LWViYzJkMTE1NjE3Ni8wLzMxMzAzMzJlMzEzNjM2MmUzMTMyMzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzOTM0Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnpnwwDQYJ KoZIhvcNAQELBQADggEBAKdf9p38i4G8rLwcSTe1YMIrmcWWMl7cC9mvreLVN+2i TTjqke5GnYeaxlRccChwwMA/hvsDhlITMpzLYxd2NXhKk4VOEph4h+1pEawLFWbb YTh+Lywmz1COm3cX74Vnvsnoc/nKm+aK/94OMa5RrG5AO4nenqTCsIJL9VIiT72Y QebYSSHpC3BnamWTMdp8ZApmghDqmmxNq2CMYOakhA/HINAj23LY/tXuD1pOMiUG rooEtBrGsGnaliq0+0sz94rK1kFxdxvgfeRwRWlq6nrUmCYLf/beWxuRJHNpJh8m IwPiyErnTAEmxvkeQvRM1rJztV7R6h0b+xmXXmkXR0M= -----END CERTIFICATE-----Generated at Wed May 13 02:19:03 2026 by rpki-client