$ rpki-client -vvf rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa File: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (raw, json) Hash identifier: nih8Qs0LKBkZCWGMFeuGnh3q/46VGBkvPVPuLWWc1eE= Subject key identifier: EA:19:49:68:DF:38:B8:05:57:70:4B:2D:26:C6:7E:1C:9F:07:24:38 Certificate issuer: /CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Certificate serial: 607FF3D6DB0C185DC0F96BADF8265B846C8B0BC9 Authority key identifier: D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa Signing time: Sun 03 May 2026 03:09:45 +0000 ROA not before: Sun 03 May 2026 03:04:45 +0000 ROA not after: Sun 02 May 2027 03:09:45 +0000 asID: 141947 IP address blocks: 103.166.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7f:f3:d6:db:0c:18:5d:c0:f9:6b:ad:f8:26:5b:84:6c:8b:0b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Validity Not Before: May 3 03:04:45 2026 GMT Not After : May 2 03:09:45 2027 GMT Subject: CN=EA194968DF38B80557704B2D26C67E1C9F072438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:4d:ec:6b:6c:c6:6e:34:d1:c5:b4:f4:34: d1:b4:4b:71:70:9a:b4:b7:0d:08:25:0a:a9:0c:ec: d0:c0:3c:ff:d1:b9:6e:3e:b7:05:2f:ef:da:2f:6e: 3d:43:fe:3f:d8:90:41:65:77:18:c6:66:17:0f:54: dd:3b:58:96:20:4c:7b:a6:24:16:ac:39:f6:60:f6: 22:57:4c:8a:6c:da:fb:3e:8a:ae:56:79:24:a1:1d: 8c:a4:9d:15:cb:03:b4:7e:5d:ae:b9:7f:2b:61:aa: 46:bd:d4:de:0f:7b:ef:75:85:2d:4d:33:0b:68:b5: de:e6:5d:61:d9:a4:f2:ec:30:a3:76:1f:ab:44:47: ee:0a:32:3b:2e:fa:63:45:aa:de:89:ea:1e:b9:6a: 11:27:84:7b:a9:bc:f8:40:93:03:b8:ea:f9:fb:33: d5:e5:2b:06:11:14:4e:2f:87:90:0b:2a:b4:2c:0a: 53:86:95:ee:fb:f8:90:b2:37:3a:ee:2e:7a:a4:6f: f7:5a:f6:fe:e6:a9:86:76:2f:09:0f:3a:20:80:d9: 22:77:da:42:a9:7e:0e:c3:8d:47:c3:d7:f5:e2:a5: ba:98:cc:50:b3:4e:8a:a5:92:66:c6:77:29:ff:28: 8c:87:0c:a4:ce:b1:3d:81:14:4d:fd:45:4c:3a:d2: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:19:49:68:DF:38:B8:05:57:70:4B:2D:26:C6:7E:1C:9F:07:24:38 X509v3 Authority Key Identifier: keyid:D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.125.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:87:5f:84:ce:5f:eb:62:ea:06:ac:f9:24:d0:83:ae:d4:2d: ed:9f:fa:41:23:4f:8e:3c:f1:ee:e0:5c:7c:ea:ac:81:21:f6: e4:f7:cd:3b:24:92:4a:1a:d1:e2:74:90:78:4a:09:9d:5c:00: 47:50:e7:a8:c2:0e:f2:66:6e:42:c2:95:6b:66:dd:59:d5:53: ec:7e:43:16:1b:ba:c5:51:bd:13:87:d7:c9:5a:02:e8:06:b8: 98:20:de:b6:77:52:66:5b:df:75:97:e7:f8:1f:45:84:f0:16: 93:39:8f:01:51:44:f8:ce:8e:b9:28:e3:a3:6b:66:90:96:4f: d2:f3:ae:76:7f:0b:68:a0:0e:5f:9d:80:52:bb:f9:7c:ed:0a: 1e:f9:3b:cb:31:69:9f:55:4a:f2:0a:c2:b9:7f:f5:ae:f3:b4: b4:a7:e2:d7:23:5c:19:1a:51:6c:b9:5a:6a:05:f0:d5:0f:dd: df:7f:3a:6e:de:63:e4:db:5d:93:73:a4:3a:1a:9d:32:3c:db: b0:a5:53:7b:0b:8b:72:a8:b1:9d:9b:56:62:40:70:c3:6d:68: b6:91:ab:67:73:8f:17:03:c0:3d:2f:9f:d7:e6:04:6a:a1:8a: 32:b3:be:07:9b:47:7f:1f:7e:ea:43:af:49:95:62:18:13:ef: 78:dc:c7:1b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYH/z1tsMGF3A+Wut+CZbhGyLC8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNF MUQyQjJDMDAeFw0yNjA1MDMwMzA0NDVaFw0yNzA1MDIwMzA5NDVaMDMxMTAvBgNV BAMTKEVBMTk0OTY4REYzOEI4MDU1NzcwNEIyRDI2QzY3RTFDOUYwNzI0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5E3sa2zGbjTRxbT0NNG0S3Fw mrS3DQglCqkM7NDAPP/RuW4+twUv79ovbj1D/j/YkEFldxjGZhcPVN07WJYgTHum JBasOfZg9iJXTIps2vs+iq5WeSShHYyknRXLA7R+Xa65fythqka91N4Pe+91hS1N Mwtotd7mXWHZpPLsMKN2H6tER+4KMjsu+mNFqt6J6h65ahEnhHupvPhAkwO46vn7 M9XlKwYRFE4vh5ALKrQsClOGle77+JCyNzruLnqkb/da9v7mqYZ2LwkPOiCA2SJ3 2kKpfg7DjUfD1/XipbqYzFCzToqlkmbGdyn/KIyHDKTOsT2BFE39RUw60mITAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU6hlJaN84uAVXcEstJsZ+HJ8HJDgwHwYDVR0j BBgwFoAU1xDkdDjgmeaw7SRWdO0iM+HSssAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU0ZTQ1NmQtZGJlMi00NjBjLTg2ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQz OEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNFMUQyQjJDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEwRTQ3NDM4RTA5OUU2QjBFRDI0NTY3NEVEMjIzM0UxRDJC MkMwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q1NGU0NTZkLWRiZTItNDYwYy04 NmQ0LWViYzJkMTE1NjE3Ni8wLzMxMzAzMzJlMzEzNjM2MmUzMTMyMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM0Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpn0wDQYJ KoZIhvcNAQELBQADggEBABuHX4TOX+ti6gas+STQg67ULe2f+kEjT4488e7gXHzq rIEh9uT3zTskkkoa0eJ0kHhKCZ1cAEdQ56jCDvJmbkLClWtm3VnVU+x+QxYbusVR vROH18laAugGuJgg3rZ3UmZb33WX5/gfRYTwFpM5jwFRRPjOjrko46NrZpCWT9Lz rnZ/C2igDl+dgFK7+XztCh75O8sxaZ9VSvIKwrl/9a7ztLSn4tcjXBkaUWy5WmoF 8NUP3d9/Om7eY+TbXZNzpDoanTI827ClU3sLi3KosZ2bVmJAcMNtaLaRq2dzjxcD wD0vn9fmBGqhijKzvgebR38ffupDr0mVYhgT73jcxxs= -----END CERTIFICATE-----Generated at Wed May 13 06:26:46 2026 by rpki-client