$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa File: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (raw, json) Hash identifier: RIHwrudrpVLaaegedVMsJkZlIo5win2AAp+8+JVMcXs= Subject key identifier: 91:C3:12:88:61:54:E3:D9:DC:24:2B:BD:2E:E9:0E:F6:D0:25:3A:1D Certificate issuer: /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Certificate serial: 2646AFA7F4292B9F3CFCBA0BB592AB391CB06934 Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa Signing time: Sun 03 May 2026 03:10:14 +0000 ROA not before: Sun 03 May 2026 03:05:14 +0000 ROA not after: Sun 02 May 2027 03:10:14 +0000 asID: 151404 IP address blocks: 103.253.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:46:af:a7:f4:29:2b:9f:3c:fc:ba:0b:b5:92:ab:39:1c:b0:69:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Validity Not Before: May 3 03:05:14 2026 GMT Not After : May 2 03:10:14 2027 GMT Subject: CN=91C312886154E3D9DC242BBD2EE90EF6D0253A1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:22:57:ef:67:a8:2e:7b:92:82:d5:7a:c5: 3d:e4:3f:5b:86:cf:a4:e2:0d:5c:14:c0:1c:93:df: 7c:22:db:3c:53:b7:63:56:4e:5b:dc:ca:99:11:de: 8d:3c:57:a6:ba:c6:5b:23:3f:bb:52:55:71:5e:ec: 13:0b:26:5d:ce:7b:11:aa:cd:97:ba:7b:6a:d4:52: bc:0b:ff:c6:2e:ad:db:27:d5:7d:1d:8b:ac:be:66: 5a:4e:5b:59:66:0e:ae:0a:09:11:c8:09:1b:38:a8: 0a:2a:c7:8e:d6:d2:7d:27:bc:d8:19:66:42:18:59: 60:a1:5e:a9:02:dc:6e:da:fd:85:e1:84:10:00:14: 48:e9:60:1b:8a:83:94:18:05:1a:45:2d:34:dd:35: 4a:c9:42:2b:8c:3c:27:cc:a9:39:2a:c0:e7:42:06: f3:c7:46:34:15:86:07:fc:31:83:82:71:76:44:21: c8:69:40:0e:8c:8f:3f:c4:16:3a:25:5c:8a:85:12: b2:33:27:4b:b2:34:74:99:19:a7:5a:e5:76:e5:7d: 5d:96:4b:30:f3:9b:16:de:f2:c4:4b:a6:98:fc:38: fa:e6:d6:bb:6a:06:85:f5:4f:19:ba:2d:b5:fd:76: 1a:94:83:84:93:f6:0d:ee:37:ec:0d:a1:cd:09:21: 79:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C3:12:88:61:54:E3:D9:DC:24:2B:BD:2E:E9:0E:F6:D0:25:3A:1D X509v3 Authority Key Identifier: keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.229.0/24 Signature Algorithm: sha256WithRSAEncryption 25:67:18:16:c0:e6:9f:ea:9f:b1:50:52:3c:d0:4e:8a:3e:27: 43:4a:ef:95:9e:8a:27:3e:c5:66:10:18:eb:8b:13:97:24:4b: 6f:36:59:b8:a3:b2:c7:6b:bf:41:4e:c3:67:fe:0e:45:f7:d2: 71:ed:35:bc:49:63:b5:f5:61:12:3e:bb:8c:98:e6:a6:d3:6f: c1:88:34:d0:4a:51:47:8e:3c:c9:dd:e2:81:a7:39:81:c8:1c: 26:fe:25:d8:32:13:d5:82:b7:28:f6:11:b1:4d:fa:23:65:6b: 91:dd:54:a3:a3:ff:dd:36:81:46:46:bf:86:48:42:64:de:4e: d0:6b:e3:18:e3:bf:62:8b:aa:e9:e0:44:b0:33:9b:30:a3:fe: a2:be:d0:fd:58:44:68:6c:99:e6:57:31:32:90:c4:ef:23:8f: 73:94:58:a3:02:46:3c:42:45:dc:d8:de:2c:5b:36:6f:ba:3b: 30:ad:29:dd:ae:8e:5f:24:79:16:f1:e9:71:f5:1c:d9:2b:0a: 03:a5:b9:32:9d:75:99:b8:86:38:03:27:75:d2:b5:ae:be:ad: 33:6e:51:02:16:a3:9f:4c:19:13:5d:36:84:78:0e:14:1e:b6: 51:7d:bf:6e:1e:b3:ec:58:28:54:91:fd:3d:c2:be:0f:de:51: f8:ab:15:af -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJkavp/QpK588/LoLtZKrORywaTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUw MjYxM0UwMDAeFw0yNjA1MDMwMzA1MTRaFw0yNzA1MDIwMzEwMTRaMDMxMTAvBgNV BAMTKDkxQzMxMjg4NjE1NEUzRDlEQzI0MkJCRDJFRTkwRUY2RDAyNTNBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZnCJX72eoLnuSgtV6xT3kP1uG z6TiDVwUwByT33wi2zxTt2NWTlvcypkR3o08V6a6xlsjP7tSVXFe7BMLJl3OexGq zZe6e2rUUrwL/8Yurdsn1X0di6y+ZlpOW1lmDq4KCRHICRs4qAoqx47W0n0nvNgZ ZkIYWWChXqkC3G7a/YXhhBAAFEjpYBuKg5QYBRpFLTTdNUrJQiuMPCfMqTkqwOdC BvPHRjQVhgf8MYOCcXZEIchpQA6Mjz/EFjolXIqFErIzJ0uyNHSZGada5XblfV2W SzDzmxbe8sRLppj8OPrm1rtqBoX1Txm6LbX9dhqUg4ST9g3uN+wNoc0JIXn5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUkcMSiGFU49ncJCu9LukO9tAlOh0wHwYDVR0j BBgwFoAUZ61eo66eyxu0SqEAjXBAvgJhPgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkMTVkNTMtYTRiNC00NDM1LWExZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNB RTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUwMjYxM0UwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0FENUVBM0FFOUVDQjFCQjQ0QUExMDA4RDcwNDBCRTAyNjEz RTAwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q3ZDE1ZDUzLWE0YjQtNDQzNS1h MWRhLTUyZDAyMTJlZjMzZC8wLzMxMzAzMzJlMzIzNTMzMmUzMjMyMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNDMwMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn/eUwDQYJ KoZIhvcNAQELBQADggEBACVnGBbA5p/qn7FQUjzQToo+J0NK75Weiic+xWYQGOuL E5ckS282Wbijssdrv0FOw2f+DkX30nHtNbxJY7X1YRI+u4yY5qbTb8GINNBKUUeO PMnd4oGnOYHIHCb+JdgyE9WCtyj2EbFN+iNla5HdVKOj/902gUZGv4ZIQmTeTtBr 4xjjv2KLqungRLAzmzCj/qK+0P1YRGhsmeZXMTKQxO8jj3OUWKMCRjxCRdzY3ixb Nm+6OzCtKd2ujl8keRbx6XH1HNkrCgOluTKddZm4hjgDJ3XSta6+rTNuUQIWo59M GRNdNoR4DhQetlF9v24es+xYKFSR/T3Cvg/eUfirFa8= -----END CERTIFICATE-----Generated at Wed May 13 06:37:35 2026 by rpki-client