$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa File: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (raw, json) Hash identifier: LjLUgvBMy0vDjBtT3AvvXHrDpEIsdVFxx/cTyXnRl4k= Subject key identifier: D8:82:99:D7:31:E2:C5:FD:03:88:94:C3:A3:A4:7E:AC:32:ED:22:21 Certificate issuer: /CN=DA4C7EC09188922B406170208997DD586575FFB0 Certificate serial: 53D4840FFDEC3F09A61FBB30D2FD047A4C610060 Authority key identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa Signing time: Sun 03 May 2026 03:10:27 +0000 ROA not before: Sun 03 May 2026 03:05:27 +0000 ROA not after: Sun 02 May 2027 03:10:27 +0000 asID: 151527 IP address blocks: 103.58.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d4:84:0f:fd:ec:3f:09:a6:1f:bb:30:d2:fd:04:7a:4c:61:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA4C7EC09188922B406170208997DD586575FFB0 Validity Not Before: May 3 03:05:27 2026 GMT Not After : May 2 03:10:27 2027 GMT Subject: CN=D88299D731E2C5FD038894C3A3A47EAC32ED2221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:49:39:73:c2:37:45:22:64:7e:0b:c4:cf:2e: c6:c9:a6:1e:69:c9:49:6a:52:cd:44:1e:2b:b2:5e: 30:be:85:e0:f6:5e:44:f4:30:5e:19:90:48:13:eb: 61:92:d1:67:56:dd:0b:da:14:e0:b1:b5:68:75:91: 7a:73:4d:33:20:56:8c:58:cc:e4:86:df:38:d4:78: 44:47:9c:4f:57:49:6f:65:28:7a:3c:5b:61:8a:eb: 53:52:44:00:b9:15:3b:f2:4b:21:95:dd:db:e4:63: e1:16:36:b7:db:85:fc:ce:bc:95:5a:8a:c9:2e:09: 36:9b:a7:b9:1c:fb:66:e2:ea:c9:08:0d:86:6d:5c: c5:60:2e:25:07:3f:1f:2d:f8:22:c8:24:3b:f8:9e: 11:ce:62:43:e6:29:10:7c:d7:55:3f:41:f2:93:53: e0:ab:69:fb:7a:d5:82:ae:fc:d9:23:5b:a2:2c:bb: cd:e9:50:9b:c2:59:ba:fc:94:5c:e5:47:44:2d:29: e1:1f:5e:09:ba:41:cb:c6:1f:19:87:3b:8a:1f:29: 76:65:cc:19:fc:ad:17:43:ab:dd:91:6d:e2:6b:e2: 0f:90:91:c9:24:35:7b:70:79:3a:0d:e7:2d:9b:2b: b8:19:01:a8:ec:cd:68:f3:6f:44:24:ab:90:63:b2: c2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:82:99:D7:31:E2:C5:FD:03:88:94:C3:A3:A4:7E:AC:32:ED:22:21 X509v3 Authority Key Identifier: keyid:DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.58.198.0/24 Signature Algorithm: sha256WithRSAEncryption 13:60:a3:7c:4e:f3:20:b7:b3:e0:fc:00:d1:e8:9e:78:52:37: 84:39:42:81:7f:94:90:d4:86:81:68:d2:f1:cd:c3:08:e4:80: ed:8d:60:b3:dd:5c:6c:e7:88:1b:82:2b:83:e3:4c:19:d3:31: 56:7c:7b:56:20:3c:f4:f1:f2:3c:b3:07:e2:4c:b0:82:67:b5: 5c:6a:f8:9f:c3:37:5f:49:73:b0:46:8a:7c:3a:ac:23:c3:55: 83:8a:1c:ea:1a:08:6f:22:49:2a:c8:3e:5d:2e:d6:11:b3:45: 2a:0b:b8:50:eb:d3:aa:92:f6:4a:2d:d9:2a:25:e8:5d:a7:41: ab:a6:1f:57:29:b4:c1:c7:f5:9f:73:60:39:21:72:23:eb:5f: 5d:ed:8e:62:d5:9f:4b:b3:0a:d8:22:af:85:f7:b8:24:a6:75: 76:1b:f1:8a:f1:0c:cb:0a:f5:f6:41:29:72:22:4f:da:f7:0d: 34:e9:cd:8f:4c:50:92:0d:7d:f6:b1:3f:68:31:e4:d0:3f:d6: b8:56:26:05:74:73:0b:8b:43:f8:b0:1a:1b:98:95:03:df:8e: f1:6d:59:64:e7:1f:d0:dc:3e:2c:49:21:74:be:c0:3c:25:c4: 31:4c:ef:a3:0b:e8:7d:55:a0:eb:96:aa:ec:f6:55:7c:fc:37: 8d:0f:4d:69 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUU9SED/3sPwmmH7sw0v0EekxhAGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2 NTc1RkZCMDAeFw0yNjA1MDMwMzA1MjdaFw0yNzA1MDIwMzEwMjdaMDMxMTAvBgNV BAMTKEQ4ODI5OUQ3MzFFMkM1RkQwMzg4OTRDM0EzQTQ3RUFDMzJFRDIyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHSTlzwjdFImR+C8TPLsbJph5p yUlqUs1EHiuyXjC+heD2XkT0MF4ZkEgT62GS0WdW3QvaFOCxtWh1kXpzTTMgVoxY zOSG3zjUeERHnE9XSW9lKHo8W2GK61NSRAC5FTvySyGV3dvkY+EWNrfbhfzOvJVa iskuCTabp7kc+2bi6skIDYZtXMVgLiUHPx8t+CLIJDv4nhHOYkPmKRB811U/QfKT U+Craft61YKu/NkjW6Isu83pUJvCWbr8lFzlR0QtKeEfXgm6QcvGHxmHO4ofKXZl zBn8rRdDq92RbeJr4g+QkckkNXtweToN5y2bK7gZAajszWjzb0Qkq5BjssKzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2IKZ1zHixf0DiJTDo6R+rDLtIiEwHwYDVR0j BBgwFoAU2kx+wJGIkitAYXAgiZfdWGV1/7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhjZTIwMDgtODRiNy00YmVmLTk0YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5 MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2NTc1RkZCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTRDN0VDMDkxODg5MjJCNDA2MTcwMjA4OTk3REQ1ODY1NzVG RkIwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4Y2UyMDA4LTg0YjctNGJlZi05 NGI5LWJiM2ZkYjE3YjIzOC8wLzMxMzAzMzJlMzUzODJlMzEzOTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzrGMA0GCSqG SIb3DQEBCwUAA4IBAQATYKN8TvMgt7Pg/ADR6J54UjeEOUKBf5SQ1IaBaNLxzcMI 5IDtjWCz3Vxs54gbgiuD40wZ0zFWfHtWIDz08fI8swfiTLCCZ7VcavifwzdfSXOw Rop8Oqwjw1WDihzqGghvIkkqyD5dLtYRs0UqC7hQ69OqkvZKLdkqJehdp0Grph9X KbTBx/Wfc2A5IXIj619d7Y5i1Z9LswrYIq+F97gkpnV2G/GK8QzLCvX2QSlyIk/a 9w006c2PTFCSDX32sT9oMeTQP9a4ViYFdHMLi0P4sBobmJUD347xbVlk5x/Q3D4s SSF0vsA8JcQxTO+jC+h9VaDrlqrs9lV8/DeND01p -----END CERTIFICATE-----Generated at Wed May 13 05:25:34 2026 by rpki-client