$ rpki-client -vvf rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa File: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (raw, json) Hash identifier: uPdBAyxTrORogOkXX0w6k19zP0zWzl0tjXf4OfuepRY= Subject key identifier: F2:12:88:61:8F:33:1B:97:A1:58:32:5A:A0:12:3F:7A:CF:55:AD:DE Certificate issuer: /CN=4916565C52234EF87B2101E4B733E4674131F669 Certificate serial: 5825B466AC1A7A912EDCE61618A48090E87473CB Authority key identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa Signing time: Sun 03 May 2026 03:11:05 +0000 ROA not before: Sun 03 May 2026 03:06:05 +0000 ROA not after: Sun 02 May 2027 03:11:05 +0000 asID: 138070 IP address blocks: 103.123.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:25:b4:66:ac:1a:7a:91:2e:dc:e6:16:18:a4:80:90:e8:74:73:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4916565C52234EF87B2101E4B733E4674131F669 Validity Not Before: May 3 03:06:05 2026 GMT Not After : May 2 03:11:05 2027 GMT Subject: CN=F21288618F331B97A158325AA0123F7ACF55ADDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:97:cc:8c:78:c1:f6:00:52:e2:c3:5a:ac: dd:f2:50:b4:c8:c0:7b:bc:3e:bf:60:19:92:a8:d0: b0:0e:d7:c5:b5:9a:e4:52:b8:e7:0f:27:2a:1d:25: 06:83:7a:63:ad:78:b7:2d:76:d8:c2:32:e5:6d:d5: a0:fe:4d:50:d3:f7:3b:c1:d8:7d:89:53:28:f5:f0: 8a:b4:54:e9:1e:cf:4a:63:94:f6:ae:a6:64:05:8f: af:2a:70:3c:32:8c:1d:5c:d5:3b:ad:53:83:c2:95: 3a:57:e0:2e:bd:4f:79:74:0f:f8:e9:77:9a:a3:ba: 85:37:9e:19:31:c6:d8:50:61:b6:f1:79:b3:20:f8: 73:0f:af:a9:55:35:f1:f8:27:53:ae:f3:f6:b4:0a: c2:48:3a:fa:5b:81:bd:8f:39:e1:16:17:ad:ba:5d: f4:6b:b6:69:8a:a6:ae:71:9f:6d:42:0e:b8:c0:93: 64:17:82:65:d2:3e:5c:3f:4c:a5:6b:99:58:8c:fe: bc:f3:c6:2e:55:a2:bf:da:08:cf:bf:51:e7:de:fc: e3:40:83:b0:af:29:55:b0:18:60:b8:59:6d:90:ab: a1:97:4b:c4:a7:85:67:c4:a7:f4:97:9e:a4:61:ff: ca:c5:60:20:73:b9:d9:3e:c3:d5:db:68:df:28:cd: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:12:88:61:8F:33:1B:97:A1:58:32:5A:A0:12:3F:7A:CF:55:AD:DE X509v3 Authority Key Identifier: keyid:49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.104.0/24 Signature Algorithm: sha256WithRSAEncryption 74:17:1d:b8:63:57:ed:ba:e2:ff:f8:84:b9:19:60:9e:0a:9e: b3:4e:20:e7:62:d9:ea:22:d0:4e:d2:d8:aa:b1:21:d7:ce:59: f2:0f:d5:9e:59:87:28:be:68:a7:d8:4c:76:2d:19:01:e6:15: 3f:9c:5e:69:a6:79:94:71:f7:86:8e:49:1b:c5:cd:74:50:1e: d8:c5:1e:f1:70:9f:e0:1c:a4:42:b9:a3:36:43:51:74:16:14: a1:40:9e:bc:4e:7a:f0:00:d0:fa:b1:18:53:ea:27:27:21:85: 41:97:e1:c0:7b:b7:3f:6e:a9:ec:04:d6:ea:9c:74:2a:c1:30: 3f:d4:25:f5:76:e4:24:62:b4:8f:3c:16:db:55:b2:db:d7:08: 1c:35:80:5b:c4:a7:50:69:76:53:29:bf:06:90:6a:1e:17:79: b8:d0:11:7b:02:4d:3d:17:a9:e5:36:47:e6:b3:9b:47:55:68: bc:57:0b:f9:c1:a8:fa:b8:ad:2e:86:43:2c:6b:46:3b:9f:76: 6e:0b:d3:06:99:49:63:64:d1:41:01:04:e1:58:35:40:26:06: 0b:67:6f:90:e7:aa:b3:4b:3f:d7:c2:55:16:35:c0:3a:29:86: 8a:67:b3:8c:c8:94:b1:6d:e4:d3:9e:1d:ef:f0:55:12:88:ff: db:cf:46:e9 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWCW0ZqwaepEu3OYWGKSAkOh0c8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxNjU2NUM1MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0 MTMxRjY2OTAeFw0yNjA1MDMwMzA2MDVaFw0yNzA1MDIwMzExMDVaMDMxMTAvBgNV BAMTKEYyMTI4ODYxOEYzMzFCOTdBMTU4MzI1QUEwMTIzRjdBQ0Y1NUFEREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChvpfMjHjB9gBS4sNarN3yULTI wHu8Pr9gGZKo0LAO18W1muRSuOcPJyodJQaDemOteLctdtjCMuVt1aD+TVDT9zvB 2H2JUyj18Iq0VOkez0pjlPaupmQFj68qcDwyjB1c1TutU4PClTpX4C69T3l0D/jp d5qjuoU3nhkxxthQYbbxebMg+HMPr6lVNfH4J1Ou8/a0CsJIOvpbgb2POeEWF626 XfRrtmmKpq5xn21CDrjAk2QXgmXSPlw/TKVrmViM/rzzxi5Vor/aCM+/Uefe/ONA g7CvKVWwGGC4WW2Qq6GXS8SnhWfEp/SXnqRh/8rFYCBzudk+w9XbaN8ozSwdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU8hKIYY8zG5ehWDJaoBI/es9Vrd4wHwYDVR0j BBgwFoAUSRZWXFIjTvh7IQHktzPkZ0Ex9mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFkNjdkNWYtNTcxMy00MTUzLTg3MWItMWIwMDhmN2ZmZGQyLzAvNDkxNjU2NUM1 MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0MTMxRjY2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTE2NTY1QzUyMjM0RUY4N0IyMTAxRTRCNzMzRTQ2NzQxMzFG NjY5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RhZDY3ZDVmLTU3MTMtNDE1My04 NzFiLTFiMDA4ZjdmZmRkMi8wLzMxMzAzMzJlMzEzMjMzMmUzMTMwMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM3MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABne2gwDQYJ KoZIhvcNAQELBQADggEBAHQXHbhjV+264v/4hLkZYJ4KnrNOIOdi2eoi0E7S2Kqx IdfOWfIP1Z5Zhyi+aKfYTHYtGQHmFT+cXmmmeZRx94aOSRvFzXRQHtjFHvFwn+Ac pEK5ozZDUXQWFKFAnrxOevAA0PqxGFPqJychhUGX4cB7tz9uqewE1uqcdCrBMD/U JfV25CRitI88FttVstvXCBw1gFvEp1BpdlMpvwaQah4XebjQEXsCTT0XqeU2R+az m0dVaLxXC/nBqPq4rS6GQyxrRjufdm4L0waZSWNk0UEBBOFYNUAmBgtnb5DnqrNL P9fCVRY1wDophopns4zIlLFt5NOeHe/wVRKI/9vPRuk= -----END CERTIFICATE-----Generated at Wed May 13 11:22:07 2026 by rpki-client