$ rpki-client -vvf rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa File: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (raw, json) Hash identifier: dnAkfTvHw17dHWCAlbvcfqCxpaF/acXpN4SJ7+7NKIU= Subject key identifier: 51:DB:AB:5D:72:71:DB:D9:D8:18:4B:20:DE:92:87:85:30:E2:2F:30 Certificate issuer: /CN=D22CC628B819E164A006F58EA6CF791A3AD66A38 Certificate serial: 6D5DFCA9F19B2AD84F59A7A931B3E7E05AC50CCB Authority key identifier: D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa Signing time: Sun 03 May 2026 03:11:08 +0000 ROA not before: Sun 03 May 2026 03:06:08 +0000 ROA not after: Sun 02 May 2027 03:11:08 +0000 asID: 152009 IP address blocks: 103.38.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5d:fc:a9:f1:9b:2a:d8:4f:59:a7:a9:31:b3:e7:e0:5a:c5:0c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D22CC628B819E164A006F58EA6CF791A3AD66A38 Validity Not Before: May 3 03:06:08 2026 GMT Not After : May 2 03:11:08 2027 GMT Subject: CN=51DBAB5D7271DBD9D8184B20DE92878530E22F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:87:6e:8a:06:35:ed:6a:ca:36:bb:90:d8:44: e1:46:84:a0:12:80:b5:c7:16:77:0a:50:ee:55:93: 6e:6e:59:3a:ae:1f:ad:cf:bc:d6:44:21:13:e7:83: e9:8c:5d:be:6d:ff:51:9a:f5:e8:ff:b5:01:d0:9c: 53:8e:de:d5:3d:00:6a:23:2f:9f:c7:7e:cf:30:af: c6:81:9f:7f:9d:13:bd:e6:ea:58:9c:44:58:70:1a: e6:b9:4b:6f:aa:8e:1e:10:47:08:e8:63:c2:c6:c2: ca:f7:35:63:b3:aa:0e:1c:92:02:7a:af:10:95:47: f9:81:b8:54:27:27:8e:8c:44:90:fc:79:80:2a:da: 98:16:14:fd:a1:9e:af:a9:03:79:b5:e3:9f:45:c5: 85:d5:34:3f:1d:90:b5:85:f1:32:89:09:5e:5c:89: fc:2f:cc:dd:af:36:5d:3e:be:22:46:fb:1d:9f:fc: 63:ad:25:f5:f4:84:c8:c8:c9:a5:34:33:c0:db:fe: 27:ef:80:6b:2f:7d:fa:b9:97:59:e7:9c:a1:02:54: 69:8c:f7:ec:18:76:fb:41:fa:b8:87:a3:28:c0:c9: 70:43:4f:30:c9:fc:7f:09:c8:7f:89:10:7c:7b:ed: 58:e9:7a:31:8f:ba:0b:6c:ac:a5:e4:65:83:6c:a7: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DB:AB:5D:72:71:DB:D9:D8:18:4B:20:DE:92:87:85:30:E2:2F:30 X509v3 Authority Key Identifier: keyid:D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.38.106.0/23 Signature Algorithm: sha256WithRSAEncryption 27:11:76:82:d0:d7:26:69:de:de:c2:b0:94:5e:60:e6:0f:b8: 99:bd:b8:ef:f0:43:e1:5a:a0:c1:cf:95:f7:10:ef:fc:7f:b3: c3:0c:24:47:4e:be:43:d9:ae:f6:f6:f6:ad:47:9a:62:89:7b: eb:17:e5:b2:9e:3f:86:ce:d1:c2:20:53:0b:d0:ab:e8:26:29: 7b:59:16:e8:26:36:a0:a2:5a:9c:4d:10:a7:20:f5:40:f6:0b: 89:c3:76:48:f5:9c:26:1d:c6:9d:b9:37:3a:d0:6b:8d:0a:e7: 24:ac:66:63:90:e2:1d:37:e7:ad:d1:57:08:a5:1e:69:26:4c: 39:29:9b:a7:13:44:c8:40:7c:5f:83:a9:04:5a:79:10:81:4c: 2c:d0:41:d2:3e:f6:57:07:ec:06:d4:2d:f8:6a:2a:3c:83:4a: ab:0e:26:56:9a:e0:75:da:3c:61:73:2d:da:63:ef:48:42:3c: 59:18:a5:36:21:96:1d:d1:6f:45:6c:eb:91:ab:ee:cc:af:c9: 67:21:ad:da:bf:81:7b:15:4f:57:3a:97:09:2e:69:61:12:9b: 78:ba:b7:2e:27:46:16:ee:80:28:0d:be:2a:dc:0e:10:a9:b3: 32:3a:5b:24:8a:72:a3:0c:c7:0a:96:68:b2:41:c0:15:9e:0c: cd:8d:19:24 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbV38qfGbKthPWaepMbPn4FrFDMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyQ0M2MjhCODE5RTE2NEEwMDZGNThFQTZDRjc5MUEz QUQ2NkEzODAeFw0yNjA1MDMwMzA2MDhaFw0yNzA1MDIwMzExMDhaMDMxMTAvBgNV BAMTKDUxREJBQjVENzI3MURCRDlEODE4NEIyMERFOTI4Nzg1MzBFMjJGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsh26KBjXtaso2u5DYROFGhKAS gLXHFncKUO5Vk25uWTquH63PvNZEIRPng+mMXb5t/1Ga9ej/tQHQnFOO3tU9AGoj L5/Hfs8wr8aBn3+dE73m6licRFhwGua5S2+qjh4QRwjoY8LGwsr3NWOzqg4ckgJ6 rxCVR/mBuFQnJ46MRJD8eYAq2pgWFP2hnq+pA3m1459FxYXVND8dkLWF8TKJCV5c ifwvzN2vNl0+viJG+x2f/GOtJfX0hMjIyaU0M8Db/ifvgGsvffq5l1nnnKECVGmM 9+wYdvtB+riHoyjAyXBDTzDJ/H8JyH+JEHx77VjpejGPugtsrKXkZYNsp08RAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUdurXXJx29nYGEsg3pKHhTDiLzAwHwYDVR0j BBgwFoAU0izGKLgZ4WSgBvWOps95GjrWajgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGIwMTYwODUtMmY5NC00MGZmLTgwY2UtY2UyM2QzOWU2NWExLzAvRDIyQ0M2MjhC ODE5RTE2NEEwMDZGNThFQTZDRjc5MUEzQUQ2NkEzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjJDQzYyOEI4MTlFMTY0QTAwNkY1OEVBNkNGNzkxQTNBRDY2 QTM4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RiMDE2MDg1LTJmOTQtNDBmZi04 MGNlLWNlMjNkMzllNjVhMS8wLzMxMzAzMzJlMzMzODJlMzEzMDM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZyZqMA0GCSqG SIb3DQEBCwUAA4IBAQAnEXaC0Ncmad7ewrCUXmDmD7iZvbjv8EPhWqDBz5X3EO/8 f7PDDCRHTr5D2a729vatR5piiXvrF+Wynj+GztHCIFML0KvoJil7WRboJjagolqc TRCnIPVA9guJw3ZI9ZwmHcaduTc60GuNCuckrGZjkOIdN+et0VcIpR5pJkw5KZun E0TIQHxfg6kEWnkQgUws0EHSPvZXB+wG1C34aio8g0qrDiZWmuB12jxhcy3aY+9I QjxZGKU2IZYd0W9FbOuRq+7Mr8lnIa3av4F7FU9XOpcJLmlhEpt4urcuJ0YW7oAo Db4q3A4QqbMyOlskinKjDMcKlmiyQcAVngzNjRkk -----END CERTIFICATE-----Generated at Wed May 13 03:48:35 2026 by rpki-client