$ rpki-client -vvf rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa File: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (raw, json) Hash identifier: dcn7JjA5cMl377hf4qH/uXB97TvgtDVrGSS8WaneiPA= Subject key identifier: A3:DB:57:41:87:AD:96:92:15:1E:46:F2:44:A4:04:36:36:53:8D:32 Certificate issuer: /CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Certificate serial: 133D63CF1DAAC140259D2E817BF74ACDA6FB7115 Authority key identifier: 82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa Signing time: Sun 03 May 2026 03:15:22 +0000 ROA not before: Sun 03 May 2026 03:10:22 +0000 ROA not after: Sun 02 May 2027 03:15:22 +0000 asID: 142365 IP address blocks: 103.170.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3d:63:cf:1d:aa:c1:40:25:9d:2e:81:7b:f7:4a:cd:a6:fb:71:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Validity Not Before: May 3 03:10:22 2026 GMT Not After : May 2 03:15:22 2027 GMT Subject: CN=A3DB574187AD9692151E46F244A4043636538D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:77:83:67:67:cb:86:8c:6c:84:24:99:ba:ba: 48:f5:f7:cd:43:21:4c:ef:7b:34:f1:ed:7f:d9:40: 45:9f:a5:cf:60:4c:0c:4f:c0:cf:73:53:f5:3a:a3: d1:2f:b7:c4:fb:6a:50:03:d5:73:d7:00:f9:11:0c: ba:ef:98:7c:0a:fb:d3:42:9f:bc:f1:f7:bd:9c:fc: 2a:cc:aa:e4:a7:5d:18:ad:49:6c:d6:9c:85:fc:9c: 48:3a:d7:bb:7f:c0:d3:ba:86:a3:5f:89:e5:24:ac: d7:fd:74:b8:4d:b8:3b:6f:27:91:32:18:17:ad:ee: a1:0d:af:98:1f:54:ec:eb:23:3c:e9:4e:26:77:87: 2e:28:72:29:21:27:77:fa:36:8b:a3:53:a2:72:11: 2f:53:a6:9a:23:9b:98:3b:aa:20:99:5d:21:53:8e: f8:d1:a7:a7:31:5a:15:96:f6:e5:25:58:bc:ca:e8: e3:61:2a:be:59:08:4f:9d:cd:49:ed:ea:29:16:6f: 30:9b:e5:8a:33:e6:f0:28:cf:a3:bc:86:59:33:31: 2c:22:16:40:37:19:ee:bb:50:c2:df:b3:a4:46:bd: f9:d0:95:90:ec:7e:91:e5:9b:3f:5a:d0:c9:ed:81: 72:c4:bf:fa:3b:ad:7a:1e:2f:d3:37:77:dc:1d:3e: 7f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DB:57:41:87:AD:96:92:15:1E:46:F2:44:A4:04:36:36:53:8D:32 X509v3 Authority Key Identifier: keyid:82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.186.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:d4:cf:0d:e2:5c:66:ec:4b:c0:bb:3f:c5:a8:9d:a0:c4:23: 13:35:7d:3d:4b:40:66:ba:05:8d:a3:a9:f2:29:3b:65:cf:75: e8:b1:0b:0d:58:96:a2:cd:e9:40:1e:ef:c9:8e:16:45:f4:fd: 1b:57:1a:bf:28:61:77:d0:fb:83:c9:a7:c4:ca:15:bd:44:fb: 09:d6:7b:72:ed:76:41:b4:5a:b1:e8:20:c5:bc:6f:4d:09:97: e1:6f:12:b8:24:9e:5b:9a:c1:1a:ca:d1:33:7e:c7:8f:fb:91: 4e:c0:4a:7a:a2:97:c6:80:e2:6e:2a:1c:ba:51:e5:f7:40:6d: 7e:63:ab:bb:d2:6c:68:a4:88:ed:3a:bf:32:f6:2c:31:6a:8a: 38:ef:01:ee:57:99:27:14:52:f4:84:aa:b5:56:13:df:48:46: 7d:15:16:b9:42:c7:49:3e:2c:32:d5:30:92:db:c5:6b:50:45: a4:f3:c8:e9:cd:a0:53:f5:25:b8:14:67:77:1c:30:9e:60:11: 16:20:7f:57:35:9b:a8:ad:64:45:6d:9b:6a:88:2e:c2:e5:61: 28:d3:c3:16:f3:f9:e1:01:23:32:2d:c7:77:ae:40:b6:56:6d: b3:e5:d1:68:59:6f:c3:52:d1:94:e9:d6:43:f1:9e:91:36:50: 9b:0b:24:86 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEz1jzx2qwUAlnS6Be/dKzab7cRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVB MUM0MEY2RjAeFw0yNjA1MDMwMzEwMjJaFw0yNzA1MDIwMzE1MjJaMDMxMTAvBgNV BAMTKEEzREI1NzQxODdBRDk2OTIxNTFFNDZGMjQ0QTQwNDM2MzY1MzhEMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDid4NnZ8uGjGyEJJm6ukj1981D IUzvezTx7X/ZQEWfpc9gTAxPwM9zU/U6o9Evt8T7alAD1XPXAPkRDLrvmHwK+9NC n7zx972c/CrMquSnXRitSWzWnIX8nEg617t/wNO6hqNfieUkrNf9dLhNuDtvJ5Ey GBet7qENr5gfVOzrIzzpTiZ3hy4ocikhJ3f6NoujU6JyES9Tppojm5g7qiCZXSFT jvjRp6cxWhWW9uUlWLzK6ONhKr5ZCE+dzUnt6ikWbzCb5Yoz5vAoz6O8hlkzMSwi FkA3Ge67UMLfs6RGvfnQlZDsfpHlmz9a0MntgXLEv/o7rXoeL9M3d9wdPn+ZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUo9tXQYetlpIVHkbyRKQENjZTjTIwHwYDVR0j BBgwFoAUgotiPppEPot+ldSli14pZaHED28wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFmMGY0MjMtM2JlZC00OTM4LTlmODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5 QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVBMUM0MEY2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjhCNjIzRTlBNDQzRThCN0U5NUQ0QTU4QjVFMjk2NUExQzQw RjZGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhZjBmNDIzLTNiZWQtNDkzOC05 Zjg5LTE1ZTYyNjliZGRjYS8wLzMxMzAzMzJlMzEzNzMwMmUzMTM4MzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM2MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqrowDQYJ KoZIhvcNAQELBQADggEBAD3Uzw3iXGbsS8C7P8WonaDEIxM1fT1LQGa6BY2jqfIp O2XPdeixCw1YlqLN6UAe78mOFkX0/RtXGr8oYXfQ+4PJp8TKFb1E+wnWe3LtdkG0 WrHoIMW8b00Jl+FvErgknluawRrK0TN+x4/7kU7ASnqil8aA4m4qHLpR5fdAbX5j q7vSbGikiO06vzL2LDFqijjvAe5XmScUUvSEqrVWE99IRn0VFrlCx0k+LDLVMJLb xWtQRaTzyOnNoFP1JbgUZ3ccMJ5gERYgf1c1m6itZEVtm2qILsLlYSjTwxbz+eEB IzItx3euQLZWbbPl0WhZb8NS0ZTp1kPxnpE2UJsLJIY= -----END CERTIFICATE-----Generated at Wed May 13 10:43:05 2026 by rpki-client