$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3130332e37312e3232342e302f32322d3234203d3e2039383735.roa File: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (raw, json) Hash identifier: C/tjvABwEX3e3XuDh6lRQ/cpU/5HYFGHpATqucNO6pQ= Subject key identifier: 3C:58:83:0C:44:9A:1A:38:21:73:A6:1E:7A:B2:2B:E5:E6:B0:E3:2B Certificate issuer: /CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Certificate serial: 0A9A72B1FF39FBBF278DAF886D6E3CE1178FC4DC Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3130332e37312e3232342e302f32322d3234203d3e2039383735.roa Signing time: Sun 03 May 2026 03:15:31 +0000 ROA not before: Sun 03 May 2026 03:10:31 +0000 ROA not after: Sun 02 May 2027 03:15:31 +0000 asID: 9875 IP address blocks: 103.71.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9a:72:b1:ff:39:fb:bf:27:8d:af:88:6d:6e:3c:e1:17:8f:c4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Validity Not Before: May 3 03:10:31 2026 GMT Not After : May 2 03:15:31 2027 GMT Subject: CN=3C58830C449A1A382173A61E7AB22BE5E6B0E32B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:5e:09:ba:88:7a:7c:4a:9a:1e:20:54:6f: 55:d8:0e:86:d1:2c:ca:7c:5e:68:ea:f0:ba:37:a5: 2d:61:cc:77:50:ac:28:ed:f5:cf:ee:b5:8a:98:49: b5:4a:c3:e1:d2:f2:6a:c6:86:19:5a:67:ef:40:a7: 4c:ea:c1:10:3f:c8:a3:08:0e:ed:97:f7:5f:0c:f6: fc:85:2f:52:9f:51:0e:28:83:da:37:94:7f:85:be: 02:5e:a2:71:b3:fb:30:ab:7a:9c:d7:2c:d1:8e:1b: 46:f1:76:06:3e:8c:d9:56:2f:02:1c:4d:34:7a:ed: 71:16:b7:92:af:f1:3f:4f:35:b0:be:00:59:2b:ce: f6:0a:ae:b3:f0:11:69:7d:83:fe:18:e0:26:27:68: b3:d3:00:91:3b:45:48:d0:10:a5:ed:65:88:ab:68: 2e:6c:d1:40:67:22:52:1f:e2:c6:48:a7:9d:ea:6e: 0c:93:08:aa:8a:1a:85:58:91:4c:ea:2b:23:69:01: 77:ab:32:0b:ac:11:a0:20:e7:a3:71:0b:a7:98:7d: 05:57:38:04:67:f7:ba:bb:30:58:04:c2:73:d8:a0: 93:0f:3d:d1:a4:fd:1c:14:f8:04:c1:b4:59:eb:ca: 6f:bd:54:c4:f6:77:60:51:44:02:0f:b5:8b:b3:36: ce:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:58:83:0C:44:9A:1A:38:21:73:A6:1E:7A:B2:2B:E5:E6:B0:E3:2B X509v3 Authority Key Identifier: keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3130332e37312e3232342e302f32322d3234203d3e2039383735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.224.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:f1:73:c1:70:56:49:69:50:5b:c3:cb:5f:90:8b:82:70:46: c1:1e:05:fa:ad:21:bd:69:ab:92:98:64:1c:38:66:06:14:52: 04:14:87:75:e8:5f:01:2d:34:0e:01:2c:ff:7b:e0:01:08:5a: 9d:fb:6d:09:9d:01:6b:bf:a4:6f:6b:db:98:0d:92:2c:17:9c: be:63:83:4a:e2:9a:10:4b:c3:59:fa:66:b5:11:b8:01:93:a3: e1:36:e3:d4:f3:fe:a5:0e:13:45:ef:17:19:34:75:2f:90:5b: b1:16:8f:0c:f3:d6:fa:6c:3d:73:c6:50:23:a7:8f:7a:56:a8: f3:dd:11:2f:a2:82:45:28:c5:4a:c8:98:85:2c:df:56:ff:41: f7:05:4d:ee:d8:d5:cf:9a:9b:07:92:84:e8:d1:73:16:18:74: f2:e5:d3:b1:db:23:b8:2b:67:47:57:4e:e3:c5:1b:ed:46:0a: 5d:e7:c6:b8:18:bc:17:d2:4a:ac:26:6b:44:8b:b7:65:2f:92: 73:23:7f:35:65:60:f2:a0:d4:1a:f5:25:28:3b:aa:70:33:b0: f1:38:c9:f7:88:4a:59:6b:9f:74:91:94:38:9d:4b:75:70:c6: dc:77:a7:c6:2f:bf:73:2a:a1:b8:f8:3e:92:66:e0:43:04:11: 85:cb:b3:96 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUCppysf85+78nja+IbW484RePxNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4 NEVFMTAyNDAeFw0yNjA1MDMwMzEwMzFaFw0yNzA1MDIwMzE1MzFaMDMxMTAvBgNV BAMTKDNDNTg4MzBDNDQ5QTFBMzgyMTczQTYxRTdBQjIyQkU1RTZCMEUzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6A14Juoh6fEqaHiBUb1XYDobR LMp8Xmjq8Lo3pS1hzHdQrCjt9c/utYqYSbVKw+HS8mrGhhlaZ+9Ap0zqwRA/yKMI Du2X918M9vyFL1KfUQ4og9o3lH+FvgJeonGz+zCrepzXLNGOG0bxdgY+jNlWLwIc TTR67XEWt5Kv8T9PNbC+AFkrzvYKrrPwEWl9g/4Y4CYnaLPTAJE7RUjQEKXtZYir aC5s0UBnIlIf4sZIp53qbgyTCKqKGoVYkUzqKyNpAXerMgusEaAg56NxC6eYfQVX OARn97q7MFgEwnPYoJMPPdGk/RwU+ATBtFnrym+9VMT2d2BRRAIPtYuzNs4JAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUPFiDDESaGjghc6YeerIr5eaw4yswHwYDVR0j BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx MDI0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i ZjNmLTUyMTE5NDYxMDFjMy8wLzMxMzAzMzJlMzczMTJlMzIzMjM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzkzODM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnR+AwDQYJKoZIhvcN AQELBQADggEBAJzxc8FwVklpUFvDy1+Qi4JwRsEeBfqtIb1pq5KYZBw4ZgYUUgQU h3XoXwEtNA4BLP974AEIWp37bQmdAWu/pG9r25gNkiwXnL5jg0rimhBLw1n6ZrUR uAGTo+E249Tz/qUOE0XvFxk0dS+QW7EWjwzz1vpsPXPGUCOnj3pWqPPdES+igkUo xUrImIUs31b/QfcFTe7Y1c+amweShOjRcxYYdPLl07HbI7grZ0dXTuPFG+1GCl3n xrgYvBfSSqwma0SLt2UvknMjfzVlYPKg1Br1JSg7qnAzsPE4yfeISllrn3SRlDid S3Vwxtx3p8Yvv3Mqobj4PpJm4EMEEYXLs5Y= -----END CERTIFICATE-----Generated at Wed May 13 00:31:37 2026 by rpki-client