$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa File: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (raw, json) Hash identifier: itttPeBqKU49Shq/w4T47E1hAyNoebnpwqyP1PK8wLg= Subject key identifier: 23:FF:71:F2:A1:DD:C6:0B:85:46:9C:56:C8:74:F3:28:72:F5:A2:D5 Certificate issuer: /CN=35859E59642559AC99788C194ED55EB1548A2F1F Certificate serial: 6E21B8A4D888E654822C3301A15EA1A797EB2AE7 Authority key identifier: 35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa Signing time: Sun 03 May 2026 03:15:35 +0000 ROA not before: Sun 03 May 2026 03:10:35 +0000 ROA not after: Sun 02 May 2027 03:15:35 +0000 asID: 140478 IP address blocks: 103.154.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:21:b8:a4:d8:88:e6:54:82:2c:33:01:a1:5e:a1:a7:97:eb:2a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35859E59642559AC99788C194ED55EB1548A2F1F Validity Not Before: May 3 03:10:35 2026 GMT Not After : May 2 03:15:35 2027 GMT Subject: CN=23FF71F2A1DDC60B85469C56C874F32872F5A2D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:84:d1:2a:d3:ba:95:ba:45:97:1d:86:77: f7:3e:78:1f:5d:fa:a3:27:ef:f7:10:af:fd:4c:a7: 7d:18:43:3b:6a:1d:41:06:b7:a2:97:aa:4c:74:4c: ed:dd:b7:11:2d:e9:17:30:1f:6c:3c:1a:63:19:89: 6e:eb:7f:52:b1:9a:7b:04:15:56:db:86:ca:5c:2a: 9e:25:2a:dc:d8:f6:6e:35:b8:ee:5c:42:e1:b0:45: b9:2f:a9:ac:c0:bc:a1:5b:ca:83:38:14:79:c8:6b: 56:e0:3b:f9:b9:94:3b:b2:b4:78:0b:a4:60:0d:71: 93:75:97:47:31:6a:cf:6f:7c:d1:67:e2:67:ad:f6: 90:8c:4b:67:2e:74:e1:19:25:bf:21:36:ca:51:80: ef:7b:55:30:48:29:28:a4:e1:78:f1:a3:85:cc:d2: 8f:8a:ba:b8:60:e0:2b:65:8e:be:4c:ed:45:c8:66: b1:c5:d5:66:a9:fc:d5:b0:1f:04:f7:03:07:08:8d: 47:fc:59:3c:f6:1f:51:67:7e:3b:86:88:7a:13:ad: 12:12:58:35:25:a9:fd:55:a9:b2:50:bb:53:3f:54: 6c:c6:f1:0f:a3:c7:ae:f3:c8:b9:a3:61:4d:4a:18: 2a:00:97:9f:39:b9:70:2f:85:1a:d4:e1:b4:ec:43: 0b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FF:71:F2:A1:DD:C6:0B:85:46:9C:56:C8:74:F3:28:72:F5:A2:D5 X509v3 Authority Key Identifier: keyid:35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.24.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:1a:f7:a5:d4:3c:00:f3:9e:1d:5a:09:23:24:f8:75:9b:43: c5:da:3b:c9:3e:7b:ca:0c:97:b0:51:0b:65:d2:a8:d1:44:79: 2f:4e:d2:9f:24:dc:28:23:b8:5b:23:75:fe:fa:7f:be:75:4b: 52:16:44:19:5b:09:83:d8:ee:10:e3:3b:c7:b4:54:c1:99:6d: 38:08:15:a6:22:3e:11:cb:33:89:f6:3d:f1:b0:f1:53:07:e4: ac:cf:b8:86:c9:b9:b3:8e:84:b3:a3:35:2e:57:c1:84:f0:0e: 79:32:cb:98:5f:31:6d:93:15:2f:80:64:5a:d5:79:5e:1f:9a: 16:a7:73:c3:39:f7:a2:65:d9:d0:b7:dd:42:1b:8d:0b:01:b4: c6:2c:14:dc:6d:04:86:ca:e1:0d:40:43:3f:80:bd:51:ff:53: 80:1e:40:78:6e:5c:7c:94:96:b7:08:24:b2:50:39:f8:42:4c: 2d:45:2c:5e:08:99:28:10:e6:8d:8d:80:cb:b4:b7:fd:8d:f2: e2:7c:4c:82:5b:3d:5e:b9:82:78:d3:0f:98:7f:05:73:73:11: 86:d7:23:cb:04:27:80:e7:35:bc:bb:76:d6:84:47:ea:d4:7c: 43:d2:e3:fe:6f:49:fb:2e:37:83:f8:8e:42:65:4d:3c:d7:f2: 4f:80:27:6b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbiG4pNiI5lSCLDMBoV6hp5frKucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1 NDhBMkYxRjAeFw0yNjA1MDMwMzEwMzVaFw0yNzA1MDIwMzE1MzVaMDMxMTAvBgNV BAMTKDIzRkY3MUYyQTFEREM2MEI4NTQ2OUM1NkM4NzRGMzI4NzJGNUEyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJ4TRKtO6lbpFlx2Gd/c+eB9d +qMn7/cQr/1Mp30YQztqHUEGt6KXqkx0TO3dtxEt6RcwH2w8GmMZiW7rf1KxmnsE FVbbhspcKp4lKtzY9m41uO5cQuGwRbkvqazAvKFbyoM4FHnIa1bgO/m5lDuytHgL pGANcZN1l0cxas9vfNFn4met9pCMS2cudOEZJb8hNspRgO97VTBIKSik4Xjxo4XM 0o+Kurhg4Ctljr5M7UXIZrHF1Wap/NWwHwT3AwcIjUf8WTz2H1FnfjuGiHoTrRIS WDUlqf1VqbJQu1M/VGzG8Q+jx67zyLmjYU1KGCoAl585uXAvhRrU4bTsQwtbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUI/9x8qHdxguFRpxWyHTzKHL1otUwHwYDVR0j BBgwFoAUNYWeWWQlWayZeIwZTtVesVSKLx8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJlZmJmMDQtNDFiZS00OGQ3LWFjMDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2 NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1NDhBMkYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTg1OUU1OTY0MjU1OUFDOTk3ODhDMTk0RUQ1NUVCMTU0OEEy RjFGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ViZWZiZjA0LTQxYmUtNDhkNy1h YzAwLThhM2M0OThjYTlhZS8wLzMxMzAzMzJlMzEzNTM0MmUzMjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5oYMA0GCSqG SIb3DQEBCwUAA4IBAQBPGvel1DwA854dWgkjJPh1m0PF2jvJPnvKDJewUQtl0qjR RHkvTtKfJNwoI7hbI3X++n++dUtSFkQZWwmD2O4Q4zvHtFTBmW04CBWmIj4RyzOJ 9j3xsPFTB+Ssz7iGybmzjoSzozUuV8GE8A55MsuYXzFtkxUvgGRa1XleH5oWp3PD OfeiZdnQt91CG40LAbTGLBTcbQSGyuENQEM/gL1R/1OAHkB4blx8lJa3CCSyUDn4 QkwtRSxeCJkoEOaNjYDLtLf9jfLifEyCWz1euYJ40w+YfwVzcxGG1yPLBCeA5zW8 u3bWhEfq1HxD0uP+b0n7LjeD+I5CZU081/JPgCdr -----END CERTIFICATE-----Generated at Tue May 12 22:28:59 2026 by rpki-client