$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa File: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (raw, json) Hash identifier: wIhC8ahVWqomrNJdfdl2zgDb8UOJzi58mGNtTXqf6+U= Subject key identifier: B9:B1:22:C6:1C:3E:6C:48:E7:7C:82:C6:EA:1E:FF:66:9C:F9:2D:A7 Certificate issuer: /CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Certificate serial: 5BC861380F7C996DC7A5DCB2E70045F9C1009856 Authority key identifier: 21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa Signing time: Sun 03 May 2026 03:16:29 +0000 ROA not before: Sun 03 May 2026 03:11:29 +0000 ROA not after: Sun 02 May 2027 03:16:29 +0000 asID: 45700 IP address blocks: 103.228.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c8:61:38:0f:7c:99:6d:c7:a5:dc:b2:e7:00:45:f9:c1:00:98:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Validity Not Before: May 3 03:11:29 2026 GMT Not After : May 2 03:16:29 2027 GMT Subject: CN=B9B122C61C3E6C48E77C82C6EA1EFF669CF92DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:bf:60:a6:ce:0c:16:6e:93:58:1a:e9:b7: 81:1f:b8:69:2b:a1:62:29:91:bb:2a:b8:b1:ad:fb: bf:65:8d:3a:35:1e:18:f6:7b:55:ad:50:05:9e:e1: 12:77:3d:6a:3e:9a:75:34:1b:bd:78:e2:66:93:6f: f2:be:28:44:02:29:81:48:65:cd:19:49:98:69:a1: 03:c5:27:9f:43:66:4b:67:af:e1:7f:1a:65:1e:f0: e4:b9:ed:6b:22:cd:8d:17:d5:2a:0f:88:61:e0:dd: 43:2c:e7:64:c2:84:0c:82:27:10:d9:34:5f:c1:af: cc:38:37:f2:27:27:07:2d:76:e0:a1:1e:c9:7c:9c: aa:58:3e:d0:2c:0f:b1:e5:10:37:41:0a:35:76:ec: 17:05:a5:ae:d8:38:a4:42:4e:55:73:ac:52:41:6d: 26:93:37:8e:bb:f4:cc:d7:48:a5:cb:cc:c2:e4:30: df:8d:cb:ea:2d:2d:db:68:f1:39:2d:a3:d4:79:47: 67:73:da:7e:e3:36:64:65:df:9c:c6:ad:79:21:a8: 04:89:4a:27:63:03:8c:90:2c:c0:cc:99:3b:94:04: 68:fd:b1:4a:c7:5b:7c:64:9b:87:89:8a:26:62:5c: bf:a2:6d:42:5b:f2:e8:68:90:7f:81:08:36:6c:83: 5d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B1:22:C6:1C:3E:6C:48:E7:7C:82:C6:EA:1E:FF:66:9C:F9:2D:A7 X509v3 Authority Key Identifier: keyid:21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.240.0/22 Signature Algorithm: sha256WithRSAEncryption a2:bd:db:e7:ed:c7:3c:db:b7:ff:69:ea:26:21:48:3d:2e:c5: 84:fa:88:3e:8c:3e:3b:c7:dd:03:c8:10:45:4d:47:ff:f7:59: 14:8e:89:fa:28:7a:e0:8b:f6:4c:86:6a:57:18:e3:8a:8c:49: 5a:08:65:bc:6c:76:b0:9d:61:57:b8:4d:dd:73:ad:21:30:61: a1:a6:0e:81:07:40:1c:36:f7:e5:39:15:8c:cd:5e:29:dc:7e: 65:90:24:da:ed:b2:35:51:14:03:70:11:8b:58:0d:f3:53:2f: 69:a0:bd:02:64:ce:5b:9f:ad:cd:5d:d5:18:c6:c1:e1:5b:65: 30:0d:56:5e:d6:bd:05:e4:74:e9:33:a1:00:ec:3c:cf:be:53: 77:b7:d1:12:11:93:62:a9:39:b4:da:47:f2:57:54:1d:9a:94: 7a:fc:e7:e4:ce:97:c5:b8:a7:eb:e6:17:1d:d9:20:9b:d4:08: 5d:b5:59:21:f4:98:0a:bf:31:00:bc:87:ca:b5:68:28:68:62: ce:e1:58:db:be:37:7e:e1:43:b2:c4:25:2e:df:a0:48:cf:5a: a9:4d:c6:ca:7b:22:ff:f1:f2:fa:9f:a9:7b:fa:60:42:db:07: b3:1c:7e:62:e8:d8:8a:e2:15:95:f4:8f:81:d4:75:78:d9:08: 02:57:bd:f2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUW8hhOA98mW3Hpdyy5wBF+cEAmFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0OEYz NDRGQjk2NzAeFw0yNjA1MDMwMzExMjlaFw0yNzA1MDIwMzE2MjlaMDMxMTAvBgNV BAMTKEI5QjEyMkM2MUMzRTZDNDhFNzdDODJDNkVBMUVGRjY2OUNGOTJEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFL9gps4MFm6TWBrpt4EfuGkr oWIpkbsquLGt+79ljTo1Hhj2e1WtUAWe4RJ3PWo+mnU0G7144maTb/K+KEQCKYFI Zc0ZSZhpoQPFJ59DZktnr+F/GmUe8OS57WsizY0X1SoPiGHg3UMs52TChAyCJxDZ NF/Br8w4N/InJwctduChHsl8nKpYPtAsD7HlEDdBCjV27BcFpa7YOKRCTlVzrFJB bSaTN4679MzXSKXLzMLkMN+Ny+otLdto8Tkto9R5R2dz2n7jNmRl35zGrXkhqASJ SidjA4yQLMDMmTuUBGj9sUrHW3xkm4eJiiZiXL+ibUJb8uhokH+BCDZsg12lAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUubEixhw+bEjnfILG6h7/Zpz5LacwHwYDVR0j BBgwFoAUIRam9fBkLS5gajrP9zjkjzRPuWcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBhOTI5YzYtMWUyNS00OTRhLWIwZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVG MDY0MkQyRTYwNkEzQUNGRjczOEU0OEYzNDRGQjk2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTE2QTZGNUYwNjQyRDJFNjA2QTNBQ0ZGNzM4RTQ4RjM0NEZC OTY3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YwYTkyOWM2LTFlMjUtNDk0YS1i MGY5LTU1ZmM0ZmM5NGZiYy8wLzMxMzAzMzJlMzIzMjM4MmUzMjM0MzAyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNDM1MzczMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+TwMA0GCSqG SIb3DQEBCwUAA4IBAQCivdvn7cc827f/aeomIUg9LsWE+og+jD47x90DyBBFTUf/ 91kUjon6KHrgi/ZMhmpXGOOKjElaCGW8bHawnWFXuE3dc60hMGGhpg6BB0AcNvfl ORWMzV4p3H5lkCTa7bI1URQDcBGLWA3zUy9poL0CZM5bn63NXdUYxsHhW2UwDVZe 1r0F5HTpM6EA7DzPvlN3t9ESEZNiqTm02kfyV1QdmpR6/OfkzpfFuKfr5hcd2SCb 1AhdtVkh9JgKvzEAvIfKtWgoaGLO4Vjbvjd+4UOyxCUu36BIz1qpTcbKeyL/8fL6 n6l7+mBC2wezHH5i6NiK4hWV9I+B1HV42QgCV73y -----END CERTIFICATE-----Generated at Wed May 13 08:28:11 2026 by rpki-client