$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32342d3234203d3e2039333431.roa File: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: 5zg0GIi7yUDtLBjsDWQRXMmLy9VH8ssv+xs3UioSD6g= Subject key identifier: 8D:1D:59:F6:71:67:57:BA:78:A6:DF:2B:FB:16:82:32:47:5A:B8:6E Certificate issuer: /CN=587FA9FD682D37BC3028319A65BCAECCE276314F Certificate serial: 47613EB6A06D3B0A4A77EB8207D0D947165E57E9 Authority key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32342d3234203d3e2039333431.roa Signing time: Sun 03 May 2026 02:18:39 +0000 ROA not before: Sun 03 May 2026 02:13:39 +0000 ROA not after: Sun 02 May 2027 02:18:39 +0000 asID: 9341 IP address blocks: 103.182.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:61:3e:b6:a0:6d:3b:0a:4a:77:eb:82:07:d0:d9:47:16:5e:57:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587FA9FD682D37BC3028319A65BCAECCE276314F Validity Not Before: May 3 02:13:39 2026 GMT Not After : May 2 02:18:39 2027 GMT Subject: CN=8D1D59F6716757BA78A6DF2BFB168232475AB86E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:39:29:68:e9:8c:84:74:26:15:a3:7e:18: 95:b5:3a:2a:39:15:41:56:ab:23:59:2c:03:ce:e1: 72:52:8d:a7:23:49:a3:3d:88:29:f0:e3:2f:28:50: dc:ca:44:2d:d3:e7:d7:50:9c:b7:32:d8:0a:11:d7: cf:b8:bc:50:2e:53:d7:c3:6e:84:75:32:32:92:20: e4:dc:5a:0c:1f:26:bc:a4:26:4a:03:64:c1:19:49: 71:1e:20:0b:a2:5e:91:30:84:46:23:9d:c8:a5:78: 1a:89:9e:9b:48:3f:61:86:30:3e:8a:f8:1f:9c:fc: 97:67:43:5a:ef:b5:d5:07:22:fe:73:58:16:14:0e: 2b:8c:c8:58:9d:9e:41:9c:67:b9:61:72:53:d2:d7: bd:55:d0:c9:a1:b8:50:0a:b0:96:1b:d1:37:ad:52: b4:41:70:bf:6d:cc:06:83:cd:01:6a:09:57:56:96: 37:c3:ab:38:af:fa:af:9a:0f:f4:18:54:3d:79:36: e0:ae:1a:31:3d:fd:cf:8e:cb:54:ba:58:ae:2e:14: bd:c5:a8:07:f4:81:d4:62:52:fe:f0:2a:12:b5:d0: c6:d6:b4:99:67:18:8a:69:e1:2d:ce:06:77:c9:ac: e2:22:68:dd:31:72:80:63:ec:19:37:1e:52:fd:9f: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1D:59:F6:71:67:57:BA:78:A6:DF:2B:FB:16:82:32:47:5A:B8:6E X509v3 Authority Key Identifier: keyid:58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.0.0/24 Signature Algorithm: sha256WithRSAEncryption 21:3a:7d:f8:70:fe:b4:46:e7:0e:cc:be:fb:20:f8:87:e3:4b: 69:de:f7:10:ba:20:cd:50:4c:c1:81:a1:a1:bc:04:59:04:38: 16:2c:7e:32:61:52:6e:b6:1c:1a:8a:56:c6:2e:01:ce:e9:f3: 47:4b:b1:42:25:68:8d:71:00:07:d6:40:83:61:d0:e1:61:04: 0b:19:1f:2e:a2:12:aa:6a:f0:53:1b:76:bd:a1:e0:c3:a3:91: a7:6d:bd:ef:09:e2:3a:11:75:69:f4:e9:a0:98:2c:f7:6d:86: 8d:2a:36:e6:76:08:6b:bf:0a:21:93:87:49:01:88:25:93:1e: a4:34:20:f9:e1:64:4c:f4:ed:7f:2f:7c:d9:1e:69:a4:5e:7b: 9e:6a:bb:22:ba:47:bf:f5:0e:68:bb:e9:43:f3:58:dd:7c:4d: 7d:a7:d9:de:d8:0d:1e:a1:8f:fc:7e:99:8f:33:f8:d1:4b:93: b3:22:37:20:53:a7:ba:48:0f:59:4e:43:d8:a5:47:d2:c9:83: c5:ac:c5:04:c1:a6:c9:11:cd:79:e9:8f:6a:ad:30:c9:bf:55: fd:9a:97:21:93:ed:8d:36:dc:9b:a5:82:b4:fb:f6:af:f9:8a: f9:0c:ce:f3:8b:5a:69:16:9c:40:7d:d4:11:e3:87:02:77:bf: 87:fd:a9:12 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUR2E+tqBtOwpKd+uCB9DZRxZeV+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NF Mjc2MzE0RjAeFw0yNjA1MDMwMjEzMzlaFw0yNzA1MDIwMjE4MzlaMDMxMTAvBgNV BAMTKDhEMUQ1OUY2NzE2NzU3QkE3OEE2REYyQkZCMTY4MjMyNDc1QUI4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhjkpaOmMhHQmFaN+GJW1Oio5 FUFWqyNZLAPO4XJSjacjSaM9iCnw4y8oUNzKRC3T59dQnLcy2AoR18+4vFAuU9fD boR1MjKSIOTcWgwfJrykJkoDZMEZSXEeIAuiXpEwhEYjncileBqJnptIP2GGMD6K +B+c/JdnQ1rvtdUHIv5zWBYUDiuMyFidnkGcZ7lhclPS171V0MmhuFAKsJYb0Tet UrRBcL9tzAaDzQFqCVdWljfDqziv+q+aD/QYVD15NuCuGjE9/c+Oy1S6WK4uFL3F qAf0gdRiUv7wKhK10MbWtJlnGIpp4S3OBnfJrOIiaN0xcoBj7Bk3HlL9n+XFAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUjR1Z9nFnV7p4pt8r+xaCMkdauG4wHwYDVR0j BBgwFoAUWH+p/WgtN7wwKDGaZbyuzOJ2MU8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmYTNiNjQtM2M2MS00OGQ1LWFiMGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2 ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NFMjc2MzE0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODdGQTlGRDY4MkQzN0JDMzAyODMxOUE2NUJDQUVDQ0UyNzYz MTRGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMzEzMDMzMmUzMTM4MzIyZTMwMmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntgAwDQYJKoZIhvcNAQEL BQADggEBACE6ffhw/rRG5w7Mvvsg+IfjS2ne9xC6IM1QTMGBoaG8BFkEOBYsfjJh Um62HBqKVsYuAc7p80dLsUIlaI1xAAfWQINh0OFhBAsZHy6iEqpq8FMbdr2h4MOj kadtve8J4joRdWn06aCYLPdtho0qNuZ2CGu/CiGTh0kBiCWTHqQ0IPnhZEz07X8v fNkeaaRee55quyK6R7/1Dmi76UPzWN18TX2n2d7YDR6hj/x+mY8z+NFLk7MiNyBT p7pID1lOQ9ilR9LJg8WsxQTBpskRzXnpj2qtMMm/Vf2alyGT7Y023JulgrT79q/5 ivkMzvOLWmkWnEB91BHjhwJ3v4f9qRI= -----END CERTIFICATE-----Generated at Tue May 5 13:27:24 2026 by rpki-client