$ rpki-client -vvf rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa File: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (raw, json) Hash identifier: nhCth3GuuL56/ZX/YpeRjeCAIHYgJ/lFofg+gthNMoU= Subject key identifier: E7:EC:55:5C:8A:4B:BE:F0:34:09:A3:FD:90:EB:65:D1:2B:D8:34:E2 Certificate issuer: /CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Certificate serial: 2489351DA48746C819595791045DC5746F85E571 Authority key identifier: 8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa Signing time: Sun 03 May 2026 02:33:09 +0000 ROA not before: Sun 03 May 2026 02:28:09 +0000 ROA not after: Sun 02 May 2027 02:33:09 +0000 asID: 149712 IP address blocks: 103.186.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:89:35:1d:a4:87:46:c8:19:59:57:91:04:5d:c5:74:6f:85:e5:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Validity Not Before: May 3 02:28:09 2026 GMT Not After : May 2 02:33:09 2027 GMT Subject: CN=E7EC555C8A4BBEF03409A3FD90EB65D12BD834E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:78:05:70:92:cd:83:6c:c2:9d:06:27:d1:be: b0:3b:59:e3:9e:e1:85:30:c6:99:59:ab:a0:cf:49: 35:6a:27:f2:1a:1a:5e:98:9b:ac:f1:6a:57:8c:96: 8e:5d:97:fb:a9:c3:b8:64:a5:9a:dd:18:03:2a:24: 1b:1d:4b:a1:51:0f:fb:7f:c7:1c:ee:7a:42:11:df: 37:f7:a6:24:cc:4c:b7:31:dd:af:1c:4a:80:63:79: b5:6d:b3:1f:96:08:32:1f:da:52:31:45:16:37:37: 6e:5d:3d:13:b2:da:ff:fd:65:97:31:52:93:64:fc: 03:8c:0d:b6:a5:94:9b:ad:3b:ab:b0:c5:4b:3a:51: 30:8a:f3:c7:23:0f:fe:aa:a3:47:81:d0:a3:5c:55: c8:20:3a:bc:46:6f:54:fa:8c:18:95:b4:7b:69:be: c9:65:26:d7:06:10:da:a4:c6:2e:9f:73:9b:24:ad: d0:a7:ba:a9:b7:ce:3f:31:18:cd:9c:6a:da:68:20: e3:9c:68:49:04:bb:92:f0:c5:68:e1:18:94:a4:01: 48:7d:c0:cb:97:df:0e:f6:a7:d7:29:db:21:80:5a: 06:f1:ed:03:5c:6f:3b:c1:67:23:21:cf:c9:db:56: dd:cf:85:57:40:10:26:06:0a:3f:ac:4f:10:3b:2a: ea:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EC:55:5C:8A:4B:BE:F0:34:09:A3:FD:90:EB:65:D1:2B:D8:34:E2 X509v3 Authority Key Identifier: keyid:8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.194.0/23 Signature Algorithm: sha256WithRSAEncryption 39:40:82:ff:c6:10:fc:dc:cc:98:49:ae:31:33:c4:db:2f:40: 88:3c:61:a2:65:90:a5:00:54:b7:8a:d3:8f:28:42:16:89:d1: fe:0b:06:6d:c7:cd:32:3f:b6:a4:68:cf:33:dd:f0:15:7c:b0: ad:26:2d:c0:d1:3b:a4:a8:c4:90:81:9e:a2:2e:8a:55:fa:61: e3:3f:40:80:5f:4c:57:c1:92:ff:0b:db:e7:73:89:0e:09:43: ab:2f:d9:51:34:40:9e:45:b8:24:7b:49:bd:f6:2a:4b:88:3d: 81:d0:3d:be:e0:6e:05:dd:b8:69:43:77:8c:ec:7c:b1:34:ab: c5:d6:f6:09:20:61:1e:5e:5a:2c:d6:b1:6d:02:2a:35:27:09: 54:7e:7a:09:d7:6d:e2:0c:c3:1c:2f:77:7f:46:13:cf:1a:34: fc:b8:60:8d:0b:68:af:53:cf:b0:e7:bd:89:73:55:f0:f5:b8: ed:f4:7e:07:1c:77:1e:06:f3:7c:d5:81:72:16:12:06:cb:38: b6:a8:04:53:a4:78:95:9c:6d:c9:2f:cb:90:ad:1e:2e:d6:b6: 94:57:93:c4:31:d0:fa:e5:40:e7:d7:f8:03:d7:a6:d1:0d:4f: 8b:44:51:8b:bd:9a:e4:74:bb:1b:7b:46:fa:99:22:cd:fd:64: 7c:06:5d:48 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJIk1HaSHRsgZWVeRBF3FdG+F5XEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU3RDI5QjhCMkU2RjJGMDlCNTA3RkMzNkIzMTczMTYy QTQzMTZFOTAeFw0yNjA1MDMwMjI4MDlaFw0yNzA1MDIwMjMzMDlaMDMxMTAvBgNV BAMTKEU3RUM1NTVDOEE0QkJFRjAzNDA5QTNGRDkwRUI2NUQxMkJEODM0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZeAVwks2DbMKdBifRvrA7WeOe 4YUwxplZq6DPSTVqJ/IaGl6Ym6zxaleMlo5dl/upw7hkpZrdGAMqJBsdS6FRD/t/ xxzuekIR3zf3piTMTLcx3a8cSoBjebVtsx+WCDIf2lIxRRY3N25dPROy2v/9ZZcx UpNk/AOMDballJutO6uwxUs6UTCK88cjD/6qo0eB0KNcVcggOrxGb1T6jBiVtHtp vsllJtcGENqkxi6fc5skrdCnuqm3zj8xGM2catpoIOOcaEkEu5LwxWjhGJSkAUh9 wMuX3w72p9cp2yGAWgbx7QNcbzvBZyMhz8nbVt3PhVdAECYGCj+sTxA7KuqNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU5+xVXIpLvvA0CaP9kOtl0SvYNOIwHwYDVR0j BBgwFoAUjn0puLLm8vCbUH/DazFzFipDFukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI1MmVhZDMtZGM4Zi00ZDg2LWFmY2YtYTE0MGU1Yjg3NTMyLzAvOEU3RDI5QjhC MkU2RjJGMDlCNTA3RkMzNkIzMTczMTYyQTQzMTZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTdEMjlCOEIyRTZGMkYwOUI1MDdGQzM2QjMxNzMxNjJBNDMx NkU5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUyNTJlYWQzLWRjOGYtNGQ4Ni1h ZmNmLWExNDBlNWI4NzUzMi8wLzMxMzAzMzJlMzEzODM2MmUzMTM5MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnusIwDQYJ KoZIhvcNAQELBQADggEBADlAgv/GEPzczJhJrjEzxNsvQIg8YaJlkKUAVLeK048o QhaJ0f4LBm3HzTI/tqRozzPd8BV8sK0mLcDRO6SoxJCBnqIuilX6YeM/QIBfTFfB kv8L2+dziQ4JQ6sv2VE0QJ5FuCR7Sb32KkuIPYHQPb7gbgXduGlDd4zsfLE0q8XW 9gkgYR5eWizWsW0CKjUnCVR+egnXbeIMwxwvd39GE88aNPy4YI0LaK9Tz7DnvYlz VfD1uO30fgccdx4G83zVgXIWEgbLOLaoBFOkeJWcbckvy5CtHi7WtpRXk8Qx0Prl QOfX+APXptENT4tEUYu9muR0uxt7RvqZIs39ZHwGXUg= -----END CERTIFICATE-----Generated at Tue May 5 19:10:57 2026 by rpki-client