$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130332e31322e32382e302f32322d3234203d3e203535363730.roa File: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (raw, json) Hash identifier: JbJvmvToLRsj/pbiH1e96nax2mjHa9GpGHMhuuSXERU= Subject key identifier: 98:09:0C:7F:92:3D:24:3A:D5:E7:17:FF:4C:51:60:74:E1:CE:71:DA Certificate issuer: /CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF Certificate serial: 087B0319A9D687F930FD9D8E47F0CB7F2D63B905 Authority key identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130332e31322e32382e302f32322d3234203d3e203535363730.roa Signing time: Sun 03 May 2026 02:45:47 +0000 ROA not before: Sun 03 May 2026 02:40:47 +0000 ROA not after: Sun 02 May 2027 02:45:47 +0000 asID: 55670 IP address blocks: 103.12.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 07:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:7b:03:19:a9:d6:87:f9:30:fd:9d:8e:47:f0:cb:7f:2d:63:b9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF Validity Not Before: May 3 02:40:47 2026 GMT Not After : May 2 02:45:47 2027 GMT Subject: CN=98090C7F923D243AD5E717FF4C516074E1CE71DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:80:d0:68:12:59:16:95:f2:54:cf:73:9e:8c: fc:17:cc:02:41:12:26:26:04:87:1b:55:43:79:be: c2:40:e1:19:6b:0f:2d:8c:c1:f2:c7:84:3f:6b:0f: 10:64:cb:5b:1b:81:e0:e4:7d:fc:a0:14:77:8f:04: 7c:9b:d7:73:d7:76:27:13:a0:dc:67:70:e7:4a:cf: 22:7b:d7:79:9f:31:80:60:df:68:a6:34:83:f7:aa: fd:ad:bd:4e:9a:66:bb:20:f3:8e:fd:9f:ef:77:dc: cb:d8:e1:43:93:bf:c2:5b:14:67:68:09:87:93:10: 8d:80:60:fe:6f:aa:27:00:e7:e8:aa:f8:36:c3:f4: c8:6a:73:24:5d:30:1f:a9:76:30:41:95:59:9e:20: c8:7c:bb:2f:03:e3:07:f5:a7:b2:a4:46:d5:35:8f: ca:c8:f6:38:68:0b:f2:66:7d:9c:db:cd:df:66:9b: dc:8c:be:c1:14:d7:36:0e:f4:89:38:cd:d7:dc:1c: dc:82:cf:5b:62:b4:22:69:4b:a8:07:96:49:0d:eb: a4:b7:89:a9:73:73:34:06:c7:31:9d:2d:a2:1a:ba: 51:82:a2:86:00:63:c5:04:e4:70:f6:cf:47:6c:4c: b6:5f:50:a4:ba:5a:c4:f0:2b:9e:5e:74:1b:89:ba: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:09:0C:7F:92:3D:24:3A:D5:E7:17:FF:4C:51:60:74:E1:CE:71:DA X509v3 Authority Key Identifier: keyid:B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130332e31322e32382e302f32322d3234203d3e203535363730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.12.28.0/22 Signature Algorithm: sha256WithRSAEncryption a0:c4:87:cd:0b:09:22:04:d8:b1:f0:a4:31:fa:91:29:b5:48: 81:d2:65:0c:ae:41:a2:57:b5:1d:eb:7f:79:df:df:c5:74:20: 86:75:2d:fd:bf:31:34:b4:bb:e0:60:c3:d2:25:f1:78:92:58: b2:ab:f5:ca:81:6f:38:c2:50:19:c2:93:b3:2b:d9:ea:9f:62: 87:40:64:af:1c:69:ff:a4:05:1a:a6:19:4c:6b:74:5f:4f:5e: 4d:54:0d:03:bb:9d:44:40:4b:ba:8c:f0:d4:ea:53:04:04:c0: 0e:78:ca:64:da:14:ab:39:b2:50:80:3f:6e:c1:16:4e:26:38: 0c:2c:34:6e:d2:b1:82:4a:15:f6:ae:dc:d5:74:b9:35:3b:68: 8b:0a:3b:c6:30:82:ee:bf:0e:57:08:69:73:e3:6a:8b:a8:72: ae:94:e9:a6:e6:0a:73:d8:01:6a:e4:99:91:76:e5:09:a2:3f: 1c:81:4d:7f:57:9e:6c:36:e5:46:94:e5:f8:99:88:b5:87:08: e1:d7:01:a0:2f:d5:86:59:b5:6f:b3:df:f5:c7:a9:7e:32:b5: 1b:59:d5:1a:65:bd:f6:ed:05:7a:26:1a:06:37:9a:3b:3d:40: 5a:a8:1f:94:b4:a4:dc:55:29:b5:51:ad:6e:f6:eb:36:9e:fc: 36:d5:b9:9c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUCHsDGanWh/kw/Z2OR/DLfy1juQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4 MDc3QjRFRjAeFw0yNjA1MDMwMjQwNDdaFw0yNzA1MDIwMjQ1NDdaMDMxMTAvBgNV BAMTKDk4MDkwQzdGOTIzRDI0M0FENUU3MTdGRjRDNTE2MDc0RTFDRTcxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgNBoElkWlfJUz3OejPwXzAJB EiYmBIcbVUN5vsJA4RlrDy2MwfLHhD9rDxBky1sbgeDkffygFHePBHyb13PXdicT oNxncOdKzyJ713mfMYBg32imNIP3qv2tvU6aZrsg8479n+933MvY4UOTv8JbFGdo CYeTEI2AYP5vqicA5+iq+DbD9MhqcyRdMB+pdjBBlVmeIMh8uy8D4wf1p7KkRtU1 j8rI9jhoC/JmfZzbzd9mm9yMvsEU1zYO9Ik4zdfcHNyCz1titCJpS6gHlkkN66S3 ialzczQGxzGdLaIaulGCooYAY8UE5HD2z0dsTLZfUKS6WsTwK55edBuJuqNPAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUmAkMf5I9JDrV5xf/TFFgdOHOcdowHwYDVR0j BBgwFoAUtkqtYtkC9gi7lf0L0/HaioB3tO8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJE OTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4MDc3QjRFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjRBQUQ2MkQ5MDJGNjA4QkI5NUZEMEJEM0YxREE4QTgwNzdC NEVGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdkNmVhN2ZhLTk0ZDItNGRkYy1h OGU2LTVkYzYyNmMyOTFkNC8wLzMxMzAzMzJlMzEzMjJlMzIzODJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM1MzUzNjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnDBwwDQYJKoZIhvcN AQELBQADggEBAKDEh80LCSIE2LHwpDH6kSm1SIHSZQyuQaJXtR3rf3nf38V0IIZ1 Lf2/MTS0u+Bgw9Il8XiSWLKr9cqBbzjCUBnCk7Mr2eqfYodAZK8caf+kBRqmGUxr dF9PXk1UDQO7nURAS7qM8NTqUwQEwA54ymTaFKs5slCAP27BFk4mOAwsNG7SsYJK Ffau3NV0uTU7aIsKO8Ywgu6/DlcIaXPjaouocq6U6abmCnPYAWrkmZF25QmiPxyB TX9Xnmw25UaU5fiZiLWHCOHXAaAv1YZZtW+z3/XHqX4ytRtZ1RplvfbtBXomGgY3 mjs9QFqoH5S0pNxVKbVRrW726zae/DbVuZw= -----END CERTIFICATE-----Generated at Tue May 5 18:55:27 2026 by rpki-client