$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa File: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (raw, json) Hash identifier: JiHp4yVnum/Ea+DgEoblrAZTOF1sDJH1+9ZL79YGFFM= Subject key identifier: 4D:BA:4A:C6:14:B9:9B:22:E6:30:CC:9F:61:31:5C:2F:A6:BE:8A:CF Certificate issuer: /CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Certificate serial: 2D54F4FB7B600BAF0A932F4475A000D40C8793BD Authority key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa Signing time: Sun 03 May 2026 03:02:40 +0000 ROA not before: Sun 03 May 2026 02:57:40 +0000 ROA not after: Sun 02 May 2027 03:02:40 +0000 asID: 136873 IP address blocks: 103.213.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:54:f4:fb:7b:60:0b:af:0a:93:2f:44:75:a0:00:d4:0c:87:93:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Validity Not Before: May 3 02:57:40 2026 GMT Not After : May 2 03:02:40 2027 GMT Subject: CN=4DBA4AC614B99B22E630CC9F61315C2FA6BE8ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:55:05:c2:a1:c7:32:55:1a:c3:bd:11:de:e8: ef:cb:7c:16:46:23:be:20:3b:5d:e3:bd:bd:fd:43: c9:e1:36:85:1c:25:20:e7:44:4b:56:cb:ea:54:a6: f5:07:d8:8c:c0:2d:9f:00:e9:ea:44:ee:7e:5d:40: 90:79:d0:51:67:cd:45:aa:bc:ce:fc:8c:79:69:ad: fd:42:41:5a:f9:c0:87:f1:19:3e:eb:65:eb:a8:35: 41:0c:fe:9a:17:fc:52:02:5f:2c:d6:1d:17:2b:1e: cb:df:21:ed:93:ee:7a:41:fc:12:05:e9:e4:a9:92: 55:97:33:6d:6e:e5:0a:1b:54:b6:36:d7:fa:54:cc: 5c:b0:a6:f4:49:76:4a:8c:f5:de:af:45:60:a1:25: ac:18:47:df:11:4f:78:53:6e:f5:62:2c:09:43:df: 5f:b6:e4:5c:78:00:28:58:c1:60:fd:b2:da:1c:cc: 79:3d:f1:f5:a4:0b:00:df:f5:35:03:d4:44:ca:ac: f1:8e:9d:42:c7:11:48:c7:fc:c7:9b:96:ff:02:93: 57:c9:70:57:c1:1f:9e:b3:47:15:a0:65:f9:2a:73: f0:6c:52:e5:92:e8:6a:8a:4e:fb:93:95:09:7c:ce: 4f:7e:cd:e8:9a:67:7f:f1:59:e9:e8:a5:99:19:b2: 4e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BA:4A:C6:14:B9:9B:22:E6:30:CC:9F:61:31:5C:2F:A6:BE:8A:CF X509v3 Authority Key Identifier: keyid:FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.234.0/24 Signature Algorithm: sha256WithRSAEncryption 42:0f:f5:20:cd:bc:7d:d3:3f:f7:3d:91:e8:8b:74:e7:95:5f: 5f:12:da:d4:b5:f7:aa:b9:d7:45:12:24:81:87:b5:5a:0d:53: ad:6d:75:e1:3d:b5:fe:36:b4:d2:67:f7:48:78:36:14:65:05: 87:8c:df:84:00:e3:25:8b:25:50:99:3d:5b:f1:44:c3:bc:d1: ac:a7:42:6b:16:af:74:33:f4:d2:58:5c:5d:10:d4:c0:28:4c: cd:22:e1:f6:8d:3b:78:b6:57:ba:49:84:6a:ae:e6:24:a6:36: 15:c8:cd:57:78:67:92:b5:c1:66:9f:57:6e:6b:ca:09:f5:e9: 75:09:35:dd:0d:e9:d7:00:fc:aa:65:ad:09:d8:95:72:9e:43: 94:21:9d:b4:bf:70:f2:f5:85:5e:eb:81:9c:9c:9c:d2:ac:97: 01:fe:bc:95:e6:80:52:37:e0:ac:34:e5:5d:f9:f2:72:68:b3: 2b:23:fe:56:ff:18:45:9e:b0:32:6d:c5:42:b1:77:ec:79:48: 72:54:70:49:ca:0d:81:7d:e9:b7:b6:2c:f9:89:ab:75:3f:88: 73:c4:93:15:0e:78:02:e1:28:6d:85:7b:6e:4e:4c:a4:e1:1c: c6:f4:c3:9c:7c:e7:b8:af:fd:6e:59:ba:83:47:c1:53:f4:17: 08:31:9e:6d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULVT0+3tgC68Kky9EdaAA1AyHk70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNC QUYyRjM4QzAeFw0yNjA1MDMwMjU3NDBaFw0yNzA1MDIwMzAyNDBaMDMxMTAvBgNV BAMTKDREQkE0QUM2MTRCOTlCMjJFNjMwQ0M5RjYxMzE1QzJGQTZCRThBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXVQXCoccyVRrDvRHe6O/LfBZG I74gO13jvb39Q8nhNoUcJSDnREtWy+pUpvUH2IzALZ8A6epE7n5dQJB50FFnzUWq vM78jHlprf1CQVr5wIfxGT7rZeuoNUEM/poX/FICXyzWHRcrHsvfIe2T7npB/BIF 6eSpklWXM21u5QobVLY21/pUzFywpvRJdkqM9d6vRWChJawYR98RT3hTbvViLAlD 31+25Fx4AChYwWD9stoczHk98fWkCwDf9TUD1ETKrPGOnULHEUjH/Meblv8Ck1fJ cFfBH56zRxWgZfkqc/BsUuWS6GqKTvuTlQl8zk9+zeiaZ3/xWenopZkZsk6ZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUTbpKxhS5myLmMMyfYTFcL6a+is8wHwYDVR0j BBgwFoAU/T5t2Da8SwZ/T1XQctux7Lry84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ3ZmEyMTAtNWYyNS00ZjBiLTg5YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgz NkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNCQUYyRjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDNFNkREODM2QkM0QjA2N0Y0RjU1RDA3MkRCQjFFQ0JBRjJG MzhDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JkN2ZhMjEwLTVmMjUtNGYwYi04 OWE1LTdkMDBhMzU0YTkwNy8wLzMxMzAzMzJlMzIzMTMzMmUzMjMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn1eowDQYJ KoZIhvcNAQELBQADggEBAEIP9SDNvH3TP/c9keiLdOeVX18S2tS196q510USJIGH tVoNU61tdeE9tf42tNJn90h4NhRlBYeM34QA4yWLJVCZPVvxRMO80aynQmsWr3Qz 9NJYXF0Q1MAoTM0i4faNO3i2V7pJhGqu5iSmNhXIzVd4Z5K1wWafV25rygn16XUJ Nd0N6dcA/KplrQnYlXKeQ5QhnbS/cPL1hV7rgZycnNKslwH+vJXmgFI34Kw05V35 8nJosysj/lb/GEWesDJtxUKxd+x5SHJUcEnKDYF96be2LPmJq3U/iHPEkxUOeALh KG2Fe25OTKThHMb0w5x857iv/W5ZuoNHwVP0Fwgxnm0= -----END CERTIFICATE-----Generated at Tue May 5 13:26:36 2026 by rpki-client