$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa File: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (raw, json) Hash identifier: qO47OC3TwK7E148rjwjIE4Ck8qFn/gnO363ZvkJFSv0= Subject key identifier: 27:E5:E6:28:D8:2D:9E:D8:D4:56:23:05:E1:21:80:59:DD:60:F2:98 Certificate issuer: /CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Certificate serial: 317B002B309192F202AD068F6DF28B59B567E420 Authority key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa Signing time: Sun 03 May 2026 03:02:39 +0000 ROA not before: Sun 03 May 2026 02:57:39 +0000 ROA not after: Sun 02 May 2027 03:02:39 +0000 asID: 137366 IP address blocks: 103.213.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7b:00:2b:30:91:92:f2:02:ad:06:8f:6d:f2:8b:59:b5:67:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Validity Not Before: May 3 02:57:39 2026 GMT Not After : May 2 03:02:39 2027 GMT Subject: CN=27E5E628D82D9ED8D4562305E1218059DD60F298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ca:eb:fd:10:0f:24:d3:e2:63:7d:7a:4e:54: b5:1e:e5:98:5e:a8:e4:84:51:ca:78:fa:70:f0:ba: 68:cc:71:f8:40:df:57:21:25:b3:0b:eb:a5:5c:51: d5:67:77:ed:a7:a0:39:30:14:eb:b4:75:c6:7f:bf: cd:59:d7:ee:0b:46:1f:6b:5d:cb:f7:0d:45:ef:b2: 9d:33:ea:55:b0:91:71:02:f9:c7:07:85:e7:24:f3: 0a:8e:9c:ce:4a:b8:a9:58:33:3f:90:94:6d:fb:ef: 9b:d7:74:9e:e5:db:e9:3d:d3:3a:e9:31:98:a2:e9: f3:e0:2b:c8:12:2d:9e:7a:b2:9a:a8:dc:9e:a5:75: 42:8b:17:69:a7:ea:1b:85:64:43:fc:95:58:80:82: 81:41:38:f0:98:3c:7f:26:68:06:ed:85:32:15:46: 44:59:d0:84:49:79:62:c6:de:91:f3:5a:a7:18:fc: 05:3a:63:99:3d:7e:70:7d:6c:d3:56:99:e6:63:59: 65:13:c4:49:9e:c1:cd:06:a9:9c:9b:57:63:cd:b6: ad:8c:7f:63:35:c2:f4:a5:61:6a:5e:86:0b:04:ad: 7f:22:a1:cf:0c:57:ef:69:c7:3f:6c:e1:a8:c0:18: 4f:06:c2:8c:92:70:fb:f1:1c:8a:03:b8:b9:ec:ec: 72:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E5:E6:28:D8:2D:9E:D8:D4:56:23:05:E1:21:80:59:DD:60:F2:98 X509v3 Authority Key Identifier: keyid:FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.235.0/24 Signature Algorithm: sha256WithRSAEncryption 10:9a:96:11:9e:27:e6:cb:d4:49:37:cb:65:42:18:7b:bb:c5: fa:57:c6:ea:1a:d2:13:fb:d4:e3:71:56:91:ae:7e:39:0f:44: ed:83:e6:2f:9a:11:89:03:bf:21:ca:42:72:37:61:5f:4c:b0: c0:c2:7f:89:79:cb:35:06:0b:1c:35:ce:91:67:4b:a1:a1:c1: 19:ab:59:aa:6b:14:3b:51:85:30:06:dc:8f:68:0c:16:2b:b8: 8a:0e:52:f2:68:be:08:cd:5c:8e:67:d8:4f:95:ed:a7:13:61: e9:40:ec:e9:b9:00:60:bb:9e:a2:1a:d4:22:6f:09:d6:f0:be: 30:16:46:56:7d:3a:fd:2c:8a:fa:0d:b2:bc:e0:48:ca:c3:f3: 93:29:85:e4:14:b5:eb:8f:0b:f5:dc:49:1b:e2:59:9b:0c:56: bd:07:6e:4f:64:76:5e:b8:5a:e0:78:9c:99:00:bc:f2:57:96: 59:fb:a5:f0:f4:ff:dc:98:85:ae:39:c2:6c:65:5c:63:d0:34: d3:10:3c:75:96:6c:17:84:42:e1:eb:ac:bc:de:a5:b8:1e:d8: af:97:f0:6c:6d:f0:b5:5d:38:86:2a:31:78:75:de:91:5a:07: 55:f2:f1:9b:83:31:6f:c5:c0:ee:51:69:1b:a7:e9:ea:d8:10: f2:e5:17:10 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMXsAKzCRkvICrQaPbfKLWbVn5CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNC QUYyRjM4QzAeFw0yNjA1MDMwMjU3MzlaFw0yNzA1MDIwMzAyMzlaMDMxMTAvBgNV BAMTKDI3RTVFNjI4RDgyRDlFRDhENDU2MjMwNUUxMjE4MDU5REQ2MEYyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIyuv9EA8k0+JjfXpOVLUe5Zhe qOSEUcp4+nDwumjMcfhA31chJbML66VcUdVnd+2noDkwFOu0dcZ/v81Z1+4LRh9r Xcv3DUXvsp0z6lWwkXEC+ccHheck8wqOnM5KuKlYMz+QlG3775vXdJ7l2+k90zrp MZii6fPgK8gSLZ56spqo3J6ldUKLF2mn6huFZEP8lViAgoFBOPCYPH8maAbthTIV RkRZ0IRJeWLG3pHzWqcY/AU6Y5k9fnB9bNNWmeZjWWUTxEmewc0GqZybV2PNtq2M f2M1wvSlYWpehgsErX8ioc8MV+9pxz9s4ajAGE8GwoyScPvxHIoDuLns7HIlAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUJ+XmKNgtntjUViMF4SGAWd1g8pgwHwYDVR0j BBgwFoAU/T5t2Da8SwZ/T1XQctux7Lry84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ3ZmEyMTAtNWYyNS00ZjBiLTg5YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgz NkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNCQUYyRjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDNFNkREODM2QkM0QjA2N0Y0RjU1RDA3MkRCQjFFQ0JBRjJG MzhDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JkN2ZhMjEwLTVmMjUtNGYwYi04 OWE1LTdkMDBhMzU0YTkwNy8wLzMxMzAzMzJlMzIzMTMzMmUzMjMzMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn1eswDQYJ KoZIhvcNAQELBQADggEBABCalhGeJ+bL1Ek3y2VCGHu7xfpXxuoa0hP71ONxVpGu fjkPRO2D5i+aEYkDvyHKQnI3YV9MsMDCf4l5yzUGCxw1zpFnS6GhwRmrWaprFDtR hTAG3I9oDBYruIoOUvJovgjNXI5n2E+V7acTYelA7Om5AGC7nqIa1CJvCdbwvjAW RlZ9Ov0sivoNsrzgSMrD85MpheQUteuPC/XcSRviWZsMVr0Hbk9kdl64WuB4nJkA vPJXlln7pfD0/9yYha45wmxlXGPQNNMQPHWWbBeEQuHrrLzepbge2K+X8Gxt8LVd OIYqMXh13pFaB1Xy8ZuDMW/FwO5RaRun6erYEPLlFxA= -----END CERTIFICATE-----Generated at Tue May 5 14:49:23 2026 by rpki-client