$ rpki-client -vvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa File: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (raw, json) Hash identifier: lcj9Lo8ozccThBUG7wqDK1apaR2k1E0ODhzzBgFVW1M= Subject key identifier: 9A:5E:C6:79:DF:1B:5A:97:C8:A3:23:70:4F:55:11:3B:90:94:2A:13 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 4665798645424427727562D23A0EAC401477C932 Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa Signing time: Sun 03 May 2026 02:12:05 +0000 ROA not before: Sun 03 May 2026 02:07:05 +0000 ROA not after: Sun 02 May 2027 02:12:05 +0000 asID: 136841 IP address blocks: 103.100.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:65:79:86:45:42:44:27:72:75:62:d2:3a:0e:ac:40:14:77:c9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: May 3 02:07:05 2026 GMT Not After : May 2 02:12:05 2027 GMT Subject: CN=9A5EC679DF1B5A97C8A323704F55113B90942A13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:99:76:21:41:13:36:40:28:e0:58:b6:db: d9:fe:8b:f8:c6:dd:f5:80:96:05:f5:05:9b:fc:03: 62:c8:a2:ef:28:f4:d5:08:27:94:77:1d:7d:79:fd: e2:26:ac:af:d2:ef:92:fe:73:8d:17:53:df:27:7b: cb:6b:64:43:3b:7d:e0:71:66:a7:62:2e:01:75:67: 6e:f4:a7:bb:7a:0c:97:b3:ed:3c:3d:56:bf:7b:45: 77:31:bf:29:66:9f:68:95:bf:cd:72:98:40:fe:ec: 22:00:55:4e:94:09:31:0c:0a:3c:81:0b:1d:6c:fb: 55:09:24:fa:81:dc:39:bb:7f:85:12:84:3b:f1:bb: e8:8e:03:57:80:8b:73:9c:24:6d:10:0c:06:1b:bb: 12:78:3a:9e:12:11:e9:69:d4:3e:ad:82:cf:a5:4b: 3b:e5:c3:a8:5c:2a:34:f8:a3:b5:01:d2:31:ed:a0: 81:e8:59:4c:cc:20:e5:a9:6a:a1:2c:a8:9a:92:da: a0:53:68:58:10:2a:59:1b:03:cf:9e:77:51:49:c0: 2b:aa:64:42:42:04:ca:43:ca:b1:56:2e:74:4d:c8: d5:79:df:3c:b1:68:08:c7:82:03:a4:70:6e:5e:b5: de:6b:94:bb:e1:1c:5d:a5:f8:0c:32:46:4e:23:ce: 16:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5E:C6:79:DF:1B:5A:97:C8:A3:23:70:4F:55:11:3B:90:94:2A:13 X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.174.0/24 Signature Algorithm: sha256WithRSAEncryption 28:3f:41:72:f2:dc:ac:85:cf:6f:e4:26:ee:9d:19:2c:70:1a: d7:13:89:2e:f7:62:fe:c1:eb:3e:41:b0:01:8d:b7:00:1c:5c: 76:22:b9:87:ce:5f:38:91:16:d2:25:36:d5:ef:6e:de:82:ec: 4f:45:31:be:e0:98:d3:f9:9e:84:a0:9a:5d:e5:4d:fa:71:f0: 60:38:4e:42:3b:f5:82:90:4f:a4:47:d9:4a:28:1f:52:8b:79: ac:19:28:dd:14:eb:95:99:f4:64:e4:12:6b:f1:84:de:5d:fc: 4e:0f:12:f7:7e:2e:26:92:cc:ae:44:45:6b:70:60:3d:f9:25: 21:47:92:6f:73:e6:47:da:17:b4:90:7b:63:e2:ea:1f:95:61: 91:c2:42:22:72:9b:f1:8f:44:e8:da:83:79:41:71:f8:49:e4: f6:4e:0e:36:b8:c1:67:70:e2:da:c3:4b:93:28:65:fa:d2:95: c8:24:bd:6e:64:a9:13:ac:91:f7:a3:b8:d4:be:71:f3:1d:11: e6:87:1e:0a:2c:a1:0b:c9:69:95:4a:38:02:3d:be:ee:a8:5c: a9:c3:18:19:69:0e:e4:c6:fb:58:50:cd:48:1c:48:ed:79:0a: 7e:d0:f3:23:73:c0:5a:80:10:72:ae:cb:71:d5:45:58:5a:18: b7:60:b2:c8 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIURmV5hkVCRCdydWLSOg6sQBR3yTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjA1MDMwMjA3MDVaFw0yNzA1MDIwMjEyMDVaMDMxMTAvBgNV BAMTKDlBNUVDNjc5REYxQjVBOTdDOEEzMjM3MDRGNTUxMTNCOTA5NDJBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH55l2IUETNkAo4Fi229n+i/jG 3fWAlgX1BZv8A2LIou8o9NUIJ5R3HX15/eImrK/S75L+c40XU98ne8trZEM7feBx ZqdiLgF1Z270p7t6DJez7Tw9Vr97RXcxvylmn2iVv81ymED+7CIAVU6UCTEMCjyB Cx1s+1UJJPqB3Dm7f4UShDvxu+iOA1eAi3OcJG0QDAYbuxJ4Op4SEelp1D6tgs+l Szvlw6hcKjT4o7UB0jHtoIHoWUzMIOWpaqEsqJqS2qBTaFgQKlkbA8+ed1FJwCuq ZEJCBMpDyrFWLnRNyNV53zyxaAjHggOkcG5etd5rlLvhHF2l+AwyRk4jzhYDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUml7Ged8bWpfIoyNwT1URO5CUKhMwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMxMzAzMzJlMzEzMDMwMmUzMTM3MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZK4wDQYJ KoZIhvcNAQELBQADggEBACg/QXLy3KyFz2/kJu6dGSxwGtcTiS73Yv7B6z5BsAGN twAcXHYiuYfOXziRFtIlNtXvbt6C7E9FMb7gmNP5noSgml3lTfpx8GA4TkI79YKQ T6RH2UooH1KLeawZKN0U65WZ9GTkEmvxhN5d/E4PEvd+LiaSzK5ERWtwYD35JSFH km9z5kfaF7SQe2Pi6h+VYZHCQiJym/GPROjag3lBcfhJ5PZODja4wWdw4trDS5Mo ZfrSlcgkvW5kqROskfejuNS+cfMdEeaHHgosoQvJaZVKOAI9vu6oXKnDGBlpDuTG +1hQzUgcSO15Cn7Q8yNzwFqAEHKuy3HVRVhaGLdgssg= -----END CERTIFICATE-----Generated at Wed May 13 03:56:00 2026 by rpki-client