$ rpki-client -vvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa File: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (raw, json) Hash identifier: ykRVY1EBIN+ucKdlxDLDuc2SEVpBAQD0eYMAZuEgryE= Subject key identifier: BA:05:7F:C5:8B:3F:57:E7:66:6C:8E:68:AE:D7:F4:45:D7:89:0F:C9 Certificate issuer: /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9 Certificate serial: 668AF38DE6D4DA0D0E33A3C12FAFAD1FFB9915B6 Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa Signing time: Sun 03 May 2026 02:15:50 +0000 ROA not before: Sun 03 May 2026 02:10:50 +0000 ROA not after: Sun 02 May 2027 02:15:50 +0000 asID: 56242 IP address blocks: 103.228.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8a:f3:8d:e6:d4:da:0d:0e:33:a3:c1:2f:af:ad:1f:fb:99:15:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9 Validity Not Before: May 3 02:10:50 2026 GMT Not After : May 2 02:15:50 2027 GMT Subject: CN=BA057FC58B3F57E7666C8E68AED7F445D7890FC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:29:c6:9a:54:3c:aa:4d:0b:4f:6a:e2:8d: e8:31:03:44:31:d6:fa:e7:47:c9:13:30:02:ae:b6: 8b:ed:ef:ee:19:37:c9:cc:39:71:e5:d3:9b:dc:f3: f6:e4:e8:58:77:8c:e0:06:33:fd:ac:9a:f4:3d:1b: db:1d:87:a9:df:e2:8d:d9:18:20:5e:3f:49:67:d1: d5:c8:f9:44:62:81:6d:20:5b:43:e5:7e:79:eb:9a: 0a:96:f9:ed:96:4b:b8:d2:66:c1:3d:46:5b:2a:ec: b5:ca:a5:8e:47:aa:ce:05:99:4d:e8:41:ed:45:d4: ac:6f:72:cf:da:3e:86:73:8e:f4:b7:a4:1d:3f:7e: 69:b3:fd:e7:54:cd:e6:3e:8f:e7:95:f0:2d:89:f4: 61:8d:e2:f4:4e:79:d1:08:7b:63:38:99:f8:ac:ec: 49:86:79:a5:27:7d:87:b0:3c:f6:89:a9:6b:8a:8d: e1:a5:25:50:bf:54:10:05:71:c3:b2:b7:7f:b8:09: 07:6e:fc:3a:71:54:97:33:fe:50:72:03:8d:c0:3a: 5d:89:6a:94:7d:35:21:f4:5c:b0:b6:c0:cf:e7:e0: 02:ec:8f:90:e3:da:39:a5:1b:ea:dd:04:66:1e:e9: 42:a6:46:8d:42:51:47:c8:e2:95:58:24:f2:09:20: 52:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:05:7F:C5:8B:3F:57:E7:66:6C:8E:68:AE:D7:F4:45:D7:89:0F:C9 X509v3 Authority Key Identifier: keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.118.0/23 Signature Algorithm: sha256WithRSAEncryption 17:32:c6:1d:90:d0:af:8c:11:5e:ff:ca:e3:bf:2e:79:df:f9: 8e:b8:f1:c8:5e:87:58:32:ab:11:e0:d5:d9:e4:ff:d2:13:c5: 0a:96:2f:21:96:e7:51:96:80:ac:52:bc:33:ae:21:77:eb:49: 69:05:69:99:40:ad:61:ad:15:da:d2:91:35:a9:c2:c4:63:ac: e3:78:b6:27:b0:2d:80:59:47:6f:e6:b1:a9:a5:8a:bd:23:10: 60:ef:86:e1:6a:53:a6:18:00:55:85:78:0c:23:df:71:61:7a: db:64:c3:4a:1f:9c:09:56:42:c0:e0:01:7e:01:10:61:f7:34: 94:d2:e2:bd:16:b6:00:a3:da:64:5b:ae:e2:6c:7d:c5:40:ac: fa:45:6e:89:6e:12:24:c3:84:d6:1c:3a:da:2d:ab:35:bf:5e: 73:71:d3:3b:0d:3c:0b:67:e2:a1:ee:7f:5a:39:f9:9b:2b:f8: 94:f5:5f:b4:26:c5:41:8c:15:86:d8:55:be:ee:55:1f:8e:de: 92:52:ea:f1:b8:44:b4:a4:4c:5e:8a:77:0c:50:5a:d8:0e:71: d3:94:dc:3a:a2:fd:03:f8:09:0e:28:27:0d:21:04:e3:15:7e: c8:6f:d2:77:cb:2e:10:55:54:3c:30:6b:b6:3b:e2:5b:82:b9: 56:c3:c5:98 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZorzjebU2g0OM6PBL6+tH/uZFbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc2RkFFNzBFNzE0NjQ0OTZFRjRGQThFRUVGMERGNUM5 MzEyQzdDOTAeFw0yNjA1MDMwMjEwNTBaFw0yNzA1MDIwMjE1NTBaMDMxMTAvBgNV BAMTKEJBMDU3RkM1OEIzRjU3RTc2NjZDOEU2OEFFRDdGNDQ1RDc4OTBGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zSnGmlQ8qk0LT2rijegxA0Qx 1vrnR8kTMAKutovt7+4ZN8nMOXHl05vc8/bk6Fh3jOAGM/2smvQ9G9sdh6nf4o3Z GCBeP0ln0dXI+URigW0gW0PlfnnrmgqW+e2WS7jSZsE9Rlsq7LXKpY5Hqs4FmU3o Qe1F1Kxvcs/aPoZzjvS3pB0/fmmz/edUzeY+j+eV8C2J9GGN4vROedEIe2M4mfis 7EmGeaUnfYewPPaJqWuKjeGlJVC/VBAFccOyt3+4CQdu/DpxVJcz/lByA43AOl2J apR9NSH0XLC2wM/n4ALsj5Dj2jmlG+rdBGYe6UKmRo1CUUfI4pVYJPIJIFKTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUugV/xYs/V+dmbI5ortf0RdeJD8kwHwYDVR0j BBgwFoAUx2+ucOcUZElu9PqO7vDfXJMSx8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTdhMmQyNWItY2IxOC00NWJlLTlmYTEtMTU0Y2ExNTc5MjIzLzAvQzc2RkFFNzBF NzE0NjQ0OTZFRjRGQThFRUVGMERGNUM5MzEyQzdDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzZGQUU3MEU3MTQ2NDQ5NkVGNEZBOEVFRUYwREY1QzkzMTJD N0M5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05 ZmExLTE1NGNhMTU3OTIyMy8wLzMxMzAzMzJlMzIzMjM4MmUzMTMxMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNTM2MzIzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+R2MA0GCSqG SIb3DQEBCwUAA4IBAQAXMsYdkNCvjBFe/8rjvy553/mOuPHIXodYMqsR4NXZ5P/S E8UKli8hludRloCsUrwzriF360lpBWmZQK1hrRXa0pE1qcLEY6zjeLYnsC2AWUdv 5rGppYq9IxBg74bhalOmGABVhXgMI99xYXrbZMNKH5wJVkLA4AF+ARBh9zSU0uK9 FrYAo9pkW67ibH3FQKz6RW6JbhIkw4TWHDraLas1v15zcdM7DTwLZ+Kh7n9aOfmb K/iU9V+0JsVBjBWG2FW+7lUfjt6SUurxuES0pExeincMUFrYDnHTlNw6ov0D+AkO KCcNIQTjFX7Ib9J3yy4QVVQ8MGu2O+JbgrlWw8WY -----END CERTIFICATE-----Generated at Wed May 13 05:54:43 2026 by rpki-client