$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa File: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (raw, json) Hash identifier: 0HIhYv7U8gSbWNjqp3fbuBBjmpsISLCZzYGihcy9xas= Subject key identifier: F0:37:51:96:CF:F3:92:C4:67:68:EB:62:10:8F:44:D7:5F:A8:88:FF Certificate issuer: /CN=9252F14B5E62941E764268BF539EE9FAD5793555 Certificate serial: 678027067788AB253D6FE3B805D96016D34C4328 Authority key identifier: 92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa Signing time: Sun 03 May 2026 02:18:24 +0000 ROA not before: Sun 03 May 2026 02:13:24 +0000 ROA not after: Sun 02 May 2027 02:18:24 +0000 asID: 63488 IP address blocks: 103.233.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:80:27:06:77:88:ab:25:3d:6f:e3:b8:05:d9:60:16:d3:4c:43:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9252F14B5E62941E764268BF539EE9FAD5793555 Validity Not Before: May 3 02:13:24 2026 GMT Not After : May 2 02:18:24 2027 GMT Subject: CN=F0375196CFF392C46768EB62108F44D75FA888FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e4:24:05:fa:f7:43:0c:61:11:b9:6d:13:7f: 85:eb:f5:5e:31:12:68:28:ba:7e:20:56:e3:9f:59: 59:c7:f6:21:ce:ba:5b:3b:d1:9c:7f:9f:2b:e2:99: e0:15:07:18:ab:98:88:3c:cc:a8:c6:b4:ef:cb:bf: 96:a2:55:dc:d1:0e:d3:fc:76:fd:d0:3b:30:d1:fa: c1:6e:f9:4e:95:05:94:3c:1e:86:32:bc:49:41:b1: 68:80:2f:4f:69:12:24:54:80:8b:15:1d:b3:d8:79: d8:5d:d0:f7:39:18:6c:90:5a:e1:30:92:d8:c6:f6: f0:5a:f2:1b:a3:f9:97:f0:e4:ee:98:36:2b:e3:08: 2d:3a:4d:9d:f7:1f:49:0f:ab:37:f0:31:43:11:e5: 7c:99:51:78:fd:25:72:a0:c4:db:dc:50:05:2c:ab: 1f:73:5b:8d:73:e4:f0:91:03:a0:cd:f7:bd:db:6e: ff:a6:9e:e5:b1:86:11:fe:e1:21:2c:c5:88:f2:e4: 0b:f8:41:d2:85:20:e6:4b:7e:e9:c8:62:2b:3f:95: 85:85:12:24:23:84:1b:19:e1:10:00:2c:79:3b:a8: 73:b8:88:4f:63:4a:eb:59:96:8c:c9:1d:e6:ee:ba: 92:e1:24:82:97:d9:12:02:28:2e:68:73:66:ff:72: 3f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:37:51:96:CF:F3:92:C4:67:68:EB:62:10:8F:44:D7:5F:A8:88:FF X509v3 Authority Key Identifier: keyid:92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.233.109.0/24 Signature Algorithm: sha256WithRSAEncryption 98:30:76:16:28:3b:7c:1b:95:9e:8f:8a:7b:46:ce:e8:41:69: 95:5a:b1:cf:70:f3:87:45:de:9f:72:8e:78:19:b0:93:d6:2b: 49:ec:d1:ab:43:74:01:bb:f9:19:7c:32:ff:5f:be:7a:ad:6b: 53:c7:be:77:ea:da:5b:23:85:c0:a4:82:71:c0:bd:04:fb:93: 02:9c:e1:25:5e:53:5e:4d:bb:bc:49:1f:e2:35:60:ea:91:c8: e1:a3:29:60:d5:71:5b:c1:d7:e5:62:73:1e:3d:8f:27:8d:41: 53:aa:60:9b:ef:d5:cc:47:6e:1c:f5:fb:71:ae:32:3d:e2:65: e2:25:7f:30:be:d5:6f:58:fe:d6:af:96:a2:98:e2:4a:51:b0: 9c:06:cb:26:83:09:7f:26:2b:88:66:de:2c:f4:47:8b:f9:ee: af:1d:82:a8:9e:bc:6a:8a:73:03:48:18:23:55:17:c5:c5:db: 0d:32:23:02:a7:e7:33:05:fd:ab:5f:aa:d7:3a:26:ef:23:26: 15:40:8c:a4:ae:ee:a7:1d:42:0d:56:d4:c8:ab:31:cd:b0:f8: 92:03:43:3e:83:91:68:8c:2b:2e:af:49:ac:83:cd:5b:a3:51: 6d:5e:91:d3:e0:9a:af:d4:59:12:12:df:96:92:74:d9:a6:2e: 99:d8:27:97 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZ4AnBneIqyU9b+O4BdlgFtNMQygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFE NTc5MzU1NTAeFw0yNjA1MDMwMjEzMjRaFw0yNzA1MDIwMjE4MjRaMDMxMTAvBgNV BAMTKEYwMzc1MTk2Q0ZGMzkyQzQ2NzY4RUI2MjEwOEY0NEQ3NUZBODg4RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr5CQF+vdDDGERuW0Tf4Xr9V4x Emgoun4gVuOfWVnH9iHOuls70Zx/nyvimeAVBxirmIg8zKjGtO/Lv5aiVdzRDtP8 dv3QOzDR+sFu+U6VBZQ8HoYyvElBsWiAL09pEiRUgIsVHbPYedhd0Pc5GGyQWuEw ktjG9vBa8huj+Zfw5O6YNivjCC06TZ33H0kPqzfwMUMR5XyZUXj9JXKgxNvcUAUs qx9zW41z5PCRA6DN973bbv+mnuWxhhH+4SEsxYjy5Av4QdKFIOZLfunIYis/lYWF EiQjhBsZ4RAALHk7qHO4iE9jSutZlozJHebuupLhJIKX2RICKC5oc2b/cj/dAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU8DdRls/zksRnaOtiEI9E11+oiP8wHwYDVR0j BBgwFoAUklLxS15ilB52Qmi/U57p+tV5NVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVkNDZmODItY2YxMS00ZTMyLWIwNTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1 RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFENTc5MzU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjUyRjE0QjVFNjI5NDFFNzY0MjY4QkY1MzlFRTlGQUQ1Nzkz NTU1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFlZDQ2ZjgyLWNmMTEtNGUzMi1i MDUxLTZhYzMzNGE5MjYyMi8wLzMxMzAzMzJlMzIzMzMzMmUzMTMwMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+ltMA0GCSqG SIb3DQEBCwUAA4IBAQCYMHYWKDt8G5Wej4p7Rs7oQWmVWrHPcPOHRd6fco54GbCT 1itJ7NGrQ3QBu/kZfDL/X756rWtTx7536tpbI4XApIJxwL0E+5MCnOElXlNeTbu8 SR/iNWDqkcjhoylg1XFbwdflYnMePY8njUFTqmCb79XMR24c9ftxrjI94mXiJX8w vtVvWP7Wr5aimOJKUbCcBssmgwl/JiuIZt4s9EeL+e6vHYKonrxqinMDSBgjVRfF xdsNMiMCp+czBf2rX6rXOibvIyYVQIykru6nHUINVtTIqzHNsPiSA0M+g5FojCsu r0msg81bo1FtXpHT4Jqv1FkSEt+WknTZpi6Z2CeX -----END CERTIFICATE-----Generated at Wed May 13 08:28:17 2026 by rpki-client