$ rpki-client -vvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa File: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (raw, json) Hash identifier: SenSDJoyF/7+T+Cte5ij0s1hRLf2P72+k6wabdM015Q= Subject key identifier: C8:7B:E2:D4:CE:19:70:DE:B4:B9:BE:AD:BE:9A:8B:49:79:EF:99:37 Certificate issuer: /CN=412965964A4E12BD59BDF602A054F3394E99DC57 Certificate serial: 04868A780BE10BA4254DFC88D886EEE9E6D15679 Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa Signing time: Sun 03 May 2026 02:19:21 +0000 ROA not before: Sun 03 May 2026 02:14:21 +0000 ROA not after: Sun 02 May 2027 02:19:21 +0000 asID: 132634 IP address blocks: 103.225.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:86:8a:78:0b:e1:0b:a4:25:4d:fc:88:d8:86:ee:e9:e6:d1:56:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57 Validity Not Before: May 3 02:14:21 2026 GMT Not After : May 2 02:19:21 2027 GMT Subject: CN=C87BE2D4CE1970DEB4B9BEADBE9A8B4979EF9937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:a8:bc:1f:c7:38:0d:4d:d9:b4:a7:b3:b2:96: f1:10:99:7e:84:96:11:7e:aa:e8:6b:8c:c4:5b:dc: 72:1f:47:4f:fd:6d:5b:09:0a:96:09:20:d3:b0:c0: d1:45:1d:5a:38:8b:70:6d:ee:87:30:9a:99:c4:5e: a0:d6:65:0e:7b:3e:7b:a5:bf:25:18:7a:f7:4b:a8: 1c:02:5e:03:3b:4a:b9:4e:fe:6b:ae:84:85:ba:7f: 93:f2:9d:84:cc:8c:b5:73:fc:df:54:e9:df:4a:ff: 75:14:94:4b:da:6d:07:80:37:b0:57:3a:a0:8e:35: 4e:8f:b5:41:f8:0a:a8:69:9d:c0:f9:83:c9:13:1a: d4:2a:ed:ae:b3:79:5f:e0:8c:73:12:e7:97:95:14: 09:01:84:b6:87:c4:5f:ff:4c:2f:c3:c8:df:f7:21: fd:19:62:c5:57:ac:49:6b:f6:35:d9:0f:ff:5e:85: 5a:32:0f:4d:a6:e7:0c:97:92:2d:71:98:df:72:76: 65:99:b4:fc:6c:de:4e:fb:9f:87:bf:9c:be:86:d8: e1:6a:42:2e:f7:22:5d:c0:8b:7c:a4:ed:92:b3:46: 26:ab:e6:a3:a7:ea:65:65:a9:01:22:f4:96:26:5f: aa:f2:e9:c2:cd:5c:2b:47:01:55:76:21:0e:9c:e7: 43:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7B:E2:D4:CE:19:70:DE:B4:B9:BE:AD:BE:9A:8B:49:79:EF:99:37 X509v3 Authority Key Identifier: keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.225.242.0/24 Signature Algorithm: sha256WithRSAEncryption 89:bf:27:0b:1e:ba:12:04:3d:e0:dc:5f:fa:16:a9:41:a5:fe: c5:25:ec:08:3e:c8:fd:29:a0:24:fc:25:de:d4:15:92:d2:c7: 25:48:eb:8a:32:e1:29:33:f9:9a:62:1a:a8:ac:f4:3c:38:ef: f8:1a:9b:aa:a2:e2:30:65:64:8e:0b:03:9e:cc:91:f5:a0:70: a1:c3:d8:bf:22:2e:44:9e:a6:9f:3f:81:6c:38:c7:e4:b7:02: f5:0e:33:c0:b0:a5:79:42:aa:83:8c:02:7b:ca:49:3f:34:ca: 80:d2:dc:bd:f5:f0:00:a0:d2:07:3a:75:fd:24:3a:ac:da:0d: 5b:82:bc:33:eb:b3:86:ef:af:b0:23:b8:d0:4e:5d:89:30:96: 76:b5:8d:5a:b8:7d:f0:e7:c8:35:8a:8d:f0:14:70:56:f2:44: c9:13:e1:37:b9:39:e3:47:2e:e6:84:3e:7a:fa:da:01:38:b9: d4:c0:0a:0f:e0:63:2c:8e:21:24:d4:58:e3:18:87:04:7c:70: 22:ce:76:dd:21:e0:3a:d5:f0:f7:72:33:35:fa:a9:1e:f5:b7: 3f:b6:fd:09:2a:34:bb:7b:4d:ea:30:65:25:db:67:62:05:fc: c0:9b:28:c1:8c:1e:8b:a2:e8:00:c5:02:9f:c0:fd:bc:3e:ef: 29:f5:29:44 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBIaKeAvhC6QlTfyI2Ibu6ebRVnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0 RTk5REM1NzAeFw0yNjA1MDMwMjE0MjFaFw0yNzA1MDIwMjE5MjFaMDMxMTAvBgNV BAMTKEM4N0JFMkQ0Q0UxOTcwREVCNEI5QkVBREJFOUE4QjQ5NzlFRjk5MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9qLwfxzgNTdm0p7OylvEQmX6E lhF+quhrjMRb3HIfR0/9bVsJCpYJINOwwNFFHVo4i3Bt7ocwmpnEXqDWZQ57Pnul vyUYevdLqBwCXgM7SrlO/muuhIW6f5PynYTMjLVz/N9U6d9K/3UUlEvabQeAN7BX OqCONU6PtUH4CqhpncD5g8kTGtQq7a6zeV/gjHMS55eVFAkBhLaHxF//TC/DyN/3 If0ZYsVXrElr9jXZD/9ehVoyD02m5wyXki1xmN9ydmWZtPxs3k77n4e/nL6G2OFq Qi73Il3Ai3yk7ZKzRiar5qOn6mVlqQEi9JYmX6ry6cLNXCtHAVV2IQ6c50OZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUyHvi1M4ZcN60ub6tvpqLSXnvmTcwHwYDVR0j BBgwFoAUQSlllkpOEr1ZvfYCoFTzOU6Z3FcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBmN2JlMDYtOTY3Mi00NjQxLTk3YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0 QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0RTk5REM1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTI5NjU5NjRBNEUxMkJENTlCREY2MDJBMDU0RjMzOTRFOTlE QzU3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwZjdiZTA2LTk2NzItNDY0MS05 N2JkLTliZmRmOTU1ZGUxNy8wLzMxMzAzMzJlMzIzMjM1MmUzMjM0MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzIzNjMzMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn4fIwDQYJ KoZIhvcNAQELBQADggEBAIm/JwseuhIEPeDcX/oWqUGl/sUl7Ag+yP0poCT8Jd7U FZLSxyVI64oy4Skz+ZpiGqis9Dw47/gam6qi4jBlZI4LA57MkfWgcKHD2L8iLkSe pp8/gWw4x+S3AvUOM8CwpXlCqoOMAnvKST80yoDS3L318ACg0gc6df0kOqzaDVuC vDPrs4bvr7AjuNBOXYkwlna1jVq4ffDnyDWKjfAUcFbyRMkT4Te5OeNHLuaEPnr6 2gE4udTACg/gYyyOISTUWOMYhwR8cCLOdt0h4DrV8PdyMzX6qR71tz+2/QkqNLt7 TeowZSXbZ2IF/MCbKMGMHoui6ADFAp/A/bw+7yn1KUQ= -----END CERTIFICATE-----Generated at Wed May 13 05:14:54 2026 by rpki-client