$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa File: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (raw, json) Hash identifier: bObGNzkzxqsMtfGussqQMllg3CDeiOkWDE0MTteiGhQ= Subject key identifier: 47:15:0A:16:18:7A:F3:B8:E4:E7:75:DF:54:ED:9C:89:D5:41:80:68 Certificate issuer: /CN=32857E62250C763037D1ED291D7937072EB50DC5 Certificate serial: 646837AAE85E3359E657A0F1CF13677A4038B6BB Authority key identifier: 32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa Signing time: Sun 03 May 2026 02:22:39 +0000 ROA not before: Sun 03 May 2026 02:17:39 +0000 ROA not after: Sun 02 May 2027 02:22:39 +0000 asID: 149337 IP address blocks: 103.179.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:68:37:aa:e8:5e:33:59:e6:57:a0:f1:cf:13:67:7a:40:38:b6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32857E62250C763037D1ED291D7937072EB50DC5 Validity Not Before: May 3 02:17:39 2026 GMT Not After : May 2 02:22:39 2027 GMT Subject: CN=47150A16187AF3B8E4E775DF54ED9C89D5418068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:ff:fe:dd:77:d1:5d:6d:d5:08:78:7e:4b: ef:1a:42:71:c4:54:0a:73:61:60:5b:02:98:0a:74: f7:b2:18:9a:ff:28:9a:12:d6:1d:1b:5e:66:74:5b: 46:34:f2:10:49:82:11:51:9e:78:0d:9c:06:c4:c8: ce:c8:b0:b4:13:11:0a:ec:7c:f5:f5:1a:e5:c7:c7: 77:3b:86:50:d5:34:c3:20:7d:cf:26:c2:9c:2e:a1: d8:80:1a:8a:58:85:7a:28:ba:09:ed:18:c6:db:c2: a4:a9:9f:f7:2a:0e:6f:c3:77:19:72:c0:39:c2:f1: 62:0c:b9:bb:42:4b:71:48:11:5a:49:e7:3e:7f:dd: 7e:24:61:ec:ba:61:ed:0d:e4:2d:2b:5e:76:b0:67: 02:a8:b3:ef:a0:c3:98:77:15:8d:5b:47:11:e6:91: e6:23:a1:67:a6:c7:d6:49:0b:ea:0a:0d:c7:96:51: 66:68:05:7a:14:d2:ca:6e:19:0d:f0:3f:da:f9:f4: 27:50:0e:76:4f:ff:0b:0e:a4:59:3c:7a:18:4e:da: 14:bb:27:ae:3a:8c:db:8a:8d:2f:75:d0:c0:74:64: 58:3f:9c:be:61:69:22:fd:11:f2:c2:55:c1:55:d8: 5d:fb:8c:b0:9a:1e:e8:43:0d:cf:d8:29:5c:4c:05: 48:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:15:0A:16:18:7A:F3:B8:E4:E7:75:DF:54:ED:9C:89:D5:41:80:68 X509v3 Authority Key Identifier: keyid:32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.68.0/24 Signature Algorithm: sha256WithRSAEncryption 00:a7:4c:b0:85:7e:1c:c0:6a:d1:e2:8c:b2:8b:ed:30:07:36: 4b:74:8b:3c:cf:71:15:cc:f6:40:66:04:2a:95:d2:44:81:19: db:91:b6:45:ae:9b:2b:b7:46:75:57:3d:e0:a4:db:75:3f:b4: 9f:e5:f2:c4:4a:c1:e5:a7:01:94:ef:27:ef:16:db:b5:76:f2: 46:05:b5:1e:92:7e:88:68:a7:9d:97:f2:ce:b5:bd:37:a7:cb: de:3c:84:2a:ab:b0:af:15:e5:a0:24:9a:97:38:83:f5:4f:c6: 52:52:42:77:e2:08:7c:8d:f7:bb:4f:a5:6e:77:a5:70:76:d0: e6:28:66:6c:8d:60:57:8b:b5:56:f7:05:77:80:45:d6:fd:50: 81:42:10:22:e4:73:b6:40:3b:2b:d0:f8:a4:e7:20:85:29:30: 82:0d:96:2a:ed:aa:11:a9:c8:33:f9:d7:7c:ff:6e:e0:0b:3b: 26:94:21:f1:b6:18:3c:81:1f:f6:67:bc:5f:3a:46:2a:78:6c: ca:c1:df:e2:da:4e:cd:27:83:ed:8a:4e:3d:34:ed:a9:47:41: 44:93:a2:5c:ca:e2:c9:07:a2:bb:11:63:e2:45:32:5a:fc:1a: 19:ad:9e:c2:85:af:2b:aa:a5:17:28:6c:63:e6:4a:1e:ee:04: 6b:e3:c7:0f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZGg3quheM1nmV6DxzxNnekA4trswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcy RUI1MERDNTAeFw0yNjA1MDMwMjE3MzlaFw0yNzA1MDIwMjIyMzlaMDMxMTAvBgNV BAMTKDQ3MTUwQTE2MTg3QUYzQjhFNEU3NzVERjU0RUQ5Qzg5RDU0MTgwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0//+3XfRXW3VCHh+S+8aQnHE VApzYWBbApgKdPeyGJr/KJoS1h0bXmZ0W0Y08hBJghFRnngNnAbEyM7IsLQTEQrs fPX1GuXHx3c7hlDVNMMgfc8mwpwuodiAGopYhXoougntGMbbwqSpn/cqDm/Ddxly wDnC8WIMubtCS3FIEVpJ5z5/3X4kYey6Ye0N5C0rXnawZwKos++gw5h3FY1bRxHm keYjoWemx9ZJC+oKDceWUWZoBXoU0spuGQ3wP9r59CdQDnZP/wsOpFk8ehhO2hS7 J646jNuKjS910MB0ZFg/nL5haSL9EfLCVcFV2F37jLCaHuhDDc/YKVxMBUhLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURxUKFhh687jk53XfVO2cidVBgGgwHwYDVR0j BBgwFoAUMoV+YiUMdjA30e0pHXk3By61DcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWQwMTItYWZkYi00MmZiLTk3MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIy NTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcyRUI1MERDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMjg1N0U2MjI1MEM3NjMwMzdEMUVEMjkxRDc5MzcwNzJFQjUw REM1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkM2VkMDEyLWFmZGItNDJmYi05 NzFhLWUxNjJhOWRlYzQ2ZC8wLzMxMzAzMzJlMzEzNzM5MmUzNjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7NEMA0GCSqG SIb3DQEBCwUAA4IBAQAAp0ywhX4cwGrR4oyyi+0wBzZLdIs8z3EVzPZAZgQqldJE gRnbkbZFrpsrt0Z1Vz3gpNt1P7Sf5fLESsHlpwGU7yfvFtu1dvJGBbUekn6IaKed l/LOtb03p8vePIQqq7CvFeWgJJqXOIP1T8ZSUkJ34gh8jfe7T6Vud6VwdtDmKGZs jWBXi7VW9wV3gEXW/VCBQhAi5HO2QDsr0Pik5yCFKTCCDZYq7aoRqcgz+dd8/27g CzsmlCHxthg8gR/2Z7xfOkYqeGzKwd/i2k7NJ4Ptik49NO2pR0FEk6JcyuLJB6K7 EWPiRTJa/BoZrZ7Cha8rqqUXKGxj5koe7gRr48cP -----END CERTIFICATE-----Generated at Wed May 13 01:45:25 2026 by rpki-client