$ rpki-client -vvf rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa File: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (raw, json) Hash identifier: FP5pxHLBZtIDduyXGtgh7O/QJiYCmUVEXRSY7J06kQM= Subject key identifier: 88:39:EF:6B:7A:B5:AA:47:52:68:F4:33:2D:66:51:FB:42:00:A7:27 Certificate issuer: /CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Certificate serial: 1C81EAB1B3E284E40169CCBF86D629D55D8AAD4E Authority key identifier: DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa Signing time: Sun 03 May 2026 02:24:57 +0000 ROA not before: Sun 03 May 2026 02:19:57 +0000 ROA not after: Sun 02 May 2027 02:24:57 +0000 asID: 150962 IP address blocks: 103.229.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:81:ea:b1:b3:e2:84:e4:01:69:cc:bf:86:d6:29:d5:5d:8a:ad:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Validity Not Before: May 3 02:19:57 2026 GMT Not After : May 2 02:24:57 2027 GMT Subject: CN=8839EF6B7AB5AA475268F4332D6651FB4200A727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:c8:e8:d1:a0:90:8f:01:a1:55:ab:ae:86: b0:03:b5:eb:c6:7d:78:b1:6b:0c:8c:62:21:a6:fe: e8:a6:a8:5b:34:b3:62:c1:bc:f7:72:a3:1d:bd:1a: ce:06:e1:73:c4:75:d6:69:ee:60:2b:4b:7a:f4:8e: d7:56:01:6e:d7:45:42:0e:2f:ff:8b:25:5e:a3:bf: 91:42:2f:92:45:4c:35:04:ec:38:cf:47:53:94:91: 2f:7c:54:c5:e2:c0:5d:2d:c8:8f:ba:db:81:0b:71: 26:59:09:62:1c:90:2a:7e:60:d1:be:fd:fb:50:94: 18:c3:12:91:16:84:d9:a5:53:29:dc:2f:cd:b4:4b: 8e:85:fd:ca:97:18:a6:30:86:a0:49:2d:ae:34:25: c4:f6:4a:9d:49:0e:b6:64:7f:5a:7c:4b:73:bc:38: aa:fa:18:f9:42:0b:7d:c8:1b:71:30:92:d0:ca:43: 1a:69:57:66:25:69:68:ab:23:73:d2:22:f4:ea:f1: 7f:bb:83:6e:ec:f6:45:48:7a:fa:e4:b4:d4:33:4b: fe:8a:2e:43:ac:cf:64:52:f8:76:2b:3f:f6:20:9a: 74:b0:9e:77:fd:50:d1:5d:bb:50:f9:43:c3:db:67: 42:ee:81:fa:1f:7b:a0:b0:bb:ee:ce:70:c7:2e:61: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:39:EF:6B:7A:B5:AA:47:52:68:F4:33:2D:66:51:FB:42:00:A7:27 X509v3 Authority Key Identifier: keyid:DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.131.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:1a:c4:24:f6:68:71:33:b7:e2:27:35:ab:e5:8d:83:be:76: cd:64:b3:42:b2:92:b4:e6:fe:58:a0:f3:2b:02:07:33:c9:c4: 7c:9d:1a:51:6a:b8:5f:e0:b1:ce:a6:a1:72:39:0e:2b:0a:35: 63:09:a0:4a:1f:1b:25:94:d8:b3:14:b9:e2:f2:6e:5e:e0:c6: 5e:51:56:e8:3e:eb:7a:e7:8d:79:75:7f:83:7f:c8:d7:f1:1e: a7:24:c6:c3:43:d7:b3:58:5d:63:62:46:99:81:18:1e:15:8b: 6f:a4:96:0a:df:40:c0:61:2a:ea:da:1d:e3:6c:48:f9:1e:52: 85:53:53:7c:e3:b6:8c:a9:1d:80:85:1b:58:4b:13:3c:3c:0b: 1a:a4:f7:50:e2:4f:3f:f3:36:8e:7c:90:60:0c:69:a2:e9:77: ba:56:ba:20:0c:d9:37:17:a4:67:b0:81:fd:df:90:17:b2:ed: 8b:ff:97:9e:45:0e:8f:6d:71:f7:b7:cd:95:fa:4f:67:ae:46: 05:32:c2:8b:b7:30:df:9e:2f:a7:ac:df:30:78:dc:a0:14:2c: 98:23:40:cd:72:d1:0d:0a:f8:32:df:9a:84:d2:25:5c:cb:7b: 2c:2a:cc:44:4d:60:a5:91:1e:da:aa:7a:c5:7a:59:35:3e:46: 0f:54:2a:e2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHIHqsbPihOQBacy/htYp1V2KrU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYz QTcyQzRBNTAeFw0yNjA1MDMwMjE5NTdaFw0yNzA1MDIwMjI0NTdaMDMxMTAvBgNV BAMTKDg4MzlFRjZCN0FCNUFBNDc1MjY4RjQzMzJENjY1MUZCNDIwMEE3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4icjo0aCQjwGhVauuhrADtevG fXixawyMYiGm/uimqFs0s2LBvPdyox29Gs4G4XPEddZp7mArS3r0jtdWAW7XRUIO L/+LJV6jv5FCL5JFTDUE7DjPR1OUkS98VMXiwF0tyI+624ELcSZZCWIckCp+YNG+ /ftQlBjDEpEWhNmlUyncL820S46F/cqXGKYwhqBJLa40JcT2Sp1JDrZkf1p8S3O8 OKr6GPlCC33IG3EwktDKQxppV2YlaWirI3PSIvTq8X+7g27s9kVIevrktNQzS/6K LkOsz2RS+HYrP/YgmnSwnnf9UNFdu1D5Q8PbZ0Lugfofe6Cwu+7OcMcuYZhPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUiDnva3q1qkdSaPQzLWZR+0IApycwHwYDVR0j BBgwFoAU3hcvTPDOQjClEGzWrAwlpjpyxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQyYzFmMzItODFhYy00MTE4LWJlMmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENG MENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYzQTcyQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTE3MkY0Q0YwQ0U0MjMwQTUxMDZDRDZBQzBDMjVBNjNBNzJD NEE1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM0MmMxZjMyLTgxYWMtNDExOC1i ZTJmLTU3NGNhNWI1NDFlYS8wLzMxMzAzMzJlMzIzMjM5MmUzMTMzMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM2MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn5YMwDQYJ KoZIhvcNAQELBQADggEBAG4axCT2aHEzt+InNavljYO+ds1ks0KykrTm/lig8ysC BzPJxHydGlFquF/gsc6moXI5DisKNWMJoEofGyWU2LMUueLybl7gxl5RVug+63rn jXl1f4N/yNfxHqckxsND17NYXWNiRpmBGB4Vi2+klgrfQMBhKuraHeNsSPkeUoVT U3zjtoypHYCFG1hLEzw8Cxqk91DiTz/zNo58kGAMaaLpd7pWuiAM2TcXpGewgf3f kBey7Yv/l55FDo9tcfe3zZX6T2euRgUywou3MN+eL6es3zB43KAULJgjQM1y0Q0K +DLfmoTSJVzLeywqzERNYKWRHtqqesV6WTU+Rg9UKuI= -----END CERTIFICATE-----Generated at Wed May 13 03:51:18 2026 by rpki-client