$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa File: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (raw, json) Hash identifier: zY+TCMFw7rqEprfDm4KpW3QZwoOVJC4HoqlrpBLXEfI= Subject key identifier: 87:70:D0:A2:D4:00:D1:C6:B4:B0:48:22:84:99:A5:7F:D1:3D:A5:5A Certificate issuer: /CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Certificate serial: 113809D3F4CFEEF6954A71F7F0E8EA13B15EC349 Authority key identifier: D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa Signing time: Sun 03 May 2026 02:27:02 +0000 ROA not before: Sun 03 May 2026 02:22:02 +0000 ROA not after: Sun 02 May 2027 02:27:02 +0000 asID: 150196 IP address blocks: 103.229.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:38:09:d3:f4:cf:ee:f6:95:4a:71:f7:f0:e8:ea:13:b1:5e:c3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Validity Not Before: May 3 02:22:02 2026 GMT Not After : May 2 02:27:02 2027 GMT Subject: CN=8770D0A2D400D1C6B4B048228499A57FD13DA55A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:20:77:80:d8:f3:c1:42:4e:39:94:b2:79: 3a:36:59:44:0d:02:e5:7d:f7:dd:3e:ce:62:b7:91: 12:48:fb:41:2a:d7:8f:c6:c8:37:ed:0b:14:5a:76: da:b6:50:ac:fa:a3:da:35:ca:88:c0:5c:20:87:7f: 9a:48:74:38:ca:7f:d2:29:53:b3:9b:40:f1:59:91: 79:b4:ed:4d:34:62:b6:28:ca:59:1e:24:39:c6:8f: 5d:77:c2:3b:a0:13:2a:3d:43:04:3e:d4:77:7e:84: b6:dc:1f:3f:45:c5:b1:a2:b4:19:88:5d:f6:60:ee: ea:2b:d9:b0:cf:16:a6:a6:85:e5:71:03:ce:c7:9b: 21:37:f3:87:80:94:ec:02:c7:a5:06:36:d5:e2:f8: dd:28:12:b0:5b:e2:04:52:b5:85:c1:15:46:70:16: 15:fa:a3:6d:28:9f:81:0c:7b:24:4c:27:58:d9:67: 88:dc:26:98:a2:0b:b9:37:a6:01:b8:a1:92:f6:08: bf:60:ce:35:77:06:82:f2:ec:ef:74:50:af:c0:2a: 26:bc:1d:6a:6d:f2:88:dc:5d:f6:53:5f:b9:56:c9: 3b:66:cc:9b:b2:f3:1c:c0:fa:e7:4e:ab:e6:ca:a8: 68:31:61:a8:e2:58:98:7d:00:31:1a:c7:16:c5:e3: 40:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:70:D0:A2:D4:00:D1:C6:B4:B0:48:22:84:99:A5:7F:D1:3D:A5:5A X509v3 Authority Key Identifier: keyid:D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.15.0/24 Signature Algorithm: sha256WithRSAEncryption 62:46:5f:12:a8:1a:e8:65:d2:99:ea:e9:a0:14:b7:66:4a:59: 77:a4:35:34:ab:6f:c4:2b:19:e8:8f:aa:50:26:35:b0:73:6c: 45:43:6f:aa:42:b2:57:fe:25:5b:fa:65:6c:55:19:9d:74:df: e4:b3:6b:22:c6:e6:fe:41:ac:59:c7:25:f2:e3:94:4d:60:87: 64:4a:4d:2a:b7:46:b3:ed:82:60:83:d4:63:c7:99:aa:84:bb: a0:fc:dd:e7:e5:42:bb:9e:fe:f9:9e:cb:14:90:f9:91:06:62: 7c:c4:d2:ba:f5:27:30:93:c9:aa:09:c2:97:f5:b7:2b:82:dd: 63:f8:f0:77:5c:fa:fb:02:60:41:5f:86:08:65:67:6f:05:8f: 19:87:1b:eb:28:ba:c3:08:58:1d:ab:c9:37:bf:45:bf:6b:5c: bc:35:9c:0b:c5:58:1c:1e:3b:56:ee:3a:d7:a1:38:55:6f:89: 68:80:f4:92:1c:e5:d2:a5:49:d4:9b:5e:41:b5:19:92:06:05: e4:3f:93:54:5c:db:d3:3c:7b:43:ba:9e:2c:3e:a5:1d:e4:d5: 4e:20:c6:d0:c0:37:d9:bb:56:d3:16:6e:de:12:24:9c:ae:49: cf:f1:8b:0e:e2:18:03:0e:7c:f4:9d:48:e7:7b:fa:c3:f9:3c: f2:38:bd:04 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUETgJ0/TP7vaVSnH38OjqE7Few0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUx NTMyODE3QjAeFw0yNjA1MDMwMjIyMDJaFw0yNzA1MDIwMjI3MDJaMDMxMTAvBgNV BAMTKDg3NzBEMEEyRDQwMEQxQzZCNEIwNDgyMjg0OTlBNTdGRDEzREE1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChnyB3gNjzwUJOOZSyeTo2WUQN AuV9990+zmK3kRJI+0Eq14/GyDftCxRadtq2UKz6o9o1yojAXCCHf5pIdDjKf9Ip U7ObQPFZkXm07U00YrYoylkeJDnGj113wjugEyo9QwQ+1Hd+hLbcHz9FxbGitBmI XfZg7uor2bDPFqamheVxA87HmyE384eAlOwCx6UGNtXi+N0oErBb4gRStYXBFUZw FhX6o20on4EMeyRMJ1jZZ4jcJpiiC7k3pgG4oZL2CL9gzjV3BoLy7O90UK/AKia8 HWpt8ojcXfZTX7lWyTtmzJuy8xzA+udOq+bKqGgxYajiWJh9ADEaxxbF40BJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUh3DQotQA0ca0sEgihJmlf9E9pVowHwYDVR0j BBgwFoAU2EsCCSzZ+vSHt//oo84kXhUygXswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I3NWJmZDAtYTg2Yy00YmViLTlmOTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDky Q0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUxNTMyODE3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODRCMDIwOTJDRDlGQUY0ODdCN0ZGRThBM0NFMjQ1RTE1MzI4 MTdCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiNzViZmQwLWE4NmMtNGJlYi05 Zjk5LWFhYzMzZmI1ZTQ5Zi8wLzMxMzAzMzJlMzIzMjM5MmUzMTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzEzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+UPMA0GCSqG SIb3DQEBCwUAA4IBAQBiRl8SqBroZdKZ6umgFLdmSll3pDU0q2/EKxnoj6pQJjWw c2xFQ2+qQrJX/iVb+mVsVRmddN/ks2sixub+QaxZxyXy45RNYIdkSk0qt0az7YJg g9Rjx5mqhLug/N3n5UK7nv75nssUkPmRBmJ8xNK69Scwk8mqCcKX9bcrgt1j+PB3 XPr7AmBBX4YIZWdvBY8ZhxvrKLrDCFgdq8k3v0W/a1y8NZwLxVgcHjtW7jrXoThV b4logPSSHOXSpUnUm15BtRmSBgXkP5NUXNvTPHtDup4sPqUd5NVOIMbQwDfZu1bT Fm7eEiScrknP8YsO4hgDDnz0nUjne/rD+TzyOL0E -----END CERTIFICATE-----Generated at Wed May 13 04:54:47 2026 by rpki-client