$ rpki-client -vvf rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa File: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (raw, json) Hash identifier: tj5GNswRthGD9Jerv3aI7edNXY0M4+btYrK4Cyrd4Ts= Subject key identifier: A3:34:D4:AD:CA:BA:51:4A:65:73:B5:9C:24:25:38:F6:E4:CC:76:23 Certificate issuer: /CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Certificate serial: 039AABCC5619F8758FD6CD64907EBC52FEF2208B Authority key identifier: AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa Signing time: Sun 03 May 2026 02:28:56 +0000 ROA not before: Sun 03 May 2026 02:23:56 +0000 ROA not after: Sun 02 May 2027 02:28:56 +0000 asID: 140384 IP address blocks: 103.149.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9a:ab:cc:56:19:f8:75:8f:d6:cd:64:90:7e:bc:52:fe:f2:20:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Validity Not Before: May 3 02:23:56 2026 GMT Not After : May 2 02:28:56 2027 GMT Subject: CN=A334D4ADCABA514A6573B59C242538F6E4CC7623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:e8:dd:0e:5c:b4:f1:fa:27:27:41:9c:6e: 55:cd:13:57:a5:90:97:aa:5a:11:c4:44:4e:0b:66: 24:1f:1f:dc:93:bf:27:ac:06:8e:d0:e8:7b:cc:e4: b2:21:0a:4f:17:c0:1f:fa:f8:41:ea:a1:ca:1e:32: 1b:fa:1b:5a:85:1d:eb:b7:54:f2:70:80:73:88:01: 6a:ac:eb:7b:47:36:b1:f7:79:ea:4a:5e:e3:7d:97: a0:23:7a:3f:e1:cf:4c:99:9c:91:c7:91:53:ea:1e: d2:75:09:fe:c9:65:39:d9:cb:b1:a0:77:70:46:6d: 2e:93:30:7b:7b:dd:e2:ac:82:fa:69:3e:f6:f2:88: 38:e1:f5:31:bd:40:80:73:40:32:ef:00:43:fe:e8: 47:fa:24:a4:c5:20:51:9e:c5:a0:7c:38:2c:37:86: 4c:e4:1a:1f:0e:25:ac:03:87:a9:e1:f6:e1:2b:d6: 75:fc:6b:8c:dc:a7:50:40:d0:42:26:86:1a:64:1f: 78:fa:1e:1b:de:28:a8:76:17:4e:63:b6:c3:96:84: 84:5c:e4:19:63:46:cf:0c:43:77:7d:13:1a:35:3b: 17:57:50:9d:e7:aa:07:b6:7f:1a:32:f7:1a:15:c1: e2:cf:ee:1a:22:9f:32:db:71:f5:26:e6:db:0b:34: ee:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:34:D4:AD:CA:BA:51:4A:65:73:B5:9C:24:25:38:F6:E4:CC:76:23 X509v3 Authority Key Identifier: keyid:AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.238.0/24 Signature Algorithm: sha256WithRSAEncryption 73:ee:62:71:6a:13:c9:de:80:a4:d8:b6:2f:48:be:22:bd:fa: 79:c7:97:a1:54:f9:c8:38:11:75:78:41:17:08:f1:d7:56:e5: e3:e4:92:11:69:22:62:9d:c6:a7:ea:09:33:2f:06:28:6e:65: 79:5a:17:c8:3e:a5:59:7d:e9:9f:d8:53:b5:e3:07:53:68:8f: 2b:46:0a:01:85:b1:51:46:02:29:fa:c4:1b:e6:39:ff:ac:7f: 64:65:b3:b3:75:14:2e:e3:5c:31:5e:c5:4c:c1:36:05:55:7e: 4c:d8:a1:96:d8:33:f0:c1:d5:34:39:66:a7:fc:05:f8:ce:89: b8:d1:24:4c:88:8d:62:6f:c7:51:de:96:c8:b4:20:3a:6f:29: 6b:21:19:17:a2:2c:17:45:3c:7a:ef:78:03:22:57:29:c9:4e: 9e:ef:2a:96:23:40:9d:cf:08:e6:00:52:7c:08:b6:27:b4:44: 25:d1:62:ad:88:91:9a:9b:09:89:42:ae:7d:90:93:d2:02:d3: fd:92:4d:e3:e4:38:f3:44:e0:b0:69:e0:0b:72:15:9c:95:87: af:5e:04:92:66:6a:66:a0:9f:a3:3d:7e:2e:7d:b0:dd:e2:7b: ed:37:ce:01:8e:d3:6f:a5:cc:e8:49:f2:88:60:ec:ea:e3:62: 91:e3:3f:b6 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUA5qrzFYZ+HWP1s1kkH68Uv7yIIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdEQjYw NjE2MDZEMzAeFw0yNjA1MDMwMjIzNTZaFw0yNzA1MDIwMjI4NTZaMDMxMTAvBgNV BAMTKEEzMzRENEFEQ0FCQTUxNEE2NTczQjU5QzI0MjUzOEY2RTRDQzc2MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhujdDly08fonJ0GcblXNE1el kJeqWhHERE4LZiQfH9yTvyesBo7Q6HvM5LIhCk8XwB/6+EHqocoeMhv6G1qFHeu3 VPJwgHOIAWqs63tHNrH3eepKXuN9l6Ajej/hz0yZnJHHkVPqHtJ1Cf7JZTnZy7Gg d3BGbS6TMHt73eKsgvppPvbyiDjh9TG9QIBzQDLvAEP+6Ef6JKTFIFGexaB8OCw3 hkzkGh8OJawDh6nh9uEr1nX8a4zcp1BA0EImhhpkH3j6HhveKKh2F05jtsOWhIRc 5BljRs8MQ3d9Exo1OxdXUJ3nqge2fxoy9xoVweLP7hoinzLbcfUm5tsLNO5VAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUozTUrcq6UUplc7WcJCU49uTMdiMwHwYDVR0j BBgwFoAUrt3B06CyNqQii43fSA19tgYWBtMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBkMzRlNzctNmNmNi00MTg3LTkwODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNB MEIyMzZBNDIyOEI4RERGNDgwRDdEQjYwNjE2MDZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRUREQzFEM0EwQjIzNkE0MjI4QjhEREY0ODBEN0RCNjA2MTYw NkQzLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQwZDM0ZTc3LTZjZjYtNDE4Ny05 MDgzLTFjN2E4ODE5ZTk2NS8wLzMxMzAzMzJlMzEzNDM5MmUzMjMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMzM4MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnle4wDQYJ KoZIhvcNAQELBQADggEBAHPuYnFqE8negKTYti9IviK9+nnHl6FU+cg4EXV4QRcI 8ddW5ePkkhFpImKdxqfqCTMvBihuZXlaF8g+pVl96Z/YU7XjB1NojytGCgGFsVFG Ain6xBvmOf+sf2Rls7N1FC7jXDFexUzBNgVVfkzYoZbYM/DB1TQ5Zqf8BfjOibjR JEyIjWJvx1Helsi0IDpvKWshGReiLBdFPHrveAMiVynJTp7vKpYjQJ3PCOYAUnwI tie0RCXRYq2IkZqbCYlCrn2Qk9IC0/2STePkOPNE4LBp4AtyFZyVh69eBJJmamag n6M9fi59sN3ie+03zgGO02+lzOhJ8ohg7OrjYpHjP7Y= -----END CERTIFICATE-----Generated at Wed May 13 09:57:45 2026 by rpki-client