$ rpki-client -vvf rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa File: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (raw, json) Hash identifier: MCW/xqC9gtQy6b8F5lQvfvI/LlU0HFmKiOjV/FzQgxY= Subject key identifier: 1F:D2:DA:D6:6E:A8:77:BB:C7:6E:4A:4D:4F:38:E4:C2:CB:2C:5B:A0 Certificate issuer: /CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Certificate serial: 52814CB1ED0F305963F823C109AA2939331D1921 Authority key identifier: AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa Signing time: Sun 03 May 2026 02:29:28 +0000 ROA not before: Sun 03 May 2026 02:24:28 +0000 ROA not after: Sun 02 May 2027 02:29:28 +0000 asID: 149883 IP address blocks: 103.189.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:81:4c:b1:ed:0f:30:59:63:f8:23:c1:09:aa:29:39:33:1d:19:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Validity Not Before: May 3 02:24:28 2026 GMT Not After : May 2 02:29:28 2027 GMT Subject: CN=1FD2DAD66EA877BBC76E4A4D4F38E4C2CB2C5BA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:fa:52:d8:2d:ce:57:85:1d:cf:4d:68:8b: 94:1d:b2:a7:9c:2a:dc:fc:07:39:06:63:f9:e8:f5: 64:11:0f:77:82:b5:eb:f9:c5:b4:25:a6:a4:15:ea: 64:ff:1a:90:9e:12:d3:76:45:98:e3:40:97:dc:e1: cd:0b:2c:25:0a:84:9d:40:12:87:99:7a:95:de:25: 40:35:01:b5:b5:8e:70:0a:b5:27:33:15:98:7f:48: 08:87:12:d3:70:10:11:a0:ed:bf:80:0f:d8:1d:c4: c7:42:cd:e9:6f:db:3b:48:c4:75:27:58:0c:c5:51: e5:cf:86:73:88:c2:89:c4:a5:c9:8d:62:37:47:27: 1d:2b:72:6f:1b:b6:6d:38:f1:78:6d:4d:63:cb:c4: 37:56:4e:93:8b:c5:25:06:a6:d3:48:28:dd:18:7e: 8b:6d:77:e6:60:13:a3:b7:9f:f1:b8:6d:aa:23:c5: 94:b6:42:6f:88:cb:7a:c1:19:a3:49:f3:b4:1e:44: 51:23:23:47:83:48:be:8f:3d:f5:ce:d4:2d:70:e7: 8e:55:89:69:16:21:b2:03:3c:2d:5e:a0:1f:d1:8c: 33:d2:fc:cf:23:8f:8d:a7:f2:5f:c7:23:d0:16:68: 53:89:db:64:95:57:d4:fe:f9:d7:87:88:60:a5:d5: 24:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D2:DA:D6:6E:A8:77:BB:C7:6E:4A:4D:4F:38:E4:C2:CB:2C:5B:A0 X509v3 Authority Key Identifier: keyid:AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.118.0/23 Signature Algorithm: sha256WithRSAEncryption bb:5d:2d:2a:e0:2c:37:18:be:92:f1:a7:cd:a4:9e:c4:b9:fe: 67:cd:6f:23:45:32:50:dc:7a:d1:e7:07:fa:c5:92:a1:fc:70: c4:4c:20:ff:11:7c:8f:99:3a:53:87:a9:29:b0:11:3c:f2:c7: 59:db:47:76:85:c0:95:3f:6b:06:6c:3a:69:29:dd:c6:79:87: 93:1b:1c:12:b6:d2:b5:ad:9a:c4:a1:de:c0:09:36:fd:91:67: b8:4b:66:cf:e7:1a:ff:dc:ab:65:1e:bc:18:d4:45:99:29:da: 45:79:db:d1:43:26:7e:bb:03:bd:01:83:c8:90:6f:5d:08:81: 21:36:a3:0f:39:1b:b9:b2:dd:39:6a:8f:6c:c8:7e:78:a6:9e: ff:75:74:97:15:d7:a9:d9:de:ae:e6:a0:fe:ea:91:b2:5e:26: 34:d9:9a:78:7c:61:a1:bd:05:a0:fb:8a:8e:b7:44:70:4b:36: f2:49:ad:07:d1:49:e0:e4:19:53:e2:05:5e:ed:00:22:64:61: 50:c4:4e:6b:6f:a0:19:c7:88:f0:04:fe:7b:33:9c:ef:45:05: 2c:24:22:0e:26:b2:f1:05:f8:2b:db:cf:cc:67:11:ca:f2:aa: e8:06:e8:38:71:71:a6:18:b4:78:53:0f:65:8f:cf:c2:70:92: 96:dc:c9:42 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUoFMse0PMFlj+CPBCaopOTMdGSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJB QTc0RjVEMDAeFw0yNjA1MDMwMjI0MjhaFw0yNzA1MDIwMjI5MjhaMDMxMTAvBgNV BAMTKDFGRDJEQUQ2NkVBODc3QkJDNzZFNEE0RDRGMzhFNEMyQ0IyQzVCQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkvpS2C3OV4Udz01oi5Qdsqec Ktz8BzkGY/no9WQRD3eCtev5xbQlpqQV6mT/GpCeEtN2RZjjQJfc4c0LLCUKhJ1A EoeZepXeJUA1AbW1jnAKtSczFZh/SAiHEtNwEBGg7b+AD9gdxMdCzelv2ztIxHUn WAzFUeXPhnOIwonEpcmNYjdHJx0rcm8btm048XhtTWPLxDdWTpOLxSUGptNIKN0Y fottd+ZgE6O3n/G4baojxZS2Qm+Iy3rBGaNJ87QeRFEjI0eDSL6PPfXO1C1w545V iWkWIbIDPC1eoB/RjDPS/M8jj42n8l/HI9AWaFOJ22SVV9T++deHiGCl1SRdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUH9La1m6od7vHbkpNTzjkwsssW6AwHwYDVR0j BBgwFoAUr6MpTlWAtoIDvA3wT9AHIqp09dAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNhZDUyMjYtNjU2ZC00NjFkLTljZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1 NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJBQTc0RjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkEzMjk0RTU1ODBCNjgyMDNCQzBERjA0RkQwMDcyMkFBNzRG NUQwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQzYWQ1MjI2LTY1NmQtNDYxZC05 Y2ZmLWM4M2FjMDc0MmYyMC8wLzMxMzAzMzJlMzEzODM5MmUzMTMxMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzODM4MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnvXYwDQYJ KoZIhvcNAQELBQADggEBALtdLSrgLDcYvpLxp82knsS5/mfNbyNFMlDcetHnB/rF kqH8cMRMIP8RfI+ZOlOHqSmwETzyx1nbR3aFwJU/awZsOmkp3cZ5h5MbHBK20rWt msSh3sAJNv2RZ7hLZs/nGv/cq2UevBjURZkp2kV529FDJn67A70Bg8iQb10IgSE2 ow85G7my3Tlqj2zIfnimnv91dJcV16nZ3q7moP7qkbJeJjTZmnh8YaG9BaD7io63 RHBLNvJJrQfRSeDkGVPiBV7tACJkYVDETmtvoBnHiPAE/nsznO9FBSwkIg4msvEF +Cvbz8xnEcryqugG6DhxcaYYtHhTD2WPz8JwkpbcyUI= -----END CERTIFICATE-----Generated at Wed May 13 04:52:08 2026 by rpki-client