$ rpki-client -vvf rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa File: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (raw, json) Hash identifier: luezxLjf+gQLcjiQqhuyu+ya30sT86b3qelMWGrfE0Y= Subject key identifier: 97:3C:C2:00:AD:79:55:22:19:A8:1E:64:20:7A:CE:1F:ED:92:26:88 Certificate issuer: /CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Certificate serial: 27E260DAFEE941C74009E87443853F12E1832129 Authority key identifier: AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa Signing time: Sun 03 May 2026 02:29:29 +0000 ROA not before: Sun 03 May 2026 02:24:29 +0000 ROA not after: Sun 02 May 2027 02:29:29 +0000 asID: 149883 IP address blocks: 103.189.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e2:60:da:fe:e9:41:c7:40:09:e8:74:43:85:3f:12:e1:83:21:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Validity Not Before: May 3 02:24:29 2026 GMT Not After : May 2 02:29:29 2027 GMT Subject: CN=973CC200AD79552219A81E64207ACE1FED922688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d9:74:01:f6:a7:71:1e:37:e1:49:ba:33:af: b5:02:94:9c:d8:c8:02:aa:67:62:86:e4:36:6d:9b: 28:4d:42:51:72:d9:dd:57:bf:93:1a:74:f3:38:8c: ca:30:00:57:76:c8:41:33:42:8d:64:66:50:3a:ae: 53:41:22:89:6d:2b:07:22:ea:9e:91:36:c6:28:9b: 35:3d:56:1e:f9:52:75:4c:86:20:b2:a7:33:6a:74: cb:1d:61:ef:0f:42:f4:f5:97:92:7d:da:4c:d0:40: 03:d4:e7:ca:d7:2c:e2:7e:0e:d8:48:07:99:de:14: 1c:6d:cc:51:93:e5:db:e3:fc:11:84:7f:d1:a6:41: d8:07:bb:54:aa:dc:8c:46:2a:87:bf:94:ba:36:e2: b3:c5:f2:bf:23:88:24:d6:53:e2:a3:d6:73:37:b6: 6c:97:35:e8:19:e2:d9:65:40:f5:24:b2:3d:0e:10: c3:ae:bb:c1:00:45:1a:bd:19:af:99:c6:a4:9a:49: 1b:cd:40:b2:15:b2:9a:eb:da:26:08:9c:34:54:48: 9c:aa:3b:6d:8c:45:58:8a:f1:1d:cf:a7:99:53:38: 21:37:0c:68:89:79:24:a6:ab:3e:3b:a8:4f:5a:38: 07:35:13:78:16:ab:25:76:bd:74:39:74:21:35:d6: b6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3C:C2:00:AD:79:55:22:19:A8:1E:64:20:7A:CE:1F:ED:92:26:88 X509v3 Authority Key Identifier: keyid:AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.118.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:22:df:b6:9c:bc:8c:70:3f:14:f8:f1:85:31:c9:ab:1a:9f: db:73:20:a0:b7:26:b8:af:24:12:23:b7:5b:5d:22:77:dd:6b: e6:66:ca:86:1b:c1:09:e5:a8:5c:01:7f:68:e5:2c:cf:63:c1: ee:af:63:5f:55:34:98:5a:cf:7f:f6:ee:21:d2:f2:14:a1:50: a5:f0:9d:ec:6e:46:97:32:cd:3e:f7:74:a7:37:b4:08:37:8c: c9:68:46:5e:a6:9c:c0:b8:6e:86:27:5c:73:b0:4d:76:2b:7b: b8:21:92:9d:89:6f:c0:eb:24:7c:4b:e8:e8:4c:dc:2a:27:32: 94:74:c8:77:a9:f7:3e:79:2d:08:ae:f3:40:72:b9:4c:30:53: 1a:14:52:b8:d1:f1:8c:6a:be:40:aa:e6:d6:54:9f:00:22:7c: 6f:ac:42:1a:47:66:b0:c6:52:86:10:26:7c:7f:4d:86:53:83: 96:72:9c:e3:b7:5c:36:3a:9d:9d:45:08:a6:61:a2:62:cd:d1: ae:62:67:f9:4f:1f:df:93:22:96:fd:70:2a:36:8c:d1:f7:69: ba:0d:c6:74:62:cc:43:ff:1e:6b:17:d5:1c:06:c5:01:9a:0e: 5b:5a:23:50:34:cc:0e:33:5f:3e:59:b3:54:11:1c:e1:0a:7d: 82:af:53:3c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJ+Jg2v7pQcdACeh0Q4U/EuGDISkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJB QTc0RjVEMDAeFw0yNjA1MDMwMjI0MjlaFw0yNzA1MDIwMjI5MjlaMDMxMTAvBgNV BAMTKDk3M0NDMjAwQUQ3OTU1MjIxOUE4MUU2NDIwN0FDRTFGRUQ5MjI2ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY2XQB9qdxHjfhSbozr7UClJzY yAKqZ2KG5DZtmyhNQlFy2d1Xv5MadPM4jMowAFd2yEEzQo1kZlA6rlNBIoltKwci 6p6RNsYomzU9Vh75UnVMhiCypzNqdMsdYe8PQvT1l5J92kzQQAPU58rXLOJ+DthI B5neFBxtzFGT5dvj/BGEf9GmQdgHu1Sq3IxGKoe/lLo24rPF8r8jiCTWU+Kj1nM3 tmyXNegZ4tllQPUksj0OEMOuu8EARRq9Ga+ZxqSaSRvNQLIVsprr2iYInDRUSJyq O22MRViK8R3Pp5lTOCE3DGiJeSSmqz47qE9aOAc1E3gWqyV2vXQ5dCE11rYtAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUlzzCAK15VSIZqB5kIHrOH+2SJogwHwYDVR0j BBgwFoAUr6MpTlWAtoIDvA3wT9AHIqp09dAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNhZDUyMjYtNjU2ZC00NjFkLTljZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1 NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJBQTc0RjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkEzMjk0RTU1ODBCNjgyMDNCQzBERjA0RkQwMDcyMkFBNzRG NUQwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQzYWQ1MjI2LTY1NmQtNDYxZC05 Y2ZmLWM4M2FjMDc0MmYyMC8wLzMxMzAzMzJlMzEzODM5MmUzMTMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzODM4MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvXYwDQYJ KoZIhvcNAQELBQADggEBAIwi37acvIxwPxT48YUxyasan9tzIKC3JrivJBIjt1td Infda+ZmyoYbwQnlqFwBf2jlLM9jwe6vY19VNJhaz3/27iHS8hShUKXwnexuRpcy zT73dKc3tAg3jMloRl6mnMC4boYnXHOwTXYre7ghkp2Jb8DrJHxL6OhM3ConMpR0 yHep9z55LQiu80ByuUwwUxoUUrjR8YxqvkCq5tZUnwAifG+sQhpHZrDGUoYQJnx/ TYZTg5ZynOO3XDY6nZ1FCKZhomLN0a5iZ/lPH9+TIpb9cCo2jNH3aboNxnRizEP/ HmsX1RwGxQGaDltaI1A0zA4zXz5Zs1QRHOEKfYKvUzw= -----END CERTIFICATE-----Generated at Wed May 13 06:58:21 2026 by rpki-client