$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa File: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (raw, json) Hash identifier: yk8SbJDjIgwpR1q5UUTthk+GnMv3YbsIc4PcYf72L0s= Subject key identifier: 28:1A:97:20:56:44:6F:67:CA:95:53:C4:0A:A2:56:A8:7B:EF:88:E7 Certificate issuer: /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454 Certificate serial: 309B7D92C0DCA913104DCB6EFAC8946A7350C2B1 Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa Signing time: Sun 03 May 2026 02:29:44 +0000 ROA not before: Sun 03 May 2026 02:24:44 +0000 ROA not after: Sun 02 May 2027 02:29:44 +0000 asID: 133823 IP address blocks: 103.104.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:9b:7d:92:c0:dc:a9:13:10:4d:cb:6e:fa:c8:94:6a:73:50:c2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454 Validity Not Before: May 3 02:24:44 2026 GMT Not After : May 2 02:29:44 2027 GMT Subject: CN=281A972056446F67CA9553C40AA256A87BEF88E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:55:1d:6b:fe:d1:f5:2b:e3:d8:3d:9a:f9: f2:2c:31:9b:15:70:7b:45:db:fa:5e:25:5c:d9:10: 43:22:d3:e5:45:8e:55:4f:29:65:32:12:69:ae:a7: 8a:97:06:d6:3e:a0:5d:bd:52:e6:2f:de:c4:c0:36: 83:03:0d:9c:88:c1:56:5e:a7:76:55:74:41:c3:9b: cd:b3:e6:69:3c:f8:fd:91:40:27:16:eb:74:93:89: f1:95:2b:1a:9c:1d:d4:40:28:2f:5f:58:d7:e5:6c: ac:76:7c:d8:e9:37:36:59:f4:06:f0:85:08:af:0e: 19:07:d8:61:13:5c:88:c0:9b:9e:18:98:df:0f:d3: 23:11:96:41:03:02:8f:c5:2d:3d:44:f0:e7:bd:21: bf:0f:dc:87:52:98:4e:d5:da:89:23:5a:7f:ab:29: 7e:af:07:e4:20:01:90:be:37:1c:1c:a7:74:7a:93: 4c:de:ae:c3:7d:72:99:e4:94:18:4c:67:7e:c8:ff: bf:ba:d0:35:4d:06:ce:93:c8:da:49:22:05:8e:83: 0e:65:2c:88:67:74:ac:3a:12:92:6e:77:8e:79:69: b2:dc:b6:65:c6:36:43:dd:41:7a:70:0d:0b:d9:fa: 5a:8e:94:1e:c8:b3:ca:33:4c:a6:ce:59:3c:16:80: e2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:97:20:56:44:6F:67:CA:95:53:C4:0A:A2:56:A8:7B:EF:88:E7 X509v3 Authority Key Identifier: keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.104.133.0/24 Signature Algorithm: sha256WithRSAEncryption 09:89:19:90:99:99:9e:a3:02:c6:47:ca:1f:87:87:f1:69:07: 93:a2:34:39:38:68:e1:2a:28:af:2f:a2:f1:ae:ae:91:da:9d: 41:0a:2e:03:25:d7:9d:53:ef:5f:62:f0:e0:2e:7d:fa:1d:37: 8d:2e:0e:ec:dd:2c:82:d7:bf:9e:c6:ee:76:fe:fd:8e:eb:5d: 25:4c:b1:26:ff:25:1b:f6:f7:25:d0:1a:d2:36:ac:69:d8:2e: 4a:6b:e0:8f:4a:a6:29:c6:6f:4b:ba:cb:fc:bb:6f:d5:2b:30: 62:a7:a2:9c:d5:9c:33:54:d2:87:39:0e:4c:48:16:a9:dc:56: 64:2b:04:85:11:55:1b:17:a1:a9:33:37:0e:ec:d5:48:10:1c: 84:1f:c9:d2:3a:6a:b4:a2:a6:70:a0:c8:c8:07:37:1f:c2:36: de:a0:30:6d:8d:99:eb:59:ec:58:b7:8d:c7:8f:2a:5f:7b:7d: c0:56:3d:22:89:c2:4f:7d:e7:51:ef:a5:1c:cf:e8:a7:da:e7: 86:52:1a:35:67:d7:8d:07:19:ef:5a:ad:71:aa:aa:50:e7:43: c8:be:bc:7f:69:aa:9f:00:f3:32:b2:58:ee:66:11:4f:32:5b: b1:cf:05:c3:2f:60:8d:f8:be:e8:81:3a:3a:f9:a0:c2:c4:f8: 41:97:8b:0a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMJt9ksDcqRMQTctu+siUanNQwrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVDQTkzQzIxNzJFNTAzQkM1Q0FBQTE5NzQ0MTBEM0ZB NTlEMjQ1NDAeFw0yNjA1MDMwMjI0NDRaFw0yNzA1MDIwMjI5NDRaMDMxMTAvBgNV BAMTKDI4MUE5NzIwNTY0NDZGNjdDQTk1NTNDNDBBQTI1NkE4N0JFRjg4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAL1Uda/7R9Svj2D2a+fIsMZsV cHtF2/peJVzZEEMi0+VFjlVPKWUyEmmup4qXBtY+oF29UuYv3sTANoMDDZyIwVZe p3ZVdEHDm82z5mk8+P2RQCcW63STifGVKxqcHdRAKC9fWNflbKx2fNjpNzZZ9Abw hQivDhkH2GETXIjAm54YmN8P0yMRlkEDAo/FLT1E8Oe9Ib8P3IdSmE7V2okjWn+r KX6vB+QgAZC+Nxwcp3R6k0zersN9cpnklBhMZ37I/7+60DVNBs6TyNpJIgWOgw5l LIhndKw6EpJud455abLctmXGNkPdQXpwDQvZ+lqOlB7Is8ozTKbOWTwWgOIjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUKBqXIFZEb2fKlVPECqJWqHvviOcwHwYDVR0j BBgwFoAU3sqTwhcuUDvFyqoZdEENP6WdJFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ3OTFiMWYtNmRhOS00MDBkLThiMTQtOTkyYWFlNjM3NDZjLzAvREVDQTkzQzIx NzJFNTAzQkM1Q0FBQTE5NzQ0MTBEM0ZBNTlEMjQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUNBOTNDMjE3MkU1MDNCQzVDQUFBMTk3NDQxMEQzRkE1OUQy NDU0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ0NzkxYjFmLTZkYTktNDAwZC04 YjE0LTk5MmFhZTYzNzQ2Yy8wLzMxMzAzMzJlMzEzMDM0MmUzMTMzMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODMyMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnaIUwDQYJ KoZIhvcNAQELBQADggEBAAmJGZCZmZ6jAsZHyh+Hh/FpB5OiNDk4aOEqKK8vovGu rpHanUEKLgMl151T719i8OAuffodN40uDuzdLILXv57G7nb+/Y7rXSVMsSb/JRv2 9yXQGtI2rGnYLkpr4I9KpinGb0u6y/y7b9UrMGKnopzVnDNU0oc5DkxIFqncVmQr BIURVRsXoakzNw7s1UgQHIQfydI6arSipnCgyMgHNx/CNt6gMG2NmetZ7Fi3jceP Kl97fcBWPSKJwk9951HvpRzP6Kfa54ZSGjVn140HGe9arXGqqlDnQ8i+vH9pqp8A 8zKyWO5mEU8yW7HPBcMvYI34vuiBOjr5oMLE+EGXiwo= -----END CERTIFICATE-----Generated at Wed May 13 13:00:47 2026 by rpki-client