$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa File: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (raw, json) Hash identifier: 7G6gzgziJNADnBWRinmQJqfiu0VElTbunaLLh9HunCE= Subject key identifier: 7F:70:49:7A:04:A5:23:14:5A:11:07:78:A8:CE:2A:22:11:99:C2:7E Certificate issuer: /CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Certificate serial: 4E7781F9751A03D0BB1263E50098FF374185F932 Authority key identifier: C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa Signing time: Sun 03 May 2026 02:32:02 +0000 ROA not before: Sun 03 May 2026 02:27:02 +0000 ROA not after: Sun 02 May 2027 02:32:02 +0000 asID: 142389 IP address blocks: 103.172.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:77:81:f9:75:1a:03:d0:bb:12:63:e5:00:98:ff:37:41:85:f9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Validity Not Before: May 3 02:27:02 2026 GMT Not After : May 2 02:32:02 2027 GMT Subject: CN=7F70497A04A523145A110778A8CE2A221199C27E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:05:fe:62:f7:6c:d9:ef:82:8f:64:aa:00:24: d1:f0:7a:8d:e0:4f:da:3a:27:a0:93:7e:be:d5:bd: a6:3f:f8:9b:a5:e2:01:f8:e6:2d:b5:94:9b:4e:e5: 79:4c:bc:0f:e3:98:4d:83:3b:c4:43:c3:cb:a5:cc: 27:d8:1f:8e:cb:16:f0:04:e6:5f:41:d8:6f:54:b7: ac:57:f4:ff:6d:97:3c:8a:84:87:c9:33:63:97:3a: 58:2b:e5:39:29:0a:ab:00:e5:d1:35:e9:88:a9:46: 19:56:da:09:7c:c8:f4:cd:6d:37:35:8f:56:59:20: d7:2c:4c:8e:d7:2e:a4:2d:f4:1a:c1:d7:c3:63:ee: 2e:86:b8:d8:50:38:80:91:ee:da:03:2c:5d:7f:cd: 16:97:3a:c2:a4:b4:58:82:82:d2:21:a4:96:77:8f: 92:a4:8c:1f:cf:53:41:15:cc:bd:dc:c6:b9:f3:8e: 29:99:0c:04:af:4d:98:37:e2:b5:0f:23:b2:69:cf: e7:2e:2f:27:ea:ed:8a:c0:0e:a3:d5:e5:c2:17:0c: 1b:3e:d7:d4:c8:8f:11:ad:5c:fe:2f:f1:d1:5c:cd: 74:b9:9f:c0:fb:91:08:97:49:3d:e2:24:f6:d0:87: c9:ea:0a:83:d5:0d:51:2c:24:9c:93:00:28:4c:23: 2b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:70:49:7A:04:A5:23:14:5A:11:07:78:A8:CE:2A:22:11:99:C2:7E X509v3 Authority Key Identifier: keyid:C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.144.0/24 Signature Algorithm: sha256WithRSAEncryption 45:fb:3e:b1:92:e6:8e:53:a2:b9:f1:e7:71:ab:df:b1:ea:d6: 20:f6:57:84:b7:a7:0c:65:d3:9d:b9:56:84:ee:ac:2f:a2:b5: 8a:ff:fe:40:b2:cd:c6:7c:ea:58:02:d3:fa:f5:01:fc:cd:e9: 7d:67:08:9f:8f:24:84:77:f4:c2:19:b9:32:ca:8f:29:63:56: e9:a9:9b:ef:7a:c9:f5:d3:1f:2a:01:cc:d1:bd:a1:78:30:c3: f1:34:33:be:2a:c9:b2:b2:7a:05:4e:e1:fe:9d:e2:d3:e3:72: 59:a4:25:c1:0b:39:11:16:52:38:c1:28:a5:49:c6:71:46:64: 7d:b4:12:a7:ab:0c:2e:f6:09:01:19:38:42:0a:5b:e6:0d:06: 4e:2c:62:aa:23:4b:76:83:c5:66:26:08:84:56:57:ea:ea:2a: 24:51:d3:42:62:5d:ca:0d:01:0f:a2:0d:49:72:54:3c:6e:07: 5e:c7:74:bf:9a:eb:95:aa:f6:eb:9a:8e:b2:db:af:6a:4a:8b: ab:9d:e1:67:09:fa:94:47:a6:77:f2:06:f2:d4:37:61:36:78: 8a:2d:27:72:f9:10:31:12:9f:41:6f:d6:a9:cc:c6:8b:28:33: cb:da:db:e0:ec:95:12:c1:87:58:6f:e7:ba:6e:bc:6c:c2:e8: 11:06:ab:a5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTneB+XUaA9C7EmPlAJj/N0GF+TIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1 MTBBNTQ5RTAeFw0yNjA1MDMwMjI3MDJaFw0yNzA1MDIwMjMyMDJaMDMxMTAvBgNV BAMTKDdGNzA0OTdBMDRBNTIzMTQ1QTExMDc3OEE4Q0UyQTIyMTE5OUMyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbBf5i92zZ74KPZKoAJNHweo3g T9o6J6CTfr7VvaY/+Jul4gH45i21lJtO5XlMvA/jmE2DO8RDw8ulzCfYH47LFvAE 5l9B2G9Ut6xX9P9tlzyKhIfJM2OXOlgr5TkpCqsA5dE16YipRhlW2gl8yPTNbTc1 j1ZZINcsTI7XLqQt9BrB18Nj7i6GuNhQOICR7toDLF1/zRaXOsKktFiCgtIhpJZ3 j5KkjB/PU0EVzL3cxrnzjimZDASvTZg34rUPI7Jpz+cuLyfq7YrADqPV5cIXDBs+ 19TIjxGtXP4v8dFczXS5n8D7kQiXST3iJPbQh8nqCoPVDVEsJJyTAChMIyspAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUf3BJegSlIxRaEQd4qM4qIhGZwn4wHwYDVR0j BBgwFoAUwjsTQiCnuVuB3Mg9jX4GpVEKVJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ3OWU3YTctMWFhZS00ZTUyLWJhYzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIy MEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1MTBBNTQ5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjNCMTM0MjIwQTdCOTVCODFEQ0M4M0Q4RDdFMDZBNTUxMEE1 NDlFLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRkNzllN2E3LTFhYWUtNGU1Mi1i YWMzLThmN2M2N2FlMGEwNC8wLzMxMzAzMzJlMzEzNzMyMmUzMTM0MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrJAwDQYJ KoZIhvcNAQELBQADggEBAEX7PrGS5o5Tornx53Gr37Hq1iD2V4S3pwxl0525VoTu rC+itYr//kCyzcZ86lgC0/r1AfzN6X1nCJ+PJIR39MIZuTLKjyljVumpm+96yfXT HyoBzNG9oXgww/E0M74qybKyegVO4f6d4tPjclmkJcELOREWUjjBKKVJxnFGZH20 EqerDC72CQEZOEIKW+YNBk4sYqojS3aDxWYmCIRWV+rqKiRR00JiXcoNAQ+iDUly VDxuB17HdL+a65Wq9uuajrLbr2pKi6ud4WcJ+pRHpnfyBvLUN2E2eIotJ3L5EDES n0Fv1qnMxosoM8va2+DslRLBh1hv57puvGzC6BEGq6U= -----END CERTIFICATE-----Generated at Wed May 13 03:47:46 2026 by rpki-client