$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa File: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (raw, json) Hash identifier: Zs3u840j4ZP200LFP4fVZsCLeA3oRYjdoZn2EIvaoNc= Subject key identifier: F2:B7:3F:A7:C0:88:04:19:C7:C6:9E:A7:FE:F7:3C:71:B0:29:85:E2 Certificate issuer: /CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Certificate serial: 66C03BCEBC6D9FCEE8E5F02A4206993D2291C0A2 Authority key identifier: 92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa Signing time: Sun 03 May 2026 02:36:16 +0000 ROA not before: Sun 03 May 2026 02:31:16 +0000 ROA not after: Sun 02 May 2027 02:36:16 +0000 asID: 147131 IP address blocks: 103.176.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c0:3b:ce:bc:6d:9f:ce:e8:e5:f0:2a:42:06:99:3d:22:91:c0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Validity Not Before: May 3 02:31:16 2026 GMT Not After : May 2 02:36:16 2027 GMT Subject: CN=F2B73FA7C0880419C7C69EA7FEF73C71B02985E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:fa:53:aa:b6:79:f6:c7:c6:53:43:e0:0e: 82:89:fd:97:55:72:7a:f6:da:71:ec:ce:ee:64:89: 9d:10:fa:88:98:48:bd:2f:86:48:5f:24:ca:79:cb: 45:ae:4a:88:e3:ce:5f:9c:92:3c:81:ab:77:bd:ae: 62:26:57:57:b9:a3:a5:ae:9b:5e:dd:50:a1:73:62: 2e:74:d3:12:a4:31:1f:ca:ca:41:cf:20:76:8c:56: 12:63:18:a0:c9:41:bc:1e:cc:19:3c:b2:9c:ee:24: 45:3c:88:db:3f:1d:0f:13:cb:c8:ee:10:99:de:f3: c8:98:70:e5:4b:b6:54:82:36:4a:52:b9:84:27:69: 40:9d:c8:8f:37:15:c4:63:8c:8c:a1:6d:71:0a:1b: d3:2f:a6:03:a2:e3:75:f6:93:19:7f:7d:77:2b:3b: ff:b0:03:c1:a9:a5:cd:59:ce:5e:cc:dd:04:ed:6f: b3:8c:cb:a7:c6:20:f6:77:49:a8:27:bd:82:38:d7: c0:53:4d:00:b7:df:37:b0:0b:b7:f2:64:df:03:35: d2:ae:21:8b:17:69:7e:da:6a:02:15:7d:5d:09:79: 6c:0e:96:72:1a:71:39:1e:3a:04:6e:34:de:47:96: cd:37:be:d1:52:89:9f:55:32:ec:2e:6b:fe:65:1e: 6f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B7:3F:A7:C0:88:04:19:C7:C6:9E:A7:FE:F7:3C:71:B0:29:85:E2 X509v3 Authority Key Identifier: keyid:92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.97.0/24 Signature Algorithm: sha256WithRSAEncryption 83:e2:8e:e2:80:a3:d2:32:0e:43:2b:7e:a5:88:5a:6c:99:49: cc:a7:be:32:e3:1f:37:9d:2d:0a:32:c5:44:d2:74:b3:0d:56: 69:aa:98:56:fa:17:c8:f0:16:26:02:82:97:13:12:60:57:db: 71:f8:cc:be:31:59:66:57:2f:93:d4:0b:32:80:be:ac:a6:3d: 73:59:04:bb:a5:fc:b3:bf:dd:9b:43:de:af:b3:88:63:bc:4c: 1a:7a:2c:36:48:a3:c8:17:6f:62:3b:c3:9a:35:6f:32:c0:96: dc:44:a6:f9:53:6b:da:35:b1:7b:fd:84:64:4a:43:a9:c5:42: 48:4e:39:13:e2:14:b5:b7:d1:3d:76:aa:68:11:62:60:07:81: 30:4d:39:2c:df:af:9b:2c:ad:de:4c:65:79:10:06:cc:f0:75: 9d:04:dc:dd:aa:94:40:95:b9:00:c3:7a:57:8b:5e:d5:35:3d: a9:d6:0f:46:6d:08:c6:75:62:66:7f:56:f1:a9:aa:92:a9:b8: 04:e0:d7:6a:36:43:21:de:ba:6c:b8:8e:b2:ea:cc:23:f3:40: 96:84:34:cd:bd:1b:c8:da:aa:90:f2:37:d0:4b:65:42:f4:2a: d0:5e:58:67:98:86:72:72:ad:b5:6c:f4:19:d4:0a:0e:b2:eb: 9e:a8:7a:58 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZsA7zrxtn87o5fAqQgaZPSKRwKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdC RjUyQ0Y3RTAeFw0yNjA1MDMwMjMxMTZaFw0yNzA1MDIwMjM2MTZaMDMxMTAvBgNV BAMTKEYyQjczRkE3QzA4ODA0MTlDN0M2OUVBN0ZFRjczQzcxQjAyOTg1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMfpTqrZ59sfGU0PgDoKJ/ZdV cnr22nHszu5kiZ0Q+oiYSL0vhkhfJMp5y0WuSojjzl+ckjyBq3e9rmImV1e5o6Wu m17dUKFzYi500xKkMR/KykHPIHaMVhJjGKDJQbwezBk8spzuJEU8iNs/HQ8Ty8ju EJne88iYcOVLtlSCNkpSuYQnaUCdyI83FcRjjIyhbXEKG9MvpgOi43X2kxl/fXcr O/+wA8Gppc1Zzl7M3QTtb7OMy6fGIPZ3SagnvYI418BTTQC33zewC7fyZN8DNdKu IYsXaX7aagIVfV0JeWwOlnIacTkeOgRuNN5Hls03vtFSiZ9VMuwua/5lHm9NAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU8rc/p8CIBBnHxp6n/vc8cbApheIwHwYDVR0j BBgwFoAUklq0P2JE0vAfAegGj6EKJ79Sz34wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMzNGRjM2YtMzA4Zi00ZGUxLWEzNjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2 MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdCRjUyQ0Y3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjVBQjQzRjYyNDREMkYwMUYwMUU4MDY4RkExMEEyN0JGNTJD RjdFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjMzRkYzNmLTMwOGYtNGRlMS1h MzY1LTcwMWJkOWNmMTAwNC8wLzMxMzAzMzJlMzEzNzM2MmUzOTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7BhMA0GCSqG SIb3DQEBCwUAA4IBAQCD4o7igKPSMg5DK36liFpsmUnMp74y4x83nS0KMsVE0nSz DVZpqphW+hfI8BYmAoKXExJgV9tx+My+MVlmVy+T1AsygL6spj1zWQS7pfyzv92b Q96vs4hjvEwaeiw2SKPIF29iO8OaNW8ywJbcRKb5U2vaNbF7/YRkSkOpxUJITjkT 4hS1t9E9dqpoEWJgB4EwTTks36+bLK3eTGV5EAbM8HWdBNzdqpRAlbkAw3pXi17V NT2p1g9GbQjGdWJmf1bxqaqSqbgE4NdqNkMh3rpsuI6y6swj80CWhDTNvRvI2qqQ 8jfQS2VC9CrQXlhnmIZycq21bPQZ1AoOsuueqHpY -----END CERTIFICATE-----Generated at Wed May 13 05:44:13 2026 by rpki-client