$ rpki-client -vvf rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa File: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (raw, json) Hash identifier: IVSxWqHfsbpgTjNP8RzLROF59WJoZKS7+db35QQ4pHo= Subject key identifier: C3:4A:95:7C:02:8A:EE:F7:DA:AE:B0:44:9E:A4:13:82:E7:09:5E:74 Certificate issuer: /CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Certificate serial: 24426BF3D3BF86BE4725EC3689470BC289F360ED Authority key identifier: 4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa Signing time: Sun 03 May 2026 02:43:25 +0000 ROA not before: Sun 03 May 2026 02:38:25 +0000 ROA not after: Sun 02 May 2027 02:43:25 +0000 asID: 150923 IP address blocks: 103.97.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:42:6b:f3:d3:bf:86:be:47:25:ec:36:89:47:0b:c2:89:f3:60:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Validity Not Before: May 3 02:38:25 2026 GMT Not After : May 2 02:43:25 2027 GMT Subject: CN=C34A957C028AEEF7DAAEB0449EA41382E7095E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3b:45:05:fe:e4:56:fd:be:c2:54:7e:6e:2f: 40:8d:19:fe:c3:df:e3:67:fe:3d:83:cb:8a:dd:8a: f3:7e:07:8c:ac:47:5a:d1:af:49:89:08:6c:29:ea: 48:33:0b:63:d8:1a:88:8c:01:e6:50:dd:2f:9e:c9: 19:6a:d6:e1:80:9e:5c:d5:d0:0b:37:d9:8a:23:3e: 1a:86:a9:91:70:aa:0d:55:91:2f:59:aa:14:e1:eb: 85:a4:26:d8:b9:a8:55:42:13:e5:15:c1:9e:13:a6: fc:32:ba:85:28:2b:89:45:c5:59:5d:7a:40:59:dd: 82:0f:44:b4:0b:ac:32:53:9c:26:7f:5c:51:f2:f0: 67:02:49:7e:f0:f4:43:01:32:dd:51:da:a7:b7:cd: e3:83:c8:f9:63:fb:5e:70:c5:29:e7:78:10:13:af: dd:ba:6f:8c:52:56:6f:c9:5b:3b:16:60:7e:c9:38: c8:0a:e5:56:83:b4:3d:5b:65:85:51:e9:0b:b1:73: ff:71:ee:0c:98:ee:b7:e4:f5:9d:5d:66:7a:0e:82: 8f:92:84:c1:d2:5e:19:6a:d4:07:02:5e:3a:c6:46: 98:55:24:03:10:bf:d1:e6:9b:ea:44:00:5a:a9:61: a7:37:91:f1:8f:40:14:14:97:5a:ac:de:3c:d9:1f: e3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4A:95:7C:02:8A:EE:F7:DA:AE:B0:44:9E:A4:13:82:E7:09:5E:74 X509v3 Authority Key Identifier: keyid:4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.225.0/24 Signature Algorithm: sha256WithRSAEncryption a2:d8:20:18:b5:7a:a3:aa:65:94:05:88:44:02:6e:96:77:a9: 4d:d2:6d:dd:90:28:b4:61:10:aa:6b:3b:0f:34:63:0e:5c:d7: 40:64:82:b5:a9:19:7b:b3:70:a5:ea:d2:41:f3:0d:d3:f9:8b: c8:02:2a:91:bc:2a:e3:68:eb:d5:0f:e4:bc:05:26:e7:06:0b: 10:d3:84:92:39:0a:d7:2f:57:f0:f0:78:d4:53:f8:b0:97:3d: b6:23:e0:8a:66:f6:dd:52:ae:a4:1c:8e:3b:c3:0a:cb:ad:df: b6:78:3d:92:eb:1e:e8:1d:3a:28:a6:97:f8:4d:71:44:8c:23: 92:ec:bf:be:19:ae:7f:99:d8:1b:70:bd:68:6e:1b:0d:c7:15: 0f:f9:3a:a2:26:3b:7d:85:ec:42:06:bf:9b:79:49:6a:81:b0: 2a:77:3c:ee:07:55:e8:c8:e5:5d:e8:3f:6b:97:2d:14:03:58: 9d:14:60:4e:48:bf:e5:73:b6:29:64:07:a1:e2:70:54:3a:ee: bb:a8:ed:c3:8f:5f:26:99:1a:b4:f1:7c:e6:3a:c3:df:53:0c: 94:bb:56:02:de:66:e2:05:8c:78:d5:4b:73:48:13:08:64:4f: b5:62:ea:6e:40:9c:54:99:e3:d8:e8:af:47:80:a9:25:db:1f: 90:08:d5:fd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJEJr89O/hr5HJew2iUcLwonzYO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFFMzEx OTAwNzFGMjAeFw0yNjA1MDMwMjM4MjVaFw0yNzA1MDIwMjQzMjVaMDMxMTAvBgNV BAMTKEMzNEE5NTdDMDI4QUVFRjdEQUFFQjA0NDlFQTQxMzgyRTcwOTVFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeO0UF/uRW/b7CVH5uL0CNGf7D 3+Nn/j2Dy4rdivN+B4ysR1rRr0mJCGwp6kgzC2PYGoiMAeZQ3S+eyRlq1uGAnlzV 0As32YojPhqGqZFwqg1VkS9ZqhTh64WkJti5qFVCE+UVwZ4TpvwyuoUoK4lFxVld ekBZ3YIPRLQLrDJTnCZ/XFHy8GcCSX7w9EMBMt1R2qe3zeODyPlj+15wxSnneBAT r926b4xSVm/JWzsWYH7JOMgK5VaDtD1bZYVR6Quxc/9x7gyY7rfk9Z1dZnoOgo+S hMHSXhlq1AcCXjrGRphVJAMQv9Hmm+pEAFqpYac3kfGPQBQUl1qs3jzZH+OlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUw0qVfAKK7vfarrBEnqQTgucJXnQwHwYDVR0j BBgwFoAUTXFd5uJbdLOmd7rtfOgeMRkAcfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRhYWEyZjEtNjNhOS00MjgxLTg5NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZF MjVCNzRCM0E2NzdCQUVEN0NFODFFMzExOTAwNzFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDcxNURFNkUyNUI3NEIzQTY3N0JBRUQ3Q0U4MUUzMTE5MDA3 MUYyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc0YWFhMmYxLTYzYTktNDI4MS04 OTQyLWZiNWQ4MjQxMTlhNC8wLzMxMzAzMzJlMzkzNzJlMzIzMjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2HhMA0GCSqG SIb3DQEBCwUAA4IBAQCi2CAYtXqjqmWUBYhEAm6Wd6lN0m3dkCi0YRCqazsPNGMO XNdAZIK1qRl7s3Cl6tJB8w3T+YvIAiqRvCrjaOvVD+S8BSbnBgsQ04SSOQrXL1fw 8HjUU/iwlz22I+CKZvbdUq6kHI47wwrLrd+2eD2S6x7oHTooppf4TXFEjCOS7L++ Ga5/mdgbcL1obhsNxxUP+TqiJjt9hexCBr+beUlqgbAqdzzuB1XoyOVd6D9rly0U A1idFGBOSL/lc7YpZAeh4nBUOu67qO3Dj18mmRq08XzmOsPfUwyUu1YC3mbiBYx4 1UtzSBMIZE+1YupuQJxUmePY6K9HgKkl2x+QCNX9 -----END CERTIFICATE-----Generated at Wed May 13 05:48:17 2026 by rpki-client