$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa File: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (raw, json) Hash identifier: hjalkv3P7i18uJ7S9FBqgBtHEhsf6OEBgP8fNSR+fXY= Subject key identifier: ED:4A:52:6C:DF:BE:E5:BD:C8:A7:B4:6E:9D:0F:02:41:6F:66:C1:72 Certificate issuer: /CN=357778A786AA1E6854673B0A6AAAA40B85254E94 Certificate serial: 7AFAC5FC08EB56766BBD7440D61D08620907CD08 Authority key identifier: 35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa Signing time: Sun 03 May 2026 02:44:53 +0000 ROA not before: Sun 03 May 2026 02:39:53 +0000 ROA not after: Sun 02 May 2027 02:44:53 +0000 asID: 147101 IP address blocks: 103.174.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fa:c5:fc:08:eb:56:76:6b:bd:74:40:d6:1d:08:62:09:07:cd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357778A786AA1E6854673B0A6AAAA40B85254E94 Validity Not Before: May 3 02:39:53 2026 GMT Not After : May 2 02:44:53 2027 GMT Subject: CN=ED4A526CDFBEE5BDC8A7B46E9D0F02416F66C172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d1:ad:06:07:da:6c:49:7f:69:3c:9b:41:62: 10:22:ce:82:cc:3e:f0:fb:6e:0c:6a:4e:41:e1:89: 3a:3b:84:7c:34:cc:48:ff:c2:d6:04:23:a4:67:54: ef:69:65:2b:82:c6:c4:bf:da:51:eb:e6:73:83:51: 13:14:ac:cc:53:6e:45:f8:19:7a:fc:24:58:ac:99: df:f0:5d:a6:b6:69:09:76:50:05:7b:c7:3c:8f:e9: cc:20:e5:82:ee:3a:bc:c3:e9:d2:34:c2:7a:0d:cd: 5e:f6:28:a2:cd:c8:59:3d:93:65:36:66:7b:90:10: d1:94:eb:13:d1:fd:72:c3:6d:9d:8a:8a:03:96:5e: a6:9a:0a:b7:6a:17:53:a4:52:93:bf:7a:a2:40:f4: ca:bf:e4:d9:80:18:fe:8f:50:bb:d8:53:78:5c:0d: a4:b0:21:33:62:e0:0b:71:6c:ed:93:28:8c:63:cf: af:5c:d0:8f:83:6f:b7:7f:86:ed:83:25:3e:17:70: d3:dc:a9:05:e4:05:7c:5d:d3:b3:9b:e8:85:39:44: d3:5d:fe:c4:4d:4f:0f:47:c0:f7:fa:bd:a6:71:df: 3c:e4:08:23:21:4d:48:f7:9c:82:74:c1:7c:f2:b3: 13:d5:6d:51:c6:10:a2:c0:64:40:3c:29:01:25:a0: 43:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4A:52:6C:DF:BE:E5:BD:C8:A7:B4:6E:9D:0F:02:41:6F:66:C1:72 X509v3 Authority Key Identifier: keyid:35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.174.0/23 Signature Algorithm: sha256WithRSAEncryption b8:b6:5f:6b:e7:4a:82:32:ff:53:54:45:6a:04:a2:1c:63:d4: f9:6a:ef:cc:22:94:65:ef:cf:14:d3:40:1f:e3:ba:af:14:b3: 63:44:64:d2:64:8c:6d:ce:5a:69:50:92:6e:74:2e:85:35:8e: 21:8a:b8:15:64:2c:19:6f:2a:5d:c7:11:6b:e8:fb:f9:07:c0: b4:da:4c:b3:f7:30:ae:b8:fd:4e:f2:b7:3c:14:90:1e:33:03: 3c:4a:5d:32:03:ae:88:83:0e:1a:98:d1:03:2c:14:8f:a9:ec: f0:46:28:fd:ac:51:c1:35:a2:dc:8a:ae:b5:95:0e:cd:09:b3: 3c:81:9c:a9:81:c8:55:64:c8:f4:f9:01:3d:1d:84:89:04:7c: 81:3b:50:fd:20:f3:e3:1a:be:55:58:f3:a3:c3:2c:65:f7:f5: 1b:b7:01:c4:57:7c:c9:bc:13:b0:da:c1:9f:5d:6f:7d:bc:1c: ab:66:2d:b1:0c:b9:f2:bf:87:d1:03:3a:ae:4f:f7:b1:48:ac: f0:0a:1a:19:e0:46:28:03:da:65:a5:fb:d8:f8:23:54:99:bc: ae:91:86:f4:57:3d:16:e9:b4:27:a9:c8:0d:22:13:3e:74:75: b1:87:fe:c4:cf:66:a0:fa:95:62:38:e1:0a:13:2c:f6:c2:af: 76:02:f7:33 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUevrF/AjrVnZrvXRA1h0IYgkHzQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3Nzc4QTc4NkFBMUU2ODU0NjczQjBBNkFBQUE0MEI4 NTI1NEU5NDAeFw0yNjA1MDMwMjM5NTNaFw0yNzA1MDIwMjQ0NTNaMDMxMTAvBgNV BAMTKEVENEE1MjZDREZCRUU1QkRDOEE3QjQ2RTlEMEYwMjQxNkY2NkMxNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk0a0GB9psSX9pPJtBYhAizoLM PvD7bgxqTkHhiTo7hHw0zEj/wtYEI6RnVO9pZSuCxsS/2lHr5nODURMUrMxTbkX4 GXr8JFismd/wXaa2aQl2UAV7xzyP6cwg5YLuOrzD6dI0wnoNzV72KKLNyFk9k2U2 ZnuQENGU6xPR/XLDbZ2KigOWXqaaCrdqF1OkUpO/eqJA9Mq/5NmAGP6PULvYU3hc DaSwITNi4AtxbO2TKIxjz69c0I+Db7d/hu2DJT4XcNPcqQXkBXxd07Ob6IU5RNNd /sRNTw9HwPf6vaZx3zzkCCMhTUj3nIJ0wXzysxPVbVHGEKLAZEA8KQEloEMVAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU7UpSbN++5b3Ip7RunQ8CQW9mwXIwHwYDVR0j BBgwFoAUNXd4p4aqHmhUZzsKaqqkC4UlTpQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2E3MGQ0NGUtMGY3MC00NWEzLWFmMDQtODFmNDI5ZGIzYTVkLzAvMzU3Nzc4QTc4 NkFBMUU2ODU0NjczQjBBNkFBQUE0MEI4NTI1NEU5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTc3NzhBNzg2QUExRTY4NTQ2NzNCMEE2QUFBQTQwQjg1MjU0 RTk0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdhNzBkNDRlLTBmNzAtNDVhMy1h ZjA0LTgxZjQyOWRiM2E1ZC8wLzMxMzAzMzJlMzEzNzM0MmUzMTM3MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzczMTMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnrq4wDQYJ KoZIhvcNAQELBQADggEBALi2X2vnSoIy/1NURWoEohxj1Plq78wilGXvzxTTQB/j uq8Us2NEZNJkjG3OWmlQkm50LoU1jiGKuBVkLBlvKl3HEWvo+/kHwLTaTLP3MK64 /U7ytzwUkB4zAzxKXTIDroiDDhqY0QMsFI+p7PBGKP2sUcE1otyKrrWVDs0JszyB nKmByFVkyPT5AT0dhIkEfIE7UP0g8+MavlVY86PDLGX39Ru3AcRXfMm8E7DawZ9d b328HKtmLbEMufK/h9EDOq5P97FIrPAKGhngRigD2mWl+9j4I1SZvK6RhvRXPRbp tCepyA0iEz50dbGH/sTPZqD6lWI44QoTLPbCr3YC9zM= -----END CERTIFICATE-----Generated at Wed May 13 06:37:12 2026 by rpki-client