$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa File: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (raw, json) Hash identifier: aBcK0NarT0nImTnt9nV5uNk7IL6hRk/eBBV0YB7Rf0U= Subject key identifier: CD:A7:A6:C9:8B:36:65:7B:12:2D:51:DC:90:7F:46:4A:CC:C8:C2:27 Certificate issuer: /CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Certificate serial: 2AA988B38776242D61D257993D8FFFD955D02FE6 Authority key identifier: 68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa Signing time: Sun 03 May 2026 02:45:08 +0000 ROA not before: Sun 03 May 2026 02:40:08 +0000 ROA not after: Sun 02 May 2027 02:45:08 +0000 asID: 140396 IP address blocks: 103.150.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a9:88:b3:87:76:24:2d:61:d2:57:99:3d:8f:ff:d9:55:d0:2f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Validity Not Before: May 3 02:40:08 2026 GMT Not After : May 2 02:45:08 2027 GMT Subject: CN=CDA7A6C98B36657B122D51DC907F464ACCC8C227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:25:76:c2:9d:f9:12:8e:3f:17:09:50:c8:45: 6d:87:ad:7a:2b:cc:65:f5:9b:7b:9f:53:12:82:e8: 0b:8b:27:1c:c3:8f:b9:94:a2:69:2f:6f:79:a6:92: 44:ec:31:ef:6d:d3:65:e5:00:5b:04:73:d8:a4:74: bd:89:50:b3:26:18:b7:d7:fd:96:f7:ab:bf:db:5b: 98:44:23:a2:b4:c0:2c:b6:63:92:f3:1a:b7:4d:f3: ba:a8:c0:38:b6:aa:9b:f8:cf:31:dd:b7:08:fd:10: 5f:f9:7c:ba:27:fb:64:bd:0a:25:bf:d4:72:e4:58: 4e:ae:c0:9c:a3:f0:d2:c7:6c:3a:8f:03:28:3b:7f: 53:8d:a4:79:e1:d3:43:df:12:b3:58:e5:d5:17:d0: 04:50:da:ba:76:ae:77:11:06:2b:e1:8b:72:74:cc: e7:54:46:21:58:9a:1b:ea:0e:75:46:5d:86:44:77: 83:3f:79:ea:a7:3f:33:30:2f:05:de:00:84:18:77: 04:6e:60:3a:4a:03:76:34:10:41:f1:a7:81:5a:65: 17:97:f8:e6:94:22:99:0c:6d:91:f0:8e:00:64:3f: 6f:90:28:4b:c5:80:f2:96:8a:2f:c7:45:02:d0:2e: 3f:32:55:e5:24:79:98:a0:0d:73:44:a4:9a:3d:e2: 7a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A7:A6:C9:8B:36:65:7B:12:2D:51:DC:90:7F:46:4A:CC:C8:C2:27 X509v3 Authority Key Identifier: keyid:68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.174.0/24 Signature Algorithm: sha256WithRSAEncryption aa:85:27:c2:8c:68:22:94:ee:53:08:ba:24:1a:3f:3d:fd:0c: 4d:df:6d:22:88:1f:bd:4f:75:79:ca:9e:32:a1:a1:f1:da:4f: 52:8f:24:6a:65:03:af:55:3b:7f:e7:eb:b4:38:2e:26:a9:6d: 18:bf:60:81:2b:a8:9b:db:15:8c:0e:fc:8b:cb:60:08:a8:f5: ac:85:12:4a:81:a6:c3:0e:05:7a:93:de:ec:00:9d:53:11:eb: d4:c0:35:af:ce:43:b6:7a:a7:a7:0e:d8:60:b5:ab:90:2b:a1: 8c:84:28:e0:94:e5:78:d8:0d:41:54:94:13:dc:43:78:9f:96: 1f:ec:b1:86:2c:03:a0:4e:df:c0:58:24:96:74:cc:30:2e:48: a4:8c:e7:14:9f:ec:f5:89:3f:f0:1f:96:73:04:37:be:7f:5e: 01:91:4c:ad:a1:fb:96:12:9c:c6:53:34:40:4c:2d:4b:98:39: 16:88:b3:c9:b4:bb:bd:f0:94:a4:97:b4:46:3b:4b:1c:49:6d: ae:19:5e:9f:88:ef:c7:86:f8:82:89:21:de:6b:5c:63:7e:cc: 2c:9f:fc:87:bc:ab:de:ed:45:4e:21:0b:8b:e0:ee:3a:59:b2: 5e:3e:ef:bb:4d:bf:cf:08:53:21:fa:1b:2c:0f:6b:fd:fa:5a: e0:4e:50:82 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKqmIs4d2JC1h0leZPY//2VXQL+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUEx MDA4QkNGMDAeFw0yNjA1MDMwMjQwMDhaFw0yNzA1MDIwMjQ1MDhaMDMxMTAvBgNV BAMTKENEQTdBNkM5OEIzNjY1N0IxMjJENTFEQzkwN0Y0NjRBQ0NDOEMyMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbJXbCnfkSjj8XCVDIRW2HrXor zGX1m3ufUxKC6AuLJxzDj7mUomkvb3mmkkTsMe9t02XlAFsEc9ikdL2JULMmGLfX /Zb3q7/bW5hEI6K0wCy2Y5LzGrdN87qowDi2qpv4zzHdtwj9EF/5fLon+2S9CiW/ 1HLkWE6uwJyj8NLHbDqPAyg7f1ONpHnh00PfErNY5dUX0ARQ2rp2rncRBivhi3J0 zOdURiFYmhvqDnVGXYZEd4M/eeqnPzMwLwXeAIQYdwRuYDpKA3Y0EEHxp4FaZReX +OaUIpkMbZHwjgBkP2+QKEvFgPKWii/HRQLQLj8yVeUkeZigDXNEpJo94nopAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUzaemyYs2ZXsSLVHckH9GSszIwicwHwYDVR0j BBgwFoAUaCJ6y2DT6eEMa5pX04MTmhAIvPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZWNkNzQtNDQyNC00ZDQwLTk2YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2 MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUExMDA4QkNGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODIyN0FDQjYwRDNFOUUxMEM2QjlBNTdEMzgzMTM5QTEwMDhC Q0YwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdiNWVjZDc0LTQ0MjQtNGQ0MC05 NmExLTdmZDc2MzAxMTk0NC8wLzMxMzAzMzJlMzEzNTMwMmUzMTM3MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnlq4wDQYJ KoZIhvcNAQELBQADggEBAKqFJ8KMaCKU7lMIuiQaPz39DE3fbSKIH71PdXnKnjKh ofHaT1KPJGplA69VO3/n67Q4LiapbRi/YIErqJvbFYwO/IvLYAio9ayFEkqBpsMO BXqT3uwAnVMR69TANa/OQ7Z6p6cO2GC1q5AroYyEKOCU5XjYDUFUlBPcQ3iflh/s sYYsA6BO38BYJJZ0zDAuSKSM5xSf7PWJP/AflnMEN75/XgGRTK2h+5YSnMZTNEBM LUuYORaIs8m0u73wlKSXtEY7SxxJba4ZXp+I78eG+IKJId5rXGN+zCyf/Ie8q97t RU4hC4vg7jpZsl4+77tNv88IUyH6GywPa/36WuBOUII= -----END CERTIFICATE-----Generated at Wed May 13 11:50:30 2026 by rpki-client