$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa File: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (raw, json) Hash identifier: GQgQVMDtxFDkqPjuHN/9ksx5BAe6A6G9N08FMHk3oZk= Subject key identifier: 12:AA:7B:B8:96:26:3B:12:D5:CA:8D:07:26:66:EC:12:0D:D8:2E:3C Certificate issuer: /CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Certificate serial: 3F1C7AAFA7F917DF668DBE430770F72547F1FDE0 Authority key identifier: 68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa Signing time: Sun 03 May 2026 02:45:09 +0000 ROA not before: Sun 03 May 2026 02:40:09 +0000 ROA not after: Sun 02 May 2027 02:45:09 +0000 asID: 140396 IP address blocks: 103.150.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1c:7a:af:a7:f9:17:df:66:8d:be:43:07:70:f7:25:47:f1:fd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Validity Not Before: May 3 02:40:09 2026 GMT Not After : May 2 02:45:09 2027 GMT Subject: CN=12AA7BB896263B12D5CA8D072666EC120DD82E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:ec:39:c1:30:7f:3c:8d:c6:55:0c:93:fa: 68:c5:c3:63:45:f5:49:df:bb:94:34:8d:39:7c:9d: 83:19:e8:fe:7d:a0:9c:6e:fd:d5:5c:52:29:85:21: 7d:cf:50:d9:55:d5:23:b4:64:83:4e:a6:93:82:bd: 12:8e:8f:ec:c9:e7:bb:36:d5:7f:7c:95:e6:47:a9: 2c:5c:d1:87:65:dd:91:be:34:27:e9:54:d8:1f:3b: dd:46:72:98:c0:34:7c:cb:43:db:d5:e5:c8:4f:5e: 0f:7d:c2:25:f5:f7:94:e9:59:9a:6b:c6:c5:8c:27: 0c:e5:32:d2:3d:fe:8c:4c:b0:70:89:68:31:97:92: 97:da:82:89:f2:93:1a:42:a2:50:c5:ed:bb:c8:2c: 73:d0:67:41:5a:69:6c:3a:4d:f1:2e:92:51:ef:7c: e5:0a:df:75:26:aa:eb:be:ea:c8:f0:62:07:6c:74: 28:61:c4:07:cb:ae:23:3b:ab:0b:6c:50:61:ba:a1: 2f:89:36:d8:30:0c:44:74:99:86:5a:31:0b:67:20: cb:e1:a1:57:ae:c2:4b:33:65:a6:82:94:3f:3a:8f: 51:59:3b:52:72:36:18:42:50:f0:3f:b1:31:9a:46: db:43:43:53:a5:4b:5e:2a:ad:fd:80:9f:20:94:6e: aa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AA:7B:B8:96:26:3B:12:D5:CA:8D:07:26:66:EC:12:0D:D8:2E:3C X509v3 Authority Key Identifier: keyid:68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.175.0/24 Signature Algorithm: sha256WithRSAEncryption 41:ca:d8:2c:76:1b:53:dc:ef:57:8b:c1:97:9a:e5:19:f8:4e: 78:80:fe:da:98:57:88:68:4d:92:fe:12:3d:97:dc:36:9c:de: 41:34:78:38:d2:98:d4:33:60:df:5e:4a:35:75:6b:f1:14:19: ab:37:be:19:9f:b6:7a:7c:15:76:71:be:c6:fc:b6:f8:29:17: 03:6e:f5:a8:58:f5:e2:54:5e:57:bf:75:04:5b:e4:34:56:d8: 91:59:4b:45:d3:8b:6a:d0:bc:eb:92:11:5c:85:a2:ce:a6:b5: c2:08:47:87:19:cd:88:5a:44:11:6c:d4:10:38:5f:54:25:93: 06:2f:c8:3d:b4:b2:b4:00:f1:a8:9f:2c:a9:2b:d1:79:d9:90: c9:f3:58:61:d1:ea:44:ea:5d:d2:b0:a9:b9:51:de:c4:4b:38: 2c:8c:e7:d9:c1:d9:57:69:64:a1:6d:2c:09:be:0f:81:5e:67: d5:e8:d0:7c:01:f7:dd:8d:a5:38:99:78:79:cc:32:19:4a:c3: 5b:fe:62:f8:c2:7c:1d:82:f2:71:fb:c2:8c:15:7e:28:b1:ca: f7:8c:25:a1:a4:aa:e5:3c:0e:78:ef:27:b4:c0:d7:89:06:e1: c0:2d:40:e7:b2:9b:35:6a:4a:3c:b3:6f:1a:90:89:d6:fd:5a: 52:be:0c:88 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPxx6r6f5F99mjb5DB3D3JUfx/eAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUEx MDA4QkNGMDAeFw0yNjA1MDMwMjQwMDlaFw0yNzA1MDIwMjQ1MDlaMDMxMTAvBgNV BAMTKDEyQUE3QkI4OTYyNjNCMTJENUNBOEQwNzI2NjZFQzEyMEREODJFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2ew5wTB/PI3GVQyT+mjFw2NF 9Unfu5Q0jTl8nYMZ6P59oJxu/dVcUimFIX3PUNlV1SO0ZINOppOCvRKOj+zJ57s2 1X98leZHqSxc0Ydl3ZG+NCfpVNgfO91GcpjANHzLQ9vV5chPXg99wiX195TpWZpr xsWMJwzlMtI9/oxMsHCJaDGXkpfagonykxpColDF7bvILHPQZ0FaaWw6TfEuklHv fOUK33Umquu+6sjwYgdsdChhxAfLriM7qwtsUGG6oS+JNtgwDER0mYZaMQtnIMvh oVeuwkszZaaClD86j1FZO1JyNhhCUPA/sTGaRttDQ1OlS14qrf2AnyCUbqrTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUEqp7uJYmOxLVyo0HJmbsEg3YLjwwHwYDVR0j BBgwFoAUaCJ6y2DT6eEMa5pX04MTmhAIvPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZWNkNzQtNDQyNC00ZDQwLTk2YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2 MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUExMDA4QkNGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODIyN0FDQjYwRDNFOUUxMEM2QjlBNTdEMzgzMTM5QTEwMDhC Q0YwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdiNWVjZDc0LTQ0MjQtNGQ0MC05 NmExLTdmZDc2MzAxMTk0NC8wLzMxMzAzMzJlMzEzNTMwMmUzMTM3MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnlq8wDQYJ KoZIhvcNAQELBQADggEBAEHK2Cx2G1Pc71eLwZea5Rn4TniA/tqYV4hoTZL+Ej2X 3Dac3kE0eDjSmNQzYN9eSjV1a/EUGas3vhmftnp8FXZxvsb8tvgpFwNu9ahY9eJU Xle/dQRb5DRW2JFZS0XTi2rQvOuSEVyFos6mtcIIR4cZzYhaRBFs1BA4X1QlkwYv yD20srQA8aifLKkr0XnZkMnzWGHR6kTqXdKwqblR3sRLOCyM59nB2VdpZKFtLAm+ D4FeZ9Xo0HwB992NpTiZeHnMMhlKw1v+YvjCfB2C8nH7wowVfiixyveMJaGkquU8 DnjvJ7TA14kG4cAtQOeymzVqSjyzbxqQidb9WlK+DIg= -----END CERTIFICATE-----Generated at Wed May 13 11:59:45 2026 by rpki-client