$ rpki-client -vvf rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa File: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (raw, json) Hash identifier: I9P+22XUrYqfAeG+s4HEGC5b6efFAbm0WVpCZy5OhYk= Subject key identifier: 8B:5F:2F:97:94:B7:29:EE:A4:1C:E7:F8:46:A4:42:24:83:2C:42:D7 Certificate issuer: /CN=A952A58DE132E26886D9A077713042EADBA3C178 Certificate serial: 73CA7AB96D9F5B61708D4AC93E610634D75730AF Authority key identifier: A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa Signing time: Sun 03 May 2026 02:49:03 +0000 ROA not before: Sun 03 May 2026 02:44:03 +0000 ROA not after: Sun 02 May 2027 02:49:03 +0000 asID: 147122 IP address blocks: 103.175.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ca:7a:b9:6d:9f:5b:61:70:8d:4a:c9:3e:61:06:34:d7:57:30:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A952A58DE132E26886D9A077713042EADBA3C178 Validity Not Before: May 3 02:44:03 2026 GMT Not After : May 2 02:49:03 2027 GMT Subject: CN=8B5F2F9794B729EEA41CE7F846A44224832C42D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:ea:50:12:0d:6b:af:6e:d1:d5:19:00:fe: ff:5f:e0:64:e9:18:78:30:fd:cc:4b:63:4e:31:c8: 63:a6:4e:0e:06:15:a3:79:e0:52:79:d2:cc:4f:e2: 3c:81:38:d4:a2:fb:15:f5:95:5c:8e:a2:82:8c:3a: bf:93:95:12:65:47:30:25:e0:be:72:67:e9:d5:31: 2e:75:f1:fc:a2:8d:42:eb:da:ad:72:d8:90:a4:36: c2:bf:db:3b:57:fe:bc:e0:e8:5a:7f:9a:d7:ac:85: e7:b4:26:f9:51:8a:8e:c4:22:6b:74:fd:4b:43:e0: f1:b6:68:7f:4e:40:ac:56:1f:e1:3b:3f:ba:0d:e6: 22:d8:bc:83:e0:d8:0a:0c:53:cb:af:52:2e:74:44: f4:a6:83:e0:6b:88:aa:e3:c6:56:92:fe:39:d9:fe: c7:e1:71:5e:12:d5:44:66:02:0c:a1:13:02:73:ac: 55:ce:9c:0e:75:61:9b:51:d7:de:00:9a:b7:7a:9a: 8a:47:13:fb:88:5c:a8:cb:d6:5f:c2:91:e9:58:81: d5:17:da:c9:e9:5e:68:af:ef:60:17:cd:7c:d8:c1: d3:67:20:08:89:3e:b0:3a:b8:53:ce:b3:2e:c6:8d: ec:ba:a9:a0:ed:0c:d2:1f:ba:1a:f3:48:9e:5f:21: 05:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5F:2F:97:94:B7:29:EE:A4:1C:E7:F8:46:A4:42:24:83:2C:42:D7 X509v3 Authority Key Identifier: keyid:A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.238.0/24 Signature Algorithm: sha256WithRSAEncryption 71:52:b7:d8:b0:cb:8c:e4:96:d0:19:02:06:da:fb:81:98:93: b5:87:75:98:02:82:62:3b:23:28:73:30:1e:c0:92:bf:47:b5: ea:c5:6a:5f:82:36:3f:51:f7:7f:0f:d7:1e:82:63:94:0b:50: 73:e4:24:36:a8:0a:21:c5:79:08:f5:d9:92:37:b4:93:f0:18: a4:6d:7a:b4:e5:71:c3:81:cf:a9:ce:f4:b4:e6:65:b0:bd:5d: d3:40:98:cd:04:08:82:34:b3:9b:a2:84:bb:c6:2c:ff:6b:f6: d5:7c:e1:0b:c3:24:de:da:f2:8f:cd:ff:b6:ff:cc:ab:23:cf: f3:91:da:e0:d2:89:aa:ad:d5:c6:46:18:29:a1:c2:33:e5:94: 26:a6:96:ec:dd:c0:14:24:2c:1a:c3:03:7a:61:c5:a8:6b:47: a6:7b:e1:eb:65:86:a4:3b:af:73:45:8d:40:17:6d:af:6f:cc: f1:a5:79:7a:d8:cb:ca:3b:ea:6a:02:81:21:44:d4:2d:45:93: ed:d5:d1:83:79:30:e9:ab:d2:96:30:cb:ef:8e:22:99:3b:11: 5c:5b:a3:39:58:04:21:35:79:d1:fa:73:27:d4:c8:e8:22:67: 7b:1e:f4:ec:a3:23:48:6e:4b:12:cf:ae:95:59:fb:a9:d3:80: 94:4c:3e:7e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUc8p6uW2fW2FwjUrJPmEGNNdXMK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFE QkEzQzE3ODAeFw0yNjA1MDMwMjQ0MDNaFw0yNzA1MDIwMjQ5MDNaMDMxMTAvBgNV BAMTKDhCNUYyRjk3OTRCNzI5RUVBNDFDRTdGODQ2QTQ0MjI0ODMyQzQyRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClXupQEg1rr27R1RkA/v9f4GTp GHgw/cxLY04xyGOmTg4GFaN54FJ50sxP4jyBONSi+xX1lVyOooKMOr+TlRJlRzAl 4L5yZ+nVMS518fyijULr2q1y2JCkNsK/2ztX/rzg6Fp/mteshee0JvlRio7EImt0 /UtD4PG2aH9OQKxWH+E7P7oN5iLYvIPg2AoMU8uvUi50RPSmg+BriKrjxlaS/jnZ /sfhcV4S1URmAgyhEwJzrFXOnA51YZtR194Amrd6mopHE/uIXKjL1l/CkelYgdUX 2snpXmiv72AXzXzYwdNnIAiJPrA6uFPOsy7Gjey6qaDtDNIfuhrzSJ5fIQUFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUi18vl5S3Ke6kHOf4RqRCJIMsQtcwHwYDVR0j BBgwFoAUqVKljeEy4miG2aB3cTBC6tujwXgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk1N2EzYmYtNDgyMy00NjA5LTg1Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERF MTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFEQkEzQzE3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTUyQTU4REUxMzJFMjY4ODZEOUEwNzc3MTMwNDJFQURCQTND MTc4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg5NTdhM2JmLTQ4MjMtNDYwOS04 NWNkLTc3NTcwYmYxODU4MC8wLzMxMzAzMzJlMzEzNzM1MmUzMjMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMTMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnr+4wDQYJ KoZIhvcNAQELBQADggEBAHFSt9iwy4zkltAZAgba+4GYk7WHdZgCgmI7IyhzMB7A kr9HterFal+CNj9R938P1x6CY5QLUHPkJDaoCiHFeQj12ZI3tJPwGKRterTlccOB z6nO9LTmZbC9XdNAmM0ECII0s5uihLvGLP9r9tV84QvDJN7a8o/N/7b/zKsjz/OR 2uDSiaqt1cZGGCmhwjPllCamluzdwBQkLBrDA3phxahrR6Z74etlhqQ7r3NFjUAX ba9vzPGleXrYy8o76moCgSFE1C1Fk+3V0YN5MOmr0pYwy++OIpk7EVxbozlYBCE1 edH6cyfUyOgiZ3se9OyjI0huSxLPrpVZ+6nTgJRMPn4= -----END CERTIFICATE-----Generated at Wed May 13 09:12:04 2026 by rpki-client