$ rpki-client -vvf rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa File: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (raw, json) Hash identifier: j2rPBHDu8altdMacoto0CdEJNfbZiyRNmXyQ2rZHa2o= Subject key identifier: A9:B3:64:80:6F:E6:16:9B:17:FA:F5:6F:71:87:00:5D:BD:90:0C:F3 Certificate issuer: /CN=A952A58DE132E26886D9A077713042EADBA3C178 Certificate serial: 3EA2573EA0395D264DCFCD101E2987A54C2D3A62 Authority key identifier: A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa Signing time: Sun 03 May 2026 02:49:04 +0000 ROA not before: Sun 03 May 2026 02:44:04 +0000 ROA not after: Sun 02 May 2027 02:49:04 +0000 asID: 147122 IP address blocks: 103.175.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a2:57:3e:a0:39:5d:26:4d:cf:cd:10:1e:29:87:a5:4c:2d:3a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A952A58DE132E26886D9A077713042EADBA3C178 Validity Not Before: May 3 02:44:04 2026 GMT Not After : May 2 02:49:04 2027 GMT Subject: CN=A9B364806FE6169B17FAF56F7187005DBD900CF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:58:9f:fd:9d:71:21:44:a5:d7:f1:cf:15: 73:08:63:ac:92:1f:a8:fa:e7:30:73:8e:7b:a9:74: 63:ea:fb:a6:06:dd:39:2d:48:f5:2a:c1:e0:ce:5c: 8d:d1:7a:21:56:86:fd:29:a6:a1:c7:83:e8:96:1e: 01:5a:94:c7:03:94:85:0f:c3:d4:c2:e2:b6:64:2a: 41:99:3b:ba:1d:c5:2b:6c:5c:d2:1f:e8:1b:41:51: c7:87:ce:b2:c2:e5:28:69:8a:4e:cd:55:3f:14:4e: fc:f5:7b:f2:06:c2:b5:39:dd:98:2f:14:d8:16:69: e8:78:27:27:13:71:a0:8e:2c:0d:cc:2d:f2:bf:0d: 1d:fc:3c:6d:50:27:26:de:95:72:76:d4:36:62:a9: 2e:01:55:87:62:97:3f:8a:49:c4:4e:e8:98:0c:7b: 06:d1:ec:9b:8e:16:4c:30:32:82:0d:87:e4:ca:e6: c0:a6:86:b6:94:9f:25:11:01:86:72:58:f8:b4:02: 22:77:e6:57:11:df:1f:4f:07:f5:88:41:82:08:0d: 3f:00:15:ad:c8:5c:50:f5:ca:36:6b:0a:23:95:ed: 57:17:e3:40:9f:0f:f2:d7:7b:d3:c9:e8:68:07:48: fe:76:ae:5c:37:ea:11:93:b8:bf:13:9e:30:ea:a3: 83:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B3:64:80:6F:E6:16:9B:17:FA:F5:6F:71:87:00:5D:BD:90:0C:F3 X509v3 Authority Key Identifier: keyid:A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.239.0/24 Signature Algorithm: sha256WithRSAEncryption 07:ba:d9:9d:f5:94:9a:d6:22:ec:61:1f:68:0e:c8:4b:48:c1: 08:21:d9:d3:19:25:52:71:3e:37:66:1e:57:ad:0c:f5:1e:26: 86:d7:f6:fd:3a:71:3c:1e:c6:fa:b4:d0:d4:b5:2f:59:07:44: 14:ac:1e:6b:ef:0a:68:a3:00:1d:92:a1:57:89:77:84:f6:36: ff:18:24:d9:4e:54:21:af:ce:c1:d1:c8:b4:11:ac:9d:24:9b: 0c:6e:a3:df:af:24:e3:a9:06:6c:7f:ab:c7:ae:db:06:af:56: 9c:f8:d9:21:cb:61:e2:44:e1:ee:91:b1:74:d7:28:29:96:5e: 51:e1:7d:c1:ce:78:68:80:d2:71:10:4b:3f:40:7c:e3:c6:00: df:b9:f4:99:e0:7c:a3:df:7d:93:d4:c4:b3:d7:b6:e3:72:ea: 26:11:6a:de:96:6b:49:df:de:a7:2b:43:5d:74:b0:ed:81:dd: 91:14:f4:63:07:24:1a:09:94:99:a2:7c:62:d3:36:6d:0b:da: 20:7c:44:9a:7a:46:2a:02:cf:79:be:15:f4:cb:d2:b0:bd:4e: 70:87:6f:a7:7e:b6:59:ce:9f:b8:39:22:16:a4:5a:3c:42:b2: 02:ff:a0:e4:58:ab:6a:0e:ec:19:82:78:a5:8b:80:dc:2d:bd: e4:ae:20:b2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPqJXPqA5XSZNz80QHimHpUwtOmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFE QkEzQzE3ODAeFw0yNjA1MDMwMjQ0MDRaFw0yNzA1MDIwMjQ5MDRaMDMxMTAvBgNV BAMTKEE5QjM2NDgwNkZFNjE2OUIxN0ZBRjU2RjcxODcwMDVEQkQ5MDBDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyt1if/Z1xIUSl1/HPFXMIY6yS H6j65zBzjnupdGPq+6YG3TktSPUqweDOXI3ReiFWhv0ppqHHg+iWHgFalMcDlIUP w9TC4rZkKkGZO7odxStsXNIf6BtBUceHzrLC5Shpik7NVT8UTvz1e/IGwrU53Zgv FNgWaeh4JycTcaCOLA3MLfK/DR38PG1QJybelXJ21DZiqS4BVYdilz+KScRO6JgM ewbR7JuOFkwwMoINh+TK5sCmhraUnyURAYZyWPi0AiJ35lcR3x9PB/WIQYIIDT8A Fa3IXFD1yjZrCiOV7VcX40CfD/LXe9PJ6GgHSP52rlw36hGTuL8TnjDqo4PjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUqbNkgG/mFpsX+vVvcYcAXb2QDPMwHwYDVR0j BBgwFoAUqVKljeEy4miG2aB3cTBC6tujwXgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk1N2EzYmYtNDgyMy00NjA5LTg1Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERF MTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFEQkEzQzE3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTUyQTU4REUxMzJFMjY4ODZEOUEwNzc3MTMwNDJFQURCQTND MTc4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg5NTdhM2JmLTQ4MjMtNDYwOS04 NWNkLTc3NTcwYmYxODU4MC8wLzMxMzAzMzJlMzEzNzM1MmUzMjMzMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMTMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnr+8wDQYJ KoZIhvcNAQELBQADggEBAAe62Z31lJrWIuxhH2gOyEtIwQgh2dMZJVJxPjdmHlet DPUeJobX9v06cTwexvq00NS1L1kHRBSsHmvvCmijAB2SoVeJd4T2Nv8YJNlOVCGv zsHRyLQRrJ0kmwxuo9+vJOOpBmx/q8eu2wavVpz42SHLYeJE4e6RsXTXKCmWXlHh fcHOeGiA0nEQSz9AfOPGAN+59JngfKPffZPUxLPXtuNy6iYRat6Wa0nf3qcrQ110 sO2B3ZEU9GMHJBoJlJmifGLTNm0L2iB8RJp6RioCz3m+FfTL0rC9TnCHb6d+tlnO n7g5IhakWjxCsgL/oORYq2oO7BmCeKWLgNwtveSuILI= -----END CERTIFICATE-----Generated at Wed May 13 09:17:29 2026 by rpki-client