$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133372e302f32342d3234203d3e20313338383138.roa File: 3130332e3130332e3133372e302f32342d3234203d3e20313338383138.roa (raw, json) Hash identifier: 4glWDbg2cthHWl40jAdpTpvdVV83NH6qF/yYaREdwKA= Subject key identifier: 7A:3F:6C:55:7A:9D:CC:9E:BA:9E:8B:6A:8E:5B:CE:90:24:2C:E6:F5 Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Certificate serial: 33D1E787C462D1754E4025FE47A6EEF8AB31386E Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133372e302f32342d3234203d3e20313338383138.roa Signing time: Sun 03 May 2026 02:51:40 +0000 ROA not before: Sun 03 May 2026 02:46:40 +0000 ROA not after: Sun 02 May 2027 02:51:40 +0000 asID: 138818 IP address blocks: 103.103.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d1:e7:87:c4:62:d1:75:4e:40:25:fe:47:a6:ee:f8:ab:31:38:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Validity Not Before: May 3 02:46:40 2026 GMT Not After : May 2 02:51:40 2027 GMT Subject: CN=7A3F6C557A9DCC9EBA9E8B6A8E5BCE90242CE6F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:98:2d:bb:13:b3:38:60:25:5e:ae:99:ae: 00:f8:51:2f:2b:6f:96:0a:59:c2:5b:bf:c1:1b:75: fe:93:27:71:7f:df:41:01:22:d1:a6:c4:ad:c4:18: fd:28:d6:01:4c:e0:f4:23:6e:19:e9:29:04:2f:f9: c5:b9:16:ed:82:c7:aa:3f:47:5e:4e:a2:21:75:89: a9:b5:72:37:4a:2e:65:ed:3d:a0:dd:fb:64:ec:ff: 1d:09:c1:3d:63:69:5f:a3:b7:91:0c:d4:09:78:16: 66:3c:4c:64:75:d0:29:a7:8a:38:1d:d5:45:32:ce: af:1a:a1:2d:b0:89:9a:86:45:db:b7:2f:cf:ae:18: ef:91:f9:89:c2:3b:e4:01:a5:97:bb:1a:a7:1e:1b: 87:77:09:da:0b:99:ac:49:41:ab:fc:98:af:67:c9: 50:be:9b:1e:8a:c7:1a:c4:99:2b:ad:bf:ee:a9:e9: a7:98:ee:6a:7a:01:0f:06:9a:be:61:db:cb:80:6d: 71:7e:de:5e:e3:dc:83:b7:1b:c1:09:80:31:96:ff: 5e:80:d6:66:db:62:ff:65:fc:60:f5:d3:8e:0d:0a: 5b:b9:e1:d4:57:96:02:b6:21:b2:65:32:d2:55:94: d2:38:ef:54:49:6a:ff:5d:f1:fe:b9:1f:6c:00:24: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3F:6C:55:7A:9D:CC:9E:BA:9E:8B:6A:8E:5B:CE:90:24:2C:E6:F5 X509v3 Authority Key Identifier: keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133372e302f32342d3234203d3e20313338383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.103.137.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:66:38:cd:a4:ef:2a:e2:4a:44:8c:f5:26:0c:7e:c6:4a:6f: 46:52:02:6b:44:7c:41:9d:93:94:c4:cf:f2:6e:5d:5c:dc:f5: 6b:14:c0:3d:25:59:98:9c:f3:6e:9b:b7:da:a1:9b:3e:72:41: 6d:e4:12:1a:64:9d:90:ef:b4:9b:69:fa:38:c3:a5:53:58:47: 84:b8:78:a7:44:df:9a:e6:e3:6a:48:80:ca:ca:f1:1e:bb:ba: 2a:2d:d3:04:c3:8e:59:64:4b:00:ff:c6:a5:6f:bb:c7:2d:7b: 3f:1b:5a:41:bc:01:ee:e2:22:0f:cf:84:f1:16:ba:20:e3:6f: 51:06:6e:9c:6a:12:93:8f:35:00:b2:da:17:66:8e:ef:66:3a: 60:36:0c:97:a5:69:5f:0e:e7:e0:7a:35:7e:a3:81:cc:ec:80: 51:d0:a8:96:ca:49:3f:a3:67:81:0d:b2:47:c0:29:4a:ba:c8: 22:ff:f9:d4:40:9b:75:50:bd:21:a3:c9:01:f3:49:d5:fc:02: 94:57:ae:22:39:46:de:10:e9:93:15:eb:c1:0f:7e:a0:b5:73: a0:85:00:16:00:68:9e:65:e8:ca:2f:ae:ce:1c:88:d6:6c:eb: c1:4b:6f:b0:41:66:18:12:6e:78:df:ff:3c:d7:b6:18:99:37: 91:4c:55:da -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUM9Hnh8Ri0XVOQCX+R6bu+KsxOG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVG MzUxNTFFNTAeFw0yNjA1MDMwMjQ2NDBaFw0yNzA1MDIwMjUxNDBaMDMxMTAvBgNV BAMTKDdBM0Y2QzU1N0E5RENDOUVCQTlFOEI2QThFNUJDRTkwMjQyQ0U2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPpgtuxOzOGAlXq6ZrgD4US8r b5YKWcJbv8Ebdf6TJ3F/30EBItGmxK3EGP0o1gFM4PQjbhnpKQQv+cW5Fu2Cx6o/ R15OoiF1iam1cjdKLmXtPaDd+2Ts/x0JwT1jaV+jt5EM1Al4FmY8TGR10Cmnijgd 1UUyzq8aoS2wiZqGRdu3L8+uGO+R+YnCO+QBpZe7GqceG4d3CdoLmaxJQav8mK9n yVC+mx6KxxrEmSutv+6p6aeY7mp6AQ8Gmr5h28uAbXF+3l7j3IO3G8EJgDGW/16A 1mbbYv9l/GD1044NClu54dRXlgK2IbJlMtJVlNI471RJav9d8f65H2wAJCpZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUej9sVXqdzJ66notqjlvOkCQs5vUwHwYDVR0j BBgwFoAUOAOv2nvM19vlzp6QGisXjvNRUeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExNDE3YzAtMzdiYi00NDZkLTg3ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3 QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVGMzUxNTFFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODAzQUZEQTdCQ0NEN0RCRTVDRTlFOTAxQTJCMTc4RUYzNTE1 MUU1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzMxMzAzMzJlMzEzMDMzMmUzMTMzMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODMxMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZ4kwDQYJ KoZIhvcNAQELBQADggEBADxmOM2k7yriSkSM9SYMfsZKb0ZSAmtEfEGdk5TEz/Ju XVzc9WsUwD0lWZic826bt9qhmz5yQW3kEhpknZDvtJtp+jjDpVNYR4S4eKdE35rm 42pIgMrK8R67uiot0wTDjllkSwD/xqVvu8ctez8bWkG8Ae7iIg/PhPEWuiDjb1EG bpxqEpOPNQCy2hdmju9mOmA2DJelaV8O5+B6NX6jgczsgFHQqJbKST+jZ4ENskfA KUq6yCL/+dRAm3VQvSGjyQHzSdX8ApRXriI5Rt4Q6ZMV68EPfqC1c6CFABYAaJ5l 6Movrs4ciNZs68FLb7BBZhgSbnjf/zzXthiZN5FMVdo= -----END CERTIFICATE-----Generated at Wed May 13 10:37:04 2026 by rpki-client