$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa File: 3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (raw, json) Hash identifier: ZmGgo3jaHXdx58TAmRSTnCCto4KpyY5aAzsNgTuNtrg= Subject key identifier: A9:75:C8:E9:CF:F2:26:5D:5F:95:25:BC:38:89:96:EB:15:B6:C6:2E Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Certificate serial: 5247A0D75B4C960681EA84029953D01A0BB3124D Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa Signing time: Sun 03 May 2026 02:51:46 +0000 ROA not before: Sun 03 May 2026 02:46:46 +0000 ROA not after: Sun 02 May 2027 02:51:46 +0000 asID: 138818 IP address blocks: 103.103.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:47:a0:d7:5b:4c:96:06:81:ea:84:02:99:53:d0:1a:0b:b3:12:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Validity Not Before: May 3 02:46:46 2026 GMT Not After : May 2 02:51:46 2027 GMT Subject: CN=A975C8E9CFF2265D5F9525BC388996EB15B6C62E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:51:10:ec:d9:83:0e:65:f6:1d:a0:e7:83: 54:ca:73:d0:ca:64:b9:0b:a4:dc:6d:18:5e:ad:55: be:82:4e:20:14:a6:f3:16:64:67:7a:53:56:9c:fd: b7:f9:ea:e4:10:05:24:4f:c7:49:c5:97:85:f7:1c: 17:3e:cb:96:7b:c9:24:b0:e3:e1:87:67:37:7c:4b: 65:06:6c:6b:99:1d:d4:a8:b5:1e:6b:6d:8f:10:fa: 63:f0:75:9c:46:c8:5d:97:6c:f9:10:89:15:b1:e6: 7a:0a:10:3c:24:a5:71:d9:d0:6c:72:ea:97:75:c9: 1a:87:8b:dd:3d:55:ba:74:b2:6c:27:42:72:d1:98: 98:0a:ed:1c:b4:5c:16:f9:fb:b5:5c:6d:ad:ec:f9: d1:2d:33:f3:d1:62:49:b3:b8:c7:fd:91:3f:f3:95: 79:e1:f5:7e:e0:90:e7:bf:94:52:e7:a5:f5:67:69: 6c:80:08:6a:05:fa:fd:3e:42:0b:44:de:84:52:8f: 89:7a:6e:98:ca:cd:3a:83:62:eb:03:bc:7e:85:dd: 73:2f:2b:c6:54:d0:a4:57:9a:57:93:fc:5e:c8:1d: c3:0c:0f:b7:09:d1:b3:18:ee:ac:67:6c:a2:e9:bf: 3d:fb:2e:f0:1b:ef:5f:b5:da:b7:20:70:45:cf:f9: 72:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:75:C8:E9:CF:F2:26:5D:5F:95:25:BC:38:89:96:EB:15:B6:C6:2E X509v3 Authority Key Identifier: keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.103.138.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:a6:6c:9f:2b:15:4b:db:e7:ca:1c:73:30:88:25:b9:ab:bf: 18:34:9e:81:86:7a:87:5e:d2:f1:ed:a0:75:58:e2:cb:88:73: 31:89:d0:b6:f4:c7:2e:c5:0f:50:26:ab:b8:0b:74:fe:8e:fe: 23:10:93:1c:5e:f3:ba:f4:8b:cc:a0:82:d8:d3:db:5f:2f:ed: ef:38:1b:56:aa:c7:86:d8:83:5c:7c:e7:a9:d5:76:36:98:22: 07:8b:08:70:f8:f3:c4:ba:78:e8:cd:6d:16:e0:e7:78:49:34: b7:45:9e:10:01:b0:f3:76:d9:28:aa:40:f7:8c:58:9a:46:67: cd:8e:a3:c3:98:89:ba:ac:c6:c0:28:5a:c0:e6:73:83:91:81: 01:52:2a:8d:c8:15:00:45:0c:86:d2:fe:d0:a7:1e:0d:34:21: 4b:5d:a6:99:81:72:43:2f:9f:d8:f0:86:ae:3d:49:9e:59:f2: 06:a9:4d:5c:e5:91:c1:f6:28:f7:16:30:1e:58:c2:87:4e:62: c4:90:5d:c7:bf:fe:f5:17:49:99:0a:b5:7f:84:cf:02:e3:b7: dd:ed:ce:7a:80:a9:56:30:ad:54:f6:b5:3e:6a:2b:74:7f:6c: 49:78:6f:77:a0:33:7c:7f:49:2e:26:b3:c7:52:de:a6:3f:f7: 77:ba:e7:2d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUkeg11tMlgaB6oQCmVPQGguzEk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVG MzUxNTFFNTAeFw0yNjA1MDMwMjQ2NDZaFw0yNzA1MDIwMjUxNDZaMDMxMTAvBgNV BAMTKEE5NzVDOEU5Q0ZGMjI2NUQ1Rjk1MjVCQzM4ODk5NkVCMTVCNkM2MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsU1EQ7NmDDmX2HaDng1TKc9DK ZLkLpNxtGF6tVb6CTiAUpvMWZGd6U1ac/bf56uQQBSRPx0nFl4X3HBc+y5Z7ySSw 4+GHZzd8S2UGbGuZHdSotR5rbY8Q+mPwdZxGyF2XbPkQiRWx5noKEDwkpXHZ0Gxy 6pd1yRqHi909Vbp0smwnQnLRmJgK7Ry0XBb5+7Vcba3s+dEtM/PRYkmzuMf9kT/z lXnh9X7gkOe/lFLnpfVnaWyACGoF+v0+QgtE3oRSj4l6bpjKzTqDYusDvH6F3XMv K8ZU0KRXmleT/F7IHcMMD7cJ0bMY7qxnbKLpvz37LvAb71+12rcgcEXP+XL7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUqXXI6c/yJl1flSW8OImW6xW2xi4wHwYDVR0j BBgwFoAUOAOv2nvM19vlzp6QGisXjvNRUeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExNDE3YzAtMzdiYi00NDZkLTg3ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3 QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVGMzUxNTFFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODAzQUZEQTdCQ0NEN0RCRTVDRTlFOTAxQTJCMTc4RUYzNTE1 MUU1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzMxMzAzMzJlMzEzMDMzMmUzMTMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODMxMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZ4owDQYJ KoZIhvcNAQELBQADggEBAH2mbJ8rFUvb58occzCIJbmrvxg0noGGeode0vHtoHVY 4suIczGJ0Lb0xy7FD1Amq7gLdP6O/iMQkxxe87r0i8yggtjT218v7e84G1aqx4bY g1x856nVdjaYIgeLCHD488S6eOjNbRbg53hJNLdFnhABsPN22SiqQPeMWJpGZ82O o8OYibqsxsAoWsDmc4ORgQFSKo3IFQBFDIbS/tCnHg00IUtdppmBckMvn9jwhq49 SZ5Z8gapTVzlkcH2KPcWMB5YwodOYsSQXce//vUXSZkKtX+EzwLjt93tznqAqVYw rVT2tT5qK3R/bEl4b3egM3x/SS4ms8dS3qY/93e65y0= -----END CERTIFICATE-----Generated at Wed May 13 09:08:43 2026 by rpki-client