$ rpki-client -vvf rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa File: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (raw, json) Hash identifier: Cj0SZJARZifKQYTCMZbpWyS0hulziUW0qpiTLUY0MXw= Subject key identifier: 3B:67:60:13:4B:E6:8B:E2:DA:40:29:64:A9:96:87:A5:9D:3B:F7:6A Certificate issuer: /CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Certificate serial: 1784E2AB555FC0E1D94316CD833A3248A8A1597C Authority key identifier: A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa Signing time: Sun 03 May 2026 02:53:05 +0000 ROA not before: Sun 03 May 2026 02:48:05 +0000 ROA not after: Sun 02 May 2027 02:53:05 +0000 asID: 150924 IP address blocks: 103.199.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:84:e2:ab:55:5f:c0:e1:d9:43:16:cd:83:3a:32:48:a8:a1:59:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Validity Not Before: May 3 02:48:05 2026 GMT Not After : May 2 02:53:05 2027 GMT Subject: CN=3B6760134BE68BE2DA402964A99687A59D3BF76A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:2c:21:a8:f9:46:3d:57:2c:69:c1:11:bf: 1b:6c:29:98:04:2b:f3:01:a1:86:a2:e3:83:02:d0: 3f:bb:62:07:31:ea:f9:34:8a:15:e7:43:42:af:07: 13:f4:e0:b5:90:f8:15:d1:7d:5a:84:0d:ca:58:a6: c2:54:35:ed:14:98:4a:1f:0a:9b:37:47:d5:f0:1f: d3:68:fa:18:70:40:1c:9a:85:be:ea:96:4f:83:8b: 79:b7:63:7e:8a:e9:21:b2:ff:80:d8:29:59:35:44: 8a:e7:6d:03:4b:20:96:25:33:8f:c2:fa:82:2c:45: 02:48:5c:50:83:6a:13:43:47:c6:3f:ca:84:11:87: af:d1:7e:e3:e2:be:21:fa:67:a2:c7:24:01:54:3b: 37:d4:32:4c:a9:08:52:21:c9:26:c3:3a:98:51:94: de:fc:f2:1d:c8:cd:f6:0b:be:c4:8a:60:cf:a7:63: 3e:77:c1:79:c1:1c:08:6f:2f:9d:75:a4:8b:15:2e: 7b:d0:78:2e:16:b5:ab:22:b6:f3:b0:34:3a:1d:a0: 28:37:46:85:19:6b:0b:4c:2a:d3:50:ef:9f:ce:00: eb:ab:3e:8a:1f:99:1f:15:6a:b6:a6:74:88:63:b1: b5:5c:98:78:c4:ee:2c:40:ff:5e:4f:e6:64:dd:c3: c4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:67:60:13:4B:E6:8B:E2:DA:40:29:64:A9:96:87:A5:9D:3B:F7:6A X509v3 Authority Key Identifier: keyid:A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.199.117.0/24 Signature Algorithm: sha256WithRSAEncryption 29:01:8f:bb:06:1f:09:67:d2:5f:c2:cf:46:68:53:83:e1:c6: be:dc:d6:6f:0c:b8:ed:00:e9:8f:26:0d:98:e2:a9:01:d1:82: 7e:60:30:74:e2:24:4f:70:93:69:93:ab:21:a5:15:9e:45:fa: 1b:93:6c:84:d7:bd:f9:b3:b0:80:c4:ac:19:92:08:11:fd:e4: 65:47:f9:ce:72:be:97:ed:54:8d:84:64:b5:c0:58:d3:e4:be: 6d:51:24:23:b7:82:68:c8:90:2e:82:81:44:ed:5f:f1:cf:3a: fb:29:33:7f:1b:03:80:d1:9a:74:82:4e:17:1e:94:92:4d:a8: e2:61:ed:6a:8d:5d:bc:f9:65:2e:67:06:1b:1f:3f:8f:9e:63: 2e:23:06:4c:33:90:b9:ff:de:9e:13:51:08:09:3c:5c:13:42: de:6b:df:38:42:81:72:9f:dc:e4:bb:00:1c:d6:9b:02:97:5f: cc:c6:25:72:e4:7e:a9:23:c7:1d:d7:11:34:fc:ad:82:ee:19: a7:cc:8c:43:15:75:98:1e:dd:d4:34:84:f9:af:94:6d:2c:cb: a6:64:ad:bc:97:0d:14:17:56:f7:86:63:0f:91:fd:11:1a:12: 17:7a:12:c0:74:fa:39:f0:18:1f:35:03:94:a3:cb:d0:81:95: b3:59:bf:51 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUF4Tiq1VfwOHZQxbNgzoySKihWXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NE MEZEMjNBQjAeFw0yNjA1MDMwMjQ4MDVaFw0yNzA1MDIwMjUzMDVaMDMxMTAvBgNV BAMTKDNCNjc2MDEzNEJFNjhCRTJEQTQwMjk2NEE5OTY4N0E1OUQzQkY3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk7CwhqPlGPVcsacERvxtsKZgE K/MBoYai44MC0D+7Ygcx6vk0ihXnQ0KvBxP04LWQ+BXRfVqEDcpYpsJUNe0UmEof Cps3R9XwH9No+hhwQByahb7qlk+Di3m3Y36K6SGy/4DYKVk1RIrnbQNLIJYlM4/C +oIsRQJIXFCDahNDR8Y/yoQRh6/RfuPiviH6Z6LHJAFUOzfUMkypCFIhySbDOphR lN788h3IzfYLvsSKYM+nYz53wXnBHAhvL511pIsVLnvQeC4WtasitvOwNDodoCg3 RoUZawtMKtNQ75/OAOurPoofmR8VaramdIhjsbVcmHjE7ixA/15P5mTdw8Q5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUO2dgE0vmi+LaQClkqZaHpZ0792owHwYDVR0j BBgwFoAUpEIzLkft+VEh+DXLnu6JzND9I6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTYwZjg0NjEtYmIyYy00ZDNlLWE1YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0 N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NEMEZEMjNBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDQyMzMyRTQ3RURGOTUxMjFGODM1Q0I5RUVFODlDQ0QwRkQy M0FCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk2MGY4NDYxLWJiMmMtNGQzZS1h NWJlLTcwMDkzOTQyN2M4Yy8wLzMxMzAzMzJlMzEzOTM5MmUzMTMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTMyMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnx3UwDQYJ KoZIhvcNAQELBQADggEBACkBj7sGHwln0l/Cz0ZoU4Phxr7c1m8MuO0A6Y8mDZji qQHRgn5gMHTiJE9wk2mTqyGlFZ5F+huTbITXvfmzsIDErBmSCBH95GVH+c5yvpft VI2EZLXAWNPkvm1RJCO3gmjIkC6CgUTtX/HPOvspM38bA4DRmnSCThcelJJNqOJh 7WqNXbz5ZS5nBhsfP4+eYy4jBkwzkLn/3p4TUQgJPFwTQt5r3zhCgXKf3OS7ABzW mwKXX8zGJXLkfqkjxx3XETT8rYLuGafMjEMVdZge3dQ0hPmvlG0sy6ZkrbyXDRQX VveGYw+R/REaEhd6EsB0+jnwGB81A5Sjy9CBlbNZv1E= -----END CERTIFICATE-----Generated at Wed May 13 04:51:40 2026 by rpki-client