$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa File: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (raw, json) Hash identifier: 0MQ38XgUhNylT2FJTmCje8IKQU4OOM7d6KSKfwgJWFw= Subject key identifier: 9F:FC:82:08:DC:CD:8E:FB:C0:7F:F0:B1:CF:2E:7D:28:69:8A:DC:0A Certificate issuer: /CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82 Certificate serial: 28577FCBD31D94F093AC0B2054D9E64804AAF3D0 Authority key identifier: 98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa Signing time: Sun 03 May 2026 02:55:07 +0000 ROA not before: Sun 03 May 2026 02:50:07 +0000 ROA not after: Sun 02 May 2027 02:55:07 +0000 asID: 140022 IP address blocks: 103.149.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:57:7f:cb:d3:1d:94:f0:93:ac:0b:20:54:d9:e6:48:04:aa:f3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82 Validity Not Before: May 3 02:50:07 2026 GMT Not After : May 2 02:55:07 2027 GMT Subject: CN=9FFC8208DCCD8EFBC07FF0B1CF2E7D28698ADC0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:f4:18:e9:6c:e0:dc:fc:42:6f:87:6e:e7: b2:dc:15:5a:db:b4:19:f7:b5:04:9b:2e:f9:83:c6: ef:e9:8f:51:ec:67:cb:3d:8f:9e:0e:de:c2:75:2d: 9d:d2:8c:b0:b0:c7:a7:d0:6b:14:a7:5b:d2:65:8f: 5c:ad:7b:24:d2:0e:66:6a:1c:47:0f:87:bf:1d:56: eb:0f:9e:59:0e:41:b3:35:bf:34:82:1a:7a:34:c6: bf:46:a1:64:a6:97:df:65:95:43:05:ab:36:94:90: 19:53:85:ca:02:b3:8e:09:73:31:8e:db:39:46:ea: 90:94:67:45:93:b0:c8:ad:a6:d1:7a:be:ab:07:ba: a6:43:1a:63:d6:78:4c:99:59:49:88:64:11:61:11: 2e:c9:40:65:cc:05:ec:b9:5b:a2:30:6b:48:53:ca: b2:02:30:df:d1:11:c6:9e:24:a0:c4:02:a7:24:e1: d7:0a:26:3c:91:17:8f:61:25:0c:4c:d1:c3:93:2f: ac:22:3b:b5:9d:30:08:34:49:7a:36:c3:ac:78:70: f4:c6:43:58:c1:3c:b4:ef:f0:63:8e:1e:13:ed:d8: 37:d3:fc:7c:ee:09:89:69:b1:cd:d0:93:ed:36:c7: 2f:93:6a:9c:75:e0:c9:fc:27:13:eb:2d:2e:90:b6: 2d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FC:82:08:DC:CD:8E:FB:C0:7F:F0:B1:CF:2E:7D:28:69:8A:DC:0A X509v3 Authority Key Identifier: keyid:98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.164.0/24 Signature Algorithm: sha256WithRSAEncryption 96:e2:6e:9b:ba:07:ad:9b:1e:c8:5a:a4:65:5b:04:b7:89:d5: aa:06:f8:66:a1:1f:94:bc:4e:63:2c:3b:37:86:1f:30:49:7d: 8a:c2:93:fd:3b:c7:0e:88:8e:ab:b5:b1:1e:f1:02:db:4e:2a: 3d:c4:b4:f6:b0:69:28:60:e8:cb:37:9b:e2:18:e1:da:a5:f6: 76:6e:b5:ca:8a:52:7c:0d:bb:21:c7:bb:bf:62:82:85:f0:10: 1e:02:f3:a1:84:be:b3:8c:e4:08:2f:1b:1d:72:60:19:f5:88: bb:5a:23:8b:79:c8:09:2d:e4:8f:49:d4:15:e8:d0:36:46:1f: 31:b6:96:ea:08:16:f0:a9:86:dd:9f:1a:69:5d:26:03:fe:aa: 3c:73:77:a7:c8:bf:67:07:16:ee:73:b4:61:81:4e:0c:bf:a9: 66:dc:a2:7a:3d:87:3f:8e:da:b9:2b:03:86:1d:91:49:af:2f: 2e:89:a0:35:a5:7a:d3:57:01:bf:43:3f:0a:63:fd:9d:76:4a: 6b:60:02:eb:66:1c:b6:c8:5b:18:ba:1b:f2:03:d0:1c:1b:33: 6f:89:0b:ba:78:ef:46:82:a3:05:ed:af:5b:7a:53:97:1e:1b: ae:90:31:37:ec:f7:3a:be:41:39:45:2a:d2:0e:c3:61:d6:68: 8c:fd:7c:c0 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKFd/y9MdlPCTrAsgVNnmSASq89AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFMThDNTdDRjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFG RUJENUI4MjAeFw0yNjA1MDMwMjUwMDdaFw0yNzA1MDIwMjU1MDdaMDMxMTAvBgNV BAMTKDlGRkM4MjA4RENDRDhFRkJDMDdGRjBCMUNGMkU3RDI4Njk4QURDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzI/QY6Wzg3PxCb4du57LcFVrb tBn3tQSbLvmDxu/pj1HsZ8s9j54O3sJ1LZ3SjLCwx6fQaxSnW9Jlj1yteyTSDmZq HEcPh78dVusPnlkOQbM1vzSCGno0xr9GoWSml99llUMFqzaUkBlThcoCs44JczGO 2zlG6pCUZ0WTsMitptF6vqsHuqZDGmPWeEyZWUmIZBFhES7JQGXMBey5W6Iwa0hT yrICMN/REcaeJKDEAqck4dcKJjyRF49hJQxM0cOTL6wiO7WdMAg0SXo2w6x4cPTG Q1jBPLTv8GOOHhPt2DfT/HzuCYlpsc3Qk+02xy+Tapx14Mn8JxPrLS6Qti0fAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUn/yCCNzNjvvAf/Cxzy59KGmK3AowHwYDVR0j BBgwFoAUmOGMV894S17LZHb/2jQDof69W4IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWY5YzQ0NmYtZDk3MS00YjVlLWIyNjktMWU4M2QzYTE0ZmVmLzAvOThFMThDNTdD Rjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFGRUJENUI4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEUxOEM1N0NGNzg0QjVFQ0I2NDc2RkZEQTM0MDNBMUZFQkQ1 QjgyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzlmOWM0NDZmLWQ5NzEtNGI1ZS1i MjY5LTFlODNkM2ExNGZlZi8wLzMxMzAzMzJlMzEzNDM5MmUzMTM2MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnlaQwDQYJ KoZIhvcNAQELBQADggEBAJbibpu6B62bHshapGVbBLeJ1aoG+GahH5S8TmMsOzeG HzBJfYrCk/07xw6Ijqu1sR7xAttOKj3EtPawaShg6Ms3m+IY4dql9nZutcqKUnwN uyHHu79igoXwEB4C86GEvrOM5AgvGx1yYBn1iLtaI4t5yAkt5I9J1BXo0DZGHzG2 luoIFvCpht2fGmldJgP+qjxzd6fIv2cHFu5ztGGBTgy/qWbcono9hz+O2rkrA4Yd kUmvLy6JoDWletNXAb9DPwpj/Z12SmtgAutmHLbIWxi6G/ID0BwbM2+JC7p470aC owXtr1t6U5ceG66QMTfs9zq+QTlFKtIOw2HWaIz9fMA= -----END CERTIFICATE-----Generated at Wed May 13 07:46:03 2026 by rpki-client