$ rpki-client -vvf rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/3130332e31372e37362e302f32332d3233203d3e20313331373831.roa File: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (raw, json) Hash identifier: NR10Bfbwh6SYopHFVcr7fLYC1ZrjLqSPhi8hfWEGSfc= Subject key identifier: 5B:A5:20:57:D5:09:F6:B0:9C:42:FB:FE:51:72:14:DC:D6:F5:70:6A Certificate issuer: /CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Certificate serial: 25D4636F9F60C3FE29A75E2E2C5783BF707916F5 Authority key identifier: 8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/3130332e31372e37362e302f32332d3233203d3e20313331373831.roa Signing time: Sun 03 May 2026 02:55:16 +0000 ROA not before: Sun 03 May 2026 02:50:16 +0000 ROA not after: Sun 02 May 2027 02:55:16 +0000 asID: 131781 IP address blocks: 103.17.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d4:63:6f:9f:60:c3:fe:29:a7:5e:2e:2c:57:83:bf:70:79:16:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Validity Not Before: May 3 02:50:16 2026 GMT Not After : May 2 02:55:16 2027 GMT Subject: CN=5BA52057D509F6B09C42FBFE517214DCD6F5706A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:4b:88:2d:bd:03:21:73:60:be:79:f6:bb: fe:25:b8:e1:f6:4e:36:3d:0c:6c:12:8f:66:c6:37: 5e:b7:30:f2:f4:f8:23:43:51:0b:45:5d:67:43:78: 2b:34:af:07:2d:71:fc:65:37:94:63:7b:cf:75:09: 34:94:8a:b4:d7:b0:2f:f9:05:b3:8c:e0:fe:43:67: 13:a1:2e:f3:eb:18:21:af:16:0c:13:3f:01:2b:3b: b3:cf:58:44:80:e1:e9:2c:25:13:a7:7b:7d:3d:60: 4c:09:b2:5c:d3:c1:1c:32:15:b3:1a:ee:cb:6d:49: b0:20:b9:27:8c:6e:01:1b:6b:32:5c:38:f5:33:29: 22:74:49:65:6b:1a:39:64:2b:54:1d:ad:8f:ac:8e: 57:9b:05:9a:e7:59:91:2d:c3:b5:0f:ef:08:4e:6f: 09:8f:f4:6d:99:08:dd:90:6e:74:89:05:58:b6:b2: ef:81:c7:aa:ce:bb:6a:81:8d:33:99:47:0b:51:16: b4:ae:27:1b:28:05:64:b5:12:b5:7b:e3:2d:bb:b7: 10:88:06:dc:68:ee:da:ae:e8:4c:f0:db:1c:4b:17: 17:12:a4:e8:ba:f5:6b:1a:d5:17:8e:7b:25:a1:66: 38:91:c6:c2:a6:e8:c1:7b:81:c8:08:11:ca:d5:fc: 5d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A5:20:57:D5:09:F6:B0:9C:42:FB:FE:51:72:14:DC:D6:F5:70:6A X509v3 Authority Key Identifier: keyid:8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/3130332e31372e37362e302f32332d3233203d3e20313331373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.76.0/23 Signature Algorithm: sha256WithRSAEncryption c7:0f:c5:e6:6b:26:c7:04:e8:43:f6:8a:d4:d0:5d:83:ef:3a: a6:c7:f3:64:3b:31:6e:70:5c:b4:30:e9:a3:b8:fd:ae:13:5a: 20:b3:52:9c:75:47:eb:3f:e5:a2:59:a1:b5:90:89:f1:f3:d8: c1:c7:ef:b4:95:ee:b2:67:e1:57:13:26:59:c7:e3:ee:3e:3c: 52:e2:86:9e:13:53:d4:f1:fa:25:e1:55:14:88:8c:11:d8:90: 72:5e:e1:98:12:eb:9b:69:d6:93:89:5b:9a:4d:ac:8d:f1:f4: fa:cf:2d:83:74:05:8d:92:18:dd:be:97:1b:2d:98:fb:1d:af: be:ca:b1:da:fb:ec:f1:57:94:c0:f8:0b:59:02:74:d0:94:af: 29:72:fb:63:11:81:e4:1f:bc:f1:13:ad:31:12:cd:6b:16:a3: 5e:72:a0:fc:b9:27:de:09:d2:8f:c0:54:96:80:3c:29:97:55: 27:51:10:81:fa:3a:35:48:e3:85:47:95:0c:e9:73:dd:4f:4f: 88:4e:4f:70:6d:ac:87:a2:01:af:33:2a:21:95:d4:cf:65:2d: 4e:a1:24:db:13:d6:79:5e:ad:43:33:36:61:39:9b:f1:5d:dd: e1:ea:f2:78:a5:87:7d:f6:b2:fe:1e:41:24:10:db:c1:72:f9: 2c:f8:ad:54 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJdRjb59gw/4pp14uLFeDv3B5FvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5 QjFCNDU3MzAeFw0yNjA1MDMwMjUwMTZaFw0yNzA1MDIwMjU1MTZaMDMxMTAvBgNV BAMTKDVCQTUyMDU3RDUwOUY2QjA5QzQyRkJGRTUxNzIxNERDRDZGNTcwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3UuILb0DIXNgvnn2u/4luOH2 TjY9DGwSj2bGN163MPL0+CNDUQtFXWdDeCs0rwctcfxlN5Rje891CTSUirTXsC/5 BbOM4P5DZxOhLvPrGCGvFgwTPwErO7PPWESA4eksJROne309YEwJslzTwRwyFbMa 7sttSbAguSeMbgEbazJcOPUzKSJ0SWVrGjlkK1QdrY+sjlebBZrnWZEtw7UP7whO bwmP9G2ZCN2QbnSJBVi2su+Bx6rOu2qBjTOZRwtRFrSuJxsoBWS1ErV74y27txCI Btxo7tqu6Ezw2xxLFxcSpOi69Wsa1ReOeyWhZjiRxsKm6MF7gcgIEcrV/F0hAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUW6UgV9UJ9rCcQvv+UXIU3Nb1cGowHwYDVR0j BBgwFoAUjRqU6g+f1RSOCcrgowe9yZsbRXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2MjExMWQtMGExMy00NDA3LWFmMzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEw RjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5QjFCNDU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDFBOTRFQTBGOUZENTE0OEUwOUNBRTBBMzA3QkRDOTlCMUI0 NTczLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EwNjIxMTFkLTBhMTMtNDQwNy1h ZjMzLTM0YzIyYTlkN2FlYy8wLzMxMzAzMzJlMzEzNzJlMzczNjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzMzMTM3MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcRTDANBgkqhkiG 9w0BAQsFAAOCAQEAxw/F5msmxwToQ/aK1NBdg+86psfzZDsxbnBctDDpo7j9rhNa ILNSnHVH6z/lolmhtZCJ8fPYwcfvtJXusmfhVxMmWcfj7j48UuKGnhNT1PH6JeFV FIiMEdiQcl7hmBLrm2nWk4lbmk2sjfH0+s8tg3QFjZIY3b6XGy2Y+x2vvsqx2vvs 8VeUwPgLWQJ00JSvKXL7YxGB5B+88ROtMRLNaxajXnKg/Lkn3gnSj8BUloA8KZdV J1EQgfo6NUjjhUeVDOlz3U9PiE5PcG2sh6IBrzMqIZXUz2UtTqEk2xPWeV6tQzM2 YTmb8V3d4eryeKWHffay/h5BJBDbwXL5LPitVA== -----END CERTIFICATE-----Generated at Wed May 13 04:54:57 2026 by rpki-client