$ rpki-client -vvf rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32342d3234203d3e20313339393832.roa File: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (raw, json) Hash identifier: ZmQheHX1MZV/oBZW9LIfogQSYln7HG4CQMJRL8sFUs4= Subject key identifier: 6D:87:F4:FA:4F:B4:F7:9A:1E:65:58:50:96:4B:83:F9:42:B6:B9:93 Certificate issuer: /CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Certificate serial: 63CE4FA64985E3033F699484E44C29A92868349F Authority key identifier: 28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32342d3234203d3e20313339393832.roa Signing time: Sun 03 May 2026 02:58:30 +0000 ROA not before: Sun 03 May 2026 02:53:30 +0000 ROA not after: Sun 02 May 2027 02:58:30 +0000 asID: 139982 IP address blocks: 103.66.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ce:4f:a6:49:85:e3:03:3f:69:94:84:e4:4c:29:a9:28:68:34:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Validity Not Before: May 3 02:53:30 2026 GMT Not After : May 2 02:58:30 2027 GMT Subject: CN=6D87F4FA4FB4F79A1E655850964B83F942B6B993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:28:bf:bf:bf:b7:26:f4:20:04:7b:3f:d4: f0:00:16:38:a1:6d:7a:2a:c1:ce:b5:5a:5e:4d:08: 0c:c8:05:67:60:09:1f:d5:0c:51:dc:04:ef:74:04: 32:1f:7f:00:af:a5:35:2c:14:a4:fd:bc:a2:4b:8c: 85:14:b8:6d:18:4a:cc:2d:a1:cd:6b:7f:35:50:8d: ab:93:fc:40:49:6a:d2:2e:29:d9:cf:ee:b0:36:40: c0:3d:f8:51:87:75:f1:09:7f:59:61:42:ae:58:f3: b4:2d:6a:90:5c:19:0d:29:00:05:87:b4:8b:be:62: 6c:cc:fa:6b:79:c2:4c:fe:a5:a9:ee:49:4e:f8:c9: b5:e1:2c:8e:78:ff:67:10:63:f6:c1:33:e8:eb:dc: f5:c3:0c:36:2f:a9:87:4c:2d:9d:b2:b4:d1:63:eb: 95:f4:8b:91:0c:01:65:de:de:3d:4b:14:a5:f6:60: 85:a5:4e:80:32:2b:1b:86:39:6d:ef:e3:72:1e:f2: dd:cd:ba:ad:6f:f5:93:4b:db:bd:c8:07:59:0e:b7: c1:cd:07:eb:4b:ae:b1:98:20:e8:6d:8e:97:17:ca: 0a:62:65:ed:65:30:7b:d0:8a:fb:28:a4:75:46:f7: 84:78:31:8e:d5:ca:d4:7c:d5:1e:1a:b6:d6:6b:af: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:87:F4:FA:4F:B4:F7:9A:1E:65:58:50:96:4B:83:F9:42:B6:B9:93 X509v3 Authority Key Identifier: keyid:28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32342d3234203d3e20313339393832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.66.62.0/24 Signature Algorithm: sha256WithRSAEncryption 62:97:0d:8f:3f:c2:97:7f:67:37:6d:37:3f:9a:ab:4f:52:10: ef:35:a7:b7:26:0e:e0:bb:d5:d1:e4:67:05:ad:9e:58:a2:c2: 4e:94:eb:76:8a:25:77:c1:6f:19:8b:17:db:b0:1b:a4:da:7e: be:db:91:25:ac:aa:88:fe:15:91:93:5a:26:47:9f:58:91:2d: dc:2f:5f:99:b5:b1:ff:77:4b:a7:c6:78:1e:12:7e:4b:dd:d0: d2:b9:45:fc:ef:34:c9:9c:ec:b4:91:1c:9c:c3:b7:62:c0:17: 43:e5:12:f6:62:12:50:40:ee:cd:b4:13:46:30:01:a0:08:b0: 67:a5:40:32:94:5f:bc:7c:63:38:16:64:0d:9d:02:b6:72:c9: 89:24:a5:e5:1c:6a:41:34:3b:4d:ec:84:de:bd:1e:c2:cc:85: e5:ef:a4:8e:91:23:cb:86:f0:1f:2a:e3:43:e3:74:98:65:95: a3:91:d5:5a:46:5f:e5:78:29:d6:c2:c2:31:69:aa:d7:d1:3d: 2a:02:68:12:fe:71:b3:ac:f8:4e:37:0b:45:ed:80:9d:df:7a: 74:ac:a5:c0:94:1d:5e:7e:cf:cf:e1:7d:75:86:f8:40:ff:64: 8f:df:29:4d:eb:c5:8b:f7:68:e5:28:0a:e0:37:bc:7b:2b:4e: 77:3b:1a:3c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUY85PpkmF4wM/aZSE5EwpqShoNJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdGMkZF MUI4MzQ1NDAeFw0yNjA1MDMwMjUzMzBaFw0yNzA1MDIwMjU4MzBaMDMxMTAvBgNV BAMTKDZEODdGNEZBNEZCNEY3OUExRTY1NTg1MDk2NEI4M0Y5NDJCNkI5OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaii/v7+3JvQgBHs/1PAAFjih bXoqwc61Wl5NCAzIBWdgCR/VDFHcBO90BDIffwCvpTUsFKT9vKJLjIUUuG0YSswt oc1rfzVQjauT/EBJatIuKdnP7rA2QMA9+FGHdfEJf1lhQq5Y87QtapBcGQ0pAAWH tIu+YmzM+mt5wkz+panuSU74ybXhLI54/2cQY/bBM+jr3PXDDDYvqYdMLZ2ytNFj 65X0i5EMAWXe3j1LFKX2YIWlToAyKxuGOW3v43Ie8t3Nuq1v9ZNL273IB1kOt8HN B+tLrrGYIOhtjpcXygpiZe1lMHvQivsopHVG94R4MY7VytR81R4attZrrzYRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUbYf0+k+095oeZVhQlkuD+UK2uZMwHwYDVR0j BBgwFoAUKEPEIMlTjeAD25YEes5/L+G4NFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOTA5NDQtNjU2ZC00YWE3LTkxNzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBD OTUzOERFMDAzREI5NjA0N0FDRTdGMkZFMUI4MzQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODQzQzQyMEM5NTM4REUwMDNEQjk2MDQ3QUNFN0YyRkUxQjgz NDU0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FiYTkwOTQ0LTY1NmQtNGFhNy05 MTczLTU5MTI4MDgzM2Y4MS8wLzMxMzAzMzJlMzYzNjJlMzYzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzOTM5MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdCPjANBgkqhkiG 9w0BAQsFAAOCAQEAYpcNjz/Cl39nN203P5qrT1IQ7zWntyYO4LvV0eRnBa2eWKLC TpTrdoold8FvGYsX27AbpNp+vtuRJayqiP4VkZNaJkefWJEt3C9fmbWx/3dLp8Z4 HhJ+S93Q0rlF/O80yZzstJEcnMO3YsAXQ+US9mISUEDuzbQTRjABoAiwZ6VAMpRf vHxjOBZkDZ0CtnLJiSSl5RxqQTQ7TeyE3r0ewsyF5e+kjpEjy4bwHyrjQ+N0mGWV o5HVWkZf5Xgp1sLCMWmq19E9KgJoEv5xs6z4TjcLRe2And96dKylwJQdXn7Pz+F9 dYb4QP9kj98pTevFi/do5SgK4De8eytOdzsaPA== -----END CERTIFICATE-----Generated at Wed May 13 01:45:11 2026 by rpki-client