$ rpki-client -vvf rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa File: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (raw, json) Hash identifier: YLw5IVSAkKDuGq+lyyvqHOq+xZOAw6KjW85lZGyeWXA= Subject key identifier: 69:96:81:61:0E:A2:62:C9:70:2B:08:F6:0C:B1:B2:4A:C4:36:B2:77 Certificate issuer: /CN=A337D214F1B15825AC6178574C28712521D64B38 Certificate serial: 3303EE7DAF3D0A190E976E8EEA14EB5723CB4A01 Authority key identifier: A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa Signing time: Sun 03 May 2026 02:58:49 +0000 ROA not before: Sun 03 May 2026 02:53:49 +0000 ROA not after: Sun 02 May 2027 02:58:49 +0000 asID: 149707 IP address blocks: 103.20.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:03:ee:7d:af:3d:0a:19:0e:97:6e:8e:ea:14:eb:57:23:cb:4a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A337D214F1B15825AC6178574C28712521D64B38 Validity Not Before: May 3 02:53:49 2026 GMT Not After : May 2 02:58:49 2027 GMT Subject: CN=699681610EA262C9702B08F60CB1B24AC436B277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dd:87:fd:a2:15:20:e6:d6:4e:f1:9b:e6:eb: 81:5e:d2:37:af:e5:ba:6e:73:d2:0f:a3:68:35:af: e7:b9:fd:20:cf:65:36:fe:59:3e:5a:83:16:e6:5a: 3d:bb:0a:4e:92:92:79:ed:43:38:9d:91:cb:7c:9b: f9:e8:34:1c:19:1c:5e:9f:57:61:2c:5d:62:9d:25: fa:ee:23:db:ad:93:c9:21:e7:b4:95:91:1a:b0:84: f2:9b:57:91:38:7e:b3:53:14:d3:3f:ed:02:27:64: 35:a5:4a:33:98:4f:16:e6:32:ee:02:62:a2:68:7b: 66:f8:99:9c:2b:b3:a0:a8:72:ae:fe:3f:d2:6e:a0: d8:6b:53:2a:48:cf:ca:cb:6e:1b:88:67:57:fe:99: de:3f:48:7e:cc:a5:cc:82:57:d7:1b:7e:22:70:33: 72:03:b4:d8:0e:3a:e6:c5:14:7b:d4:61:fe:79:81: db:28:72:ef:82:ab:1d:bd:0c:21:41:97:d3:e1:52: 72:8e:6d:68:0d:91:d9:cc:e9:7e:7f:8e:0a:4b:78: f7:99:68:5c:69:9b:43:c5:a8:fc:65:e4:2e:7e:c4: 05:f8:10:ab:b4:d8:5d:2d:c9:ca:bd:c5:fb:ce:00: 44:2a:b7:e4:3c:85:7b:94:54:6d:49:1a:4e:e0:3d: 13:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:96:81:61:0E:A2:62:C9:70:2B:08:F6:0C:B1:B2:4A:C4:36:B2:77 X509v3 Authority Key Identifier: keyid:A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.109.0/24 Signature Algorithm: sha256WithRSAEncryption 29:7e:15:2f:de:5a:54:5a:bd:aa:56:bd:24:58:fa:90:1b:4d: 5c:2c:81:2d:0b:4e:3d:0a:9f:78:66:b4:00:1b:e2:29:03:95: a3:d4:5b:1c:5c:6c:6e:65:a3:88:91:d1:df:9c:10:8f:f5:60: c8:69:ca:02:3c:89:2a:1a:09:64:32:ad:71:48:a3:7e:2d:d5: 9b:43:d4:85:b2:d4:e2:88:06:c5:20:ee:18:f6:2d:93:75:68: 8d:c1:5b:09:b9:09:8e:fa:bb:02:78:bb:61:e2:54:4b:f2:54: 7f:11:2e:d2:fb:b6:b2:41:03:65:89:1d:40:a2:99:ee:a7:e3: 42:16:ee:68:dc:24:96:67:d1:44:aa:05:63:da:1b:ca:81:9a: c0:d4:ed:54:62:5a:15:f6:14:9f:5f:bd:45:67:e8:06:4c:44: d9:aa:02:ab:30:89:a2:d9:86:dc:6e:f4:df:85:3c:e0:e6:e4: e6:a7:ea:53:b6:6c:f8:82:eb:06:24:10:5a:0b:cb:21:61:e3: 08:06:b2:51:14:37:dc:ff:b9:8e:9a:d6:d6:d4:e1:fe:75:e6: 27:d9:ca:6d:2e:a3:76:82:76:02:a7:e0:c6:ed:c6:19:04:a4: d9:5b:7b:aa:ee:d7:88:2e:53:48:bf:88:1d:6c:3d:58:72:94: 40:66:1a:66 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMwPufa89ChkOl26O6hTrVyPLSgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzN0QyMTRGMUIxNTgyNUFDNjE3ODU3NEMyODcxMjUy MUQ2NEIzODAeFw0yNjA1MDMwMjUzNDlaFw0yNzA1MDIwMjU4NDlaMDMxMTAvBgNV BAMTKDY5OTY4MTYxMEVBMjYyQzk3MDJCMDhGNjBDQjFCMjRBQzQzNkIyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY3Yf9ohUg5tZO8Zvm64Fe0jev 5bpuc9IPo2g1r+e5/SDPZTb+WT5agxbmWj27Ck6SknntQzidkct8m/noNBwZHF6f V2EsXWKdJfruI9utk8kh57SVkRqwhPKbV5E4frNTFNM/7QInZDWlSjOYTxbmMu4C YqJoe2b4mZwrs6Cocq7+P9JuoNhrUypIz8rLbhuIZ1f+md4/SH7MpcyCV9cbfiJw M3IDtNgOOubFFHvUYf55gdsocu+Cqx29DCFBl9PhUnKObWgNkdnM6X5/jgpLePeZ aFxpm0PFqPxl5C5+xAX4EKu02F0tycq9xfvOAEQqt+Q8hXuUVG1JGk7gPRMNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUaZaBYQ6iYslwKwj2DLGySsQ2sncwHwYDVR0j BBgwFoAUozfSFPGxWCWsYXhXTChxJSHWSzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNjNmJkNzMtZjliZC00ZjVhLTljNTktZmJlYTFiZDgzNDczLzAvQTMzN0QyMTRG MUIxNTgyNUFDNjE3ODU3NEMyODcxMjUyMUQ2NEIzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzM3RDIxNEYxQjE1ODI1QUM2MTc4NTc0QzI4NzEyNTIxRDY0 QjM4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FjYzZiZDczLWY5YmQtNGY1YS05 YzU5LWZiZWExYmQ4MzQ3My8wLzMxMzAzMzJlMzIzMDJlMzEzMDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxRtMA0GCSqG SIb3DQEBCwUAA4IBAQApfhUv3lpUWr2qVr0kWPqQG01cLIEtC049Cp94ZrQAG+Ip A5Wj1FscXGxuZaOIkdHfnBCP9WDIacoCPIkqGglkMq1xSKN+LdWbQ9SFstTiiAbF IO4Y9i2TdWiNwVsJuQmO+rsCeLth4lRL8lR/ES7S+7ayQQNliR1Aopnup+NCFu5o 3CSWZ9FEqgVj2hvKgZrA1O1UYloV9hSfX71FZ+gGTETZqgKrMImi2YbcbvTfhTzg 5uTmp+pTtmz4gusGJBBaC8shYeMIBrJRFDfc/7mOmtbW1OH+deYn2cptLqN2gnYC p+DG7cYZBKTZW3uq7teILlNIv4gdbD1YcpRAZhpm -----END CERTIFICATE-----Generated at Wed May 13 04:02:36 2026 by rpki-client