$ rpki-client -vvf rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa File: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (raw, json) Hash identifier: jvWEOsR7PfzKTUwNJSaNZgDIPP0tbvEXbSdlcBqgCio= Subject key identifier: 72:E1:50:D0:54:D5:0A:57:82:BC:91:1E:5F:A3:D5:AD:C1:58:FD:3E Certificate issuer: /CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Certificate serial: 3A5FA41312992389046D39DB65DD1634DC4816B2 Authority key identifier: 72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa Signing time: Sun 03 May 2026 02:59:40 +0000 ROA not before: Sun 03 May 2026 02:54:40 +0000 ROA not after: Sun 02 May 2027 02:59:40 +0000 asID: 150226 IP address blocks: 103.17.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5f:a4:13:12:99:23:89:04:6d:39:db:65:dd:16:34:dc:48:16:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Validity Not Before: May 3 02:54:40 2026 GMT Not After : May 2 02:59:40 2027 GMT Subject: CN=72E150D054D50A5782BC911E5FA3D5ADC158FD3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4c:f9:c6:11:0b:27:fd:20:a4:5d:c5:cc:06: 1e:f2:bf:bf:fd:6e:01:87:49:f5:03:3f:08:36:2b: e8:7f:ae:a5:5c:f2:f0:f5:2d:0c:32:df:69:fc:7d: 0f:a9:f6:e5:fd:3b:f3:12:87:d7:a2:e2:31:7b:9e: 34:f3:25:bd:cb:6a:06:1a:c7:fb:e7:55:bf:11:15: 27:d7:f7:c2:9f:e1:20:23:50:11:26:76:bd:5e:13: 01:99:3c:fa:78:67:4d:5b:d7:e8:b7:20:23:b0:e5: 46:f1:ad:7e:5f:24:57:6e:5e:0f:5c:73:48:d7:c9: 37:62:ac:30:c4:f1:00:0c:96:76:ba:47:1d:90:5e: b7:e5:75:1d:27:5e:3b:3f:c3:2c:a7:3d:6a:a8:72: db:39:8a:32:4a:bf:dc:d5:06:cc:04:02:ba:fa:ea: a9:22:ce:8d:27:cc:7f:e6:54:9e:c4:0f:27:6f:08: 2f:74:db:52:46:de:6d:04:9a:c2:0a:32:7a:03:ad: ea:e7:3b:7f:4d:68:a4:4f:49:59:87:71:ee:d4:87: 56:4e:c7:4e:2d:ef:6a:b3:69:3d:79:ae:f8:17:ec: d4:6e:0e:ce:8b:c8:5c:ed:13:72:ee:fd:11:2e:ad: ec:40:a7:fd:b7:1e:e3:c0:e5:e5:1d:20:93:c8:6d: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E1:50:D0:54:D5:0A:57:82:BC:91:1E:5F:A3:D5:AD:C1:58:FD:3E X509v3 Authority Key Identifier: keyid:72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.178.0/24 Signature Algorithm: sha256WithRSAEncryption a3:16:f1:8a:4d:7b:70:2d:9c:d2:74:96:cd:9e:3d:1d:de:12: b4:c7:a7:51:1a:af:32:96:88:f0:06:cc:db:a6:f2:41:2e:f0: 1a:c8:4c:4d:f5:2c:e3:36:42:8d:fe:30:91:6a:97:b0:2e:b1: e5:86:32:d0:69:35:70:05:c7:f7:92:98:eb:a9:96:6a:3e:36: 70:3c:7e:0a:e1:12:73:38:a0:fe:a7:99:e0:ce:45:24:da:1d: 22:02:c0:6c:08:5e:0c:00:34:79:e7:78:4a:2b:82:e2:27:d7: cb:4d:36:12:38:3e:43:fc:41:82:df:51:ef:a9:9c:a0:64:b4: 03:34:c8:bd:e1:3f:e6:a6:6c:96:f6:07:35:6a:e9:1a:13:e9: 66:e3:8c:b4:2d:be:25:fe:63:05:d8:00:32:18:f2:7d:9f:b4: 39:b6:0a:a8:21:c5:3a:aa:50:d7:fe:d2:3a:21:76:8c:a4:02: 7d:04:47:d4:ad:f5:7a:8c:fa:1f:e8:73:90:e3:da:d1:c4:f2: 3d:1c:2e:cd:82:19:ce:d9:fe:2b:0e:43:b3:68:fd:b0:3c:79: 7f:df:b9:d0:4a:28:d2:29:53:2f:d7:32:56:e1:20:ff:cf:28: d7:e8:83:ca:63:aa:7a:86:9f:76:16:f9:e5:96:86:e1:27:4f: 87:2b:fc:9c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOl+kExKZI4kEbTnbZd0WNNxIFrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0Mx MzMzQjEyODAeFw0yNjA1MDMwMjU0NDBaFw0yNzA1MDIwMjU5NDBaMDMxMTAvBgNV BAMTKDcyRTE1MEQwNTRENTBBNTc4MkJDOTExRTVGQTNENUFEQzE1OEZEM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSTPnGEQsn/SCkXcXMBh7yv7/9 bgGHSfUDPwg2K+h/rqVc8vD1LQwy32n8fQ+p9uX9O/MSh9ei4jF7njTzJb3LagYa x/vnVb8RFSfX98Kf4SAjUBEmdr1eEwGZPPp4Z01b1+i3ICOw5UbxrX5fJFduXg9c c0jXyTdirDDE8QAMlna6Rx2QXrfldR0nXjs/wyynPWqocts5ijJKv9zVBswEArr6 6qkizo0nzH/mVJ7EDydvCC9021JG3m0EmsIKMnoDrernO39NaKRPSVmHce7Uh1ZO x04t72qzaT15rvgX7NRuDs6LyFztE3Lu/REurexAp/23HuPA5eUdIJPIbYsjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcuFQ0FTVCleCvJEeX6PVrcFY/T4wHwYDVR0j BBgwFoAUclBmpEzN+u5Ep8lY1A+6PBMzsSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVmODM3YjMtZGZkMi00MmNjLTliNzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0 Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0MxMzMzQjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUwNjZBNDRDQ0RGQUVFNDRBN0M5NThENDBGQkEzQzEzMzNC MTI4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FlZjgzN2IzLWRmZDItNDJjYy05 Yjc5LTc0YjZiYWZkNGUyZC8wLzMxMzAzMzJlMzEzNzJlMzEzNzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxGyMA0GCSqG SIb3DQEBCwUAA4IBAQCjFvGKTXtwLZzSdJbNnj0d3hK0x6dRGq8ylojwBszbpvJB LvAayExN9SzjNkKN/jCRapewLrHlhjLQaTVwBcf3kpjrqZZqPjZwPH4K4RJzOKD+ p5ngzkUk2h0iAsBsCF4MADR553hKK4LiJ9fLTTYSOD5D/EGC31HvqZygZLQDNMi9 4T/mpmyW9gc1aukaE+lm44y0Lb4l/mMF2AAyGPJ9n7Q5tgqoIcU6qlDX/tI6IXaM pAJ9BEfUrfV6jPof6HOQ49rRxPI9HC7NghnO2f4rDkOzaP2wPHl/37nQSijSKVMv 1zJW4SD/zyjX6IPKY6p6hp92FvnllobhJ0+HK/yc -----END CERTIFICATE-----Generated at Wed May 13 00:31:41 2026 by rpki-client