$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa File: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (raw, json) Hash identifier: /+PtWpNaw+qxeLwPph3/hApvuooUAmWwP9ENPOfI0jQ= Subject key identifier: 9F:FB:2E:40:30:07:81:3B:28:84:42:01:1F:E6:E7:49:38:C8:B0:03 Certificate issuer: /CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Certificate serial: 7AD573841BA6C7710B5F871DE03262521F42DEE9 Authority key identifier: 20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa Signing time: Sun 03 May 2026 03:01:35 +0000 ROA not before: Sun 03 May 2026 02:56:35 +0000 ROA not after: Sun 02 May 2027 03:01:35 +0000 asID: 149682 IP address blocks: 103.184.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d5:73:84:1b:a6:c7:71:0b:5f:87:1d:e0:32:62:52:1f:42:de:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Validity Not Before: May 3 02:56:35 2026 GMT Not After : May 2 03:01:35 2027 GMT Subject: CN=9FFB2E403007813B288442011FE6E74938C8B003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d2:07:74:af:8f:26:4f:71:1f:67:0c:33:65: 4a:47:8d:ea:0e:2c:07:fa:f5:da:2b:b2:76:b5:d8: 4b:6b:a9:2a:19:14:6b:b6:dd:16:1b:d6:3d:dd:04: dc:f2:ae:02:9a:fc:5d:24:10:5a:bb:18:27:a3:21: 7d:d7:47:ba:f4:e3:31:2a:e4:93:95:d7:38:01:bd: 67:92:4d:85:06:63:78:36:92:2c:d5:80:4a:b9:e8: 99:eb:29:3c:32:1a:5c:0c:06:c0:2a:91:9b:8a:0a: 11:49:4e:29:2f:75:89:dc:af:bb:cd:10:0d:c6:a1: 73:95:e5:49:14:fe:93:04:b1:e5:5e:6b:ba:1a:5d: 79:56:af:23:cc:fe:f8:1a:77:01:98:f4:3f:6e:70: 83:35:45:1a:aa:06:a0:5c:e1:31:7b:3b:f8:2a:69: 3f:fc:b9:24:10:54:bb:97:51:57:0c:8e:ec:4b:bb: 4f:73:14:0f:bc:29:ff:48:9d:72:db:6a:83:62:4f: 17:00:7d:df:2b:de:29:d1:0f:cc:0f:3c:9f:9f:21: b6:6f:9e:2f:cf:c7:b8:36:9f:33:8a:fa:d9:10:00: f0:c4:80:4d:fc:cc:03:c5:54:84:45:fb:81:4a:83: 22:43:dd:0e:87:c3:40:2c:ec:49:d8:b7:89:87:45: d5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FB:2E:40:30:07:81:3B:28:84:42:01:1F:E6:E7:49:38:C8:B0:03 X509v3 Authority Key Identifier: keyid:20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.64.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:eb:bc:b9:6a:19:44:21:93:86:97:30:25:d0:5a:e4:98:f9: 88:6d:8e:15:84:3f:7e:b7:7c:dd:aa:87:d3:d0:e5:ac:b4:21: 24:42:f6:6e:7d:7c:fd:f9:87:79:11:d0:72:c3:86:36:ad:05: 06:6e:f6:2b:ce:16:79:96:ca:f9:f9:bb:ae:c6:b4:e3:bf:fe: 85:79:ed:76:a1:f5:97:85:2e:c5:fc:24:27:e1:9d:52:dd:ff: 30:8f:97:6d:05:9d:41:92:75:da:b1:e3:3c:62:2a:fd:e0:62: fd:e4:f5:75:8d:69:83:3f:39:77:e3:5b:1f:e0:10:42:af:6d: 46:21:6a:98:07:fd:ca:2b:98:77:c4:62:51:9d:d0:8f:60:ac: 64:71:03:48:85:ed:3d:e5:42:ac:21:b3:20:ee:f6:bf:64:58: 02:7c:b5:5a:72:53:26:66:89:6e:b0:eb:68:15:c9:87:0b:28: 00:44:6d:b6:23:c0:08:98:82:f3:f1:72:c5:fe:3c:62:b6:43: 83:d8:7a:62:6b:c8:9b:b2:f9:57:cf:6b:42:56:c7:c5:99:e6: 64:cc:dd:f6:7e:bd:a2:1c:fe:86:88:1b:e8:e1:98:71:33:25: cc:d7:e3:95:ee:f0:d6:ee:3a:6d:d9:81:fc:3a:dd:d5:7b:7b: e8:bc:71:57 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUetVzhBumx3ELX4cd4DJiUh9C3ukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYz NTA3MEQzOTAeFw0yNjA1MDMwMjU2MzVaFw0yNzA1MDIwMzAxMzVaMDMxMTAvBgNV BAMTKDlGRkIyRTQwMzAwNzgxM0IyODg0NDIwMTFGRTZFNzQ5MzhDOEIwMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu0gd0r48mT3EfZwwzZUpHjeoO LAf69dorsna12EtrqSoZFGu23RYb1j3dBNzyrgKa/F0kEFq7GCejIX3XR7r04zEq 5JOV1zgBvWeSTYUGY3g2kizVgEq56JnrKTwyGlwMBsAqkZuKChFJTikvdYncr7vN EA3GoXOV5UkU/pMEseVea7oaXXlWryPM/vgadwGY9D9ucIM1RRqqBqBc4TF7O/gq aT/8uSQQVLuXUVcMjuxLu09zFA+8Kf9InXLbaoNiTxcAfd8r3inRD8wPPJ+fIbZv ni/Px7g2nzOK+tkQAPDEgE38zAPFVIRF+4FKgyJD3Q6Hw0As7EnYt4mHRdU9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUn/suQDAHgTsohEIBH+bnSTjIsAMwHwYDVR0j BBgwFoAUIIQId73Ny57J7W3KxfTIXzUHDTkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZkODg0OTYtYjJiYS00ZDEzLTk4MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdC RENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYzNTA3MEQzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDg0MDg3N0JEQ0RDQjlFQzlFRDZEQ0FDNUY0Qzg1RjM1MDcw RDM5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I2ZDg4NDk2LWIyYmEtNGQxMy05 ODI1LWFlMzhhZmYxZGExNS8wLzMxMzAzMzJlMzEzODM0MmUzNjM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7hAMA0GCSqG SIb3DQEBCwUAA4IBAQBb67y5ahlEIZOGlzAl0FrkmPmIbY4VhD9+t3zdqofT0OWs tCEkQvZufXz9+Yd5EdByw4Y2rQUGbvYrzhZ5lsr5+buuxrTjv/6Fee12ofWXhS7F /CQn4Z1S3f8wj5dtBZ1BknXaseM8Yir94GL95PV1jWmDPzl341sf4BBCr21GIWqY B/3KK5h3xGJRndCPYKxkcQNIhe095UKsIbMg7va/ZFgCfLVaclMmZolusOtoFcmH CygARG22I8AImILz8XLF/jxitkOD2Hpia8ibsvlXz2tCVsfFmeZkzN32fr2iHP6G iBvo4ZhxMyXM1+OV7vDW7jpt2YH8Ot3Ve3vovHFX -----END CERTIFICATE-----Generated at Wed May 13 06:27:12 2026 by rpki-client