$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa File: 3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa (raw, json) Hash identifier: HKtNGGIgOC9+B6KozAxjZkWtuOSi7Y4giMkSdFSsHeg= Subject key identifier: 24:50:03:CD:66:03:92:27:2E:9E:DA:1B:1E:5A:3B:F4:F7:B8:68:A1 Certificate issuer: /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32 Certificate serial: 4072D4C4D1CFF9120046283E07708F76DA0B3F05 Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa Signing time: Sun 03 May 2026 03:02:33 +0000 ROA not before: Sun 03 May 2026 02:57:33 +0000 ROA not after: Sun 02 May 2027 03:02:33 +0000 asID: 133339 IP address blocks: 103.225.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:72:d4:c4:d1:cf:f9:12:00:46:28:3e:07:70:8f:76:da:0b:3f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32 Validity Not Before: May 3 02:57:33 2026 GMT Not After : May 2 03:02:33 2027 GMT Subject: CN=245003CD660392272E9EDA1B1E5A3BF4F7B868A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:7d:29:74:de:00:0c:c9:52:a3:40:c1:78: 6f:5d:d2:7e:13:5b:24:08:29:c4:15:b6:9f:97:e9: 17:2c:8f:fa:4f:ec:65:c9:ba:47:de:28:7c:33:de: 90:20:b4:2e:98:f9:50:69:de:88:d8:88:ab:c8:fa: eb:e4:c6:75:aa:ae:9c:a5:80:b1:af:22:6e:0e:f0: 36:0c:4b:e8:60:f4:b1:20:40:0f:75:14:b5:13:09: c1:3c:15:86:e9:f6:28:52:dd:91:e1:0a:7b:92:71: 8a:8d:02:90:d7:4a:13:db:f1:61:a7:71:cd:c1:1b: fe:8a:65:41:8c:70:34:d2:ee:22:36:a1:a1:b7:92: f7:eb:5b:f9:86:16:88:fb:01:cb:7e:bd:22:bd:bf: 5e:4c:9f:88:3b:53:e0:b3:84:0a:2d:ff:24:32:e9: d6:8a:f4:e5:7e:79:3c:ff:76:4f:e8:60:bc:24:c5: 98:f4:c2:8b:11:c7:80:27:c3:8f:7b:fe:1b:ca:95: 48:32:af:65:27:d8:d4:ca:da:6e:8d:1f:27:22:15: f2:05:4b:e8:d3:82:f4:9a:7f:2a:74:53:db:a4:42: ee:92:40:29:6a:7f:95:91:d8:a5:bf:c4:e0:6c:ba: dc:bc:05:e8:c6:db:63:1d:b3:46:8b:7e:b3:9a:7f: 96:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:50:03:CD:66:03:92:27:2E:9E:DA:1B:1E:5A:3B:F4:F7:B8:68:A1 X509v3 Authority Key Identifier: keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.225.171.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:a4:6b:18:10:a0:f2:a7:72:a7:87:49:ca:62:ed:a3:74:9c: f9:bd:b9:15:c6:61:9e:af:bc:b4:a7:72:e4:5c:02:b7:98:49: ed:ff:ab:f0:ae:ea:b9:58:e8:cf:16:7c:8d:39:69:62:47:31: 78:1f:ce:8c:a8:88:31:70:ed:b9:a8:d7:18:f6:2e:be:37:0c: 2b:6d:85:0d:29:33:64:b3:c5:ac:16:3b:93:81:ee:33:f2:c6: 49:b4:05:58:c3:5f:25:99:72:6b:c0:8a:5e:16:20:d5:4f:11: b1:67:d2:5c:a6:ad:9b:52:e1:b1:82:77:cb:e6:e5:3e:b1:e2: f1:b8:51:eb:c5:c0:86:c4:c0:b9:f3:3c:09:03:6b:c9:68:4d: a6:57:0d:bc:20:16:b8:c9:97:1f:1a:b8:5e:d8:aa:12:ad:14: af:14:46:98:db:e3:a2:0c:2c:6c:d2:ac:48:95:65:03:6c:09: ba:3a:8b:4e:bc:13:b4:76:b6:7e:89:1b:d2:07:7f:b8:63:f7: 75:56:3d:4e:73:9a:c2:ce:e8:15:67:d7:f9:88:f3:63:eb:37: d1:01:89:09:54:81:33:7e:52:5f:13:50:6a:cb:4a:84:ca:e5: 46:8c:3a:9a:59:89:11:8f:aa:d9:c1:a4:fd:f0:40:e1:d5:ef: fe:11:57:94 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQHLUxNHP+RIARig+B3CPdtoLPwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3QUM1QzEwNEQ1MUExNkQxRkVENkFBQkE0MEQ1RjMz NkM3NkUzMjAeFw0yNjA1MDMwMjU3MzNaFw0yNzA1MDIwMzAyMzNaMDMxMTAvBgNV BAMTKDI0NTAwM0NENjYwMzkyMjcyRTlFREExQjFFNUEzQkY0RjdCODY4QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrWX0pdN4ADMlSo0DBeG9d0n4T WyQIKcQVtp+X6Rcsj/pP7GXJukfeKHwz3pAgtC6Y+VBp3ojYiKvI+uvkxnWqrpyl gLGvIm4O8DYMS+hg9LEgQA91FLUTCcE8FYbp9ihS3ZHhCnuScYqNApDXShPb8WGn cc3BG/6KZUGMcDTS7iI2oaG3kvfrW/mGFoj7Act+vSK9v15Mn4g7U+CzhAot/yQy 6daK9OV+eTz/dk/oYLwkxZj0wosRx4Anw497/hvKlUgyr2Un2NTK2m6NHyciFfIF S+jTgvSafyp0U9ukQu6SQClqf5WR2KW/xOBsuty8BejG22Mds0aLfrOaf5Z7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUJFADzWYDkicuntobHlo79Pe4aKEwHwYDVR0j BBgwFoAUuHrFwQTVGhbR/taqukDV8zbHbjIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ1YzQ3MTUtMjgyZS00NTdmLWI4OWUtMDQxYmY5MTEwYWY4LzAvQjg3QUM1QzEw NEQ1MUExNkQxRkVENkFBQkE0MEQ1RjMzNkM3NkUzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODdBQzVDMTA0RDUxQTE2RDFGRUQ2QUFCQTQwRDVGMzM2Qzc2 RTMyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JkNWM0NzE1LTI4MmUtNDU3Zi1i ODllLTA0MWJmOTExMGFmOC8wLzMxMzAzMzJlMzIzMjM1MmUzMTM3MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzMzMzMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn4aswDQYJ KoZIhvcNAQELBQADggEBAF+kaxgQoPKncqeHScpi7aN0nPm9uRXGYZ6vvLSncuRc AreYSe3/q/Cu6rlY6M8WfI05aWJHMXgfzoyoiDFw7bmo1xj2Lr43DCtthQ0pM2Sz xawWO5OB7jPyxkm0BVjDXyWZcmvAil4WINVPEbFn0lymrZtS4bGCd8vm5T6x4vG4 UevFwIbEwLnzPAkDa8loTaZXDbwgFrjJlx8auF7YqhKtFK8URpjb46IMLGzSrEiV ZQNsCbo6i068E7R2tn6JG9IHf7hj93VWPU5zmsLO6BVn1/mI82PrN9EBiQlUgTN+ Ul8TUGrLSoTK5UaMOppZiRGPqtnBpP3wQOHV7/4RV5Q= -----END CERTIFICATE-----Generated at Wed May 13 11:59:43 2026 by rpki-client