$ rpki-client -vvf rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa File: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (raw, json) Hash identifier: eNG7+LqFPcA2X6MnUSyw57FaBVmmkZ9qB88jQfVFgQw= Subject key identifier: 4A:9D:09:F8:35:18:44:6B:B9:18:C1:CE:1C:24:1A:E2:FB:20:67:22 Certificate issuer: /CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Certificate serial: 61C3394CA2BABCF933E41A402B7BA05A8C1DAB04 Authority key identifier: 2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa Signing time: Sun 03 May 2026 03:07:15 +0000 ROA not before: Sun 03 May 2026 03:02:15 +0000 ROA not after: Sun 02 May 2027 03:07:15 +0000 asID: 152373 IP address blocks: 103.176.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c3:39:4c:a2:ba:bc:f9:33:e4:1a:40:2b:7b:a0:5a:8c:1d:ab:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Validity Not Before: May 3 03:02:15 2026 GMT Not After : May 2 03:07:15 2027 GMT Subject: CN=4A9D09F83518446BB918C1CE1C241AE2FB206722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:49:c2:5b:5b:45:9d:51:74:16:9b:9f:69: 67:80:fe:3a:ef:82:06:d5:29:f1:7c:7b:32:19:52: f9:db:7e:45:da:a2:ba:bc:fc:89:fb:91:4f:9f:ff: 75:10:f8:94:d5:fe:18:00:93:dc:18:2b:09:c8:35: 45:c8:fe:59:79:81:76:fd:f5:40:00:30:f9:02:2d: dd:71:76:95:88:07:ae:34:84:66:41:b3:e8:55:90: 3c:65:49:66:41:19:a0:c6:8e:4e:1d:74:7f:1f:75: 00:7f:6b:ba:0f:7c:4d:4c:13:57:e2:5f:79:ab:ee: 5a:11:e5:4d:f5:7a:d5:29:9d:05:bc:ea:0d:59:50: e0:66:59:0c:90:17:b0:b3:ce:09:06:b6:bd:20:b4: cc:96:09:f5:55:e2:75:ff:ce:50:57:00:93:a4:72: d1:d7:91:2d:ea:01:1a:94:05:d9:43:a7:4c:b2:43: 86:94:47:3b:88:81:d3:37:07:37:65:07:82:d8:6b: 31:2d:40:12:bd:ce:e8:bb:10:92:e4:db:72:3e:97: e7:2b:85:fd:c5:b3:f1:04:ce:93:12:32:73:77:8c: 2b:d7:c0:d5:33:1e:05:ac:17:3c:6a:d2:81:5f:20: c8:10:8d:76:c0:17:d0:6f:b6:a1:52:24:0a:0a:20: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9D:09:F8:35:18:44:6B:B9:18:C1:CE:1C:24:1A:E2:FB:20:67:22 X509v3 Authority Key Identifier: keyid:2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.201.0/24 Signature Algorithm: sha256WithRSAEncryption dc:7b:14:a4:22:d1:a8:66:bb:ae:b4:5d:e3:c6:7a:0c:7b:4a: 92:22:ee:03:a2:bf:c1:61:bb:60:87:7e:92:29:5d:9b:2e:aa: bf:a8:63:97:39:51:f2:5f:91:cd:30:9d:c3:47:2a:34:e1:f6: 12:74:d9:55:41:f7:40:52:6d:1d:1e:1e:19:8d:df:bb:30:e4: 43:46:85:5a:08:92:cb:19:54:f3:54:a2:e9:d5:4b:79:ff:ff: 4d:8b:e3:c1:80:3c:85:77:a8:18:d3:ed:30:ce:6b:42:df:8c: 6f:c8:96:e8:51:66:5c:31:e4:61:90:a7:40:ef:21:95:69:fc: d4:35:1a:ff:75:d0:bf:e2:b7:e7:6b:eb:6f:ab:79:0e:ef:9f: da:5f:69:18:a1:04:9a:ae:78:df:c0:52:b8:89:c6:19:eb:7b: ba:98:c9:dd:a6:61:48:bc:7a:1d:01:93:3a:6a:72:1a:1c:02: 4c:de:e3:00:2f:87:b5:bc:3a:4a:dc:94:b6:bd:e5:5f:41:9d: 78:05:7f:d4:2a:ca:3e:fd:79:4b:b1:95:ab:2a:8e:0c:44:b6: 1b:b1:0b:1b:7b:1a:b5:cd:e7:2d:04:c7:4e:19:53:83:4e:38: 67:c4:31:8f:33:b0:dd:20:c3:da:31:2b:a9:38:f0:ab:c3:f7: 14:0a:46:ce -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYcM5TKK6vPkz5BpAK3ugWowdqwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5 RkRBQjZGQTAeFw0yNjA1MDMwMzAyMTVaFw0yNzA1MDIwMzA3MTVaMDMxMTAvBgNV BAMTKDRBOUQwOUY4MzUxODQ0NkJCOTE4QzFDRTFDMjQxQUUyRkIyMDY3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoBEnCW1tFnVF0FpufaWeA/jrv ggbVKfF8ezIZUvnbfkXaorq8/In7kU+f/3UQ+JTV/hgAk9wYKwnINUXI/ll5gXb9 9UAAMPkCLd1xdpWIB640hGZBs+hVkDxlSWZBGaDGjk4ddH8fdQB/a7oPfE1ME1fi X3mr7loR5U31etUpnQW86g1ZUOBmWQyQF7CzzgkGtr0gtMyWCfVV4nX/zlBXAJOk ctHXkS3qARqUBdlDp0yyQ4aURzuIgdM3BzdlB4LYazEtQBK9zui7EJLk23I+l+cr hf3Fs/EEzpMSMnN3jCvXwNUzHgWsFzxq0oFfIMgQjXbAF9BvtqFSJAoKIBfvAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUSp0J+DUYRGu5GMHOHCQa4vsgZyIwHwYDVR0j BBgwFoAUKn+4AW2gAKnRDJgJxE7eLp/atvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NhMmUwZGItZTI5My00MWM1LTg1ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2 REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5RkRBQjZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTdGQjgwMTZEQTAwMEE5RDEwQzk4MDlDNDRFREUyRTlGREFC NkZBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NjYTJlMGRiLWUyOTMtNDFjNS04 NTgzLTM4MDE1NzU4NDIxYy8wLzMxMzAzMzJlMzEzNzM2MmUzMjMwMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzIzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnsMkwDQYJ KoZIhvcNAQELBQADggEBANx7FKQi0ahmu660XePGegx7SpIi7gOiv8Fhu2CHfpIp XZsuqr+oY5c5UfJfkc0wncNHKjTh9hJ02VVB90BSbR0eHhmN37sw5ENGhVoIkssZ VPNUounVS3n//02L48GAPIV3qBjT7TDOa0LfjG/IluhRZlwx5GGQp0DvIZVp/NQ1 Gv910L/it+dr62+reQ7vn9pfaRihBJqueN/AUriJxhnre7qYyd2mYUi8eh0Bkzpq chocAkze4wAvh7W8OkrclLa95V9BnXgFf9Qqyj79eUuxlasqjgxEthuxCxt7GrXN 5y0Ex04ZU4NOOGfEMY8zsN0gw9oxK6k48KvD9xQKRs4= -----END CERTIFICATE-----Generated at Wed May 13 08:23:54 2026 by rpki-client