$ rpki-client -vvf rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa File: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (raw, json) Hash identifier: YsNhbgSyGdj7lPmW4hliLq1der7BL8sziFy9gg7oZGQ= Subject key identifier: A0:3A:E6:41:99:92:C7:AE:49:49:36:91:65:72:63:57:48:D8:E6:DD Certificate issuer: /CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Certificate serial: 04927FDFB4698DDF396D8A5EDBDD59ECEB965977 Authority key identifier: 23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa Signing time: Sun 03 May 2026 03:07:50 +0000 ROA not before: Sun 03 May 2026 03:02:50 +0000 ROA not after: Sun 02 May 2027 03:07:50 +0000 asID: 150973 IP address blocks: 103.17.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:92:7f:df:b4:69:8d:df:39:6d:8a:5e:db:dd:59:ec:eb:96:59:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Validity Not Before: May 3 03:02:50 2026 GMT Not After : May 2 03:07:50 2027 GMT Subject: CN=A03AE6419992C7AE494936916572635748D8E6DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:2c:2e:6c:37:48:e0:4d:e4:0a:64:04:7f:c8: 32:00:82:f9:bd:83:de:1e:de:0d:8a:4a:46:fe:1a: c1:76:58:a3:4f:8b:d7:5b:80:d8:3b:98:8d:78:87: 4b:0f:a9:14:a1:25:69:62:70:03:6d:d3:68:67:8a: e3:62:4e:e4:02:bd:ec:54:34:05:df:c4:8e:93:7e: be:8f:ba:b2:14:f3:be:8b:86:b5:df:6e:ab:49:23: c8:c7:fc:94:3c:b9:56:bc:f8:ff:b7:11:eb:d2:6f: 41:7a:ca:6a:82:83:d5:5f:2e:51:dc:47:a7:4a:1f: bc:fb:02:e6:a1:b5:38:39:74:e5:4c:19:95:e4:4e: ee:e3:c1:29:9a:20:71:b2:7c:14:d0:6d:be:b9:e4: e0:dd:ca:83:f8:18:5b:33:2c:76:3f:56:2c:b5:b4: 46:0e:6e:48:13:c3:34:44:90:f6:2f:9a:90:b9:e1: 09:06:b9:4c:a1:67:8d:72:b5:6c:97:d1:2b:ee:50: 8a:cb:73:98:82:2d:8f:c2:b3:29:0e:64:6a:a9:1c: 3c:6d:db:b2:a7:80:93:b1:41:14:09:82:ba:56:5c: 90:92:c4:02:1d:5c:d9:38:c4:97:fd:b7:f7:b8:80: 7f:22:d8:03:dc:98:e9:59:f3:ea:b4:50:75:25:8a: 3c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3A:E6:41:99:92:C7:AE:49:49:36:91:65:72:63:57:48:D8:E6:DD X509v3 Authority Key Identifier: keyid:23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.248.0/24 Signature Algorithm: sha256WithRSAEncryption 27:c9:62:6c:78:fe:33:71:8e:33:cd:2e:4f:5e:30:c4:0a:91: 92:12:5d:7b:dc:b3:56:5a:6c:f2:7b:d6:77:a4:87:81:c1:fe: ae:5f:93:36:dc:bd:58:9e:63:9e:2d:48:9f:46:85:d2:7d:01: 2d:75:21:eb:f8:b0:76:80:46:dd:a0:b3:a5:08:7d:99:dd:08: 06:61:fc:f8:17:01:37:e1:d3:04:c6:bd:f6:97:a2:e0:53:3c: 83:db:60:0f:6f:bb:67:46:34:25:aa:3a:dc:2d:4a:31:42:50: 15:b6:68:eb:8f:3d:8b:64:cf:76:5c:42:1a:14:3d:6b:29:99: 1d:84:8b:f6:35:26:d1:dd:ba:6b:8b:55:9d:46:11:4f:12:bb: a7:19:31:6b:5b:b5:32:f9:90:c0:d9:47:43:fe:89:38:63:21: b7:b1:88:92:47:16:7c:b7:5d:f4:0b:2f:e0:61:0b:c8:25:ef: e6:a4:86:19:55:0b:8f:78:17:a7:ca:5e:63:88:b0:ab:46:6c: db:57:7e:3b:1c:9f:30:92:55:4f:16:eb:b2:5f:05:9d:e6:48: 09:1e:e9:8c:47:d8:1f:5d:98:c0:dd:36:55:bc:c2:eb:51:dc: 01:df:9a:40:42:3c:07:8e:ef:f3:fb:bb:cb:1f:e8:62:fe:59: 0f:59:f4:ab -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBJJ/37Rpjd85bYpe291Z7OuWWXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURD RjFDODIyNjAeFw0yNjA1MDMwMzAyNTBaFw0yNzA1MDIwMzA3NTBaMDMxMTAvBgNV BAMTKEEwM0FFNjQxOTk5MkM3QUU0OTQ5MzY5MTY1NzI2MzU3NDhEOEU2REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7LC5sN0jgTeQKZAR/yDIAgvm9 g94e3g2KSkb+GsF2WKNPi9dbgNg7mI14h0sPqRShJWlicANt02hniuNiTuQCvexU NAXfxI6Tfr6PurIU876LhrXfbqtJI8jH/JQ8uVa8+P+3EevSb0F6ymqCg9VfLlHc R6dKH7z7AuahtTg5dOVMGZXkTu7jwSmaIHGyfBTQbb655ODdyoP4GFszLHY/Viy1 tEYObkgTwzREkPYvmpC54QkGuUyhZ41ytWyX0SvuUIrLc5iCLY/CsykOZGqpHDxt 27KngJOxQRQJgrpWXJCSxAIdXNk4xJf9t/e4gH8i2APcmOlZ8+q0UHUlijwBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUoDrmQZmSx65JSTaRZXJjV0jY5t0wHwYDVR0j BBgwFoAUI43TbabnXC1nwmP+zR5wXc8cgiYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZkYWZlNTYtODQzNC00YmJhLWIxNzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRB NkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURDRjFDODIyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhERDM2REE2RTc1QzJENjdDMjYzRkVDRDFFNzA1RENGMUM4 MjI2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NmZGFmZTU2LTg0MzQtNGJiYS1i MTc2LTM1ZTg3MmMxYWMxOC8wLzMxMzAzMzJlMzEzNzJlMzIzNDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxH4MA0GCSqG SIb3DQEBCwUAA4IBAQAnyWJseP4zcY4zzS5PXjDECpGSEl173LNWWmzye9Z3pIeB wf6uX5M23L1YnmOeLUifRoXSfQEtdSHr+LB2gEbdoLOlCH2Z3QgGYfz4FwE34dME xr32l6LgUzyD22APb7tnRjQlqjrcLUoxQlAVtmjrjz2LZM92XEIaFD1rKZkdhIv2 NSbR3bpri1WdRhFPErunGTFrW7Uy+ZDA2UdD/ok4YyG3sYiSRxZ8t130Cy/gYQvI Je/mpIYZVQuPeBenyl5jiLCrRmzbV347HJ8wklVPFuuyXwWd5kgJHumMR9gfXZjA 3TZVvMLrUdwB35pAQjwHju/z+7vLH+hi/lkPWfSr -----END CERTIFICATE-----Generated at Wed May 13 09:14:39 2026 by rpki-client