$ rpki-client -vvf rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa File: 3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa (raw, json) Hash identifier: Pvijj3PbMpACCVbyxLVtqjTUpSYeYm8MFybvzhiihDM= Subject key identifier: 5D:48:BA:0B:F3:1D:79:51:99:60:B3:F1:43:A5:51:55:0D:06:5A:1B Certificate issuer: /CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7 Certificate serial: 702795270488759D076E845B855BEAC1AB8A52D7 Authority key identifier: 20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa Signing time: Sun 03 May 2026 03:07:53 +0000 ROA not before: Sun 03 May 2026 03:02:53 +0000 ROA not after: Sun 02 May 2027 03:07:53 +0000 asID: 147087 IP address blocks: 103.173.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:27:95:27:04:88:75:9d:07:6e:84:5b:85:5b:ea:c1:ab:8a:52:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7 Validity Not Before: May 3 03:02:53 2026 GMT Not After : May 2 03:07:53 2027 GMT Subject: CN=5D48BA0BF31D79519960B3F143A551550D065A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:95:fd:64:f9:2b:8c:47:0a:43:b3:bb:a8:71: 43:25:f0:d7:77:bc:35:d1:84:f5:06:5d:2b:cb:e0: 13:16:f1:b6:9c:3d:75:19:d1:e0:61:67:ff:9c:8b: ff:a9:52:55:ad:f2:8a:c6:e3:91:03:9a:9e:b8:57: 4b:3e:f7:d8:7f:78:0f:5d:d7:a4:22:72:d9:23:a8: a3:20:3e:ad:93:c1:b9:4b:33:2d:3d:6c:87:f9:1c: 2e:4c:10:44:4e:9b:20:14:78:61:e2:e5:14:37:3a: c0:b8:d1:3e:32:4d:b9:cb:1f:11:2b:e2:c9:f1:06: b3:cf:64:ee:45:19:e9:5e:46:5a:6c:b7:97:f5:d8: 5b:f3:39:fd:d5:77:51:96:78:14:1b:4b:29:3b:0a: 12:ec:2f:b2:ac:62:61:a3:01:e5:ea:7f:35:2a:14: 1d:92:d3:e7:d5:0d:ac:a4:fd:a2:30:86:5a:7b:19: a7:3f:80:05:bb:79:c4:54:62:53:60:11:12:7d:53: 34:bd:9c:a2:b1:1b:06:10:75:59:21:3f:d7:29:32: 37:d2:07:a5:39:1d:95:19:56:4d:23:63:3d:24:58: 5a:88:5c:98:b8:70:12:a2:e6:7b:f7:7c:a0:27:82: 85:83:81:f7:0c:11:e3:62:cb:0b:50:91:31:47:f2: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:48:BA:0B:F3:1D:79:51:99:60:B3:F1:43:A5:51:55:0D:06:5A:1B X509v3 Authority Key Identifier: keyid:20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.231.0/24 Signature Algorithm: sha256WithRSAEncryption 22:92:02:c1:90:88:92:1f:07:6e:22:eb:ab:d0:ce:70:0c:01: 26:58:af:c8:b8:0f:5b:8e:1c:e8:1d:a9:83:fe:10:9f:b3:b2: a3:4a:01:6e:ad:7e:28:0d:85:69:1c:e2:62:df:9b:3d:bc:fd: 62:56:91:26:47:78:f5:2e:c7:c0:7e:dd:19:1b:83:11:5f:8e: 4a:33:c8:be:4c:63:7e:14:a9:02:eb:1b:61:5e:b2:71:ad:38: 6f:0f:97:9e:24:72:c2:b5:38:22:6f:f0:02:2c:31:31:b9:bd: 0c:8a:50:4c:75:8f:46:7c:99:50:8b:1d:a7:a4:91:c7:b0:cc: e1:51:76:e5:72:a2:3c:4e:71:dd:4f:8c:44:04:23:db:02:c0: 45:a7:0d:f9:fd:67:16:ff:2a:f1:de:72:19:f2:31:e6:ff:f0: 93:b7:21:6c:a9:11:d1:62:4f:ae:78:72:d6:3d:b6:e5:30:5f: 27:13:c1:95:28:b0:89:cc:43:0a:8f:b8:4a:bf:54:d3:c6:94: 2a:46:9d:8f:3a:f4:2c:1b:5c:2d:f6:73:5e:96:8d:fb:eb:92: d1:a0:55:5c:7d:f2:6d:56:a6:ab:b1:31:bd:22:f8:c0:6c:3f: 09:b7:e1:32:4d:93:c4:d2:eb:06:a2:d6:db:55:97:1c:13:5a: 9e:44:c5:98 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUcCeVJwSIdZ0HboRbhVvqwauKUtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNEZCNUUwMjQ3NkFGRkExMDAzQzVDOTBEMzhGRjRF QzEwMTRCNzAeFw0yNjA1MDMwMzAyNTNaFw0yNzA1MDIwMzA3NTNaMDMxMTAvBgNV BAMTKDVENDhCQTBCRjMxRDc5NTE5OTYwQjNGMTQzQTU1MTU1MEQwNjVBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqlf1k+SuMRwpDs7uocUMl8Nd3 vDXRhPUGXSvL4BMW8bacPXUZ0eBhZ/+ci/+pUlWt8orG45EDmp64V0s+99h/eA9d 16QictkjqKMgPq2TwblLMy09bIf5HC5MEEROmyAUeGHi5RQ3OsC40T4yTbnLHxEr 4snxBrPPZO5FGeleRlpst5f12FvzOf3Vd1GWeBQbSyk7ChLsL7KsYmGjAeXqfzUq FB2S0+fVDayk/aIwhlp7Gac/gAW7ecRUYlNgERJ9UzS9nKKxGwYQdVkhP9cpMjfS B6U5HZUZVk0jYz0kWFqIXJi4cBKi5nv3fKAngoWDgfcMEeNiywtQkTFH8qdNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUXUi6C/MdeVGZYLPxQ6VRVQ0GWhswHwYDVR0j BBgwFoAUILT7XgJHav+hADxckNOP9OwQFLcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDAwZjljYzctNGE2OS00YzllLWJiYTYtNGQ5YWJiNTZlZmY2LzAvMjBCNEZCNUUw MjQ3NkFGRkExMDAzQzVDOTBEMzhGRjRFQzEwMTRCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMEI0RkI1RTAyNDc2QUZGQTEwMDNDNUM5MEQzOEZGNEVDMTAx NEI3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QwMGY5Y2M3LTRhNjktNGM5ZS1i YmE2LTRkOWFiYjU2ZWZmNi8wLzMxMzAzMzJlMzEzNzMzMmUzMjMzMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM4Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrecwDQYJ KoZIhvcNAQELBQADggEBACKSAsGQiJIfB24i66vQznAMASZYr8i4D1uOHOgdqYP+ EJ+zsqNKAW6tfigNhWkc4mLfmz28/WJWkSZHePUux8B+3RkbgxFfjkozyL5MY34U qQLrG2FesnGtOG8Pl54kcsK1OCJv8AIsMTG5vQyKUEx1j0Z8mVCLHaekkcewzOFR duVyojxOcd1PjEQEI9sCwEWnDfn9Zxb/KvHechnyMeb/8JO3IWypEdFiT654ctY9 tuUwXycTwZUosInMQwqPuEq/VNPGlCpGnY869CwbXC32c16WjfvrktGgVVx98m1W pquxMb0i+MBsPwm34TJNk8TS6wai1ttVlxwTWp5ExZg= -----END CERTIFICATE-----Generated at Wed May 13 06:26:51 2026 by rpki-client