$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32302e302f32342d3234203d3e20313331373137.roa File: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (raw, json) Hash identifier: /7ofNppVXJF7mFM2WeV7e0wu+6LZLrIveqoSX8uAT6s= Subject key identifier: 14:17:9E:5F:D9:B9:7E:0F:D7:25:05:29:AB:09:6D:99:F6:53:32:DA Certificate issuer: /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F Certificate serial: 7333A8E1E9A4145D51FB3367DFAC00ED41DE2CA2 Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32302e302f32342d3234203d3e20313331373137.roa Signing time: Sun 03 May 2026 03:08:10 +0000 ROA not before: Sun 03 May 2026 03:03:10 +0000 ROA not after: Sun 02 May 2027 03:08:10 +0000 asID: 131717 IP address blocks: 103.14.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:33:a8:e1:e9:a4:14:5d:51:fb:33:67:df:ac:00:ed:41:de:2c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F Validity Not Before: May 3 03:03:10 2026 GMT Not After : May 2 03:08:10 2027 GMT Subject: CN=14179E5FD9B97E0FD7250529AB096D99F65332DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:66:20:e0:0d:f7:a6:01:f8:84:35:51:f1:6c: 69:35:ae:a3:58:a3:a9:a4:43:71:f2:1c:de:3b:51: fe:7f:e9:25:e8:e6:9c:7d:2d:1f:a3:a8:a7:4d:db: 04:ad:3e:9e:f8:82:ab:d9:79:4a:b6:6f:8d:dd:50: d6:a2:67:cf:13:71:94:ee:ca:18:ff:6f:82:fd:a4: d5:ae:44:5e:6b:d9:3b:33:2d:89:53:41:de:6b:3e: 8a:14:4a:43:9b:61:3e:81:16:8d:50:b9:c6:39:86: 2d:01:e4:15:b8:a7:7f:15:6c:6b:f7:1f:84:8f:fd: c5:1a:94:4b:2e:0a:f8:90:f5:f3:c1:72:b7:5e:44: 38:31:16:45:b7:c4:43:2c:f7:00:ab:53:12:b2:15: c8:3c:19:78:02:5d:f7:0e:82:5b:00:0d:d8:64:1e: 81:52:62:e5:4e:cd:3d:c7:8b:f5:02:05:8d:a1:1b: b7:91:25:f5:09:df:e5:86:19:e4:55:8a:be:13:50: 4e:58:e8:50:31:ee:06:34:8d:91:35:ef:b5:1b:be: 85:00:f7:95:14:37:d9:84:f5:6e:a2:3c:2e:02:fc: 80:c3:88:4a:7c:7c:a7:c5:06:ea:b2:97:1f:be:39: 83:f4:da:9d:91:5d:84:81:05:c2:3b:f9:5d:33:50: 83:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:17:9E:5F:D9:B9:7E:0F:D7:25:05:29:AB:09:6D:99:F6:53:32:DA X509v3 Authority Key Identifier: keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32302e302f32342d3234203d3e20313331373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.14.20.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:f5:14:42:79:fb:75:bc:da:fe:9e:cc:0b:56:4d:0c:fa:35: c8:e2:b4:09:be:7a:a2:02:80:bc:37:dc:86:94:02:23:ab:cd: 3e:3d:7d:bf:bb:c4:f7:28:bb:da:d5:32:4b:d0:8b:73:7c:65: 3f:39:24:30:1a:ce:1f:5d:51:50:65:32:65:8d:4d:81:90:e9: d6:39:e6:2f:da:4b:48:03:b3:7c:8d:2d:ff:63:d8:d1:b4:0d: a0:7c:af:40:da:32:07:89:d9:08:76:36:f7:ac:e1:53:3d:ce: fa:7d:84:23:35:09:8b:0d:65:13:51:0c:76:f9:b0:89:02:33: 97:7e:13:76:b4:75:89:58:b8:1a:23:b1:2b:13:48:54:0e:ca: af:df:9e:81:a8:92:c4:65:45:eb:2e:ab:41:5b:30:80:7f:04: 31:77:f5:24:65:83:db:15:7a:08:43:cf:8d:2b:01:41:3e:f9: c3:ec:64:e2:17:ba:66:4c:41:f7:d3:11:2e:a8:88:0c:dc:31: a0:ef:e2:22:0a:34:81:e7:48:7b:40:e6:72:9e:28:b7:8b:9e: 54:54:fb:5b:22:28:9d:30:5b:6f:c1:5c:9b:c1:c1:ff:74:6e: f2:74:43:24:c4:91:fe:e0:70:a8:be:04:69:24:e4:e4:47:a2: 69:b4:cb:7a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUczOo4emkFF1R+zNn36wA7UHeLKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IwQTYwNkZEMDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5 QTkyOTU5RjAeFw0yNjA1MDMwMzAzMTBaFw0yNzA1MDIwMzA4MTBaMDMxMTAvBgNV BAMTKDE0MTc5RTVGRDlCOTdFMEZENzI1MDUyOUFCMDk2RDk5RjY1MzMyREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZiDgDfemAfiENVHxbGk1rqNY o6mkQ3HyHN47Uf5/6SXo5px9LR+jqKdN2wStPp74gqvZeUq2b43dUNaiZ88TcZTu yhj/b4L9pNWuRF5r2TszLYlTQd5rPooUSkObYT6BFo1QucY5hi0B5BW4p38VbGv3 H4SP/cUalEsuCviQ9fPBcrdeRDgxFkW3xEMs9wCrUxKyFcg8GXgCXfcOglsADdhk HoFSYuVOzT3Hi/UCBY2hG7eRJfUJ3+WGGeRVir4TUE5Y6FAx7gY0jZE177UbvoUA 95UUN9mE9W6iPC4C/IDDiEp8fKfFBuqylx++OYP02p2RXYSBBcI7+V0zUIOLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUFBeeX9m5fg/XJQUpqwltmfZTMtowHwYDVR0j BBgwFoAUywpgb9BkLmi1ISrnUZU+C5qSlZ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA3NDcxYTMtZWU1My00OTljLTlmMmQtY2YxNmIxZTRhMzUzLzAvQ0IwQTYwNkZE MDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5QTkyOTU5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjBBNjA2RkQwNjQyRTY4QjUyMTJBRTc1MTk1M0UwQjlBOTI5 NTlGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05 ZjJkLWNmMTZiMWU0YTM1My8wLzMxMzAzMzJlMzEzNDJlMzIzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMTM3MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcOFDANBgkqhkiG 9w0BAQsFAAOCAQEALvUUQnn7dbza/p7MC1ZNDPo1yOK0Cb56ogKAvDfchpQCI6vN Pj19v7vE9yi72tUyS9CLc3xlPzkkMBrOH11RUGUyZY1NgZDp1jnmL9pLSAOzfI0t /2PY0bQNoHyvQNoyB4nZCHY296zhUz3O+n2EIzUJiw1lE1EMdvmwiQIzl34TdrR1 iVi4GiOxKxNIVA7Kr9+egaiSxGVF6y6rQVswgH8EMXf1JGWD2xV6CEPPjSsBQT75 w+xk4he6ZkxB99MRLqiIDNwxoO/iIgo0gedIe0Dmcp4ot4ueVFT7WyIonTBbb8Fc m8HB/3Ru8nRDJMSR/uBwqL4EaSTk5EeiabTLeg== -----END CERTIFICATE-----Generated at Wed May 13 00:43:47 2026 by rpki-client