$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa File: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (raw, json) Hash identifier: VqpFZFZX8l9YzsFUEW1KN7wbhAWqil6y6lntU3UefIg= Subject key identifier: 7A:41:EC:76:A6:FD:99:DE:79:9E:9A:CE:39:B6:4D:9A:CE:BE:D9:AB Certificate issuer: /CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Certificate serial: 688EE96BD2B15430614BA02E3CE5A027283C950B Authority key identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa Signing time: Sun 03 May 2026 03:09:17 +0000 ROA not before: Sun 03 May 2026 03:04:17 +0000 ROA not after: Sun 02 May 2027 03:09:17 +0000 asID: 132668 IP address blocks: 103.19.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:8e:e9:6b:d2:b1:54:30:61:4b:a0:2e:3c:e5:a0:27:28:3c:95:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Validity Not Before: May 3 03:04:17 2026 GMT Not After : May 2 03:09:17 2027 GMT Subject: CN=7A41EC76A6FD99DE799E9ACE39B64D9ACEBED9AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:ae:9f:b1:d9:5f:c2:c2:d6:ed:9f:84:a9: e1:c8:10:8b:18:72:7b:59:32:04:38:66:15:48:cb: 8a:87:09:2c:f1:a5:79:89:a1:25:4a:45:99:e0:dc: 14:a1:49:98:5b:37:65:0e:c1:d3:55:0f:95:99:df: 7d:70:f1:ae:40:0f:a3:5c:3a:63:6b:26:8a:d2:39: c6:2c:08:9e:b2:b0:37:b0:e7:b2:56:5f:01:1e:e4: 37:52:85:d5:cc:5d:36:d7:66:c4:a4:0c:16:c1:8b: 18:a1:c9:c8:98:d1:d0:b3:f9:f4:b9:1c:89:d3:de: 75:7c:a3:69:fe:1b:41:53:28:55:7a:01:30:72:8c: a9:03:35:35:75:ed:01:f4:d5:ae:39:c1:39:37:cb: 5c:91:4e:b0:39:d0:38:d4:b5:c7:a0:87:6e:37:cf: 62:b9:e2:f7:d9:ed:94:96:90:cb:73:44:15:37:96: 2d:40:77:a6:a8:fc:2c:fa:4b:b2:ac:51:c8:42:28: 3a:6e:c8:23:13:24:37:d5:8e:ae:ba:d6:f6:ce:f6: 3b:73:7c:cb:96:5a:27:a1:61:21:bd:17:9d:dd:a5: 20:42:c2:14:0e:18:ab:02:7d:4c:ea:d4:67:18:18: 38:39:cc:a3:85:e7:c9:b3:48:5b:2f:1f:0c:4e:6b: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:41:EC:76:A6:FD:99:DE:79:9E:9A:CE:39:B6:4D:9A:CE:BE:D9:AB X509v3 Authority Key Identifier: keyid:20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.228.0/24 Signature Algorithm: sha256WithRSAEncryption 80:cc:67:a6:0a:c2:da:0a:89:cb:ae:b6:64:fd:a7:3c:32:d0: 7a:0d:1a:b3:42:e3:bf:0d:ef:3c:8b:f3:b6:d3:8d:42:dc:7b: 27:23:b2:28:4e:2c:40:5f:26:e5:3f:c3:77:91:44:80:95:bf: 8f:0a:20:4e:48:59:07:74:71:61:34:03:f5:63:94:16:3f:9a: d9:a0:6c:07:d4:3a:da:31:78:e0:55:97:15:2c:af:5d:7b:42: 7f:f1:f0:89:19:ed:aa:3f:46:1a:a4:3b:37:f8:74:84:2b:98: 2e:3d:95:26:dd:ec:e5:35:78:6c:05:f0:91:6c:5c:36:36:3d: 7e:21:5f:c4:8c:0e:6d:ed:f7:ac:9c:2b:79:6c:a3:77:03:8c: 21:64:c9:d5:c8:a2:aa:ba:ae:1e:07:fb:cb:1f:75:12:0c:bb: ef:75:56:09:27:2c:31:4a:d8:70:40:b5:78:16:6e:52:6d:a9: 28:b9:65:70:6c:b8:33:9b:b7:1e:82:3c:cd:dc:27:74:80:df: d2:56:00:b9:7e:9d:30:43:3a:3c:21:7a:31:63:ea:6c:f0:df: 41:77:29:9b:cb:d2:30:d4:28:2c:8f:8d:b2:28:37:f3:19:15: 1b:26:87:a6:43:fc:91:2b:53:21:09:a6:83:08:4f:e2:64:06: e8:f9:d7:ca -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaI7pa9KxVDBhS6AuPOWgJyg8lQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNEREE4 NUI3N0JCODAeFw0yNjA1MDMwMzA0MTdaFw0yNzA1MDIwMzA5MTdaMDMxMTAvBgNV BAMTKDdBNDFFQzc2QTZGRDk5REU3OTlFOUFDRTM5QjY0RDlBQ0VCRUQ5QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZM66fsdlfwsLW7Z+EqeHIEIsY cntZMgQ4ZhVIy4qHCSzxpXmJoSVKRZng3BShSZhbN2UOwdNVD5WZ331w8a5AD6Nc OmNrJorSOcYsCJ6ysDew57JWXwEe5DdShdXMXTbXZsSkDBbBixihyciY0dCz+fS5 HInT3nV8o2n+G0FTKFV6ATByjKkDNTV17QH01a45wTk3y1yRTrA50DjUtcegh243 z2K54vfZ7ZSWkMtzRBU3li1Ad6ao/Cz6S7KsUchCKDpuyCMTJDfVjq661vbO9jtz fMuWWiehYSG9F53dpSBCwhQOGKsCfUzq1GcYGDg5zKOF58mzSFsvHwxOaxgJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUekHsdqb9md55nprOObZNms6+2aswHwYDVR0j BBgwFoAUICroBmwGqNgkcgnlEoM92oW3e7gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJmMTQxN2EtNTcxOC00MDcxLTlmMzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2 QzA2QThEODI0NzIwOUU1MTI4MzNEREE4NUI3N0JCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJBRTgwNjZDMDZBOEQ4MjQ3MjA5RTUxMjgzM0REQTg1Qjc3 QkI4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QyZjE0MTdhLTU3MTgtNDA3MS05 ZjM1LWMxMjI1NTVkYWM3YS8wLzMxMzAzMzJlMzEzOTJlMzIzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxPkMA0GCSqG SIb3DQEBCwUAA4IBAQCAzGemCsLaConLrrZk/ac8MtB6DRqzQuO/De88i/O2041C 3HsnI7IoTixAXyblP8N3kUSAlb+PCiBOSFkHdHFhNAP1Y5QWP5rZoGwH1DraMXjg VZcVLK9de0J/8fCJGe2qP0YapDs3+HSEK5guPZUm3ezlNXhsBfCRbFw2Nj1+IV/E jA5t7fesnCt5bKN3A4whZMnVyKKquq4eB/vLH3USDLvvdVYJJywxSthwQLV4Fm5S bakouWVwbLgzm7cegjzN3Cd0gN/SVgC5fp0wQzo8IXoxY+ps8N9Bdymby9Iw1Cgs j42yKDfzGRUbJoemQ/yRK1MhCaaDCE/iZAbo+dfK -----END CERTIFICATE-----Generated at Wed May 13 08:25:02 2026 by rpki-client