$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa File: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (raw, json) Hash identifier: cqtnc1i5sl/i5SSZ+1p5ccjOtXsU77bjgEVzGiDIIzQ= Subject key identifier: 8F:1D:5B:6B:0C:43:51:E9:C6:16:24:63:F0:00:C3:87:6E:F9:3A:55 Certificate issuer: /CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Certificate serial: 781448783CBF27FC979FA83AF19DA4672628F801 Authority key identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa Signing time: Sun 03 May 2026 03:09:16 +0000 ROA not before: Sun 03 May 2026 03:04:16 +0000 ROA not after: Sun 02 May 2027 03:09:16 +0000 asID: 132668 IP address blocks: 103.19.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:14:48:78:3c:bf:27:fc:97:9f:a8:3a:f1:9d:a4:67:26:28:f8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Validity Not Before: May 3 03:04:16 2026 GMT Not After : May 2 03:09:16 2027 GMT Subject: CN=8F1D5B6B0C4351E9C6162463F000C3876EF93A55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:f1:43:56:f7:1e:a5:41:67:8f:a4:bd:00: 87:10:16:90:85:a5:c5:19:aa:c0:13:38:82:20:a2: ad:e2:63:15:02:ff:16:4c:bd:61:32:73:8c:b2:0b: 08:5e:10:6f:cd:0e:83:ac:7f:aa:1e:13:88:61:4b: 00:15:c2:c2:98:4f:1b:e7:e3:8b:7a:d9:a1:95:b1: 2e:d8:3f:c8:ae:81:e8:7b:35:8d:a4:d1:24:4a:42: e4:73:e7:05:4b:67:9e:7f:66:52:8a:c8:53:cc:52: 9c:6f:fd:c3:38:22:7a:a1:46:7f:5f:e1:db:88:2d: cb:04:8e:92:c8:0b:3b:eb:4e:7c:19:39:a4:6b:29: 4e:22:19:10:56:94:47:0f:80:a7:32:bb:2e:49:6b: 04:29:f7:a0:ba:28:69:ae:68:f6:01:55:94:30:50: 6e:63:df:72:5e:10:2d:43:92:37:25:9c:9d:3e:40: 22:a1:06:6c:a2:cc:f4:aa:08:bd:31:69:7c:2d:ef: bd:bd:ff:33:b0:01:76:e2:09:8d:85:6a:ca:0f:8e: 3b:95:5f:4b:86:07:31:60:43:9b:7b:f9:2b:8e:45: f2:7b:e7:2d:d9:d8:8e:25:a7:de:69:bd:c3:6a:af: 74:64:47:9b:e3:33:47:06:d6:70:8a:e2:ff:03:58: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1D:5B:6B:0C:43:51:E9:C6:16:24:63:F0:00:C3:87:6E:F9:3A:55 X509v3 Authority Key Identifier: keyid:20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.229.0/24 Signature Algorithm: sha256WithRSAEncryption 79:5f:a4:0f:8e:f9:b7:7f:4a:9c:6f:5d:58:11:89:b9:88:0d: 99:72:db:86:11:56:91:aa:2d:b2:dc:f4:ad:d6:9b:ee:1d:46: be:49:1b:f3:f3:7f:72:63:f5:3a:1b:af:d4:bd:72:ca:e0:88: 10:96:ab:a1:e1:1c:e5:e8:6a:6d:4c:aa:c3:15:e5:a4:60:97: 27:9b:d2:11:e8:6e:3e:bb:5a:59:97:ed:0a:ca:6f:43:ac:48: 7f:e5:18:4c:a0:35:2d:d7:aa:09:d0:d6:09:77:ee:54:a4:42: bd:c5:86:9e:f5:5b:68:15:1e:2c:ba:0c:b3:d9:c4:00:b9:cb: 99:ac:d5:a5:4a:21:51:c7:29:fe:a8:97:ce:78:9c:fb:41:79: b9:52:47:56:27:48:77:04:db:2b:d6:29:22:01:f1:c5:b4:a7: d3:21:6c:84:74:89:21:39:fd:e8:2a:65:2c:10:c3:fc:08:c7: a1:2d:c2:7b:68:c0:f4:9b:1d:e4:1f:40:d8:b2:48:c2:ee:94: 31:a4:af:09:40:e8:5f:28:5c:a1:cb:52:de:a2:02:4f:cb:71: cf:77:ff:e6:d2:9c:d5:d1:ea:a0:27:df:e0:c8:a5:01:8d:89: 33:43:0e:7b:f0:a1:75:21:d1:da:03:60:c1:70:3d:97:93:8e: 85:e8:cb:38 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeBRIeDy/J/yXn6g68Z2kZyYo+AEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNEREE4 NUI3N0JCODAeFw0yNjA1MDMwMzA0MTZaFw0yNzA1MDIwMzA5MTZaMDMxMTAvBgNV BAMTKDhGMUQ1QjZCMEM0MzUxRTlDNjE2MjQ2M0YwMDBDMzg3NkVGOTNBNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GfFDVvcepUFnj6S9AIcQFpCF pcUZqsATOIIgoq3iYxUC/xZMvWEyc4yyCwheEG/NDoOsf6oeE4hhSwAVwsKYTxvn 44t62aGVsS7YP8iugeh7NY2k0SRKQuRz5wVLZ55/ZlKKyFPMUpxv/cM4InqhRn9f 4duILcsEjpLICzvrTnwZOaRrKU4iGRBWlEcPgKcyuy5JawQp96C6KGmuaPYBVZQw UG5j33JeEC1DkjclnJ0+QCKhBmyizPSqCL0xaXwt7729/zOwAXbiCY2FasoPjjuV X0uGBzFgQ5t7+SuORfJ75y3Z2I4lp95pvcNqr3RkR5vjM0cG1nCK4v8DWMIRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUjx1bawxDUenGFiRj8ADDh275OlUwHwYDVR0j BBgwFoAUICroBmwGqNgkcgnlEoM92oW3e7gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJmMTQxN2EtNTcxOC00MDcxLTlmMzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2 QzA2QThEODI0NzIwOUU1MTI4MzNEREE4NUI3N0JCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJBRTgwNjZDMDZBOEQ4MjQ3MjA5RTUxMjgzM0REQTg1Qjc3 QkI4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QyZjE0MTdhLTU3MTgtNDA3MS05 ZjM1LWMxMjI1NTVkYWM3YS8wLzMxMzAzMzJlMzEzOTJlMzIzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxPlMA0GCSqG SIb3DQEBCwUAA4IBAQB5X6QPjvm3f0qcb11YEYm5iA2ZctuGEVaRqi2y3PSt1pvu HUa+SRvz839yY/U6G6/UvXLK4IgQlquh4Rzl6GptTKrDFeWkYJcnm9IR6G4+u1pZ l+0Kym9DrEh/5RhMoDUt16oJ0NYJd+5UpEK9xYae9VtoFR4sugyz2cQAucuZrNWl SiFRxyn+qJfOeJz7QXm5UkdWJ0h3BNsr1ikiAfHFtKfTIWyEdIkhOf3oKmUsEMP8 CMehLcJ7aMD0mx3kH0DYskjC7pQxpK8JQOhfKFyhy1LeogJPy3HPd//m0pzV0eqg J9/gyKUBjYkzQw578KF1IdHaA2DBcD2Xk46F6Ms4 -----END CERTIFICATE-----Generated at Wed May 13 08:02:47 2026 by rpki-client