$ rpki-client -vvf rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa File: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (raw, json) Hash identifier: aqo6iqJhHng8SceS0GB2zDkvhHekA+jqXPQYRYjWZBA= Subject key identifier: D1:64:17:CE:F3:10:BB:D5:3B:03:36:B0:9B:DB:B1:F6:30:2D:1B:02 Certificate issuer: /CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Certificate serial: 1A386724CD100D79E027D02BAFAA5718EA2D699B Authority key identifier: D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa Signing time: Sun 03 May 2026 03:09:19 +0000 ROA not before: Sun 03 May 2026 03:04:19 +0000 ROA not after: Sun 02 May 2027 03:09:19 +0000 asID: 150944 IP address blocks: 103.107.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:38:67:24:cd:10:0d:79:e0:27:d0:2b:af:aa:57:18:ea:2d:69:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Validity Not Before: May 3 03:04:19 2026 GMT Not After : May 2 03:09:19 2027 GMT Subject: CN=D16417CEF310BBD53B0336B09BDBB1F6302D1B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:b1:16:0b:e0:2e:03:46:27:4a:b9:51:de: bb:65:ad:49:40:20:2d:62:ea:25:f4:bb:9a:bc:78: 2d:cf:9d:a6:34:ba:08:f4:33:f5:90:f8:1a:63:d8: a8:3f:75:50:b8:68:20:25:d6:8d:ec:0b:29:02:18: c5:5c:e6:39:27:27:a6:bd:f8:56:8e:1b:6f:66:f3: 92:bb:23:80:83:c7:ba:bf:e3:28:f6:c0:06:cd:5c: 84:f6:32:56:fe:1d:0a:cf:1c:a5:d0:65:94:ca:59: c6:40:fc:05:04:4b:81:3b:9f:02:ae:9b:b3:6e:9b: ba:62:23:95:de:dd:1c:71:60:c4:fc:00:7b:eb:e2: 29:e0:1a:5a:d8:7e:0d:df:13:be:2e:9d:56:b8:63: 28:5f:be:9a:d8:c6:d9:ac:77:52:a9:88:98:70:71: f1:dc:e6:85:08:4c:25:4b:88:e1:dd:73:1a:66:04: a4:b9:2b:97:1c:bf:d6:bc:9e:bd:78:8a:10:90:2d: 03:e6:b6:d0:60:64:0e:e1:be:9c:fe:c5:95:3e:38: 36:c3:91:44:59:0a:d0:c5:ea:1b:3a:72:9d:0d:0b: 9c:d2:08:f2:d9:43:22:f9:55:a7:58:ad:5b:07:d1: bc:67:89:fb:67:c4:ac:70:93:dc:bc:9f:bf:9f:1d: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:64:17:CE:F3:10:BB:D5:3B:03:36:B0:9B:DB:B1:F6:30:2D:1B:02 X509v3 Authority Key Identifier: keyid:D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.176.0/24 Signature Algorithm: sha256WithRSAEncryption 35:75:56:66:a5:7c:64:e5:94:a0:d7:86:17:50:34:a3:97:1e: c9:37:59:ea:ca:94:0f:b5:64:cd:3d:93:e1:07:0c:d4:71:9c: 1e:a4:1b:4b:24:86:d6:fd:e3:a6:de:32:ce:50:20:ba:cc:bb: de:b6:dd:45:6f:e0:8b:b2:bb:9a:5a:15:b5:a4:fe:66:bf:fd: f6:da:b9:e3:7c:54:2d:80:d8:06:25:99:a8:61:b5:03:b8:65: ea:6e:e3:d3:73:ea:0f:b0:8b:af:f4:5a:91:cf:b1:8a:4a:cf: f7:ea:04:f2:35:78:bd:cd:57:61:02:f7:ba:35:d8:f1:b7:34: 19:a6:c6:80:81:4a:d9:fe:fd:38:8e:57:be:bd:d5:d2:00:87: 40:11:aa:2c:b4:5f:45:14:af:f1:b1:19:9b:79:ef:a3:9f:d7: 46:f4:cc:f6:c0:1b:c3:e3:0f:52:8f:f5:1e:2a:6e:b8:e2:24: 7c:6d:59:66:25:1d:df:3a:c4:82:e5:38:43:87:14:5c:7c:e7: 81:9f:a7:34:e1:ec:ba:0c:f2:77:d7:1c:a5:d8:6d:67:ea:74: 25:22:30:b2:46:c1:6d:22:f5:48:15:0b:42:67:d2:3e:b8:15: 94:e1:64:8a:2a:11:87:6f:1a:12:3c:84:eb:1d:e3:66:7e:fb: 44:14:70:60 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGjhnJM0QDXngJ9Arr6pXGOotaZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0 NkYyOUQ3RjAeFw0yNjA1MDMwMzA0MTlaFw0yNzA1MDIwMzA5MTlaMDMxMTAvBgNV BAMTKEQxNjQxN0NFRjMxMEJCRDUzQjAzMzZCMDlCREJCMUY2MzAyRDFCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVbEWC+AuA0YnSrlR3rtlrUlA IC1i6iX0u5q8eC3PnaY0ugj0M/WQ+Bpj2Kg/dVC4aCAl1o3sCykCGMVc5jknJ6a9 +FaOG29m85K7I4CDx7q/4yj2wAbNXIT2Mlb+HQrPHKXQZZTKWcZA/AUES4E7nwKu m7Num7piI5Xe3RxxYMT8AHvr4ingGlrYfg3fE74unVa4YyhfvprYxtmsd1KpiJhw cfHc5oUITCVLiOHdcxpmBKS5K5ccv9a8nr14ihCQLQPmttBgZA7hvpz+xZU+ODbD kURZCtDF6hs6cp0NC5zSCPLZQyL5VadYrVsH0bxniftnxKxwk9y8n7+fHWk7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU0WQXzvMQu9U7Azawm9ux9jAtGwIwHwYDVR0j BBgwFoAU2Mt/i1Zm4H5Xy+/AI8b2A0bynX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM2YWIwNGQtNjhjNy00MjQ5LWIxMDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1 NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0NkYyOUQ3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOENCN0Y4QjU2NjZFMDdFNTdDQkVGQzAyM0M2RjYwMzQ2RjI5 RDdGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QzNmFiMDRkLTY4YzctNDI0OS1i MTA5LTQ2YjI4Y2Y4MDNmMy8wLzMxMzAzMzJlMzEzMDM3MmUzMTM3MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM0MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABna7AwDQYJ KoZIhvcNAQELBQADggEBADV1VmalfGTllKDXhhdQNKOXHsk3WerKlA+1ZM09k+EH DNRxnB6kG0skhtb946beMs5QILrMu9623UVv4Iuyu5paFbWk/ma//fbaueN8VC2A 2AYlmahhtQO4Zepu49Nz6g+wi6/0WpHPsYpKz/fqBPI1eL3NV2EC97o12PG3NBmm xoCBStn+/TiOV7691dIAh0ARqiy0X0UUr/GxGZt576Of10b0zPbAG8PjD1KP9R4q brjiJHxtWWYlHd86xILlOEOHFFx854GfpzTh7LoM8nfXHKXYbWfqdCUiMLJGwW0i 9UgVC0Jn0j64FZThZIoqEYdvGhI8hOsd42Z++0QUcGA= -----END CERTIFICATE-----Generated at Wed May 13 06:55:25 2026 by rpki-client