$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/3130332e32332e32302e302f32322d3234203d3e203538333937.roa File: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (raw, json) Hash identifier: oj9tQCvDwCV4p4Hr9N9eWTF7U8CpjCR1vEULrbqMjA8= Subject key identifier: C6:1B:83:79:4A:D5:71:01:42:C2:BE:CB:48:15:28:B4:8E:5D:DE:8A Certificate issuer: /CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Certificate serial: 0A460FE42E9AE0827FE78D561BDBFA81B0ABD383 Authority key identifier: CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/3130332e32332e32302e302f32322d3234203d3e203538333937.roa Signing time: Sun 03 May 2026 03:10:25 +0000 ROA not before: Sun 03 May 2026 03:05:25 +0000 ROA not after: Sun 02 May 2027 03:10:25 +0000 asID: 58397 IP address blocks: 103.23.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:46:0f:e4:2e:9a:e0:82:7f:e7:8d:56:1b:db:fa:81:b0:ab:d3:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Validity Not Before: May 3 03:05:25 2026 GMT Not After : May 2 03:10:25 2027 GMT Subject: CN=C61B83794AD5710142C2BECB481528B48E5DDE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c3:35:39:3e:a4:06:b4:27:aa:38:1e:58:a3: 11:b4:e8:4a:5e:50:38:8e:ad:c0:34:2b:96:74:88: 8e:93:0b:35:5f:8b:9c:72:d5:23:9f:15:b4:07:54: 8e:ad:db:b1:8f:30:8b:f4:61:15:ea:88:06:84:fa: 9d:6e:34:a6:d3:ea:11:65:08:f9:70:54:05:50:cd: ab:91:e0:37:c6:81:ba:7a:6a:57:b8:5f:1e:79:f5: f6:f0:7b:a0:55:3a:b0:18:64:84:fd:1e:96:74:6f: c6:97:e8:b3:a1:fd:e5:27:c0:31:24:6f:ae:51:c0: eb:ae:be:26:f9:4b:f3:48:58:57:af:51:03:4b:1e: 73:6c:95:82:cb:7e:0d:fe:a2:a6:e7:08:f2:66:e4: ae:bd:30:d4:f8:4e:12:1c:21:cc:e5:72:75:ec:2c: 8b:c0:3d:48:fb:51:fd:f0:7a:ed:c1:7b:78:5e:80: fe:db:8b:d8:62:52:33:3d:49:2e:5a:27:2c:20:54: 3b:73:39:43:d0:6d:c7:64:c5:9b:61:50:56:d7:23: 26:c3:0f:69:60:88:87:f3:2d:2f:dc:bb:75:60:a7: 67:56:96:70:2a:95:d2:9c:e4:57:cf:fb:c4:20:e1: f0:2f:05:c7:55:64:d2:26:b8:6f:92:e4:99:bc:44: 27:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1B:83:79:4A:D5:71:01:42:C2:BE:CB:48:15:28:B4:8E:5D:DE:8A X509v3 Authority Key Identifier: keyid:CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/3130332e32332e32302e302f32322d3234203d3e203538333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.20.0/22 Signature Algorithm: sha256WithRSAEncryption 18:2c:8d:98:3b:9a:c5:0d:ef:8b:f1:7e:b4:1e:bc:a8:4d:bd: 29:44:58:d9:1b:e7:16:03:b7:12:76:fa:69:32:e1:15:b8:73: 08:b9:fe:d4:db:e9:a6:61:19:2a:32:f4:57:ae:1f:5a:a4:f1: ab:ab:5e:bd:ef:6c:bf:68:58:f7:e8:ae:70:8f:7f:4f:72:c8: b1:7e:66:f8:3a:40:f6:4b:a9:0d:5f:fd:0d:f1:7a:b6:02:3d: 0e:d6:32:d1:a8:cd:45:ed:19:36:dc:71:2c:5c:8d:c2:96:5d: 62:68:c2:54:19:63:92:09:cd:c6:60:8f:d7:33:b1:a4:39:21: 08:df:81:21:6b:0a:ce:b5:07:3e:1e:c1:5c:08:0d:e0:90:d0: 9a:a0:31:60:b6:a3:66:5c:fa:44:96:21:fc:de:a1:4e:6f:02: d9:cc:98:98:67:26:5d:8d:6d:f4:d8:33:fe:f7:47:1e:c8:4f: 3f:ac:64:c2:3c:ac:9e:7f:e7:e7:77:41:27:75:bf:b9:33:7e: 3f:19:cb:88:8d:17:f3:9d:79:8d:63:9e:34:99:72:6b:fb:86: 33:80:14:4d:6a:9d:e0:72:4a:ae:e4:4a:fd:cf:a3:4c:d7:08: cf:d4:7a:b1:06:a7:82:ae:69:21:80:77:72:8c:8d:e1:1f:11: b4:ee:5f:b5 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUCkYP5C6a4IJ/541WG9v6gbCr04MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2 N0RBNTc4NDAeFw0yNjA1MDMwMzA1MjVaFw0yNzA1MDIwMzEwMjVaMDMxMTAvBgNV BAMTKEM2MUI4Mzc5NEFENTcxMDE0MkMyQkVDQjQ4MTUyOEI0OEU1RERFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbwzU5PqQGtCeqOB5YoxG06Epe UDiOrcA0K5Z0iI6TCzVfi5xy1SOfFbQHVI6t27GPMIv0YRXqiAaE+p1uNKbT6hFl CPlwVAVQzauR4DfGgbp6ale4Xx559fbwe6BVOrAYZIT9HpZ0b8aX6LOh/eUnwDEk b65RwOuuvib5S/NIWFevUQNLHnNslYLLfg3+oqbnCPJm5K69MNT4ThIcIczlcnXs LIvAPUj7Uf3weu3Be3hegP7bi9hiUjM9SS5aJywgVDtzOUPQbcdkxZthUFbXIybD D2lgiIfzLS/cu3Vgp2dWlnAqldKc5FfP+8Qg4fAvBcdVZNImuG+S5Jm8RCfpAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUxhuDeUrVcQFCwr7LSBUotI5d3oowHwYDVR0j BBgwFoAUysOk8hvI9N+nToUVH4s+kWfaV4QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhiOTg3MjItMWNiNC00MGQ0LWFjOGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIx QkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2N0RBNTc4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUMzQTRGMjFCQzhGNERGQTc0RTg1MTUxRjhCM0U5MTY3REE1 Nzg0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4Yjk4NzIyLTFjYjQtNDBkNC1h YzhiLWMzYmNhMmJjYTIxNy8wLzMxMzAzMzJlMzIzMzJlMzIzMDJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM1MzgzMzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnFxQwDQYJKoZIhvcN AQELBQADggEBABgsjZg7msUN74vxfrQevKhNvSlEWNkb5xYDtxJ2+mky4RW4cwi5 /tTb6aZhGSoy9FeuH1qk8aurXr3vbL9oWPfornCPf09yyLF+Zvg6QPZLqQ1f/Q3x erYCPQ7WMtGozUXtGTbccSxcjcKWXWJowlQZY5IJzcZgj9czsaQ5IQjfgSFrCs61 Bz4ewVwIDeCQ0JqgMWC2o2Zc+kSWIfzeoU5vAtnMmJhnJl2NbfTYM/73Rx7ITz+s ZMI8rJ5/5+d3QSd1v7kzfj8Zy4iNF/OdeY1jnjSZcmv7hjOAFE1qneBySq7kSv3P o0zXCM/UerEGp4KuaSGAd3KMjeEfEbTuX7U= -----END CERTIFICATE-----Generated at Wed May 13 02:11:40 2026 by rpki-client