$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa File: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (raw, json) Hash identifier: l6rGkO8MgVJkambdkAclMvjE+aQSvltuGia3hhd605M= Subject key identifier: 20:64:8B:F5:69:C9:F7:BB:8F:13:7F:34:40:04:25:0E:87:1B:F7:A5 Certificate issuer: /CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB Certificate serial: 1AA53452D5ECC921C159C6B0FE85079607AC3B9C Authority key identifier: AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa Signing time: Sun 03 May 2026 03:18:45 +0000 ROA not before: Sun 03 May 2026 03:13:45 +0000 ROA not after: Sun 02 May 2027 03:18:45 +0000 asID: 131705 IP address blocks: 103.154.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a5:34:52:d5:ec:c9:21:c1:59:c6:b0:fe:85:07:96:07:ac:3b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB Validity Not Before: May 3 03:13:45 2026 GMT Not After : May 2 03:18:45 2027 GMT Subject: CN=20648BF569C9F7BB8F137F344004250E871BF7A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7a:7e:2f:12:6f:ca:8e:53:23:8b:93:cd:04: c4:a7:ce:5b:b5:ae:bf:81:23:6b:42:9d:be:01:78: b0:98:73:d8:e8:f4:3c:a3:51:08:72:36:7d:1d:3d: b2:06:66:53:a7:dd:f7:75:42:a6:50:6f:c8:e5:cb: 91:78:4f:30:1b:ad:59:9d:a5:f1:94:8c:ef:78:e7: 1c:19:55:f5:14:f0:14:25:63:26:d9:50:59:c9:f1: 1c:cb:c8:fb:8f:a3:aa:e6:5d:44:25:06:a5:96:83: cc:55:68:f5:e5:77:92:83:0d:77:b7:d9:31:98:37: c9:a3:64:a0:00:e3:76:95:0e:d0:7d:21:2a:a3:26: 01:72:8f:57:1b:59:20:60:0b:37:e5:d4:ce:10:63: 8f:df:5c:f8:4d:38:b5:cc:86:5f:96:bd:eb:f2:53: 98:97:dc:c1:df:36:22:0c:68:64:05:57:b1:1b:24: ee:dc:cc:ad:9b:49:43:84:b3:05:77:78:05:19:67: f1:61:7d:c8:bc:c0:3b:ef:9f:c8:a3:4e:bc:bd:50: e6:27:90:81:7e:3c:28:8a:0e:4e:7d:ef:ab:54:8c: 94:30:db:c6:64:25:8d:2f:c8:b1:f3:39:a1:ab:f2: f4:c1:32:b1:e7:7a:9f:8f:e0:b0:df:a8:ff:3f:11: cb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:64:8B:F5:69:C9:F7:BB:8F:13:7F:34:40:04:25:0E:87:1B:F7:A5 X509v3 Authority Key Identifier: keyid:AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.179.0/24 Signature Algorithm: sha256WithRSAEncryption 06:63:d6:93:5c:2b:01:f3:ac:89:29:60:bc:eb:63:e5:1c:29: bd:d8:5b:fe:65:3d:bd:0a:f1:2c:c8:7d:ad:dc:6f:cd:d1:fc: a3:28:d3:dd:1b:05:78:19:ef:3a:41:dd:bd:f6:5f:ef:82:51: ba:da:4e:38:51:2c:78:55:e5:46:39:92:be:f5:eb:0d:8f:b2: 2f:df:c6:cd:cc:0f:d8:bf:81:65:0a:86:1a:ed:b5:2e:4a:ac: 53:a3:0e:62:85:29:bf:fe:f5:e5:25:ef:f3:99:68:a1:d3:f2: 26:30:42:73:b2:89:62:9a:c2:44:29:38:b2:87:bd:d7:20:e5: 48:f5:43:6e:c4:d3:03:3a:a6:69:dd:1e:3b:b6:9d:3f:b7:b1: 24:42:05:fb:69:36:40:4e:3a:6b:31:66:05:43:50:f7:4b:99: 51:83:7b:05:c6:60:a0:de:6c:64:9c:0e:66:d7:6a:07:5a:29: 0a:f7:f3:0c:71:94:80:72:63:a5:96:c9:48:cb:8a:12:18:e1: e9:ec:a6:a6:78:92:0a:52:2e:4a:34:0a:2f:a5:6a:97:e0:17: 9d:fa:82:65:6d:06:74:77:41:f2:6b:e3:0d:51:98:b9:f0:9c: eb:b7:23:bc:cb:c8:bb:ea:94:e5:8b:e5:b5:d1:c1:d7:ef:ce: 96:9d:a3:dd -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGqU0UtXsySHBWcaw/oUHlgesO5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3RDkyN0Y0NzdDM0QyQ0U2N0JCMEE1MjQ0MDM4REFC Q0Y0QzRCQjAeFw0yNjA1MDMwMzEzNDVaFw0yNzA1MDIwMzE4NDVaMDMxMTAvBgNV BAMTKDIwNjQ4QkY1NjlDOUY3QkI4RjEzN0YzNDQwMDQyNTBFODcxQkY3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZen4vEm/KjlMji5PNBMSnzlu1 rr+BI2tCnb4BeLCYc9jo9DyjUQhyNn0dPbIGZlOn3fd1QqZQb8jly5F4TzAbrVmd pfGUjO945xwZVfUU8BQlYybZUFnJ8RzLyPuPo6rmXUQlBqWWg8xVaPXld5KDDXe3 2TGYN8mjZKAA43aVDtB9ISqjJgFyj1cbWSBgCzfl1M4QY4/fXPhNOLXMhl+Wvevy U5iX3MHfNiIMaGQFV7EbJO7czK2bSUOEswV3eAUZZ/Fhfci8wDvvn8ijTry9UOYn kIF+PCiKDk5976tUjJQw28ZkJY0vyLHzOaGr8vTBMrHnep+P4LDfqP8/EcuDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUIGSL9WnJ97uPE380QAQlDocb96UwHwYDVR0j BBgwFoAUrn2Sf0d8PSzme7ClJEA42rz0xLswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjlkNmFjYzYtMGFmMy00Yjk3LTk5YTQtMGY0NWU4ZWNmNTc2LzAvQUU3RDkyN0Y0 NzdDM0QyQ0U2N0JCMEE1MjQ0MDM4REFCQ0Y0QzRCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTdEOTI3RjQ3N0MzRDJDRTY3QkIwQTUyNDQwMzhEQUJDRjRD NEJCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y5ZDZhY2M2LTBhZjMtNGI5Ny05 OWE0LTBmNDVlOGVjZjU3Ni8wLzMxMzAzMzJlMzEzNTM0MmUzMTM3MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzMwMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmrMwDQYJ KoZIhvcNAQELBQADggEBAAZj1pNcKwHzrIkpYLzrY+UcKb3YW/5lPb0K8SzIfa3c b83R/KMo090bBXgZ7zpB3b32X++CUbraTjhRLHhV5UY5kr716w2Psi/fxs3MD9i/ gWUKhhrttS5KrFOjDmKFKb/+9eUl7/OZaKHT8iYwQnOyiWKawkQpOLKHvdcg5Uj1 Q27E0wM6pmndHju2nT+3sSRCBftpNkBOOmsxZgVDUPdLmVGDewXGYKDebGScDmbX agdaKQr38wxxlIByY6WWyUjLihIY4enspqZ4kgpSLko0Ci+lapfgF536gmVtBnR3 QfJr4w1RmLnwnOu3I7zLyLvqlOWL5bXRwdfvzpado90= -----END CERTIFICATE-----Generated at Wed May 13 11:46:18 2026 by rpki-client