$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32332d3233203d3e2039333431.roa File: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (raw, json) Hash identifier: GkX4NBYIJf8jri1lDVBbCRWCXCtYyohsWxcf1tLEKh4= Subject key identifier: B2:E7:7B:BA:91:51:06:2D:17:4D:59:D3:FF:74:A9:88:84:13:0F:F5 Certificate issuer: /CN=B9281144646657214FE1ADE5A3228E100E340E53 Certificate serial: 3FE34F841A24940D51BE5F6585DCD1DA6222588D Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32332d3233203d3e2039333431.roa Signing time: Sun 03 May 2026 02:26:46 +0000 ROA not before: Sun 03 May 2026 02:21:46 +0000 ROA not after: Sun 02 May 2027 02:26:46 +0000 asID: 9341 IP address blocks: 103.180.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 06:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e3:4f:84:1a:24:94:0d:51:be:5f:65:85:dc:d1:da:62:22:58:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53 Validity Not Before: May 3 02:21:46 2026 GMT Not After : May 2 02:26:46 2027 GMT Subject: CN=B2E77BBA9151062D174D59D3FF74A98884130FF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5c:7e:de:98:bc:09:1d:61:73:60:df:01:77: fd:90:e0:5e:a8:82:0e:54:6c:a9:b5:28:10:5b:82: e6:25:5d:de:c3:5d:58:85:84:8b:27:09:63:2d:12: 64:d7:5a:bf:05:d7:2c:79:0c:b7:a4:e7:01:93:0c: 5f:ff:e6:bb:94:21:0b:d8:52:ca:7f:86:d4:66:88: 5c:d9:27:29:10:5b:ca:46:44:e8:5e:e7:af:81:a4: 24:3c:25:c7:65:1d:f8:8a:cd:cc:ff:93:7c:02:29: ff:1e:03:bb:46:08:73:c3:7f:e3:47:8d:02:3d:9a: fb:f0:1a:f0:61:6c:23:a5:6d:ee:1c:bd:71:5a:b8: a6:67:52:93:84:9c:c7:75:16:ae:11:94:4e:61:1a: c0:82:c4:86:1f:0c:61:4c:48:f4:71:fb:ea:07:91: fa:88:dc:68:82:c9:61:e1:df:f4:da:6b:ca:f7:39: 55:16:f6:28:7e:7d:06:5d:84:01:0e:9e:e9:1e:6e: 44:4f:3c:47:09:f2:85:0a:eb:27:32:b9:2f:f4:c9: 6d:9b:fc:fd:a5:41:f0:00:69:ab:24:54:76:bb:5f: a0:b9:9a:8a:cd:22:90:49:84:2d:f5:97:cb:9a:ca: 53:61:86:02:b1:07:16:0f:08:90:61:25:25:19:90: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E7:7B:BA:91:51:06:2D:17:4D:59:D3:FF:74:A9:88:84:13:0F:F5 X509v3 Authority Key Identifier: keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32332d3233203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.0.0/23 Signature Algorithm: sha256WithRSAEncryption a5:e6:8f:02:cf:8f:79:ea:c0:b9:f8:e3:bb:71:e6:55:dc:0e: 82:81:db:7b:0a:ab:c9:f8:55:4f:aa:46:ee:64:7f:f5:58:06: 64:67:92:ba:b2:c7:58:d0:bb:49:5c:c5:4f:b8:96:16:a9:5d: a8:e3:48:22:04:7e:52:7c:82:2f:bb:e7:91:67:fc:9d:eb:e3: 7d:f3:c6:1e:b1:38:db:b5:67:33:2b:ce:47:26:32:c3:2b:66: ab:a0:ce:b6:87:b1:6c:f7:b5:24:b9:45:7c:4c:dd:6d:c5:0a: 10:af:00:81:40:83:54:c6:b8:bd:7a:74:8a:d8:c8:8f:11:ba: 5c:00:4a:18:91:c8:12:4e:ef:06:92:3a:e8:52:f1:e9:44:98: 9d:0a:dc:8f:b1:d7:03:d6:e5:96:f3:4b:c7:3d:98:c4:32:21: 9e:f2:46:3a:87:7e:2e:05:8d:6e:a9:76:9e:fc:e8:75:a5:45: 4c:fa:f0:90:ac:fc:de:f2:41:ac:6f:fa:b0:81:0b:5d:74:27: a9:a9:fe:f1:a6:75:bb:5b:3c:42:72:e3:bc:45:e4:ac:e8:8a: 71:e7:37:22:7a:ac:0f:bc:e2:53:eb:24:94:4f:7a:bf:ab:96: 3c:a1:aa:6c:aa:98:2f:b4:c2:6d:28:df:ab:df:d2:83:a7:40: a5:3b:b9:fb -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUP+NPhBoklA1Rvl9lhdzR2mIiWI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAw RTM0MEU1MzAeFw0yNjA1MDMwMjIxNDZaFw0yNzA1MDIwMjI2NDZaMDMxMTAvBgNV BAMTKEIyRTc3QkJBOTE1MTA2MkQxNzRENTlEM0ZGNzRBOTg4ODQxMzBGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsXH7emLwJHWFzYN8Bd/2Q4F6o gg5UbKm1KBBbguYlXd7DXViFhIsnCWMtEmTXWr8F1yx5DLek5wGTDF//5ruUIQvY Usp/htRmiFzZJykQW8pGROhe56+BpCQ8JcdlHfiKzcz/k3wCKf8eA7tGCHPDf+NH jQI9mvvwGvBhbCOlbe4cvXFauKZnUpOEnMd1Fq4RlE5hGsCCxIYfDGFMSPRx++oH kfqI3GiCyWHh3/Taa8r3OVUW9ih+fQZdhAEOnukebkRPPEcJ8oUK6ycyuS/0yW2b /P2lQfAAaaskVHa7X6C5morNIpBJhC31l8uaylNhhgKxBxYPCJBhJSUZkCkhAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUsud7upFRBi0XTVnT/3SpiIQTD/UwHwYDVR0j BBgwFoAUuSgRRGRmVyFP4a3loyKOEA40DlMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E4YTlhODEtMGE1Mi00YTUwLWI3ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2 NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAwRTM0MEU1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTI4MTE0NDY0NjY1NzIxNEZFMUFERTVBMzIyOEUxMDBFMzQw RTUzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvMzEzMDMzMmUzMTM4MzAyZTMwMmUzMDJmMzIzMzJk MzIzMzIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntAAwDQYJKoZIhvcNAQEL BQADggEBAKXmjwLPj3nqwLn447tx5lXcDoKB23sKq8n4VU+qRu5kf/VYBmRnkrqy x1jQu0lcxU+4lhapXajjSCIEflJ8gi+755Fn/J3r433zxh6xONu1ZzMrzkcmMsMr ZqugzraHsWz3tSS5RXxM3W3FChCvAIFAg1TGuL16dIrYyI8RulwAShiRyBJO7waS OuhS8elEmJ0K3I+x1wPW5ZbzS8c9mMQyIZ7yRjqHfi4FjW6pdp786HWlRUz68JCs /N7yQaxv+rCBC110J6mp/vGmdbtbPEJy47xF5KzoinHnNyJ6rA+84lPrJJRPer+r ljyhqmyqmC+0wm0o36vf0oOnQKU7ufs= -----END CERTIFICATE-----Generated at Tue May 5 13:26:35 2026 by rpki-client