$ rpki-client -vvf rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa File: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (raw, json) Hash identifier: IsFb+2IB3+NAOmMQ4bANX3K12nM98beEkYNtdgmBcMk= Subject key identifier: A7:BC:53:AA:BA:FF:FE:C6:A3:07:ED:FD:57:37:CF:36:60:BD:CE:4C Certificate issuer: /CN=A008821941A61F29770FC73A584B71178BCAE916 Certificate serial: 3C38DC76AE4616F90F9AC99EA5D5C496E9078C8D Authority key identifier: A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa Signing time: Sun 03 May 2026 02:40:52 +0000 ROA not before: Sun 03 May 2026 02:35:52 +0000 ROA not after: Sun 02 May 2027 02:40:52 +0000 asID: 141607 IP address blocks: 103.220.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:38:dc:76:ae:46:16:f9:0f:9a:c9:9e:a5:d5:c4:96:e9:07:8c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A008821941A61F29770FC73A584B71178BCAE916 Validity Not Before: May 3 02:35:52 2026 GMT Not After : May 2 02:40:52 2027 GMT Subject: CN=A7BC53AABAFFFEC6A307EDFD5737CF3660BDCE4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2a:60:6a:3d:21:4d:1f:40:68:b8:72:33:9b: 0f:47:90:82:f6:de:40:80:99:47:6f:df:b3:f1:69: 08:4e:25:83:03:90:fb:21:c3:23:10:4b:c1:06:52: d4:fd:38:3c:10:e1:54:3c:e8:3b:29:8b:79:00:69: 21:00:cc:1e:8a:aa:79:c7:76:b8:77:59:e1:d7:71: 51:93:ba:b2:c1:f2:95:14:82:d7:d5:d8:71:a7:96: 16:e1:79:67:89:4a:c2:91:fa:1f:bd:bd:33:61:d6: cc:34:6e:d7:23:df:1f:90:c2:0a:5a:73:ca:68:35: 19:51:32:72:ef:8d:47:8c:a2:94:fd:e0:b0:e1:75: 36:d5:5c:f7:a7:f1:eb:ca:a3:dd:c2:28:01:ad:3c: 0f:de:ab:a8:a1:a4:bd:d1:9b:ed:aa:b2:fa:51:43: 62:19:a4:d7:83:af:db:47:ee:c0:cf:d7:f5:d4:f9: 0f:5b:d3:99:e0:66:7a:ee:d3:42:07:d0:e0:13:87: ee:0d:24:cd:22:13:ce:5a:66:b3:40:9d:b4:44:00: 9b:18:f7:17:c8:7b:db:eb:1e:0b:8a:a0:37:87:60: 02:1a:b4:3b:f9:69:fa:a8:dd:1d:c5:c6:aa:57:4a: 77:6a:31:e7:a6:61:62:a0:49:93:f3:bc:84:21:41: 1b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BC:53:AA:BA:FF:FE:C6:A3:07:ED:FD:57:37:CF:36:60:BD:CE:4C X509v3 Authority Key Identifier: keyid:A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.22.0/24 Signature Algorithm: sha256WithRSAEncryption a1:45:75:4f:28:ba:38:9f:2f:b5:fc:d3:11:e4:28:51:31:16: 3e:1d:fb:cc:4f:6b:90:0f:44:bc:45:6e:d7:e2:b9:99:b6:3c: 56:43:f4:0d:bb:19:33:4c:2d:ff:eb:9e:5d:4d:40:1c:05:32: 1c:94:49:a3:f4:69:8e:6c:fa:71:3d:04:6e:e4:0b:a7:e5:1a: f3:80:cc:cb:f4:ea:3a:18:da:9a:56:ee:5f:69:4a:3f:0b:83: 82:95:c2:ad:c7:56:f1:7e:dd:15:6c:fc:e0:00:b1:98:81:8a: 2b:f4:39:1c:84:b1:00:c7:07:ca:c6:b0:dd:43:46:aa:9b:88: a7:29:4e:9d:d6:99:b4:44:de:9f:96:82:6a:be:bf:d2:69:36: 96:c8:6e:45:b4:ae:6d:e3:bd:84:62:fe:bf:8d:54:03:93:74: a2:66:38:a8:2c:a0:33:1a:88:43:c1:f0:4a:65:da:3a:ef:aa: 61:58:59:fa:78:42:c1:4c:38:bf:7a:0f:c4:f6:2f:0d:68:c4: 32:0b:4f:3d:59:72:ac:71:8a:ae:a5:a2:3a:08:bb:20:fe:1f: 25:1e:dc:c5:87:60:c5:e1:61:c2:f8:d6:b6:40:a7:30:b0:08: 8f:b3:e8:a4:17:7f:a2:b4:1b:d1:87:3a:23:cf:97:1a:b2:2c: bb:bd:8a:0d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPDjcdq5GFvkPmsmepdXElukHjI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4 QkNBRTkxNjAeFw0yNjA1MDMwMjM1NTJaFw0yNzA1MDIwMjQwNTJaMDMxMTAvBgNV BAMTKEE3QkM1M0FBQkFGRkZFQzZBMzA3RURGRDU3MzdDRjM2NjBCRENFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIKmBqPSFNH0BouHIzmw9HkIL2 3kCAmUdv37PxaQhOJYMDkPshwyMQS8EGUtT9ODwQ4VQ86Dspi3kAaSEAzB6KqnnH drh3WeHXcVGTurLB8pUUgtfV2HGnlhbheWeJSsKR+h+9vTNh1sw0btcj3x+Qwgpa c8poNRlRMnLvjUeMopT94LDhdTbVXPen8evKo93CKAGtPA/eq6ihpL3Rm+2qsvpR Q2IZpNeDr9tH7sDP1/XU+Q9b05ngZnru00IH0OATh+4NJM0iE85aZrNAnbREAJsY 9xfIe9vrHguKoDeHYAIatDv5afqo3R3FxqpXSndqMeemYWKgSZPzvIQhQRs9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUp7xTqrr//sajB+39VzfPNmC9zkwwHwYDVR0j BBgwFoAUoAiCGUGmHyl3D8c6WEtxF4vK6RYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFhZDZhM2YtNmNhMC00NjY5LTk4ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0 MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4QkNBRTkxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDA4ODIxOTQxQTYxRjI5NzcwRkM3M0E1ODRCNzExNzhCQ0FF OTE2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZhYWQ2YTNmLTZjYTAtNDY2OS05 OGY3LTZmMzQ4MzdmYWE2Mi8wLzMxMzAzMzJlMzIzMjMwMmUzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9wWMA0GCSqG SIb3DQEBCwUAA4IBAQChRXVPKLo4ny+1/NMR5ChRMRY+HfvMT2uQD0S8RW7X4rmZ tjxWQ/QNuxkzTC3/655dTUAcBTIclEmj9GmObPpxPQRu5Aun5RrzgMzL9Oo6GNqa Vu5faUo/C4OClcKtx1bxft0VbPzgALGYgYor9DkchLEAxwfKxrDdQ0aqm4inKU6d 1pm0RN6floJqvr/SaTaWyG5FtK5t472EYv6/jVQDk3SiZjioLKAzGohDwfBKZdo6 76phWFn6eELBTDi/eg/E9i8NaMQyC089WXKscYqupaI6CLsg/h8lHtzFh2DF4WHC +Na2QKcwsAiPs+ikF3+itBvRhzojz5casiy7vYoN -----END CERTIFICATE-----Generated at Tue May 5 13:30:34 2026 by rpki-client