$ rpki-client -vvf rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa File: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (raw, json) Hash identifier: MEn9rSCA+X2qT8GUKSJ4R7eRC44YahAnX3SQmIywZAg= Subject key identifier: 80:8B:DD:B8:B0:37:F0:81:F4:1C:3C:00:75:60:5C:59:F5:EC:59:BF Certificate issuer: /CN=A008821941A61F29770FC73A584B71178BCAE916 Certificate serial: 51F695465B6A497188DE9AEAA95088ED8171CDAB Authority key identifier: A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa Signing time: Sun 03 May 2026 02:40:52 +0000 ROA not before: Sun 03 May 2026 02:35:52 +0000 ROA not after: Sun 02 May 2027 02:40:52 +0000 asID: 141607 IP address blocks: 103.220.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f6:95:46:5b:6a:49:71:88:de:9a:ea:a9:50:88:ed:81:71:cd:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A008821941A61F29770FC73A584B71178BCAE916 Validity Not Before: May 3 02:35:52 2026 GMT Not After : May 2 02:40:52 2027 GMT Subject: CN=808BDDB8B037F081F41C3C0075605C59F5EC59BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:49:8a:39:97:c6:39:f2:c8:e5:69:6a:64: 7f:11:4b:38:92:2e:d9:79:5a:63:80:30:19:e3:9e: f2:5a:6f:14:35:11:b3:39:ae:aa:b3:f8:27:f9:b2: 71:2d:92:92:4c:ae:38:8a:51:35:e1:3a:cd:a5:c4: 91:aa:6c:40:b0:4d:b2:c4:d7:0f:b7:f1:04:ce:f0: 72:dc:57:2b:02:dc:4d:c3:64:40:71:79:ac:49:d0: c1:cb:93:68:cf:9b:80:5d:a1:05:5f:5a:4e:74:4a: 2b:ff:75:cc:76:69:d3:18:ad:9a:6d:a9:c1:c8:0a: 48:44:02:7b:d4:81:4b:7f:2a:bf:9d:98:2f:dc:7b: d2:da:56:36:dd:59:04:7a:dc:31:0d:24:09:43:b7: 9a:b4:90:86:e1:c9:db:ef:63:59:5a:40:d4:4f:98: 33:7b:a8:17:01:08:65:f4:c0:ca:9b:02:70:87:9b: fb:60:df:b3:75:95:61:b7:4d:8e:dd:ad:31:38:09: 9d:c8:df:b0:31:6f:dc:66:72:06:16:73:ec:b9:a2: ac:89:73:ea:80:96:68:87:55:fc:74:b6:2d:c9:0a: 31:f0:a0:44:5f:0e:d4:44:34:52:b9:5f:59:fb:23: 01:7a:80:ee:2d:1d:19:cf:8b:15:53:1e:ca:09:94: 8b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8B:DD:B8:B0:37:F0:81:F4:1C:3C:00:75:60:5C:59:F5:EC:59:BF X509v3 Authority Key Identifier: keyid:A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.23.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:66:f5:cd:a5:b4:ca:29:2d:93:e5:66:81:6d:c7:9f:56:e1: 6c:30:f3:be:93:d6:2f:f8:37:53:b7:bd:7c:3b:68:22:83:81: 81:ce:07:2b:ce:7e:5e:60:69:d7:eb:92:b7:93:99:95:83:df: 7e:36:8a:90:c6:8a:80:ca:98:34:ef:67:59:75:4a:94:7b:09: 64:ed:8f:ba:bb:18:d7:89:bf:d4:eb:37:6e:58:b7:11:41:46: 7d:67:ad:00:6a:5d:33:ef:b7:09:d0:f9:08:76:da:0f:41:1c: 42:c9:b5:4f:dd:7e:60:2a:87:b8:03:10:62:6c:e3:f8:27:d4: 50:7a:25:f4:b4:59:dc:3a:6e:8b:04:87:3e:cc:24:66:eb:ae: 35:ec:a2:c5:40:18:e7:55:74:5f:46:23:b3:68:ef:3f:41:c1: 41:51:2b:67:d9:23:a7:30:16:d0:49:3c:d5:0f:9d:2f:f7:f4: e9:c2:fe:c0:f3:e1:5b:7f:8c:0d:75:86:67:cb:7d:2c:62:93: 1b:75:27:38:94:9e:4d:81:63:8f:0c:2a:fc:44:0b:6b:21:7b: 8e:15:c7:9e:19:c0:fb:81:1d:5c:63:f4:3d:aa:6b:22:43:2a: 23:45:a9:18:81:44:3b:ac:02:67:43:8b:fb:82:67:55:ea:58: b3:e9:91:fe -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUfaVRltqSXGI3prqqVCI7YFxzaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4 QkNBRTkxNjAeFw0yNjA1MDMwMjM1NTJaFw0yNzA1MDIwMjQwNTJaMDMxMTAvBgNV BAMTKDgwOEJEREI4QjAzN0YwODFGNDFDM0MwMDc1NjA1QzU5RjVFQzU5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROEmKOZfGOfLI5WlqZH8RSziS Ltl5WmOAMBnjnvJabxQ1EbM5rqqz+Cf5snEtkpJMrjiKUTXhOs2lxJGqbECwTbLE 1w+38QTO8HLcVysC3E3DZEBxeaxJ0MHLk2jPm4BdoQVfWk50Siv/dcx2adMYrZpt qcHICkhEAnvUgUt/Kr+dmC/ce9LaVjbdWQR63DENJAlDt5q0kIbhydvvY1laQNRP mDN7qBcBCGX0wMqbAnCHm/tg37N1lWG3TY7drTE4CZ3I37Axb9xmcgYWc+y5oqyJ c+qAlmiHVfx0ti3JCjHwoERfDtRENFK5X1n7IwF6gO4tHRnPixVTHsoJlIutAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgIvduLA38IH0HDwAdWBcWfXsWb8wHwYDVR0j BBgwFoAUoAiCGUGmHyl3D8c6WEtxF4vK6RYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFhZDZhM2YtNmNhMC00NjY5LTk4ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0 MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4QkNBRTkxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDA4ODIxOTQxQTYxRjI5NzcwRkM3M0E1ODRCNzExNzhCQ0FF OTE2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZhYWQ2YTNmLTZjYTAtNDY2OS05 OGY3LTZmMzQ4MzdmYWE2Mi8wLzMxMzAzMzJlMzIzMjMwMmUzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9wXMA0GCSqG SIb3DQEBCwUAA4IBAQB8ZvXNpbTKKS2T5WaBbcefVuFsMPO+k9Yv+DdTt718O2gi g4GBzgcrzn5eYGnX65K3k5mVg99+NoqQxoqAypg072dZdUqUewlk7Y+6uxjXib/U 6zduWLcRQUZ9Z60Aal0z77cJ0PkIdtoPQRxCybVP3X5gKoe4AxBibOP4J9RQeiX0 tFncOm6LBIc+zCRm66417KLFQBjnVXRfRiOzaO8/QcFBUStn2SOnMBbQSTzVD50v 9/Tpwv7A8+Fbf4wNdYZny30sYpMbdSc4lJ5NgWOPDCr8RAtrIXuOFceeGcD7gR1c Y/Q9qmsiQyojRakYgUQ7rAJnQ4v7gmdV6liz6ZH+ -----END CERTIFICATE-----Generated at Tue May 5 13:30:22 2026 by rpki-client