$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa File: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: FFnOk4HB7OKneNdDsrwIq074TXsPeVLMjjjZCukxhr0= Subject key identifier: C6:15:4F:3F:AF:F6:B7:9A:36:63:0C:E5:A9:D1:E0:95:DF:BD:A4:F9 Certificate issuer: /CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Certificate serial: 2A8F4622D97E1135BEF52F9A527E811E1B3377C2 Authority key identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa Signing time: Sun 03 May 2026 02:57:13 +0000 ROA not before: Sun 03 May 2026 02:52:13 +0000 ROA not after: Sun 02 May 2027 02:57:13 +0000 asID: 9341 IP address blocks: 103.137.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8f:46:22:d9:7e:11:35:be:f5:2f:9a:52:7e:81:1e:1b:33:77:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Validity Not Before: May 3 02:52:13 2026 GMT Not After : May 2 02:57:13 2027 GMT Subject: CN=C6154F3FAFF6B79A36630CE5A9D1E095DFBDA4F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:ae:cc:7a:a1:a4:58:d3:ae:4d:2d:56:a9: 92:61:f9:5e:b6:5e:8d:0e:04:4d:a5:39:91:c0:7a: 59:03:43:a5:47:06:d9:d8:46:45:37:fb:36:8a:33: 61:f0:d1:15:0c:47:0b:0b:da:88:c0:14:fb:a1:49: 57:2a:7e:aa:3f:a9:ce:ac:53:45:30:3f:97:68:dd: a4:e2:03:24:cc:ed:ed:ae:e2:bb:bf:d0:13:ee:5e: 3b:06:72:fe:d1:5b:0b:15:f8:ce:1b:c7:d0:35:f8: 0e:7e:d2:ec:60:ca:76:61:50:22:f6:2f:c0:be:8c: 73:23:44:7d:74:c0:48:eb:39:2e:e0:7d:18:5e:cb: f3:65:6b:98:f5:a4:11:ee:67:03:21:f7:80:6c:f1: 85:3a:22:e3:fc:ad:44:9c:12:fe:ff:50:36:26:bc: ab:04:6c:67:f5:e2:44:33:e5:c8:cb:e7:3f:93:0a: 03:d1:af:30:a9:be:7f:0b:35:0a:a4:d9:c0:cf:75: db:40:be:12:b4:1c:6c:53:50:4a:b8:ab:43:24:d4: c1:df:08:96:a1:9b:2f:b4:70:87:24:cf:04:bd:a9: 4e:f5:14:c2:d4:27:a9:16:da:2b:04:ae:3e:ac:98: 6d:cd:53:fd:4d:d3:3f:59:2d:56:00:d6:82:27:31: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:15:4F:3F:AF:F6:B7:9A:36:63:0C:E5:A9:D1:E0:95:DF:BD:A4:F9 X509v3 Authority Key Identifier: keyid:29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.188.0/24 Signature Algorithm: sha256WithRSAEncryption a0:50:ad:76:4b:b6:1c:2d:b2:6e:f8:91:b0:53:06:00:23:4b: 92:77:ec:85:9f:b7:fc:20:7a:5b:a4:81:24:94:02:f1:1b:c9: e2:1b:fd:88:03:91:b9:98:3e:a8:f0:bd:93:c4:66:74:20:c7: d3:5c:b9:40:57:0f:4a:08:21:4b:24:aa:60:37:05:c0:a4:ff: 04:03:a3:54:a4:8b:c9:d2:55:47:95:34:17:86:8e:a8:72:ad: d6:be:d6:1e:87:8d:66:3c:25:44:c8:a4:d2:41:dc:fb:b1:01: ec:d8:89:6c:6f:00:f7:1c:68:96:4f:32:9d:91:a4:fa:df:10: c7:35:63:74:5d:0d:5a:3a:8a:8b:d7:db:90:91:13:7c:8d:e9: 03:6f:d4:5d:41:12:05:03:af:2c:d2:41:c9:6d:62:39:ff:39: 37:ef:27:5f:08:71:fc:50:af:47:50:05:28:63:22:b5:2b:9d: 9a:4b:57:72:a7:11:a1:2c:3f:06:c2:19:4c:f6:c9:11:d1:4b: 38:84:ef:ee:af:39:80:34:26:8f:07:bd:82:29:47:2d:b8:d7: a2:e7:ad:ea:6b:1a:1a:e2:31:13:55:bc:3c:5e:0d:fa:e8:6b: e6:4c:37:49:d1:ac:1f:80:64:4a:25:2a:b0:d7:b4:97:39:bf: f7:97:6f:b6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKo9GItl+ETW+9S+aUn6BHhszd8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAzQjFF MUEzNDEzRDAeFw0yNjA1MDMwMjUyMTNaFw0yNzA1MDIwMjU3MTNaMDMxMTAvBgNV BAMTKEM2MTU0RjNGQUZGNkI3OUEzNjYzMENFNUE5RDFFMDk1REZCREE0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiEa7MeqGkWNOuTS1WqZJh+V62 Xo0OBE2lOZHAelkDQ6VHBtnYRkU3+zaKM2Hw0RUMRwsL2ojAFPuhSVcqfqo/qc6s U0UwP5do3aTiAyTM7e2u4ru/0BPuXjsGcv7RWwsV+M4bx9A1+A5+0uxgynZhUCL2 L8C+jHMjRH10wEjrOS7gfRhey/Nla5j1pBHuZwMh94Bs8YU6IuP8rUScEv7/UDYm vKsEbGf14kQz5cjL5z+TCgPRrzCpvn8LNQqk2cDPddtAvhK0HGxTUEq4q0Mk1MHf CJahmy+0cIckzwS9qU71FMLUJ6kW2isErj6smG3NU/1N0z9ZLVYA1oInMY8BAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUxhVPP6/2t5o2YwzlqdHgld+9pPkwHwYDVR0j BBgwFoAUKXe8F5EtaBp468wn7f8DseGjQT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZjMTI3MDMtZjFmNy00M2M5LWEyMjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5 MTJENjgxQTc4RUJDQzI3RURGRjAzQjFFMUEzNDEzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTc3QkMxNzkxMkQ2ODFBNzhFQkNDMjdFREZGMDNCMUUxQTM0 MTNELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2YzEyNzAzLWYxZjctNDNjOS1h MjIwLTkyZWRkODZlZmU1ZS8wLzMxMzAzMzJlMzEzMzM3MmUzMTM4MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeJvDANBgkqhkiG 9w0BAQsFAAOCAQEAoFCtdku2HC2ybviRsFMGACNLknfshZ+3/CB6W6SBJJQC8RvJ 4hv9iAORuZg+qPC9k8RmdCDH01y5QFcPSgghSySqYDcFwKT/BAOjVKSLydJVR5U0 F4aOqHKt1r7WHoeNZjwlRMik0kHc+7EB7NiJbG8A9xxolk8ynZGk+t8QxzVjdF0N WjqKi9fbkJETfI3pA2/UXUESBQOvLNJByW1iOf85N+8nXwhx/FCvR1AFKGMitSud mktXcqcRoSw/BsIZTPbJEdFLOITv7q85gDQmjwe9gilHLbjXouet6msaGuIxE1W8 PF4N+uhr5kw3SdGsH4BkSiUqsNe0lzm/95dvtg== -----END CERTIFICATE-----Generated at Tue May 5 13:32:09 2026 by rpki-client