$ rpki-client -vvf rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa File: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (raw, json) Hash identifier: Gw/ouM+79fWgaC67VfYoogoQzL2GG+1ni52ruiFVvNU= Subject key identifier: 1D:58:57:CA:86:47:91:80:F1:14:2D:E6:A9:63:A7:1D:70:63:C5:D3 Certificate issuer: /CN=96724AF35F57C1F59A824F909E2522BAC6560A6D Certificate serial: 757DA52F2FB00F62EA14E4B33C6A5B97BD418B5E Authority key identifier: 96:72:4A:F3:5F:57:C1:F5:9A:82:4F:90:9E:25:22:BA:C6:56:0A:6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96724AF35F57C1F59A824F909E2522BAC6560A6D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa Signing time: Sun 03 May 2026 02:11:11 +0000 ROA not before: Sun 03 May 2026 02:06:11 +0000 ROA not after: Sun 02 May 2027 02:11:11 +0000 asID: 139973 IP address blocks: 103.147.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.crl rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96724AF35F57C1F59A824F909E2522BAC6560A6D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7d:a5:2f:2f:b0:0f:62:ea:14:e4:b3:3c:6a:5b:97:bd:41:8b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96724AF35F57C1F59A824F909E2522BAC6560A6D Validity Not Before: May 3 02:06:11 2026 GMT Not After : May 2 02:11:11 2027 GMT Subject: CN=1D5857CA86479180F1142DE6A963A71D7063C5D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:94:36:2d:59:11:94:9a:ed:d9:30:65:86: fb:4f:c2:f9:1c:d0:3c:03:86:21:d2:9f:d7:d9:11: 9c:6b:8b:b9:da:5a:ec:06:fc:41:b9:d6:77:50:34: 49:40:46:23:21:8f:ea:80:3e:15:f0:65:14:e7:65: 9a:aa:88:8d:65:f7:3e:64:ca:10:2c:37:d8:68:b1: eb:3e:92:69:b5:85:3b:ca:5d:19:97:8e:36:fe:8a: ba:e5:df:84:f1:be:2e:0a:fb:a8:06:d9:8a:7a:a7: 42:ba:63:8f:02:b0:e3:f8:3c:d0:b9:25:3c:03:a1: b6:ef:d4:8f:a8:e9:2f:b2:b2:8a:6a:31:b9:00:73: e0:a7:8d:de:48:ee:7a:40:4d:33:9b:75:21:cd:39: 71:14:0f:ca:19:bc:ca:2b:4f:c1:55:c7:71:8c:cd: 03:e4:2d:3c:45:8f:52:ff:0a:a8:95:67:b2:e1:83: 1f:88:df:73:3c:56:02:55:5d:cf:8d:b7:ce:8d:54: 5c:84:bc:e8:dd:04:b5:dc:1c:a9:c4:7b:c9:fc:00: ca:8f:d9:bb:9e:32:85:5e:ab:6c:27:a8:b1:5e:18: bc:7c:91:f2:39:15:41:2b:72:cf:83:a1:a1:4c:34: 48:eb:ef:f5:94:94:2c:13:78:90:67:43:ef:ca:55: a8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:58:57:CA:86:47:91:80:F1:14:2D:E6:A9:63:A7:1D:70:63:C5:D3 X509v3 Authority Key Identifier: keyid:96:72:4A:F3:5F:57:C1:F5:9A:82:4F:90:9E:25:22:BA:C6:56:0A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96724AF35F57C1F59A824F909E2522BAC6560A6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.245.0/24 Signature Algorithm: sha256WithRSAEncryption 08:9c:fd:be:29:bc:6d:75:48:11:0a:53:9a:1c:64:13:25:8b: e3:cc:a7:32:c2:b4:ad:79:46:20:29:f5:8d:f0:03:e7:92:03: 7b:e2:13:56:e6:aa:50:9a:c9:c1:8f:02:af:41:e9:17:2e:f0: 30:e9:f9:df:dc:68:6e:9f:e2:b7:d2:2d:1f:6b:cf:56:4d:d9: 98:0e:3b:df:f0:8a:7d:a6:f7:1f:1a:cb:4a:c1:5f:f2:ee:b1: 1d:ef:19:04:ba:c9:52:57:ca:0c:bb:c4:67:b2:89:45:65:ca: 30:8a:cb:ff:ae:a4:05:44:38:fb:f4:37:f7:bb:e3:37:d4:f0: d6:4a:68:af:d6:05:bd:ee:1c:cb:cf:1d:72:b6:32:00:b0:71: 04:c6:f7:5d:9a:60:a2:4a:78:39:d7:69:0c:3b:77:ec:47:4f: 09:af:51:26:b8:6f:f9:35:fa:3b:72:5d:fb:ce:d3:10:e2:06: 5c:99:cd:95:16:bc:55:2d:07:e7:33:f8:6a:2a:91:22:c2:c4: 62:0f:be:bc:3d:f4:9e:9d:a3:1b:ee:b0:e2:3a:4d:a7:3d:f6: 5a:6e:a8:d9:04:63:e7:3e:1e:42:43:2a:90:6a:d0:59:c8:11: a6:df:7c:94:48:bb:d3:76:5a:22:91:a7:d7:e2:21:1c:8d:8e: f0:03:66:55 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUdX2lLy+wD2LqFOSzPGpbl71Bi14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3MjRBRjM1RjU3QzFGNTlBODI0RjkwOUUyNTIyQkFD NjU2MEE2RDAeFw0yNjA1MDMwMjA2MTFaFw0yNzA1MDIwMjExMTFaMDMxMTAvBgNV BAMTKDFENTg1N0NBODY0NzkxODBGMTE0MkRFNkE5NjNBNzFENzA2M0M1RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvFZQ2LVkRlJrt2TBlhvtPwvkc 0DwDhiHSn9fZEZxri7naWuwG/EG51ndQNElARiMhj+qAPhXwZRTnZZqqiI1l9z5k yhAsN9hoses+kmm1hTvKXRmXjjb+irrl34Txvi4K+6gG2Yp6p0K6Y48CsOP4PNC5 JTwDobbv1I+o6S+ysopqMbkAc+Cnjd5I7npATTObdSHNOXEUD8oZvMorT8FVx3GM zQPkLTxFj1L/CqiVZ7Lhgx+I33M8VgJVXc+Nt86NVFyEvOjdBLXcHKnEe8n8AMqP 2bueMoVeq2wnqLFeGLx8kfI5FUErcs+DoaFMNEjr7/WUlCwTeJBnQ+/KVajdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUHVhXyoZHkYDxFC3mqWOnHXBjxdMwHwYDVR0j BBgwFoAUlnJK819XwfWagk+QniUiusZWCm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU1OTM0NDUtYTI1ZC00OGUwLWFiYzItYWIwNWUwNjUwNjU1LzAvOTY3MjRBRjM1 RjU3QzFGNTlBODI0RjkwOUUyNTIyQkFDNjU2MEE2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjcyNEFGMzVGNTdDMUY1OUE4MjRGOTA5RTI1MjJCQUM2NTYw QTZELmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA1NTkzNDQ1LWEyNWQtNDhlMC1h YmMyLWFiMDVlMDY1MDY1NS8wLzMxMzAzMzJlMzEzNDM3MmUzMjM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk/UwDQYJ KoZIhvcNAQELBQADggEBAAic/b4pvG11SBEKU5ocZBMli+PMpzLCtK15RiAp9Y3w A+eSA3viE1bmqlCaycGPAq9B6Rcu8DDp+d/caG6f4rfSLR9rz1ZN2ZgOO9/win2m 9x8ay0rBX/LusR3vGQS6yVJXygy7xGeyiUVlyjCKy/+upAVEOPv0N/e74zfU8NZK aK/WBb3uHMvPHXK2MgCwcQTG912aYKJKeDnXaQw7d+xHTwmvUSa4b/k1+jtyXfvO 0xDiBlyZzZUWvFUtB+cz+GoqkSLCxGIPvrw99J6doxvusOI6Tac99lpuqNkEY+c+ HkJDKpBq0FnIEabffJRIu9N2WiKRp9fiIRyNjvADZlU= -----END CERTIFICATE-----Generated at Wed May 13 10:16:55 2026 by rpki-client