$ rpki-client -vvf rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e36342e31342e302f32342d3234203d3e20313335343438.roa File: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (raw, json) Hash identifier: cnZhDjgBV18bkSYzt4GtOPM77vSmVw7AFFCEwfJop2Y= Subject key identifier: 6A:2D:F0:98:04:63:E2:9D:76:49:6C:15:16:A1:51:98:BA:64:A5:BC Certificate issuer: /CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Certificate serial: 07E0303216F5BA93C262C4DBAD50EE34A9AA47DD Authority key identifier: 71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e36342e31342e302f32342d3234203d3e20313335343438.roa Signing time: Sun 03 May 2026 02:11:18 +0000 ROA not before: Sun 03 May 2026 02:06:18 +0000 ROA not after: Sun 02 May 2027 02:11:18 +0000 asID: 135448 IP address blocks: 103.64.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e0:30:32:16:f5:ba:93:c2:62:c4:db:ad:50:ee:34:a9:aa:47:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Validity Not Before: May 3 02:06:18 2026 GMT Not After : May 2 02:11:18 2027 GMT Subject: CN=6A2DF0980463E29D76496C1516A15198BA64A5BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:28:06:77:5b:76:f7:7f:6d:a1:31:57:a3:31: 2a:eb:fe:bc:87:37:83:d8:58:e2:d4:09:57:c4:94: 49:9a:54:a9:2b:1a:1f:7c:cd:cd:68:94:d6:45:a5: a4:9b:08:66:20:7e:37:a8:9a:c1:b6:bc:9d:0b:69: 45:e2:c0:70:20:84:2d:92:d2:bc:58:91:1f:e3:86: a2:f9:9c:3b:0d:fb:17:09:fd:e6:9d:e4:6f:f8:4e: 7a:ab:e4:1d:4b:9b:56:92:90:9a:ce:7c:41:2d:71: 5b:5e:23:30:3e:f9:b3:6f:62:0d:68:0c:c4:a1:8a: ea:1c:d7:6a:8a:2b:dd:62:c5:dd:59:80:03:7a:1c: 55:75:2e:71:c8:e5:3c:ef:6a:e9:7b:d0:66:80:4a: 1e:e9:93:50:52:a1:f8:96:05:4a:e9:cf:e9:ef:ae: 36:e4:a1:f8:4e:8f:f8:56:8d:44:d3:af:84:ae:4e: c1:7a:84:7b:ca:05:da:30:bf:9e:cb:16:04:7e:a3: 34:53:cb:12:fa:ba:54:0e:52:54:4f:29:e5:75:3d: 8e:6d:31:f8:4a:f0:6d:68:30:71:2a:81:2d:f4:c5: d4:40:33:71:8d:fe:6a:0f:14:b5:8d:78:18:19:89: c2:da:fc:17:ab:63:ec:69:a0:3b:a1:f6:70:78:a6: 08:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2D:F0:98:04:63:E2:9D:76:49:6C:15:16:A1:51:98:BA:64:A5:BC X509v3 Authority Key Identifier: keyid:71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e36342e31342e302f32342d3234203d3e20313335343438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.64.14.0/24 Signature Algorithm: sha256WithRSAEncryption 09:c1:9d:ee:ef:db:b4:8d:89:5d:bb:21:0e:e1:fc:a9:02:d4: 48:71:ed:41:80:43:58:e1:ed:e9:80:9c:1c:84:ff:cf:ee:b7: e1:92:d3:f3:01:97:3c:d0:bf:18:b6:f5:a2:6d:b0:14:71:8d: da:52:6c:18:52:82:2d:d3:66:4c:88:1d:4c:c5:64:55:88:92: 42:a8:6a:b9:b6:8e:08:c8:69:ca:d7:50:65:24:0e:d8:df:45: 2b:70:33:cb:74:5f:b3:f6:45:5a:3b:52:2f:50:ee:52:98:40: 80:d1:38:0e:4b:03:be:a9:ee:94:68:a7:90:82:79:ba:03:ce: 42:54:8d:e6:f0:fb:75:82:62:22:30:c7:f2:bf:48:fc:60:82: 67:73:a2:c5:ed:15:7f:a0:24:a8:1e:31:a6:be:2f:e2:5c:75: 85:04:06:72:0f:ae:33:5e:2a:42:74:73:2c:dc:77:3e:7b:a9: 86:7f:30:a3:f0:93:e0:01:83:bd:e8:b0:4b:4d:d1:0c:cf:2a: b2:ff:5d:e7:b3:53:fb:88:3f:15:75:95:fc:ea:65:cd:a5:9c: 84:d0:3c:c6:73:1d:1f:a8:94:f7:e5:6f:cc:ef:92:15:49:41: e4:a4:37:5f:d4:39:4d:c9:c4:fb:5d:46:2a:62:f8:7d:74:1a: f5:7c:bd:7f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUB+AwMhb1upPCYsTbrVDuNKmqR90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3 QzI0RTQwMzAeFw0yNjA1MDMwMjA2MThaFw0yNzA1MDIwMjExMThaMDMxMTAvBgNV BAMTKDZBMkRGMDk4MDQ2M0UyOUQ3NjQ5NkMxNTE2QTE1MTk4QkE2NEE1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeKAZ3W3b3f22hMVejMSrr/ryH N4PYWOLUCVfElEmaVKkrGh98zc1olNZFpaSbCGYgfjeomsG2vJ0LaUXiwHAghC2S 0rxYkR/jhqL5nDsN+xcJ/ead5G/4Tnqr5B1Lm1aSkJrOfEEtcVteIzA++bNvYg1o DMShiuoc12qKK91ixd1ZgAN6HFV1LnHI5Tzvaul70GaASh7pk1BSofiWBUrpz+nv rjbkofhOj/hWjUTTr4SuTsF6hHvKBdowv57LFgR+ozRTyxL6ulQOUlRPKeV1PY5t MfhK8G1oMHEqgS30xdRAM3GN/moPFLWNeBgZicLa/BerY+xpoDuh9nB4pgjNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUai3wmARj4p12SWwVFqFRmLpkpbwwHwYDVR0j BBgwFoAUcWRb25f+vW4NT1OgjL8kB3wk5AMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU5YWNiOTctNmU4Ny00ZTMxLWE1NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5 N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3QzI0RTQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY0NUJEQjk3RkVCRDZFMEQ0RjUzQTA4Q0JGMjQwNzdDMjRF NDAzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA1OWFjYjk3LTZlODctNGUzMS1h NTY5LWEyNjYwZGY0ZjJiOC8wLzMxMzAzMzJlMzYzNDJlMzEzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdADjANBgkqhkiG 9w0BAQsFAAOCAQEACcGd7u/btI2JXbshDuH8qQLUSHHtQYBDWOHt6YCcHIT/z+63 4ZLT8wGXPNC/GLb1om2wFHGN2lJsGFKCLdNmTIgdTMVkVYiSQqhqubaOCMhpytdQ ZSQO2N9FK3Azy3Rfs/ZFWjtSL1DuUphAgNE4DksDvqnulGinkIJ5ugPOQlSN5vD7 dYJiIjDH8r9I/GCCZ3Oixe0Vf6AkqB4xpr4v4lx1hQQGcg+uM14qQnRzLNx3Pnup hn8wo/CT4AGDveiwS03RDM8qsv9d57NT+4g/FXWV/OplzaWchNA8xnMdH6iU9+Vv zO+SFUlB5KQ3X9Q5TcnE+11GKmL4fXQa9Xy9fw== -----END CERTIFICATE-----Generated at Tue May 12 22:33:18 2026 by rpki-client