$ rpki-client -vvf rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa File: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (raw, json) Hash identifier: XC72sTT1UANPWg5y93bIJ8fKMA+26iRggZMn6hJnkeY= Subject key identifier: 5F:54:96:EF:49:1A:90:2B:7B:77:83:69:72:F9:33:40:E3:EE:A0:E2 Certificate issuer: /CN=1351A2C01F31DE3BE0AE00B957282481FA877D80 Certificate serial: 76D8219027116CA4B52FD310A2294C210C55B360 Authority key identifier: 13:51:A2:C0:1F:31:DE:3B:E0:AE:00:B9:57:28:24:81:FA:87:7D:80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa Signing time: Sun 03 May 2026 02:11:24 +0000 ROA not before: Sun 03 May 2026 02:06:24 +0000 ROA not after: Sun 02 May 2027 02:11:24 +0000 asID: 147078 IP address blocks: 103.173.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.crl rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d8:21:90:27:11:6c:a4:b5:2f:d3:10:a2:29:4c:21:0c:55:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1351A2C01F31DE3BE0AE00B957282481FA877D80 Validity Not Before: May 3 02:06:24 2026 GMT Not After : May 2 02:11:24 2027 GMT Subject: CN=5F5496EF491A902B7B77836972F93340E3EEA0E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:9b:b5:89:9c:ba:11:09:c9:eb:63:54:6a: 09:43:15:74:6d:29:ae:3e:97:72:9f:e9:b9:74:4b: fd:a2:3c:05:96:71:a9:eb:2c:41:35:0d:b9:dc:e6: d3:4e:cd:13:da:91:80:4c:d9:de:d0:3e:72:72:6e: 35:8f:5a:b7:05:f5:02:29:c0:b5:dc:a0:4f:85:c3: 62:07:57:29:14:9b:7c:fe:17:b3:36:15:38:5c:e6: e9:ea:a5:c2:5e:4b:0a:06:5d:ca:5d:c9:49:54:a0: be:da:13:29:86:90:1f:1d:bf:c8:0e:09:46:6e:8b: d6:4e:60:d7:a4:ff:1e:1c:d7:cb:29:1b:79:72:81: dc:26:ba:9a:a5:a1:61:63:a3:d4:6f:e5:3c:5c:d6: 0b:72:ce:af:5d:74:97:cf:da:9d:6b:95:52:50:04: a5:1b:d7:49:e9:2f:27:cc:72:32:34:47:e4:38:d9: 1e:e2:e6:c9:a0:73:c1:12:77:fa:94:46:0b:df:ae: eb:6e:4e:a5:8e:fa:6a:44:69:7a:3c:d3:49:de:a0: ce:68:f9:f9:47:90:27:02:a4:95:3f:6d:db:da:bc: 56:e4:91:f0:60:ce:d1:d1:02:ae:ef:84:a2:e3:e7: c0:e0:50:38:b8:66:1b:44:f9:da:60:02:3e:06:17: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:54:96:EF:49:1A:90:2B:7B:77:83:69:72:F9:33:40:E3:EE:A0:E2 X509v3 Authority Key Identifier: keyid:13:51:A2:C0:1F:31:DE:3B:E0:AE:00:B9:57:28:24:81:FA:87:7D:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.139.0/24 Signature Algorithm: sha256WithRSAEncryption 04:ee:cb:65:14:b3:cf:5c:78:a0:21:20:16:0b:56:73:90:3a: 1f:13:13:19:94:b2:66:e0:21:f3:d0:cf:54:b1:c1:99:d7:64: 92:a5:67:d8:23:f4:69:da:3e:a9:4e:f1:49:ea:6d:c9:a6:19: 60:1e:91:a3:ec:84:4d:cd:0f:62:af:9c:14:70:13:8b:f2:be: ff:33:74:03:04:07:21:04:e2:dd:81:96:71:ad:51:a1:8c:09: 1e:73:82:42:c7:09:98:a7:38:17:b4:50:6f:c8:dc:91:b6:71: 28:7d:7d:ef:54:22:5d:87:2c:57:25:47:98:fe:d8:90:ef:df: 59:48:22:d4:9c:02:9d:49:d3:8d:59:e0:ae:ff:f8:ff:81:79: b8:63:0b:d3:3a:43:28:09:f1:40:e1:0e:f1:bf:65:a6:34:87: f9:c9:72:fc:80:34:e1:d3:a7:88:3b:ec:dc:79:de:7f:b6:fb: 8f:8e:2e:a7:99:0d:c0:b8:ea:8d:43:8d:63:10:e5:2e:5b:06: a3:78:7f:88:6a:05:9e:85:16:a0:52:60:4e:cf:a2:37:4f:5d: 16:8a:d0:ba:79:4a:1b:56:55:77:fa:d7:c1:14:d4:f4:49:e8: 47:43:d1:41:95:e8:b5:da:d8:03:cd:f4:02:c8:0b:d3:85:73: 97:d3:0e:97 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUdtghkCcRbKS1L9MQoilMIQxVs2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM1MUEyQzAxRjMxREUzQkUwQUUwMEI5NTcyODI0ODFG QTg3N0Q4MDAeFw0yNjA1MDMwMjA2MjRaFw0yNzA1MDIwMjExMjRaMDMxMTAvBgNV BAMTKDVGNTQ5NkVGNDkxQTkwMkI3Qjc3ODM2OTcyRjkzMzQwRTNFRUEwRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8U5u1iZy6EQnJ62NUaglDFXRt Ka4+l3Kf6bl0S/2iPAWWcanrLEE1Dbnc5tNOzRPakYBM2d7QPnJybjWPWrcF9QIp wLXcoE+Fw2IHVykUm3z+F7M2FThc5unqpcJeSwoGXcpdyUlUoL7aEymGkB8dv8gO CUZui9ZOYNek/x4c18spG3lygdwmupqloWFjo9Rv5Txc1gtyzq9ddJfP2p1rlVJQ BKUb10npLyfMcjI0R+Q42R7i5smgc8ESd/qURgvfrutuTqWO+mpEaXo800neoM5o +flHkCcCpJU/bdvavFbkkfBgztHRAq7vhKLj58DgUDi4ZhtE+dpgAj4GF7dnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUX1SW70kakCt7d4NpcvkzQOPuoOIwHwYDVR0j BBgwFoAUE1GiwB8x3jvgrgC5VygkgfqHfYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlZmNiZjAtNjZlYy00OGQzLWIyMjEtMGYwOTY4NmQ1ODE4LzAvMTM1MUEyQzAx RjMxREUzQkUwQUUwMEI5NTcyODI0ODFGQTg3N0Q4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzUxQTJDMDFGMzFERTNCRTBBRTAwQjk1NzI4MjQ4MUZBODc3 RDgwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA1ZWZjYmYwLTY2ZWMtNDhkMy1i MjIxLTBmMDk2ODZkNTgxOC8wLzMxMzAzMzJlMzEzNzMzMmUzMTMzMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrYswDQYJ KoZIhvcNAQELBQADggEBAATuy2UUs89ceKAhIBYLVnOQOh8TExmUsmbgIfPQz1Sx wZnXZJKlZ9gj9GnaPqlO8UnqbcmmGWAekaPshE3ND2KvnBRwE4vyvv8zdAMEByEE 4t2BlnGtUaGMCR5zgkLHCZinOBe0UG/I3JG2cSh9fe9UIl2HLFclR5j+2JDv31lI ItScAp1J041Z4K7/+P+BebhjC9M6QygJ8UDhDvG/ZaY0h/nJcvyANOHTp4g77Nx5 3n+2+4+OLqeZDcC46o1DjWMQ5S5bBqN4f4hqBZ6FFqBSYE7PojdPXRaK0Lp5ShtW VXf618EU1PRJ6EdD0UGV6LXa2APN9ALIC9OFc5fTDpc= -----END CERTIFICATE-----Generated at Wed May 13 12:51:33 2026 by rpki-client