$ rpki-client -vvf rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa File: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (raw, json) Hash identifier: F/oy8su27rCM1WBmuMCn8wfDlNFF1ZO6cFWNdzyAW6M= Subject key identifier: AB:43:DC:7C:A0:42:2F:A7:BD:47:66:F7:C0:06:69:DF:0F:BD:4C:F9 Certificate issuer: /CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Certificate serial: 2408D24B51531FB89517F2F42770E4DEAB206457 Authority key identifier: B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa Signing time: Sun 03 May 2026 02:12:02 +0000 ROA not before: Sun 03 May 2026 02:07:02 +0000 ROA not after: Sun 02 May 2027 02:12:02 +0000 asID: 141983 IP address blocks: 103.167.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:08:d2:4b:51:53:1f:b8:95:17:f2:f4:27:70:e4:de:ab:20:64:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Validity Not Before: May 3 02:07:02 2026 GMT Not After : May 2 02:12:02 2027 GMT Subject: CN=AB43DC7CA0422FA7BD4766F7C00669DF0FBD4CF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:78:02:57:82:57:29:58:2e:d9:1e:b4:46: 1c:55:28:68:14:37:00:16:eb:72:1f:67:24:3f:ca: f5:64:ec:52:61:27:ff:a8:e2:3a:79:19:f7:59:cc: 94:5c:09:2f:c5:a4:92:c6:1d:aa:b7:b5:c9:4f:b5: 62:25:5f:a4:22:74:33:ea:9f:73:fc:1e:00:4f:1b: 6b:5c:58:b5:0c:5a:b9:b4:dc:34:f9:72:25:03:e4: 0a:c5:98:7a:2d:6c:4f:53:a2:dc:20:4b:e0:a4:ae: 3c:32:02:3d:44:27:1c:73:54:69:62:3c:07:71:50: ff:d6:7b:c7:90:6b:d4:ad:af:79:1c:39:22:44:8f: 23:db:50:f1:2d:5a:38:00:92:1f:5e:24:33:a3:5a: 3d:24:0c:55:8e:07:5b:5b:c6:48:e0:a9:f4:d7:ec: 94:a7:0c:0f:0f:99:3e:4b:eb:20:60:75:84:2e:ac: 8a:78:af:a2:3c:63:90:76:4b:2e:94:ef:57:5c:f8: 60:16:32:81:c0:f2:73:e0:16:06:5b:d5:f1:0b:63: be:e2:3a:54:c9:31:a9:57:e3:0a:ac:15:45:91:a8: 71:c1:28:a5:3c:9e:30:c6:30:cc:50:a8:c7:f5:fc: 2a:5b:82:ee:3b:db:1c:d9:09:f2:4d:2e:62:47:38: df:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:43:DC:7C:A0:42:2F:A7:BD:47:66:F7:C0:06:69:DF:0F:BD:4C:F9 X509v3 Authority Key Identifier: keyid:B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.170.0/24 Signature Algorithm: sha256WithRSAEncryption 30:e0:02:25:05:6b:cc:48:70:85:2a:7d:fe:91:ca:0c:b0:19: 99:4e:31:91:e3:47:a0:4b:12:c4:1b:a4:3f:20:7f:51:0d:ed: ac:0f:c4:f1:3c:c0:b8:ed:7b:db:1c:f6:f0:2d:1f:1f:e0:6a: 32:25:01:dc:ea:22:3e:59:6e:90:e3:3b:23:ae:73:5c:17:83: 2e:9c:1f:3e:1b:0b:45:04:c6:18:a4:3a:d7:dc:72:17:7e:70: 9f:ae:bb:1e:40:c6:74:24:06:5b:22:57:5d:08:2f:32:d8:12: 47:52:88:5f:d2:5e:af:fc:c7:7e:11:dd:f9:61:74:85:87:8a: 5c:bb:6a:18:ea:34:b4:9c:18:c5:d5:1f:0c:0c:8e:35:0d:04: 25:6b:ba:b7:af:06:69:d3:e9:4f:cd:18:6b:fb:5e:30:b9:50: f6:c7:dd:e1:51:c6:68:c1:da:35:39:13:80:94:6e:d3:44:ee: 3d:5b:30:3e:b8:99:49:fa:8c:df:ec:5c:68:57:23:2f:5d:1a: ed:e7:06:cc:58:6c:1c:d2:45:a2:fc:cc:f5:ec:a3:55:08:9d: dc:5c:04:4a:af:72:4b:21:36:46:8e:bf:c2:4e:9a:da:2a:03: 74:17:29:a4:48:a3:66:be:75:21:e2:ec:86:bd:18:db:fe:6d: 35:c9:71:9f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJAjSS1FTH7iVF/L0J3Dk3qsgZFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJG MTMzNzE2QTAeFw0yNjA1MDMwMjA3MDJaFw0yNzA1MDIwMjEyMDJaMDMxMTAvBgNV BAMTKEFCNDNEQzdDQTA0MjJGQTdCRDQ3NjZGN0MwMDY2OURGMEZCRDRDRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzHgCV4JXKVgu2R60RhxVKGgU NwAW63IfZyQ/yvVk7FJhJ/+o4jp5GfdZzJRcCS/FpJLGHaq3tclPtWIlX6QidDPq n3P8HgBPG2tcWLUMWrm03DT5ciUD5ArFmHotbE9TotwgS+CkrjwyAj1EJxxzVGli PAdxUP/We8eQa9Str3kcOSJEjyPbUPEtWjgAkh9eJDOjWj0kDFWOB1tbxkjgqfTX 7JSnDA8PmT5L6yBgdYQurIp4r6I8Y5B2Sy6U71dc+GAWMoHA8nPgFgZb1fELY77i OlTJMalX4wqsFUWRqHHBKKU8njDGMMxQqMf1/Cpbgu472xzZCfJNLmJHON/lAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUq0PcfKBCL6e9R2b3wAZp3w+9TPkwHwYDVR0j BBgwFoAUuDWodGOEdJvzuae67DCh6/EzcWowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDZiZWRmM2EtZDdkMS00OWE2LTkzZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2 Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJGMTMzNzE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODM1QTg3NDYzODQ3NDlCRjNCOUE3QkFFQzMwQTFFQkYxMzM3 MTZBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2YmVkZjNhLWQ3ZDEtNDlhNi05 M2VkLWIyNzdmMWY3YTZlYi8wLzMxMzAzMzJlMzEzNjM3MmUzMTM3MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM4MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnp6owDQYJ KoZIhvcNAQELBQADggEBADDgAiUFa8xIcIUqff6RygywGZlOMZHjR6BLEsQbpD8g f1EN7awPxPE8wLjte9sc9vAtHx/gajIlAdzqIj5ZbpDjOyOuc1wXgy6cHz4bC0UE xhikOtfcchd+cJ+uux5AxnQkBlsiV10ILzLYEkdSiF/SXq/8x34R3flhdIWHily7 ahjqNLScGMXVHwwMjjUNBCVrurevBmnT6U/NGGv7XjC5UPbH3eFRxmjB2jU5E4CU btNE7j1bMD64mUn6jN/sXGhXIy9dGu3nBsxYbBzSRaL8zPXso1UIndxcBEqvcksh NkaOv8JOmtoqA3QXKaRIo2a+dSHi7Ia9GNv+bTXJcZ8= -----END CERTIFICATE-----Generated at Wed May 13 04:54:08 2026 by rpki-client