$ rpki-client -vvf rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa File: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (raw, json) Hash identifier: kfj+LC1/46I9BKuoHuEKXzZ9F4a4GvOD3Kj38WDtLhU= Subject key identifier: EB:6A:7D:20:E3:97:2A:39:40:6B:2D:38:1E:12:FC:B7:7E:A4:F1:D0 Certificate issuer: /CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739 Certificate serial: 44C01BA128EAF92D894097D8C1410C72B20EB52E Authority key identifier: 43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa Signing time: Sun 03 May 2026 02:12:25 +0000 ROA not before: Sun 03 May 2026 02:07:25 +0000 ROA not after: Sun 02 May 2027 02:12:25 +0000 asID: 140389 IP address blocks: 103.179.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c0:1b:a1:28:ea:f9:2d:89:40:97:d8:c1:41:0c:72:b2:0e:b5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739 Validity Not Before: May 3 02:07:25 2026 GMT Not After : May 2 02:12:25 2027 GMT Subject: CN=EB6A7D20E3972A39406B2D381E12FCB77EA4F1D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8c:17:b5:20:b2:f8:8b:5d:bf:87:32:6e:f0: 23:15:61:52:5f:68:12:a4:dd:82:32:8c:92:55:1d: c9:f5:48:f8:fd:08:57:84:70:d6:3c:b4:d7:40:19: 93:e6:83:08:ef:14:4a:e0:38:37:f8:91:11:93:d5: 14:81:a6:7f:26:45:4d:8b:f1:71:3e:10:45:1a:3a: 3a:be:25:15:49:0d:38:dc:aa:8f:47:d5:07:b0:be: c4:dc:b1:f3:c7:a7:59:80:9a:e9:c5:33:ea:aa:cc: 44:fd:17:1b:1a:91:7a:ad:ec:07:b0:31:5a:bd:29: 58:d7:15:cf:36:37:9e:ef:66:a6:52:f2:89:31:47: 89:49:5b:fd:2c:e5:15:51:21:bb:3e:7b:ec:fe:a3: 3f:76:a0:ad:6d:53:67:e0:e4:b0:bb:e0:54:e2:ff: f5:78:5f:30:28:37:e8:38:42:0e:69:09:a1:9d:cf: 48:cc:55:c4:5d:04:ce:73:0e:7b:42:36:3a:a3:97: 06:84:72:6d:82:ab:8e:2c:ea:03:ad:dd:ca:ef:b6: 1e:57:3b:73:37:25:9f:13:b6:d4:9f:fa:6a:55:10: 79:76:ba:6b:98:7b:a8:6b:45:a5:d2:a1:09:cf:f7: 1a:13:21:29:8b:86:54:9a:90:5f:d4:9b:97:47:77: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6A:7D:20:E3:97:2A:39:40:6B:2D:38:1E:12:FC:B7:7E:A4:F1:D0 X509v3 Authority Key Identifier: keyid:43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.86.0/23 Signature Algorithm: sha256WithRSAEncryption 56:37:00:1f:72:56:49:28:24:bf:b8:5c:3f:63:dc:b8:0c:25: a9:de:d5:22:36:92:c2:db:d0:86:48:ea:a5:fb:5d:1c:89:0b: 3b:ea:b6:74:6a:29:cc:79:e4:be:e1:68:2e:ed:3e:06:0a:63: f9:74:fb:5c:c6:8a:fa:5b:54:60:43:a7:32:09:54:e5:a0:1c: 33:7b:c7:a5:b3:74:be:4f:ef:22:9e:76:fb:89:b6:8a:bd:fd: 49:2a:bf:ec:f6:6a:8e:cb:d5:20:20:5f:bf:7f:72:9b:ef:9c: a9:e7:b0:95:7c:03:c7:ec:e4:28:f3:de:e7:5f:63:37:4b:42: d2:9d:f6:63:c3:07:9c:b3:25:f6:cd:44:7b:92:c0:76:9d:a8: 89:48:0d:4c:19:58:5d:2e:ac:13:4f:29:71:48:ad:78:ac:c0: af:e3:4d:c5:aa:30:cb:83:a1:a0:a6:0b:e7:66:74:2c:16:f6: 94:f9:f8:4d:dc:41:bb:46:46:e5:94:00:b9:1f:b8:00:5e:24: ab:ca:e6:23:fa:b5:90:e1:84:59:fe:4c:6d:52:59:f1:60:99: c5:3f:43:85:43:1f:2d:af:b6:29:25:db:70:c5:7e:39:72:1f: 3e:c3:40:05:f9:92:e3:26:94:6d:6d:d9:2f:9e:37:b2:01:c0: fc:fd:b1:ea -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURMAboSjq+S2JQJfYwUEMcrIOtS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNCNUJGMjkzQkRCNDA2MkU5RTE3RDhBN0ZGOUQ3QURB QTRDNTczOTAeFw0yNjA1MDMwMjA3MjVaFw0yNzA1MDIwMjEyMjVaMDMxMTAvBgNV BAMTKEVCNkE3RDIwRTM5NzJBMzk0MDZCMkQzODFFMTJGQ0I3N0VBNEYxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNjBe1ILL4i12/hzJu8CMVYVJf aBKk3YIyjJJVHcn1SPj9CFeEcNY8tNdAGZPmgwjvFErgODf4kRGT1RSBpn8mRU2L 8XE+EEUaOjq+JRVJDTjcqo9H1QewvsTcsfPHp1mAmunFM+qqzET9FxsakXqt7Aew MVq9KVjXFc82N57vZqZS8okxR4lJW/0s5RVRIbs+e+z+oz92oK1tU2fg5LC74FTi //V4XzAoN+g4Qg5pCaGdz0jMVcRdBM5zDntCNjqjlwaEcm2Cq44s6gOt3crvth5X O3M3JZ8TttSf+mpVEHl2umuYe6hrRaXSoQnP9xoTISmLhlSakF/Um5dHdy09AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU62p9IOOXKjlAay04HhL8t36k8dAwHwYDVR0j BBgwFoAUQ7W/KTvbQGLp4X2Kf/nXrapMVzkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhODg4OTctYzM4Ny00NzM1LWFjZDgtMWQxYzUzY2RlMjY0LzAvNDNCNUJGMjkz QkRCNDA2MkU5RTE3RDhBN0ZGOUQ3QURBQTRDNTczOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0I1QkYyOTNCREI0MDYyRTlFMTdEOEE3RkY5RDdBREFBNEM1 NzM5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA5YTg4ODk3LWMzODctNDczNS1h Y2Q4LTFkMWM1M2NkZTI2NC8wLzMxMzAzMzJlMzEzNzM5MmUzODM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDMwMzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7NWMA0GCSqG SIb3DQEBCwUAA4IBAQBWNwAfclZJKCS/uFw/Y9y4DCWp3tUiNpLC29CGSOql+10c iQs76rZ0ainMeeS+4Wgu7T4GCmP5dPtcxor6W1RgQ6cyCVTloBwze8els3S+T+8i nnb7ibaKvf1JKr/s9mqOy9UgIF+/f3Kb75yp57CVfAPH7OQo897nX2M3S0LSnfZj wwecsyX2zUR7ksB2naiJSA1MGVhdLqwTTylxSK14rMCv403FqjDLg6GgpgvnZnQs FvaU+fhN3EG7RkbllAC5H7gAXiSryuYj+rWQ4YRZ/kxtUlnxYJnFP0OFQx8tr7Yp JdtwxX45ch8+w0AF+ZLjJpRtbdkvnjeyAcD8/bHq -----END CERTIFICATE-----Generated at Wed May 13 13:03:35 2026 by rpki-client