$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa File: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (raw, json) Hash identifier: mI5pJthlZy5JwJ1aBsKt5QmSIIpmL45EJ55YLJWzCQg= Subject key identifier: CB:AB:FA:0E:B2:78:4D:88:87:64:59:8A:D7:51:74:16:E0:D8:1C:3C Certificate issuer: /CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274 Certificate serial: 5BA7E7505DEB8821FDCC830200D53295FB323C89 Authority key identifier: AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa Signing time: Sun 03 May 2026 02:12:28 +0000 ROA not before: Sun 03 May 2026 02:07:28 +0000 ROA not after: Sun 02 May 2027 02:12:28 +0000 asID: 150941 IP address blocks: 103.101.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a7:e7:50:5d:eb:88:21:fd:cc:83:02:00:d5:32:95:fb:32:3c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274 Validity Not Before: May 3 02:07:28 2026 GMT Not After : May 2 02:12:28 2027 GMT Subject: CN=CBABFA0EB2784D888764598AD7517416E0D81C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:91:8d:86:7a:4e:ba:00:8e:33:2e:14:a8: cb:23:8e:81:23:3b:d5:4f:e9:30:e8:cc:2a:93:a7: dc:9b:e7:02:b6:18:16:cf:39:29:e1:10:3c:17:bf: 38:23:37:00:58:fa:e3:ad:a6:19:c6:e3:fa:40:32: bd:1d:ef:86:6e:91:0d:a4:ce:d8:5c:b4:40:c9:18: 88:00:4a:cf:da:f2:f0:df:b9:c6:a6:22:93:30:b5: 15:e4:04:ce:b8:03:38:cf:e9:b8:e8:f2:e2:e0:43: bb:ac:b9:d4:ea:2f:b0:e4:f6:b3:50:e7:4d:20:bb: ea:13:eb:5a:5e:8d:38:d4:f4:24:08:2c:24:f3:40: 57:83:44:43:4b:8a:a5:b6:8a:30:05:a1:bd:35:c8: 51:58:60:20:28:99:92:4a:80:05:1b:9e:a6:6b:40: c1:52:8a:b2:d9:3d:06:73:10:5c:48:cf:2e:c2:05: c9:d4:48:37:0b:bc:d8:1f:e3:4b:9e:81:46:24:b0: 56:12:37:a0:a5:02:1c:44:37:11:df:ec:f0:7d:85: a7:fa:94:b8:72:fc:34:87:c4:28:da:9f:41:e8:8a: 75:57:05:6d:84:09:b1:34:0f:a6:88:ce:df:4b:d2: a8:8d:a3:f5:2c:fd:e9:d8:7d:c3:90:c9:96:23:30: 1e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AB:FA:0E:B2:78:4D:88:87:64:59:8A:D7:51:74:16:E0:D8:1C:3C X509v3 Authority Key Identifier: keyid:AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.217.0/24 Signature Algorithm: sha256WithRSAEncryption 31:dd:9e:63:b4:1e:7d:c0:d7:a8:76:42:0e:cf:90:ed:e1:31: 76:fe:fa:83:aa:b7:7c:6d:fe:fb:01:1b:ae:c2:f1:d3:06:db: dc:8c:82:f8:f4:b0:d2:2a:42:f5:ab:a8:47:cb:2c:86:0e:dd: ad:21:8e:bb:08:7f:54:24:85:11:e7:bc:ef:32:53:81:e1:42: 29:8b:df:1d:d9:44:89:76:f8:9b:5a:c5:96:a6:50:f2:34:27: 5c:4a:70:c6:cf:86:ac:3e:0f:47:cc:3f:c5:c8:09:55:f9:8a: 9a:91:35:c2:2b:ff:6f:d8:76:c6:e4:cd:d5:39:ab:5e:0a:df: 7a:84:f3:c4:cc:a4:85:6c:63:02:3c:4c:b2:1c:e6:ac:d0:73: 59:0d:cd:bb:0b:cf:6b:9e:92:c6:3a:ff:aa:5b:39:8f:50:9d: ea:53:32:89:86:fe:47:6f:a7:65:bb:80:4f:48:af:28:f8:3d: 85:57:e2:7f:8d:5f:89:fa:0e:04:a7:4d:c0:7d:00:d9:29:6f: 35:7f:00:e3:90:52:28:25:8f:36:d5:ae:a4:0b:5a:7f:4a:0f: 74:76:7e:a0:59:1a:66:d0:da:33:94:89:21:c0:f5:d6:e2:30: e4:5b:42:b7:c4:1e:98:cd:0e:7c:b8:a0:3b:45:e6:b1:56:0c: 9a:7f:e9:08 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUW6fnUF3riCH9zIMCANUylfsyPIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxRDMxRTFDMEVCQUYwNTQ5MzZFRUUzMTAwMUFGRUJE ODkwODI3NDAeFw0yNjA1MDMwMjA3MjhaFw0yNzA1MDIwMjEyMjhaMDMxMTAvBgNV BAMTKENCQUJGQTBFQjI3ODREODg4NzY0NTk4QUQ3NTE3NDE2RTBEODFDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QZGNhnpOugCOMy4UqMsjjoEj O9VP6TDozCqTp9yb5wK2GBbPOSnhEDwXvzgjNwBY+uOtphnG4/pAMr0d74ZukQ2k zthctEDJGIgASs/a8vDfucamIpMwtRXkBM64AzjP6bjo8uLgQ7usudTqL7Dk9rNQ 500gu+oT61pejTjU9CQILCTzQFeDRENLiqW2ijAFob01yFFYYCAomZJKgAUbnqZr QMFSirLZPQZzEFxIzy7CBcnUSDcLvNgf40uegUYksFYSN6ClAhxENxHf7PB9haf6 lLhy/DSHxCjan0HoinVXBW2ECbE0D6aIzt9L0qiNo/Us/enYfcOQyZYjMB7fAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUy6v6DrJ4TYiHZFmK11F0FuDYHDwwHwYDVR0j BBgwFoAUrB0x4cDrrwVJNu7jEAGv69iQgnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGExZjM5NzEtM2E0Ny00NTVkLWFiMzAtZTdjMjNiNjFiOWYyLzAvQUMxRDMxRTFD MEVCQUYwNTQ5MzZFRUUzMTAwMUFGRUJEODkwODI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzFEMzFFMUMwRUJBRjA1NDkzNkVFRTMxMDAxQUZFQkQ4OTA4 Mjc0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBhMWYzOTcxLTNhNDctNDU1ZC1h YjMwLWU3YzIzYjYxYjlmMi8wLzMxMzAzMzJlMzEzMDMxMmUzMjMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZdkwDQYJ KoZIhvcNAQELBQADggEBADHdnmO0Hn3A16h2Qg7PkO3hMXb++oOqt3xt/vsBG67C 8dMG29yMgvj0sNIqQvWrqEfLLIYO3a0hjrsIf1QkhRHnvO8yU4HhQimL3x3ZRIl2 +JtaxZamUPI0J1xKcMbPhqw+D0fMP8XICVX5ipqRNcIr/2/YdsbkzdU5q14K33qE 88TMpIVsYwI8TLIc5qzQc1kNzbsLz2ueksY6/6pbOY9QnepTMomG/kdvp2W7gE9I ryj4PYVX4n+NX4n6DgSnTcB9ANkpbzV/AOOQUigljzbVrqQLWn9KD3R2fqBZGmbQ 2jOUiSHA9dbiMORbQrfEHpjNDny4oDtF5rFWDJp/6Qg= -----END CERTIFICATE-----Generated at Wed May 13 03:48:41 2026 by rpki-client