$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa File: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (raw, json) Hash identifier: pahHbmXTulV++MGHGhEL8jSNz3xJ/1KdhQdlxBhfIw4= Subject key identifier: 9A:CC:75:2E:0A:66:7A:03:12:50:FE:EF:ED:E0:DC:23:4E:ED:FD:AF Certificate issuer: /CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Certificate serial: 06FAE42EBCCC1191F8E141460B30275D7F3EA89C Authority key identifier: A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa Signing time: Sun 03 May 2026 02:12:45 +0000 ROA not before: Sun 03 May 2026 02:07:45 +0000 ROA not after: Sun 02 May 2027 02:12:45 +0000 asID: 141673 IP address blocks: 103.163.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:fa:e4:2e:bc:cc:11:91:f8:e1:41:46:0b:30:27:5d:7f:3e:a8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Validity Not Before: May 3 02:07:45 2026 GMT Not After : May 2 02:12:45 2027 GMT Subject: CN=9ACC752E0A667A031250FEEFEDE0DC234EEDFDAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:d1:dd:6a:e2:43:bf:9e:89:0e:79:c4:ef: 36:c0:5f:d5:77:2a:c5:f8:2e:d1:aa:52:83:06:94: bc:d0:3e:11:df:86:09:6d:79:c2:5c:ce:ed:94:dd: c8:30:4e:29:6b:d9:3d:54:67:e0:e8:f0:6d:ad:58: e8:78:3c:ac:90:7c:b2:0c:0d:bc:4b:c8:50:ba:bb: 6e:62:aa:64:d8:f0:cd:dd:8e:3b:71:f2:8d:14:ae: 52:49:38:b9:18:36:af:9b:5c:05:e6:a3:90:c2:4f: 82:51:b3:6d:56:41:3d:fe:1d:3b:b7:1b:8e:0c:b9: 33:34:4e:ec:91:b6:ca:c9:62:f0:7d:d9:77:99:88: ad:88:a5:d9:9e:e3:18:fa:7b:b7:2d:f1:97:cf:46: 0f:d5:fe:63:7f:f1:30:07:7c:91:ec:93:48:75:65: 1a:9f:d5:55:5d:10:15:41:b2:7c:08:0e:c1:a9:5b: d5:30:7c:cd:86:4b:d8:3e:e8:db:08:9d:6b:7e:a1: 0c:a0:86:70:d3:a0:a0:37:31:0d:52:13:e1:71:1b: 35:35:9f:d1:3f:e8:e5:d0:b0:63:14:64:b4:5f:c9: 3f:c6:0b:49:b5:92:0e:45:5e:62:a0:ed:be:04:e1: 11:3b:ec:20:31:08:d8:9b:25:0a:35:48:85:be:3b: da:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CC:75:2E:0A:66:7A:03:12:50:FE:EF:ED:E0:DC:23:4E:ED:FD:AF X509v3 Authority Key Identifier: keyid:A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.102.0/23 Signature Algorithm: sha256WithRSAEncryption 87:a4:2c:55:7c:7b:41:e8:45:d5:7d:a4:32:c3:5c:80:d7:1c: 47:00:4c:aa:d2:3e:1a:ed:91:10:7b:37:32:ad:98:e1:9b:ab: c1:9b:0a:d7:e8:a7:50:01:18:25:e0:39:d9:70:3a:a7:de:14: 41:23:b6:ea:e1:d8:d8:fa:4a:08:91:01:9a:8c:c4:92:55:26: d9:e4:7e:4e:8a:77:a2:64:75:24:f0:71:10:aa:fc:e2:de:b2: 05:2c:06:b4:2d:fa:04:88:0c:64:bb:09:d1:94:ee:c6:0c:05: 65:7f:a6:f6:64:2b:16:c1:76:cd:05:36:05:7d:48:77:ff:e4: 7b:5e:1e:05:76:76:96:33:3b:89:70:09:4d:1c:d1:30:ec:d3: ca:3c:45:fa:fd:86:06:b4:22:36:13:99:42:cb:51:ef:db:9a: 4c:53:41:ed:3f:6a:86:2c:ea:6e:70:6f:e1:b8:e8:a0:03:79: 5c:84:86:0d:fb:2d:4d:1a:71:98:c3:44:d6:d4:ed:bd:02:56: c7:c6:19:ad:e2:2b:90:13:6f:32:bc:64:1f:ff:26:2a:9f:e3: 32:f1:71:0c:12:be:19:44:7c:d8:04:22:38:33:e9:bc:e5:2d: cb:c5:06:93:42:0a:1f:5a:9b:0c:95:56:a0:18:e7:3f:a0:84: fb:82:d4:8d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBvrkLrzMEZH44UFGCzAnXX8+qJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFFREYx MUQ0NzhDRjAeFw0yNjA1MDMwMjA3NDVaFw0yNzA1MDIwMjEyNDVaMDMxMTAvBgNV BAMTKDlBQ0M3NTJFMEE2NjdBMDMxMjUwRkVFRkVERTBEQzIzNEVFREZEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbWtHdauJDv56JDnnE7zbAX9V3 KsX4LtGqUoMGlLzQPhHfhgltecJczu2U3cgwTilr2T1UZ+Do8G2tWOh4PKyQfLIM DbxLyFC6u25iqmTY8M3djjtx8o0UrlJJOLkYNq+bXAXmo5DCT4JRs21WQT3+HTu3 G44MuTM0TuyRtsrJYvB92XeZiK2Ipdme4xj6e7ct8ZfPRg/V/mN/8TAHfJHsk0h1 ZRqf1VVdEBVBsnwIDsGpW9UwfM2GS9g+6NsInWt+oQyghnDToKA3MQ1SE+FxGzU1 n9E/6OXQsGMUZLRfyT/GC0m1kg5FXmKg7b4E4RE77CAxCNibJQo1SIW+O9o5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUmsx1LgpmegMSUP7v7eDcI07t/a8wHwYDVR0j BBgwFoAUqLQpDbHVABFykYWNrxse3xHUeM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMxZTQ5YWItNTBjYS00YjNlLTgyM2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERC MUQ1MDAxMTcyOTE4NThEQUYxQjFFREYxMUQ0NzhDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI0MjkwREIxRDUwMDExNzI5MTg1OERBRjFCMUVERjExRDQ3 OENGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBjMWU0OWFiLTUwY2EtNGIzZS04 MjNjLThiM2QzMWJhODVmMi8wLzMxMzAzMzJlMzEzNjMzMmUzMTMwMzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFno2YwDQYJ KoZIhvcNAQELBQADggEBAIekLFV8e0HoRdV9pDLDXIDXHEcATKrSPhrtkRB7NzKt mOGbq8GbCtfop1ABGCXgOdlwOqfeFEEjturh2Nj6SgiRAZqMxJJVJtnkfk6Kd6Jk dSTwcRCq/OLesgUsBrQt+gSIDGS7CdGU7sYMBWV/pvZkKxbBds0FNgV9SHf/5Hte HgV2dpYzO4lwCU0c0TDs08o8Rfr9hga0IjYTmULLUe/bmkxTQe0/aoYs6m5wb+G4 6KADeVyEhg37LU0acZjDRNbU7b0CVsfGGa3iK5ATbzK8ZB//Jiqf4zLxcQwSvhlE fNgEIjgz6bzlLcvFBpNCCh9amwyVVqAY5z+ghPuC1I0= -----END CERTIFICATE-----Generated at Wed May 13 03:58:44 2026 by rpki-client