$ rpki-client -vvf rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa File: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (raw, json) Hash identifier: nx+/lh2jtsh9jrUTGm6/+XC8mwH+G/IX3/FaclbP58w= Subject key identifier: 44:6A:F6:5E:0F:01:E3:7A:D2:49:37:7D:54:15:31:49:F1:9A:00:6D Certificate issuer: /CN=42955E8C3DC21355BF059E242A225C672E72495D Certificate serial: 04188F82C4BD1931A62CEB625D3D77037E20920A Authority key identifier: 42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa Signing time: Sun 03 May 2026 02:14:01 +0000 ROA not before: Sun 03 May 2026 02:09:01 +0000 ROA not after: Sun 02 May 2027 02:14:01 +0000 asID: 141461 IP address blocks: 103.111.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:18:8f:82:c4:bd:19:31:a6:2c:eb:62:5d:3d:77:03:7e:20:92:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42955E8C3DC21355BF059E242A225C672E72495D Validity Not Before: May 3 02:09:01 2026 GMT Not After : May 2 02:14:01 2027 GMT Subject: CN=446AF65E0F01E37AD249377D54153149F19A006D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:7a:cc:23:b4:91:aa:c5:17:7a:f1:b9:91: a4:a9:e6:d4:67:13:df:52:a4:c7:4e:1f:25:1b:fc: 81:74:85:bb:79:23:29:0b:b7:31:50:70:70:e7:70: cd:45:c8:bf:4a:f0:9f:0c:a4:34:4d:98:9d:e6:96: 44:07:67:f1:5c:0e:0c:13:9c:07:1c:25:63:8c:ee: 93:1c:28:18:97:20:99:9e:29:92:06:48:e1:6a:9e: 7d:9a:28:e8:30:a4:3f:53:ad:1d:ff:21:7b:53:0b: 45:4b:96:b0:f3:95:98:15:f4:77:73:57:ab:b7:ba: 60:5d:15:53:96:79:f0:79:a1:0d:0f:89:15:37:6f: 2e:5e:f5:84:72:f7:4e:7a:92:7c:8d:13:eb:ba:b5: ab:aa:06:11:df:32:bd:1d:69:5e:07:71:5d:df:24: f1:0f:6a:c2:1a:9b:3b:7b:2d:09:1e:e1:6e:c5:f0: 92:c5:83:20:3d:92:07:64:7f:9a:79:32:69:bf:f8: 51:9a:c9:3d:31:88:0f:f8:47:64:9a:1d:4b:e1:bc: 4b:c0:fb:8d:39:8e:66:4e:ba:76:06:48:9b:47:ef: 64:ab:0e:6f:39:52:8b:cc:e1:c9:e0:32:08:fb:af: 70:47:d5:56:cb:7e:3b:27:22:f6:e3:25:e6:dc:d8: 11:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6A:F6:5E:0F:01:E3:7A:D2:49:37:7D:54:15:31:49:F1:9A:00:6D X509v3 Authority Key Identifier: keyid:42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.141.0/24 Signature Algorithm: sha256WithRSAEncryption 80:a8:b6:f2:04:96:49:d1:c9:a7:18:a6:5e:92:f3:36:ff:1a: 26:7d:58:2f:36:1c:0f:00:ca:55:cc:49:20:bd:ec:65:55:b2: 88:42:20:2c:74:23:0d:4e:5f:d3:af:3c:0a:bf:b2:a7:3a:c8: 7f:39:23:58:ef:a0:0c:55:0a:5d:0d:4a:31:7a:9a:ce:59:58: 41:89:d9:20:fa:ee:ca:1c:51:91:ad:c9:c0:da:e5:41:c7:7c: 20:f3:d7:c5:83:bc:8f:04:de:0f:a9:a7:61:fc:98:a8:a5:d6: 26:1f:ba:20:24:1c:0f:96:b0:60:5f:4e:3a:02:f2:51:5d:93: c5:9a:26:29:b5:3f:ac:dc:11:7d:97:00:72:16:be:29:82:7e: b6:cc:0c:2c:56:e5:dc:80:ff:6f:7f:74:86:07:ae:49:f0:2d: b1:33:59:93:57:bb:ed:37:29:0e:3d:35:aa:b0:1d:28:03:25: f3:a8:1f:f8:15:41:f7:b5:e4:e6:78:23:d8:94:3a:6e:90:00: e3:6f:c0:77:0a:77:64:93:6b:30:41:f3:73:8f:10:58:7f:8b: 89:ad:15:d0:25:14:33:41:e0:3c:db:69:4b:02:16:d4:ff:11: ee:fe:8e:bc:98:cf:87:33:93:b0:26:6f:3d:40:dc:4b:9e:df: 85:ee:31:98 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBBiPgsS9GTGmLOtiXT13A34gkgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVDNjcy RTcyNDk1RDAeFw0yNjA1MDMwMjA5MDFaFw0yNzA1MDIwMjE0MDFaMDMxMTAvBgNV BAMTKDQ0NkFGNjVFMEYwMUUzN0FEMjQ5Mzc3RDU0MTUzMTQ5RjE5QTAwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3HrMI7SRqsUXevG5kaSp5tRn E99SpMdOHyUb/IF0hbt5IykLtzFQcHDncM1FyL9K8J8MpDRNmJ3mlkQHZ/FcDgwT nAccJWOM7pMcKBiXIJmeKZIGSOFqnn2aKOgwpD9TrR3/IXtTC0VLlrDzlZgV9Hdz V6u3umBdFVOWefB5oQ0PiRU3by5e9YRy9056knyNE+u6tauqBhHfMr0daV4HcV3f JPEPasIamzt7LQke4W7F8JLFgyA9kgdkf5p5Mmm/+FGayT0xiA/4R2SaHUvhvEvA +405jmZOunYGSJtH72SrDm85UovM4cngMgj7r3BH1VbLfjsnIvbjJebc2BHjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQURGr2Xg8B43rSSTd9VBUxSfGaAG0wHwYDVR0j BBgwFoAUQpVejD3CE1W/BZ4kKiJcZy5ySV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTEyN2VhZmQtYTY3NC00NDM3LWFiZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMz REMyMTM1NUJGMDU5RTI0MkEyMjVDNjcyRTcyNDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjk1NUU4QzNEQzIxMzU1QkYwNTlFMjQyQTIyNUM2NzJFNzI0 OTVELmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzExMjdlYWZkLWE2NzQtNDQzNy1h YmYxLWU1NTBkZWMxMzdmYS8wLzMxMzAzMzJlMzEzMTMxMmUzMTM0MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNDM2MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnb40wDQYJ KoZIhvcNAQELBQADggEBAICotvIElknRyacYpl6S8zb/GiZ9WC82HA8AylXMSSC9 7GVVsohCICx0Iw1OX9OvPAq/sqc6yH85I1jvoAxVCl0NSjF6ms5ZWEGJ2SD67soc UZGtycDa5UHHfCDz18WDvI8E3g+pp2H8mKil1iYfuiAkHA+WsGBfTjoC8lFdk8Wa Jim1P6zcEX2XAHIWvimCfrbMDCxW5dyA/29/dIYHrknwLbEzWZNXu+03KQ49Naqw HSgDJfOoH/gVQfe15OZ4I9iUOm6QAONvwHcKd2STazBB83OPEFh/i4mtFdAlFDNB 4DzbaUsCFtT/Ee7+jryYz4czk7Ambz1A3Eue34XuMZg= -----END CERTIFICATE-----Generated at Wed May 13 02:58:50 2026 by rpki-client