$ rpki-client -vvf rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa File: 3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (raw, json) Hash identifier: hD2c2fRRpw85nnii8gI6DgDgE1ceI1WBb5qAu0bq2pA= Subject key identifier: D0:C1:43:E0:AB:1C:A1:C5:F5:F9:0A:A5:5C:C0:DD:A5:AA:65:0D:75 Certificate issuer: /CN=143B0FF235C900164875105AD0C37F3C7DB28151 Certificate serial: 3837355B01034D8ED0EA585932FD37BF6410EEBA Authority key identifier: 14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa Signing time: Sun 03 May 2026 02:14:07 +0000 ROA not before: Sun 03 May 2026 02:09:07 +0000 ROA not after: Sun 02 May 2027 02:14:07 +0000 asID: 135451 IP address blocks: 103.96.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:37:35:5b:01:03:4d:8e:d0:ea:58:59:32:fd:37:bf:64:10:ee:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143B0FF235C900164875105AD0C37F3C7DB28151 Validity Not Before: May 3 02:09:07 2026 GMT Not After : May 2 02:14:07 2027 GMT Subject: CN=D0C143E0AB1CA1C5F5F90AA55CC0DDA5AA650D75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:cd:f5:94:89:cf:ed:66:5c:3a:46:50:f4:45: 30:f8:66:aa:4a:fd:9c:75:91:ce:4c:fe:33:28:e0: 24:6b:f7:a3:b8:c3:90:50:78:91:91:0d:d5:2f:d5: af:54:42:50:ef:e5:ee:14:69:95:07:6c:b3:d5:01: 2e:0a:77:4c:bc:51:bb:51:96:0b:44:7f:d9:b3:88: 3e:c7:85:3d:7a:02:a3:4b:51:96:4a:4c:25:4a:71: 8f:ad:a8:21:5f:57:7a:8b:ac:7f:fe:8c:6a:04:8c: 00:21:d1:ce:4c:6e:4f:6c:ed:ad:05:42:f3:e6:68: 50:e0:64:7f:f5:0c:bb:eb:48:b7:98:75:1b:9f:f5: f9:46:06:fd:37:5b:e3:7c:97:d2:47:fc:1c:60:4b: c0:8b:b5:15:83:27:0f:f5:aa:4e:b6:19:6c:d5:44: d6:54:10:73:34:3a:02:ec:de:96:72:04:ea:7e:d0: c2:fc:36:1b:b9:c4:3e:55:5c:cf:ae:2e:da:70:b7: 24:39:14:fc:48:9e:59:e1:fb:ae:45:f4:18:3f:b2: a1:04:a3:10:18:f9:e4:4c:64:c1:45:c8:72:20:51: e0:05:6a:57:33:d7:6d:bb:18:fb:28:31:37:4c:bf: a3:eb:b2:53:06:1e:ec:9e:61:0e:25:35:76:7d:b4: 23:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C1:43:E0:AB:1C:A1:C5:F5:F9:0A:A5:5C:C0:DD:A5:AA:65:0D:75 X509v3 Authority Key Identifier: keyid:14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.116.0/24 Signature Algorithm: sha256WithRSAEncryption 43:93:84:f5:5e:25:9b:7a:23:a3:41:1a:81:ac:5a:35:d3:9e: 0b:d1:00:45:66:a5:14:f4:88:fc:72:6e:f5:ac:be:4c:61:8c: 2a:44:58:20:36:bf:33:3f:b4:cf:e1:40:ea:c7:c8:29:e2:fb: 89:67:40:7b:69:37:eb:f8:8c:44:65:b6:d3:51:99:47:1c:29: d9:31:5d:ee:11:31:f0:c5:47:b7:27:68:e1:6f:cb:91:b3:76: 32:0c:81:88:25:77:2f:8e:ee:7a:52:a5:a1:70:5c:96:50:01: 93:7f:ad:7d:11:5a:7d:8e:ed:6d:5c:11:f8:fe:9e:0c:2d:d7: 3e:dd:1d:b7:2e:ba:fe:1b:4a:f2:07:9a:da:74:2d:18:c9:c1: ad:29:79:b2:e4:a7:2b:97:1e:35:e9:64:e6:0a:a5:a1:f1:f6: 1b:3a:00:24:21:65:3e:18:b6:f3:68:fc:75:04:d2:05:ef:1a: a4:f3:10:04:4b:0d:4f:22:95:7d:82:00:3c:88:88:46:03:09: 3a:c6:b0:f8:d5:f0:94:f2:e6:3a:05:dd:04:4b:1f:58:3f:0f: 23:60:d5:e6:9f:3e:97:d8:b7:ab:ca:ca:a1:b3:ca:04:ab:67: 6c:90:ce:a6:a0:87:10:a9:d4:ce:df:49:a7:40:9b:53:46:01: c8:9d:06:c2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUODc1WwEDTY7Q6lhZMv03v2QQ7rowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQzQjBGRjIzNUM5MDAxNjQ4NzUxMDVBRDBDMzdGM0M3 REIyODE1MTAeFw0yNjA1MDMwMjA5MDdaFw0yNzA1MDIwMjE0MDdaMDMxMTAvBgNV BAMTKEQwQzE0M0UwQUIxQ0ExQzVGNUY5MEFBNTVDQzBEREE1QUE2NTBENzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwzfWUic/tZlw6RlD0RTD4ZqpK /Zx1kc5M/jMo4CRr96O4w5BQeJGRDdUv1a9UQlDv5e4UaZUHbLPVAS4Kd0y8UbtR lgtEf9mziD7HhT16AqNLUZZKTCVKcY+tqCFfV3qLrH/+jGoEjAAh0c5Mbk9s7a0F QvPmaFDgZH/1DLvrSLeYdRuf9flGBv03W+N8l9JH/BxgS8CLtRWDJw/1qk62GWzV RNZUEHM0OgLs3pZyBOp+0ML8Nhu5xD5VXM+uLtpwtyQ5FPxInlnh+65F9Bg/sqEE oxAY+eRMZMFFyHIgUeAFalcz1227GPsoMTdMv6PrslMGHuyeYQ4lNXZ9tCNXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0MFD4KscocX1+QqlXMDdpaplDXUwHwYDVR0j BBgwFoAUFDsP8jXJABZIdRBa0MN/PH2ygVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTFjMWQ1NmUtMTVjNi00YjY1LWE5YTgtZjkwYWQ2ZmJhMDkwLzAvMTQzQjBGRjIz NUM5MDAxNjQ4NzUxMDVBRDBDMzdGM0M3REIyODE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDNCMEZGMjM1QzkwMDE2NDg3NTEwNUFEMEMzN0YzQzdEQjI4 MTUxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzExYzFkNTZlLTE1YzYtNGI2NS1h OWE4LWY5MGFkNmZiYTA5MC8wLzMxMzAzMzJlMzkzNjJlMzEzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2B0MA0GCSqG SIb3DQEBCwUAA4IBAQBDk4T1XiWbeiOjQRqBrFo1054L0QBFZqUU9Ij8cm71rL5M YYwqRFggNr8zP7TP4UDqx8gp4vuJZ0B7aTfr+IxEZbbTUZlHHCnZMV3uETHwxUe3 J2jhb8uRs3YyDIGIJXcvju56UqWhcFyWUAGTf619EVp9ju1tXBH4/p4MLdc+3R23 Lrr+G0ryB5radC0YycGtKXmy5Kcrlx416WTmCqWh8fYbOgAkIWU+GLbzaPx1BNIF 7xqk8xAESw1PIpV9ggA8iIhGAwk6xrD41fCU8uY6Bd0ESx9YPw8jYNXmnz6X2Ler ysqhs8oEq2dskM6moIcQqdTO30mnQJtTRgHInQbC -----END CERTIFICATE-----Generated at Wed May 13 13:02:13 2026 by rpki-client