$ rpki-client -vvf rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa File: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (raw, json) Hash identifier: JeyiXx4erlba3GA8MtFHqgBMpzij5IWYDmBP3qqgmrQ= Subject key identifier: 5A:D8:F7:23:CD:59:8E:A8:2E:CB:0F:5D:AC:A7:9C:B8:FB:81:FA:ED Certificate issuer: /CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Certificate serial: 21815C2D75E450A048961EEC48B493BEFB2957BD Authority key identifier: 4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa Signing time: Sun 03 May 2026 02:14:37 +0000 ROA not before: Sun 03 May 2026 02:09:37 +0000 ROA not after: Sun 02 May 2027 02:14:37 +0000 asID: 139986 IP address blocks: 103.148.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:81:5c:2d:75:e4:50:a0:48:96:1e:ec:48:b4:93:be:fb:29:57:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Validity Not Before: May 3 02:09:37 2026 GMT Not After : May 2 02:14:37 2027 GMT Subject: CN=5AD8F723CD598EA82ECB0F5DACA79CB8FB81FAED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:90:69:33:3d:bb:14:fd:1a:5a:aa:f6:d8:a0: 6e:1f:53:03:7d:67:eb:f3:a2:a4:3b:3f:80:6e:f1: c5:19:6c:0e:da:de:2c:06:9b:96:91:04:25:6e:28: da:cf:a2:70:42:2b:4b:86:ec:42:21:5a:e1:39:94: aa:b9:a7:df:41:43:17:41:a3:fc:47:1b:85:09:33: 0f:fe:29:d3:27:89:91:02:00:3a:8c:93:ed:d4:8d: d2:c9:4d:1e:49:1a:e0:b2:ca:0e:72:37:36:68:10: 70:36:e0:f5:34:a8:6c:ef:7c:90:31:95:10:50:ab: e3:9d:04:8b:d5:be:23:db:38:d0:39:b0:2b:80:9d: b3:30:31:4e:54:61:19:07:37:01:d2:78:94:22:aa: 0b:ce:ce:45:80:ec:4a:16:46:64:91:63:5a:e7:e1: 3e:0e:da:27:a1:4b:3a:63:cb:e2:1f:e0:c6:b7:83: 76:6f:8e:a8:5d:26:a6:8f:68:6e:9c:cb:2b:53:ca: c1:e4:c3:f6:42:be:c9:9e:3f:33:07:e5:ba:df:95: aa:e5:d7:f1:a6:f2:b2:a9:98:cb:64:70:9b:38:0a: 17:de:b6:95:44:2b:ed:9c:cd:04:51:f8:86:55:e8: e2:c8:8a:49:fb:b6:42:f3:7b:5f:35:c8:db:78:69: 7f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D8:F7:23:CD:59:8E:A8:2E:CB:0F:5D:AC:A7:9C:B8:FB:81:FA:ED X509v3 Authority Key Identifier: keyid:4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.84.0/24 Signature Algorithm: sha256WithRSAEncryption 83:d1:6c:b7:27:24:fc:1c:c7:64:02:ba:20:b0:9a:04:de:a3: 71:2b:60:3c:09:3f:04:cf:91:ce:fc:5a:96:5b:4d:80:39:bc: 7e:24:da:b0:05:b8:ad:19:1e:7d:b9:a3:89:ac:34:95:1e:5d: 51:e2:48:43:1b:ea:2e:89:3e:40:18:c0:7d:10:c7:98:34:fe: 19:09:e7:14:31:83:3b:a8:f3:9e:ff:c8:0e:7b:41:e2:0e:fd: 58:6a:0e:fc:b8:c9:e5:a9:85:ee:9c:8d:e9:ea:9d:6f:91:5e: e9:1b:98:ac:1b:18:43:f3:96:d9:24:e3:51:8b:8e:5d:f3:d0: 40:90:ce:a2:46:6a:39:ca:9a:5f:ed:be:91:3a:c9:70:6a:a7: e5:9b:ac:bb:9a:34:e5:1e:ff:53:c2:98:e6:44:b2:69:59:e3: 0f:1e:34:39:3a:2f:5c:a9:14:15:76:2d:87:cc:05:e3:c2:60: d5:9a:81:ee:b3:c1:a4:cd:ad:f2:ea:22:04:dd:de:70:5e:3a: 3c:8c:ef:b9:e8:da:73:8f:03:de:6d:ea:8d:b7:2e:4c:63:f4: 3b:29:07:0d:3a:1e:a0:e0:1a:1b:c5:ba:5d:f4:8d:a3:47:ca: 02:9c:0c:4d:58:ff:6d:fb:d9:7e:db:26:ad:ba:58:75:99:24: 6a:2a:4c:90 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIYFcLXXkUKBIlh7sSLSTvvspV70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYz MkIzNkRDRDAeFw0yNjA1MDMwMjA5MzdaFw0yNzA1MDIwMjE0MzdaMDMxMTAvBgNV BAMTKDVBRDhGNzIzQ0Q1OThFQTgyRUNCMEY1REFDQTc5Q0I4RkI4MUZBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbkGkzPbsU/RpaqvbYoG4fUwN9 Z+vzoqQ7P4Bu8cUZbA7a3iwGm5aRBCVuKNrPonBCK0uG7EIhWuE5lKq5p99BQxdB o/xHG4UJMw/+KdMniZECADqMk+3UjdLJTR5JGuCyyg5yNzZoEHA24PU0qGzvfJAx lRBQq+OdBIvVviPbONA5sCuAnbMwMU5UYRkHNwHSeJQiqgvOzkWA7EoWRmSRY1rn 4T4O2iehSzpjy+If4Ma3g3ZvjqhdJqaPaG6cyytTysHkw/ZCvsmePzMH5brflarl 1/Gm8rKpmMtkcJs4ChfetpVEK+2czQRR+IZV6OLIikn7tkLze181yNt4aX+vAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWtj3I81Zjqguyw9drKecuPuB+u0wHwYDVR0j BBgwFoAUTKxLBcYiClqRf+qRfTR2bzKzbc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZTljOWYtZDYwNy00NDk3LWFmMjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVD NjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYzMkIzNkRDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0FDNEIwNUM2MjIwQTVBOTE3RkVBOTE3RDM0NzY2RjMyQjM2 RENELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE0MGU5YzlmLWQ2MDctNDQ5Ny1h ZjI4LTRkMmI5MDkyZDVhNi8wLzMxMzAzMzJlMzEzNDM4MmUzODM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5RUMA0GCSqG SIb3DQEBCwUAA4IBAQCD0Wy3JyT8HMdkArogsJoE3qNxK2A8CT8Ez5HO/FqWW02A Obx+JNqwBbitGR59uaOJrDSVHl1R4khDG+ouiT5AGMB9EMeYNP4ZCecUMYM7qPOe /8gOe0HiDv1Yag78uMnlqYXunI3p6p1vkV7pG5isGxhD85bZJONRi45d89BAkM6i Rmo5yppf7b6ROslwaqflm6y7mjTlHv9TwpjmRLJpWeMPHjQ5Oi9cqRQVdi2HzAXj wmDVmoHus8Gkza3y6iIE3d5wXjo8jO+56NpzjwPebeqNty5MY/Q7KQcNOh6g4Bob xbpd9I2jR8oCnAxNWP9t+9l+2yatulh1mSRqKkyQ -----END CERTIFICATE-----Generated at Wed May 13 08:35:10 2026 by rpki-client