$ rpki-client -vvf rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa File: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (raw, json) Hash identifier: NuzvjRElosYE2UG7+eZwvvIrrAeM5hY3Zl0vPo88tlQ= Subject key identifier: DF:38:59:47:0E:FF:B7:1D:39:8C:20:DE:16:F4:D0:68:EE:C0:10:48 Certificate issuer: /CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Certificate serial: 6DFF270910715D3F5E15A6491FFBC23224C1333F Authority key identifier: 4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa Signing time: Sun 03 May 2026 02:14:36 +0000 ROA not before: Sun 03 May 2026 02:09:36 +0000 ROA not after: Sun 02 May 2027 02:14:36 +0000 asID: 139986 IP address blocks: 103.148.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ff:27:09:10:71:5d:3f:5e:15:a6:49:1f:fb:c2:32:24:c1:33:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Validity Not Before: May 3 02:09:36 2026 GMT Not After : May 2 02:14:36 2027 GMT Subject: CN=DF3859470EFFB71D398C20DE16F4D068EEC01048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:ed:86:c6:87:62:5c:1d:1e:f1:f0:2b:de: 85:95:a8:dd:e3:c9:4a:44:3f:a8:74:43:e1:68:c7: 0e:84:b9:e7:5d:9d:30:1d:b4:e3:5c:06:80:13:99: 4c:fe:cc:b7:4c:7b:0e:f1:57:0c:90:5b:f0:38:92: 3f:b7:46:4e:07:71:f3:14:0e:4e:ab:63:78:3e:8b: 3e:26:2a:ed:d8:c7:b8:31:12:96:0f:3a:1b:52:2c: dd:94:d9:a5:e7:06:1d:21:35:f5:e3:bd:78:a4:9b: b1:28:77:b2:85:23:29:6b:84:10:9b:64:ba:b1:ab: 13:3f:cb:2c:b3:92:a5:bb:5b:0b:cd:ff:74:b6:20: b5:9d:1a:cd:68:83:3d:1f:79:2a:0b:fa:eb:41:76: 6e:18:74:ec:b3:b9:0c:11:25:85:ae:6d:dd:62:fd: ed:e7:37:1c:ad:68:86:3d:7f:6c:e9:3d:27:e0:93: dd:04:23:00:e3:90:20:41:18:db:95:67:4a:d9:02: a9:9c:c1:a2:98:ad:52:43:87:91:da:97:31:5d:21: 72:5f:6f:0c:77:ba:49:45:0c:4d:d8:a1:2a:88:27: 0d:fd:3f:0b:c5:2b:24:f5:99:55:3b:c2:f7:55:0e: 71:36:cc:66:4e:35:eb:f5:3b:34:b1:39:2d:13:e7: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:38:59:47:0E:FF:B7:1D:39:8C:20:DE:16:F4:D0:68:EE:C0:10:48 X509v3 Authority Key Identifier: keyid:4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.85.0/24 Signature Algorithm: sha256WithRSAEncryption 09:a6:66:08:fe:5b:44:bb:a3:5f:71:a8:b5:03:33:e0:46:0d: b0:f1:78:d2:db:ae:fe:8a:11:76:10:78:7e:c4:58:1b:43:e5: 75:8c:e8:0f:58:41:13:8a:f4:b7:c1:c8:5d:62:65:9f:d1:99: 3c:b6:1c:7e:98:21:fb:ff:5a:70:e4:1c:cb:97:9c:a0:94:92: f8:13:1b:2b:87:a2:ec:0b:c4:22:b5:2f:1e:75:3e:af:64:e4: 31:e6:5e:be:09:7e:6d:60:d2:ba:7a:86:2f:ee:0d:44:1b:fa: 5b:3d:75:96:7f:15:11:bf:66:a5:a0:0b:a8:a3:64:93:37:74: c6:9a:79:fd:4a:c4:ff:a5:e3:dd:a6:7a:ee:50:a8:3f:a3:95: ea:56:a9:b9:7d:66:2f:94:64:c3:4e:ec:a5:c8:a0:75:a3:62: 53:bc:d0:75:d1:9e:fc:3f:25:12:94:74:8c:6d:71:82:ee:fd: 91:94:f1:5a:0b:a4:6b:46:f2:86:c1:ec:e6:0a:4c:54:b0:ec: cc:0b:5f:b4:8f:56:8e:e2:85:13:24:58:68:9c:db:4b:1b:61: 2d:5c:e8:1d:ff:33:0d:dc:74:b5:05:1b:7a:0d:76:d1:b8:4b: f7:1b:19:7d:13:63:ad:3a:9f:cc:9e:df:cf:0e:77:7b:9b:9e: b1:05:30:8e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbf8nCRBxXT9eFaZJH/vCMiTBMz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYz MkIzNkRDRDAeFw0yNjA1MDMwMjA5MzZaFw0yNzA1MDIwMjE0MzZaMDMxMTAvBgNV BAMTKERGMzg1OTQ3MEVGRkI3MUQzOThDMjBERTE2RjREMDY4RUVDMDEwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwc+2GxodiXB0e8fAr3oWVqN3j yUpEP6h0Q+Foxw6EueddnTAdtONcBoATmUz+zLdMew7xVwyQW/A4kj+3Rk4HcfMU Dk6rY3g+iz4mKu3Yx7gxEpYPOhtSLN2U2aXnBh0hNfXjvXikm7Eod7KFIylrhBCb ZLqxqxM/yyyzkqW7WwvN/3S2ILWdGs1ogz0feSoL+utBdm4YdOyzuQwRJYWubd1i /e3nNxytaIY9f2zpPSfgk90EIwDjkCBBGNuVZ0rZAqmcwaKYrVJDh5HalzFdIXJf bwx3uklFDE3YoSqIJw39PwvFKyT1mVU7wvdVDnE2zGZONev1OzSxOS0T5x4XAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3zhZRw7/tx05jCDeFvTQaO7AEEgwHwYDVR0j BBgwFoAUTKxLBcYiClqRf+qRfTR2bzKzbc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZTljOWYtZDYwNy00NDk3LWFmMjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVD NjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYzMkIzNkRDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0FDNEIwNUM2MjIwQTVBOTE3RkVBOTE3RDM0NzY2RjMyQjM2 RENELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE0MGU5YzlmLWQ2MDctNDQ5Ny1h ZjI4LTRkMmI5MDkyZDVhNi8wLzMxMzAzMzJlMzEzNDM4MmUzODM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5RVMA0GCSqG SIb3DQEBCwUAA4IBAQAJpmYI/ltEu6Nfcai1AzPgRg2w8XjS267+ihF2EHh+xFgb Q+V1jOgPWEETivS3wchdYmWf0Zk8thx+mCH7/1pw5BzLl5yglJL4Exsrh6LsC8Qi tS8edT6vZOQx5l6+CX5tYNK6eoYv7g1EG/pbPXWWfxURv2aloAuoo2STN3TGmnn9 SsT/pePdpnruUKg/o5XqVqm5fWYvlGTDTuylyKB1o2JTvNB10Z78PyUSlHSMbXGC 7v2RlPFaC6RrRvKGwezmCkxUsOzMC1+0j1aO4oUTJFhonNtLG2EtXOgd/zMN3HS1 BRt6DXbRuEv3Gxl9E2OtOp/Mnt/PDnd7m56xBTCO -----END CERTIFICATE-----Generated at Wed May 13 08:28:24 2026 by rpki-client