$ rpki-client -vvf rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa File: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (raw, json) Hash identifier: /utHY3poH+nHQdYeC9echv8o+Q3cSPrnCccodiG1uEM= Subject key identifier: E8:FF:8B:FE:D5:7E:A6:2E:6E:08:69:8A:1F:F5:A7:9B:D2:D0:C1:2C Certificate issuer: /CN=98831B982341FB41F283DADC573DB0C97F4466FD Certificate serial: 18D6EE83EDBA505F9FA31699938A3B2F48666EEA Authority key identifier: 98:83:1B:98:23:41:FB:41:F2:83:DA:DC:57:3D:B0:C9:7F:44:66:FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98831B982341FB41F283DADC573DB0C97F4466FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa Signing time: Sun 03 May 2026 02:15:08 +0000 ROA not before: Sun 03 May 2026 02:10:08 +0000 ROA not after: Sun 02 May 2027 02:15:08 +0000 asID: 139435 IP address blocks: 103.144.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.crl rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98831B982341FB41F283DADC573DB0C97F4466FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d6:ee:83:ed:ba:50:5f:9f:a3:16:99:93:8a:3b:2f:48:66:6e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98831B982341FB41F283DADC573DB0C97F4466FD Validity Not Before: May 3 02:10:08 2026 GMT Not After : May 2 02:15:08 2027 GMT Subject: CN=E8FF8BFED57EA62E6E08698A1FF5A79BD2D0C12C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2a:77:ba:ef:63:e8:d4:3e:1e:6b:1e:9f:5f: e4:73:40:83:e3:d2:31:ab:d1:cf:e4:2d:17:d1:36: 3b:28:93:99:11:cf:e7:a9:c1:ef:b5:c1:44:56:55: ca:40:36:92:df:57:21:0a:10:8e:25:63:c5:e8:1b: 10:34:10:b0:70:e0:f4:e9:81:5e:96:10:ce:20:19: d7:aa:bc:d9:ff:f4:86:68:d8:f3:13:6b:c1:ec:89: 12:9a:bf:4d:b4:d0:6b:d1:0c:ac:9f:51:b3:1b:d9: 40:0c:48:9c:0b:2c:a6:95:14:e1:21:2f:77:e1:0e: e2:ac:41:d1:f2:54:25:02:96:c1:df:7e:a1:13:41: 99:5c:8a:c7:5d:5d:58:3c:e7:dd:69:c4:f6:fb:cd: 1f:52:6f:dd:03:aa:61:ad:9a:37:19:e6:1e:60:67: 30:64:c2:b1:43:74:83:70:a5:77:31:be:97:56:11: 00:bd:4f:bc:e7:70:52:6a:57:93:0b:12:8a:4d:23: 86:00:6c:27:f3:9c:ce:4e:61:c9:7a:be:6b:df:64: e9:cd:ac:6d:25:5c:75:17:55:6c:2b:da:f7:44:bc: e1:01:ee:4d:88:11:c5:39:85:db:a2:a7:79:01:b5: 1d:23:99:3c:27:91:e2:0c:65:cc:73:09:84:7b:9b: ca:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FF:8B:FE:D5:7E:A6:2E:6E:08:69:8A:1F:F5:A7:9B:D2:D0:C1:2C X509v3 Authority Key Identifier: keyid:98:83:1B:98:23:41:FB:41:F2:83:DA:DC:57:3D:B0:C9:7F:44:66:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98831B982341FB41F283DADC573DB0C97F4466FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.250.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:be:ec:ee:e6:21:02:f3:bd:50:2f:e5:21:4a:7a:85:c2:b5: 6d:ea:75:72:17:1a:6a:4f:a4:7f:06:df:93:a1:26:d0:31:3a: 62:6a:84:38:7c:7c:24:aa:29:95:6e:e1:3a:7d:85:22:0d:1d: 4d:b4:7a:ea:cc:4d:66:fb:a0:1d:c6:13:d5:ea:d1:0d:2b:aa: cc:ef:f3:11:d9:cc:8d:d2:8a:80:ff:6d:16:c3:e8:ae:a7:64: 49:23:4d:3e:00:22:df:76:36:36:98:52:83:b6:f2:c6:1c:49: 40:18:18:a2:65:ed:1e:db:b0:00:c4:0f:3e:f9:77:de:c1:f0: 11:11:74:7f:a8:40:5b:1b:5a:14:cd:4c:45:f7:03:31:63:f6: 2d:34:23:8f:23:ac:fc:ca:0b:12:7f:6b:ac:9b:8a:c2:43:0a: 8c:97:32:67:e9:f4:df:e8:a0:e2:05:94:7b:c8:b8:b8:c7:57: db:c1:fe:d0:ef:6a:5c:55:e2:ab:05:53:1c:aa:ce:61:a0:1c: 0f:50:bd:14:98:36:ff:68:ff:3d:41:98:4d:4f:42:d1:87:c8: f1:9f:e4:ca:5d:a8:1a:6f:46:dc:4f:b4:95:fd:fc:ee:fb:eb: b9:f4:26:2a:a2:53:a1:2c:25:ec:87:fb:d4:98:87:c7:5e:a3: c3:58:aa:55 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGNbug+26UF+foxaZk4o7L0hmbuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4MzFCOTgyMzQxRkI0MUYyODNEQURDNTczREIwQzk3 RjQ0NjZGRDAeFw0yNjA1MDMwMjEwMDhaFw0yNzA1MDIwMjE1MDhaMDMxMTAvBgNV BAMTKEU4RkY4QkZFRDU3RUE2MkU2RTA4Njk4QTFGRjVBNzlCRDJEMEMxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiKne672Po1D4eax6fX+RzQIPj 0jGr0c/kLRfRNjsok5kRz+epwe+1wURWVcpANpLfVyEKEI4lY8XoGxA0ELBw4PTp gV6WEM4gGdeqvNn/9IZo2PMTa8HsiRKav0200GvRDKyfUbMb2UAMSJwLLKaVFOEh L3fhDuKsQdHyVCUClsHffqETQZlcisddXVg8591pxPb7zR9Sb90DqmGtmjcZ5h5g ZzBkwrFDdINwpXcxvpdWEQC9T7zncFJqV5MLEopNI4YAbCfznM5OYcl6vmvfZOnN rG0lXHUXVWwr2vdEvOEB7k2IEcU5hduip3kBtR0jmTwnkeIMZcxzCYR7m8ozAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU6P+L/tV+pi5uCGmKH/Wnm9LQwSwwHwYDVR0j BBgwFoAUmIMbmCNB+0Hyg9rcVz2wyX9EZv0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTViZjcxOGQtOTExZS00M2Q2LThlM2MtMGQxYjM2NDZlMjc2LzAvOTg4MzFCOTgy MzQxRkI0MUYyODNEQURDNTczREIwQzk3RjQ0NjZGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODgzMUI5ODIzNDFGQjQxRjI4M0RBREM1NzNEQjBDOTdGNDQ2 NkZELmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE1YmY3MThkLTkxMWUtNDNkNi04 ZTNjLTBkMWIzNjQ2ZTI3Ni8wLzMxMzAzMzJlMzEzNDM0MmUzMjM1MzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzNDMzMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnkPowDQYJ KoZIhvcNAQELBQADggEBAG6+7O7mIQLzvVAv5SFKeoXCtW3qdXIXGmpPpH8G35Oh JtAxOmJqhDh8fCSqKZVu4Tp9hSINHU20eurMTWb7oB3GE9Xq0Q0rqszv8xHZzI3S ioD/bRbD6K6nZEkjTT4AIt92NjaYUoO28sYcSUAYGKJl7R7bsADEDz75d97B8BER dH+oQFsbWhTNTEX3AzFj9i00I48jrPzKCxJ/a6ybisJDCoyXMmfp9N/ooOIFlHvI uLjHV9vB/tDvalxV4qsFUxyqzmGgHA9QvRSYNv9o/z1BmE1PQtGHyPGf5MpdqBpv RtxPtJX9/O7767n0JiqiU6EsJeyH+9SYh8deo8NYqlU= -----END CERTIFICATE-----Generated at Wed May 13 14:02:46 2026 by rpki-client