$ rpki-client -vvf rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa File: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (raw, json) Hash identifier: LO0XYAcYP+wJFsgGl9xbalFh8oG/l3nUuL82q6wx3FE= Subject key identifier: 00:90:AB:E3:A8:22:4F:8A:8D:47:22:0B:E5:03:A5:B9:2C:D1:F3:E1 Certificate issuer: /CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187 Certificate serial: 69AFA4BC3F8945348C231F0A2945856335F59442 Authority key identifier: 9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa Signing time: Sun 03 May 2026 02:15:13 +0000 ROA not before: Sun 03 May 2026 02:10:13 +0000 ROA not after: Sun 02 May 2027 02:15:13 +0000 asID: 138860 IP address blocks: 103.139.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:af:a4:bc:3f:89:45:34:8c:23:1f:0a:29:45:85:63:35:f5:94:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187 Validity Not Before: May 3 02:10:13 2026 GMT Not After : May 2 02:15:13 2027 GMT Subject: CN=0090ABE3A8224F8A8D47220BE503A5B92CD1F3E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:7f:d7:88:75:83:ed:d8:ea:d4:a8:05:e2: b2:bd:d1:bc:a6:d2:32:d1:a1:38:fc:57:9a:5f:86: f7:d2:cc:7e:19:ba:2d:71:a6:70:90:fd:5c:68:88: 36:76:cd:cc:0d:8e:55:dd:22:fb:d4:f7:2c:8b:27: 9a:f9:70:d1:4a:7b:2b:47:a3:45:cc:8b:94:d4:16: 8d:c7:dd:f5:f5:50:bc:09:47:f3:02:11:4a:a9:72: a0:f3:19:46:f3:c3:02:3c:a5:e2:41:35:bb:d5:97: 80:55:eb:65:76:4c:af:84:80:4d:ce:ce:f1:ab:11: c3:2e:97:ae:8d:11:7e:56:19:1b:72:c5:cf:02:d4: a9:7c:85:48:46:12:98:3f:a8:20:99:e0:3e:86:23: 78:7d:13:1c:21:6f:ef:bf:51:46:60:5f:6c:68:a3: 6c:22:41:63:d1:6d:81:4d:3a:56:70:18:d0:3c:7e: e0:72:c0:99:80:2f:df:f8:ec:7f:c7:8e:3b:a4:07: ee:97:2c:1d:c0:24:65:0f:c2:b6:cc:13:42:80:6c: 92:1a:fc:09:33:e9:4e:2e:ac:2d:99:ce:08:15:09: 3f:84:fc:ee:a4:48:42:67:fc:cb:ca:e6:76:71:96: 1f:97:fe:2d:f5:f5:c6:ab:98:88:39:b7:74:5d:8e: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:90:AB:E3:A8:22:4F:8A:8D:47:22:0B:E5:03:A5:B9:2C:D1:F3:E1 X509v3 Authority Key Identifier: keyid:9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.26.0/23 Signature Algorithm: sha256WithRSAEncryption 24:56:74:aa:49:68:0a:97:4f:c1:3a:d1:a8:e1:21:24:b3:ff: 4d:62:14:1c:57:38:d7:3e:31:fd:b0:a2:93:62:5f:03:48:69: a7:00:28:30:2f:43:2c:25:c8:c9:85:a1:81:f3:bb:d4:e9:02: c4:6a:fa:dd:d5:d4:9d:d4:e3:a0:26:9d:4c:91:2c:c9:33:b4: 08:bf:86:bb:e5:f7:f0:fd:02:84:ef:73:81:47:a0:0d:54:ac: b5:ea:a2:9d:24:41:43:13:10:21:92:d5:7c:19:fc:a2:02:b5: be:c3:7f:e7:b4:60:b6:64:13:4f:69:0f:04:dd:e6:b6:b5:c8: 4a:9b:11:18:21:58:c7:77:be:1c:b1:e2:02:fa:3b:ae:35:30: 19:cb:b5:e5:72:09:39:a1:1d:78:11:bd:a0:72:6d:69:d2:dc: 63:6b:1a:e9:d7:53:c7:de:17:79:57:58:e0:72:cc:47:ad:12: 83:b7:38:5f:40:bf:2b:33:43:1e:fd:f5:4b:c0:83:27:e9:cb: de:8e:e7:96:c8:7f:d3:6f:0c:6d:0b:45:ab:c7:8b:f9:61:80: 29:aa:db:b6:0a:a9:41:08:41:a4:b5:0b:7a:64:f0:ec:86:e5: 7f:77:e5:71:3f:87:ea:92:1f:45:b6:4d:a7:f4:4b:47:06:20: b5:ce:19:f6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaa+kvD+JRTSMIx8KKUWFYzX1lEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5MkU5M0VCMTU4MEUzQ0Q0MEZGMzRDRkFCMzA0QURE QjA2ODE4NzAeFw0yNjA1MDMwMjEwMTNaFw0yNzA1MDIwMjE1MTNaMDMxMTAvBgNV BAMTKDAwOTBBQkUzQTgyMjRGOEE4RDQ3MjIwQkU1MDNBNUI5MkNEMUYzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntH/XiHWD7djq1KgF4rK90bym 0jLRoTj8V5pfhvfSzH4Zui1xpnCQ/VxoiDZ2zcwNjlXdIvvU9yyLJ5r5cNFKeytH o0XMi5TUFo3H3fX1ULwJR/MCEUqpcqDzGUbzwwI8peJBNbvVl4BV62V2TK+EgE3O zvGrEcMul66NEX5WGRtyxc8C1Kl8hUhGEpg/qCCZ4D6GI3h9Exwhb++/UUZgX2xo o2wiQWPRbYFNOlZwGNA8fuBywJmAL9/47H/HjjukB+6XLB3AJGUPwrbME0KAbJIa /Akz6U4urC2ZzggVCT+E/O6kSEJn/MvK5nZxlh+X/i319carmIg5t3RdjuZvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAJCr46giT4qNRyIL5QOluSzR8+EwHwYDVR0j BBgwFoAUnZLpPrFYDjzUD/NM+rMErdsGgYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTY1ZDg4ZjEtYjljMC00ODVlLTkxNmUtNTliN2UzNjk4ZGExLzAvOUQ5MkU5M0VC MTU4MEUzQ0Q0MEZGMzRDRkFCMzA0QUREQjA2ODE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDkyRTkzRUIxNTgwRTNDRDQwRkYzNENGQUIzMDRBRERCMDY4 MTg3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2NWQ4OGYxLWI5YzAtNDg1ZS05 MTZlLTU5YjdlMzY5OGRhMS8wLzMxMzAzMzJlMzEzMzM5MmUzMjM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4saMA0GCSqG SIb3DQEBCwUAA4IBAQAkVnSqSWgKl0/BOtGo4SEks/9NYhQcVzjXPjH9sKKTYl8D SGmnACgwL0MsJcjJhaGB87vU6QLEavrd1dSd1OOgJp1MkSzJM7QIv4a75ffw/QKE 73OBR6ANVKy16qKdJEFDExAhktV8GfyiArW+w3/ntGC2ZBNPaQ8E3ea2tchKmxEY IVjHd74cseIC+juuNTAZy7Xlcgk5oR14Eb2gcm1p0txjaxrp11PH3hd5V1jgcsxH rRKDtzhfQL8rM0Me/fVLwIMn6cvejueWyH/TbwxtC0Wrx4v5YYApqtu2CqlBCEGk tQt6ZPDshuV/d+VxP4fqkh9Ftk2n9EtHBiC1zhn2 -----END CERTIFICATE-----Generated at Wed May 13 07:38:49 2026 by rpki-client