$ rpki-client -vvf rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa File: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (raw, json) Hash identifier: NdabufunGirMkyu0ATmpWQ6Rl+f746AXGi5jkT6y7RY= Subject key identifier: 3E:EF:89:09:B8:D4:0E:0A:EA:37:8B:D1:65:62:19:63:5C:82:41:DF Certificate issuer: /CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Certificate serial: 70DBB5C925DD35841DA6E33AB47AC187C2A26826 Authority key identifier: A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa Signing time: Sun 03 May 2026 02:15:16 +0000 ROA not before: Sun 03 May 2026 02:10:16 +0000 ROA not after: Sun 02 May 2027 02:15:16 +0000 asID: 149972 IP address blocks: 103.147.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:db:b5:c9:25:dd:35:84:1d:a6:e3:3a:b4:7a:c1:87:c2:a2:68:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Validity Not Before: May 3 02:10:16 2026 GMT Not After : May 2 02:15:16 2027 GMT Subject: CN=3EEF8909B8D40E0AEA378BD1656219635C8241DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:5c:ad:90:c0:13:48:58:52:5b:f5:66:79: 40:96:3b:ae:d1:a8:83:ff:89:49:26:1a:05:cb:ba: 43:23:40:d3:52:b1:c5:e2:91:0a:f7:91:bd:39:2d: 96:dc:8f:8b:e0:17:b7:dd:8b:96:0c:15:a5:d2:7e: 69:e7:7a:8b:47:ea:99:1c:e6:26:a1:c3:92:29:f6: e1:50:b0:19:4b:cc:a3:71:57:a4:be:54:a4:31:b4: 6d:5a:fd:d6:7a:58:6a:f8:00:99:e3:b7:78:40:6e: 55:1a:52:5f:a8:7e:25:b2:33:28:74:8c:49:54:6e: a7:60:68:80:84:15:e4:b3:e1:d9:83:69:f4:be:9a: 30:a5:76:98:57:45:52:2f:69:21:b9:42:de:55:03: 7d:e6:65:f1:26:ef:5d:6b:16:3b:d8:f8:94:4c:7c: 4b:a2:10:9d:85:18:32:43:d3:5b:4f:f6:9d:8d:de: 25:92:59:e8:1b:cc:bd:dc:29:48:b4:7b:22:e2:83: 92:7c:50:a7:cd:94:28:90:92:86:84:01:79:83:fa: e1:67:e5:22:79:6e:9c:d1:0f:30:82:68:64:90:e6: 5a:b7:66:c1:eb:e6:86:fd:89:b0:38:a1:22:bb:e2: 11:e9:ac:dc:b7:4b:a7:eb:d7:a8:13:9c:0f:84:44: 32:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EF:89:09:B8:D4:0E:0A:EA:37:8B:D1:65:62:19:63:5C:82:41:DF X509v3 Authority Key Identifier: keyid:A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.115.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:f5:fd:68:54:dc:e1:bf:5f:3a:04:22:71:46:0b:fd:7b:73: 48:a3:22:23:56:4b:f6:c1:11:01:f2:56:93:27:d2:0d:39:95: c0:08:06:51:64:f4:42:eb:74:d2:40:32:48:07:f5:3d:3e:1e: 84:9f:2e:cf:20:1d:f9:53:3c:b2:f3:34:e2:de:a2:a3:e9:37: 74:a2:04:f7:87:73:c2:af:9a:9e:55:69:64:6c:62:30:24:72: 38:4c:c7:da:f7:5d:5d:2f:9a:e2:ad:a2:50:b7:d4:4b:e6:82: 4c:51:7d:28:d4:f9:0a:03:12:f7:db:33:ac:90:0f:08:9a:02: df:17:4e:1e:2f:c7:04:31:a9:69:21:0f:8a:a7:52:e5:af:9b: a8:5f:00:85:1d:f0:5f:cd:e4:50:01:9d:19:8d:9a:f8:49:f3: 17:5f:be:17:04:b2:e5:c3:86:a0:17:b3:ce:06:62:43:b6:5c: 15:51:97:7c:95:f6:8c:53:bc:de:e9:08:91:6d:db:8b:cc:52: 62:e8:e8:aa:58:37:68:bc:8a:81:ba:e2:ab:b9:67:93:7f:83: ad:b4:f0:2c:72:8b:7e:1c:d1:0d:f7:b0:6d:e1:e8:64:21:fc: 0c:95:b5:ca:21:aa:e7:dc:64:d0:64:76:1c:85:25:c1:05:76: 22:5c:8f:a0 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUcNu1ySXdNYQdpuM6tHrBh8KiaCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MjdBMUY4QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMz NTNGQTQ1MDAeFw0yNjA1MDMwMjEwMTZaFw0yNzA1MDIwMjE1MTZaMDMxMTAvBgNV BAMTKDNFRUY4OTA5QjhENDBFMEFFQTM3OEJEMTY1NjIxOTYzNUM4MjQxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7lytkMATSFhSW/VmeUCWO67R qIP/iUkmGgXLukMjQNNSscXikQr3kb05LZbcj4vgF7fdi5YMFaXSfmnneotH6pkc 5iahw5Ip9uFQsBlLzKNxV6S+VKQxtG1a/dZ6WGr4AJnjt3hAblUaUl+ofiWyMyh0 jElUbqdgaICEFeSz4dmDafS+mjCldphXRVIvaSG5Qt5VA33mZfEm711rFjvY+JRM fEuiEJ2FGDJD01tP9p2N3iWSWegbzL3cKUi0eyLig5J8UKfNlCiQkoaEAXmD+uFn 5SJ5bpzRDzCCaGSQ5lq3ZsHr5ob9ibA4oSK74hHprNy3S6fr16gTnA+ERDIJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUPu+JCbjUDgrqN4vRZWIZY1yCQd8wHwYDVR0j BBgwFoAUoUJ6H4rKYPmvf4iSD4nuUzU/pFAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTY4Y2MwNTktNWU2Yy00NTAxLWI4OTQtMTRhODJkMThkMjFlLzAvQTE0MjdBMUY4 QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMzNTNGQTQ1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTQyN0ExRjhBQ0E2MEY5QUY3Rjg4OTIwRjg5RUU1MzM1M0ZB NDUwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2OGNjMDU5LTVlNmMtNDUwMS1i ODk0LTE0YTgyZDE4ZDIxZS8wLzMxMzAzMzJlMzEzNDM3MmUzMTMxMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk3MwDQYJ KoZIhvcNAQELBQADggEBAD31/WhU3OG/XzoEInFGC/17c0ijIiNWS/bBEQHyVpMn 0g05lcAIBlFk9ELrdNJAMkgH9T0+HoSfLs8gHflTPLLzNOLeoqPpN3SiBPeHc8Kv mp5VaWRsYjAkcjhMx9r3XV0vmuKtolC31EvmgkxRfSjU+QoDEvfbM6yQDwiaAt8X Th4vxwQxqWkhD4qnUuWvm6hfAIUd8F/N5FABnRmNmvhJ8xdfvhcEsuXDhqAXs84G YkO2XBVRl3yV9oxTvN7pCJFt24vMUmLo6KpYN2i8ioG64qu5Z5N/g6208Cxyi34c 0Q33sG3h6GQh/AyVtcohqufcZNBkdhyFJcEFdiJcj6A= -----END CERTIFICATE-----Generated at Wed May 13 09:12:58 2026 by rpki-client