$ rpki-client -vvf rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa File: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (raw, json) Hash identifier: tatwrYHu7JXRVNAEJ7zvfFLaGPSecYMyGR6xa2Isi2s= Subject key identifier: 4A:64:4C:DF:AC:6C:C9:FA:D7:A3:3D:57:DB:B2:7F:36:43:17:79:94 Certificate issuer: /CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Certificate serial: 65397BF9B9DA851392660760B72C1FE6680193BE Authority key identifier: 20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa Signing time: Sun 03 May 2026 02:17:58 +0000 ROA not before: Sun 03 May 2026 02:12:58 +0000 ROA not after: Sun 02 May 2027 02:17:58 +0000 asID: 149888 IP address blocks: 103.189.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:39:7b:f9:b9:da:85:13:92:66:07:60:b7:2c:1f:e6:68:01:93:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Validity Not Before: May 3 02:12:58 2026 GMT Not After : May 2 02:17:58 2027 GMT Subject: CN=4A644CDFAC6CC9FAD7A33D57DBB27F3643177994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:5b:29:ff:0c:99:08:19:80:c8:3d:b8:8e: 71:26:d5:ad:fb:b1:da:41:b0:0a:8f:9b:42:07:2e: d7:50:fc:c3:0a:40:cf:dc:b4:23:fb:d1:d8:36:16: 5a:67:6d:b4:f1:c0:45:84:57:ae:3f:c5:3a:87:a5: 23:53:79:50:f6:33:be:34:06:ad:e9:15:46:7c:5d: 26:6f:4c:37:19:9d:ee:be:ae:58:5d:76:2a:d9:3c: e7:ce:7f:0e:76:d7:56:17:29:87:91:bb:01:9d:59: d5:ff:aa:b4:87:f9:1e:11:f7:86:02:27:bb:99:0d: f8:dc:a7:74:7b:66:8c:59:96:13:6a:fa:1a:f6:91: ef:e3:cf:1b:a1:3c:96:85:3a:bb:82:55:5b:51:ca: be:c9:d9:da:cd:f8:42:4c:19:de:ba:d8:ef:ba:8d: 55:ae:c5:f6:07:51:e6:e7:6c:14:97:a6:9b:32:2c: 07:45:50:f0:5a:b9:73:28:2e:6b:9c:b3:6f:8d:77: b8:52:0a:52:98:3a:29:90:51:95:eb:65:24:09:bd: e8:53:48:58:68:45:ad:99:7d:14:76:aa:35:34:43: 06:b7:6f:d6:a1:7d:ad:9c:28:51:f9:72:d7:7a:b6: 02:39:14:e8:2b:d8:00:26:df:8b:e1:61:54:90:37: 61:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:64:4C:DF:AC:6C:C9:FA:D7:A3:3D:57:DB:B2:7F:36:43:17:79:94 X509v3 Authority Key Identifier: keyid:20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.249.0/24 Signature Algorithm: sha256WithRSAEncryption c8:55:5f:ff:99:6d:05:e4:31:5f:ba:09:fc:d0:6c:24:28:2b: f3:2e:1a:48:47:60:db:1c:66:3d:68:b0:78:c0:98:e3:ab:3d: ba:76:c8:04:92:91:5c:9d:22:9f:cc:23:45:c1:0c:85:a1:f0: 5c:e5:a0:35:3d:5a:82:7f:9c:69:9f:a2:0e:40:2f:fa:04:a8: b5:1d:31:a8:93:4c:b5:fb:24:7e:6a:17:7c:4e:51:4b:e2:7c: 9d:e9:38:d5:07:97:09:a4:a2:80:1d:a5:96:95:f5:fc:85:c2: 53:6b:9c:9c:27:59:b2:fb:dd:0e:28:99:e0:ce:52:c5:b0:e8: c7:ab:86:85:81:4f:ca:96:fe:3a:8e:48:25:a8:65:81:aa:92: bf:d7:64:ab:d1:69:b5:ae:fb:bf:da:97:b5:b7:05:ec:5b:9d: a7:df:79:d2:54:07:f4:44:1f:43:b4:8b:1a:bf:17:44:0d:97: 3c:b5:0d:e2:ce:8e:b8:35:09:0b:88:1d:c7:ea:69:7d:82:58: 05:f0:99:91:4a:18:31:ef:e4:62:79:32:94:ca:53:37:8a:e5: 5a:41:46:dc:85:be:c2:1e:3c:60:5d:61:ee:7a:b8:ea:ae:7e: de:02:17:51:04:bb:8e:39:e1:11:be:2f:c4:62:89:25:5f:a9: ed:d9:32:a8 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZTl7+bnahROSZgdgtywf5mgBk74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIy RTU3N0RFMjAeFw0yNjA1MDMwMjEyNThaFw0yNzA1MDIwMjE3NThaMDMxMTAvBgNV BAMTKDRBNjQ0Q0RGQUM2Q0M5RkFEN0EzM0Q1N0RCQjI3RjM2NDMxNzc5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0A1sp/wyZCBmAyD24jnEm1a37 sdpBsAqPm0IHLtdQ/MMKQM/ctCP70dg2FlpnbbTxwEWEV64/xTqHpSNTeVD2M740 Bq3pFUZ8XSZvTDcZne6+rlhddirZPOfOfw5211YXKYeRuwGdWdX/qrSH+R4R94YC J7uZDfjcp3R7ZoxZlhNq+hr2ke/jzxuhPJaFOruCVVtRyr7J2drN+EJMGd662O+6 jVWuxfYHUebnbBSXppsyLAdFUPBauXMoLmucs2+Nd7hSClKYOimQUZXrZSQJvehT SFhoRa2ZfRR2qjU0Qwa3b9ahfa2cKFH5ctd6tgI5FOgr2AAm34vhYVSQN2GxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUSmRM36xsyfrXoz1X27J/NkMXeZQwHwYDVR0j BBgwFoAUIG69BK4zKpg/1etJuLnAAi5XfeIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmNDE2NGUtNzRlNS00MGQ2LTlhMzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRB RTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIyRTU3N0RFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDZFQkQwNEFFMzMyQTk4M0ZENUVCNDlCOEI5QzAwMjJFNTc3 REUyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZjQxNjRlLTc0ZTUtNDBkNi05 YTMwLWIzNzJhNGQyYTQ1NC8wLzMxMzAzMzJlMzEzODM5MmUzMjM0MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvfkwDQYJ KoZIhvcNAQELBQADggEBAMhVX/+ZbQXkMV+6CfzQbCQoK/MuGkhHYNscZj1osHjA mOOrPbp2yASSkVydIp/MI0XBDIWh8FzloDU9WoJ/nGmfog5AL/oEqLUdMaiTTLX7 JH5qF3xOUUvifJ3pONUHlwmkooAdpZaV9fyFwlNrnJwnWbL73Q4omeDOUsWw6Mer hoWBT8qW/jqOSCWoZYGqkr/XZKvRabWu+7/al7W3BexbnaffedJUB/REH0O0ixq/ F0QNlzy1DeLOjrg1CQuIHcfqaX2CWAXwmZFKGDHv5GJ5MpTKUzeK5VpBRtyFvsIe PGBdYe56uOquft4CF1EEu4454RG+L8RiiSVfqe3ZMqg= -----END CERTIFICATE-----Generated at Wed May 13 10:23:14 2026 by rpki-client