$ rpki-client -vvf rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa File: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (raw, json) Hash identifier: I7JOfc7cIihje61qrOhB8mNIVUiXPbuVCLb1xIG81r0= Subject key identifier: E5:15:6E:E4:F2:A5:E6:F4:A3:0D:B8:75:F6:40:9B:22:D1:FA:B5:D9 Certificate issuer: /CN=B486D413919D8F20144DB8254040D1237E34B8AA Certificate serial: 5ECEFC84A7328DA115194E8AF7A8698D6FCF473A Authority key identifier: B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa Signing time: Sun 03 May 2026 02:19:19 +0000 ROA not before: Sun 03 May 2026 02:14:19 +0000 ROA not after: Sun 02 May 2027 02:19:19 +0000 asID: 141591 IP address blocks: 103.159.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ce:fc:84:a7:32:8d:a1:15:19:4e:8a:f7:a8:69:8d:6f:cf:47:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B486D413919D8F20144DB8254040D1237E34B8AA Validity Not Before: May 3 02:14:19 2026 GMT Not After : May 2 02:19:19 2027 GMT Subject: CN=E5156EE4F2A5E6F4A30DB875F6409B22D1FAB5D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a2:fe:3e:3a:07:20:9a:8a:16:1a:fa:18:ff: ca:cf:48:e5:4b:4a:35:05:11:6b:d7:05:23:98:9a: 95:cf:8e:a3:82:ce:52:e2:8a:6d:6a:e0:21:36:8e: dd:c3:fb:e9:29:47:78:8e:01:78:d9:9b:89:ae:15: 39:5c:10:a7:a4:2e:7a:89:e1:91:8f:f8:a0:39:9c: 22:c1:d4:93:a0:81:c1:a2:cf:4b:29:fe:a3:9d:dd: d5:20:97:be:c8:67:4c:98:f6:cf:46:0f:6b:12:c7: f5:47:6b:f3:8b:30:a7:da:0d:e6:74:4f:b8:7d:52: 3c:51:b3:0b:9e:35:13:47:15:2c:7b:7a:a5:5e:98: b8:64:20:fa:17:3a:93:5f:66:75:e6:00:70:d0:d0: 47:9a:47:34:e6:3a:7a:5b:22:5b:fb:a5:b2:d9:88: 90:75:b7:5e:82:08:13:4d:c2:bf:82:3e:58:dd:95: 9f:6c:b3:6e:c0:3a:35:3b:c3:45:5d:7e:f2:0f:f9: 0c:14:46:b3:ac:27:69:9b:5e:62:9d:f4:42:6b:04: 2d:0b:f4:c2:1f:a3:9e:2a:eb:e3:72:dd:7b:e6:0a: a5:28:12:3d:0c:2a:d6:0c:90:10:d5:7a:7f:9a:22: 30:c2:00:56:3e:e9:cc:b6:e9:50:1d:fa:08:88:c7: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:15:6E:E4:F2:A5:E6:F4:A3:0D:B8:75:F6:40:9B:22:D1:FA:B5:D9 X509v3 Authority Key Identifier: keyid:B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.63.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:a4:e3:95:c0:fe:d9:0c:b2:46:53:f9:0f:e9:b7:63:5c:6a: ec:ed:52:e1:f5:b3:a0:6d:f9:10:1e:20:d0:d8:83:2e:f0:5b: 15:66:3e:10:71:58:65:21:91:8a:b6:07:68:9a:38:9d:2a:1d: 89:2b:44:d3:1f:47:34:da:6e:c9:f1:e4:76:63:9d:ae:96:54: 80:9e:9a:40:80:6a:6c:73:f8:0f:29:11:95:09:58:a7:da:f8: 17:77:d7:fe:9f:b3:28:e6:cf:9e:36:5b:69:c7:26:eb:7a:34: 56:33:72:7d:cf:6e:88:b1:ea:2a:df:0a:94:cb:73:01:40:46: a6:77:b7:65:08:e0:b5:24:08:d5:12:aa:5f:88:ee:1c:fa:36: df:84:1b:24:ca:cb:64:98:92:61:a2:7d:41:35:a2:ba:ba:2b: f3:62:26:a7:40:28:62:b4:ab:eb:0b:22:73:77:3d:da:15:93: 42:cb:15:e0:d3:a7:c4:72:a9:70:ce:cd:be:0b:51:68:a1:c0: 85:91:b8:7e:56:37:5b:c2:62:2e:5f:da:20:7a:7c:bf:92:5a: 9c:a6:f6:b5:4c:ff:f7:1e:ef:88:55:df:a1:4e:8c:44:22:77: 89:86:8e:6d:6a:a1:24:23:20:ec:23:db:b4:fb:90:bf:69:ad: 54:4c:6a:bd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXs78hKcyjaEVGU6K96hpjW/PRzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3 RTM0QjhBQTAeFw0yNjA1MDMwMjE0MTlaFw0yNzA1MDIwMjE5MTlaMDMxMTAvBgNV BAMTKEU1MTU2RUU0RjJBNUU2RjRBMzBEQjg3NUY2NDA5QjIyRDFGQUI1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1ov4+OgcgmooWGvoY/8rPSOVL SjUFEWvXBSOYmpXPjqOCzlLiim1q4CE2jt3D++kpR3iOAXjZm4muFTlcEKekLnqJ 4ZGP+KA5nCLB1JOggcGiz0sp/qOd3dUgl77IZ0yY9s9GD2sSx/VHa/OLMKfaDeZ0 T7h9UjxRswueNRNHFSx7eqVemLhkIPoXOpNfZnXmAHDQ0EeaRzTmOnpbIlv7pbLZ iJB1t16CCBNNwr+CPljdlZ9ss27AOjU7w0VdfvIP+QwURrOsJ2mbXmKd9EJrBC0L 9MIfo54q6+Ny3XvmCqUoEj0MKtYMkBDVen+aIjDCAFY+6cy26VAd+giIxzi5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU5RVu5PKl5vSjDbh19kCbItH6tdkwHwYDVR0j BBgwFoAUtIbUE5GdjyAUTbglQEDRI340uKowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBjMTcxZjQtYmQxMS00OGVkLTg3ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5 MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3RTM0QjhBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDg2RDQxMzkxOUQ4RjIwMTQ0REI4MjU0MDQwRDEyMzdFMzRC OEFBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwYzE3MWY0LWJkMTEtNDhlZC04 N2YwLTI3ZWExMjA5MDY0Zi8wLzMxMzAzMzJlMzEzNTM5MmUzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzUzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ58/MA0GCSqG SIb3DQEBCwUAA4IBAQANpOOVwP7ZDLJGU/kP6bdjXGrs7VLh9bOgbfkQHiDQ2IMu 8FsVZj4QcVhlIZGKtgdomjidKh2JK0TTH0c02m7J8eR2Y52ullSAnppAgGpsc/gP KRGVCVin2vgXd9f+n7Mo5s+eNltpxybrejRWM3J9z26Iseoq3wqUy3MBQEamd7dl COC1JAjVEqpfiO4c+jbfhBskystkmJJhon1BNaK6uivzYianQChitKvrCyJzdz3a FZNCyxXg06fEcqlwzs2+C1FoocCFkbh+VjdbwmIuX9ogeny/klqcpva1TP/3Hu+I Vd+hToxEIneJho5taqEkIyDsI9u0+5C/aa1UTGq9 -----END CERTIFICATE-----Generated at Wed May 13 10:07:25 2026 by rpki-client