$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa File: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (raw, json) Hash identifier: OYkbzaiaQarKQmGzbsa0kcIv0ahbBNrL8RA56NXr+2g= Subject key identifier: 9A:8E:3D:4E:B2:7A:AD:02:D9:40:A0:9A:B7:8D:74:5E:B6:6E:3F:13 Certificate issuer: /CN=5ABFE157E467A6732384B658909A9764D5D88AEC Certificate serial: 14FDF09D3037CCB55C464F7A18E1506AC1FDAD0C Authority key identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa Signing time: Sun 03 May 2026 02:22:04 +0000 ROA not before: Sun 03 May 2026 02:17:04 +0000 ROA not after: Sun 02 May 2027 02:22:04 +0000 asID: 149976 IP address blocks: 103.157.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fd:f0:9d:30:37:cc:b5:5c:46:4f:7a:18:e1:50:6a:c1:fd:ad:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABFE157E467A6732384B658909A9764D5D88AEC Validity Not Before: May 3 02:17:04 2026 GMT Not After : May 2 02:22:04 2027 GMT Subject: CN=9A8E3D4EB27AAD02D940A09AB78D745EB66E3F13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:ac:9a:9d:ef:54:16:55:43:f1:05:14:91: 04:0c:30:3e:4a:2a:f6:0d:42:78:4b:75:a9:52:46: 52:94:44:e8:f5:2c:d1:57:5c:54:e2:d2:4f:6d:8d: c8:4b:b0:ee:d9:7b:5d:6e:0a:12:38:f2:e9:e3:44: 7f:25:3c:8b:a5:2c:a0:f6:ef:42:9f:e2:0a:b8:09: ab:c4:6b:06:a4:e3:86:3c:25:49:16:fe:8a:a4:32: e5:43:40:4c:b3:dc:b6:4a:2a:f8:1f:fe:13:8c:19: c0:f0:a1:7a:0e:89:11:59:56:6b:57:31:56:d2:67: 54:0c:33:33:eb:97:47:48:26:e6:f0:d4:53:47:ba: a7:95:c9:31:c9:57:b1:50:bd:14:fb:ae:d6:53:7d: a3:bd:b6:7d:11:12:05:35:ac:86:24:fa:44:24:00: 53:bc:1e:c6:80:d1:cb:7c:8d:6a:81:52:d6:f5:42: a9:5c:93:d7:16:28:1d:cd:8c:bc:c5:2f:9a:05:38: 8e:ee:22:f6:4f:f4:64:d0:79:aa:50:d8:4f:cb:8a: 54:c6:7d:a3:b6:63:e7:5b:ea:8c:f3:8d:0f:60:7b: 27:cc:cf:6a:af:ab:a5:91:f3:00:0c:2d:78:46:81: 83:63:5f:f8:57:4a:7e:0f:cb:48:d5:f6:fa:52:5c: 6c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8E:3D:4E:B2:7A:AD:02:D9:40:A0:9A:B7:8D:74:5E:B6:6E:3F:13 X509v3 Authority Key Identifier: keyid:5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.63.0/24 Signature Algorithm: sha256WithRSAEncryption cc:c4:47:d9:b1:14:70:3b:da:51:41:2f:27:76:e7:44:ac:08: e8:fd:e0:fd:54:1e:ef:ab:87:3f:2a:8b:9f:ed:7a:0a:b8:ca: 86:ac:ef:06:0e:12:40:3f:80:9c:c9:c4:0b:a4:07:9b:ce:09: fb:db:71:bb:57:19:47:21:d2:90:0e:58:f0:69:f3:ab:9c:cf: 39:3b:c9:84:7d:e7:de:e6:23:a5:2e:2c:bd:9c:43:50:d1:f2: fe:3d:d2:1d:a3:c8:72:a2:da:d3:95:f0:1e:d7:4d:f3:30:8d: c3:09:c6:19:0d:1a:84:40:d8:e6:ac:32:e7:a2:ae:52:f9:a1: 6d:ff:14:bd:a3:75:12:3b:fd:af:34:6f:db:43:6a:02:28:11: d1:23:42:19:f3:20:c0:59:81:9a:ba:e6:91:a5:00:f4:93:af: c8:1c:4b:45:b8:b2:4f:18:de:60:35:23:44:44:a0:d4:b8:40: e6:71:1c:2d:ca:78:b5:f0:00:e8:26:42:8f:c2:af:08:9c:f9: b4:fb:80:b7:7a:1b:e3:02:7d:13:26:20:cb:c8:22:4b:13:f0: e6:5f:60:86:ec:08:f2:29:0f:93:5f:c9:d5:9e:70:56:52:cd: a6:e8:fd:dd:6c:39:06:c0:1c:4a:83:db:cd:fc:55:57:c9:7e: 5d:0b:e2:64 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFP3wnTA3zLVcRk96GOFQasH9rQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3NjRE NUQ4OEFFQzAeFw0yNjA1MDMwMjE3MDRaFw0yNzA1MDIwMjIyMDRaMDMxMTAvBgNV BAMTKDlBOEUzRDRFQjI3QUFEMDJEOTQwQTA5QUI3OEQ3NDVFQjY2RTNGMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96Kyane9UFlVD8QUUkQQMMD5K KvYNQnhLdalSRlKUROj1LNFXXFTi0k9tjchLsO7Ze11uChI48unjRH8lPIulLKD2 70Kf4gq4CavEawak44Y8JUkW/oqkMuVDQEyz3LZKKvgf/hOMGcDwoXoOiRFZVmtX MVbSZ1QMMzPrl0dIJubw1FNHuqeVyTHJV7FQvRT7rtZTfaO9tn0REgU1rIYk+kQk AFO8HsaA0ct8jWqBUtb1Qqlck9cWKB3NjLzFL5oFOI7uIvZP9GTQeapQ2E/LilTG faO2Y+db6ozzjQ9geyfMz2qvq6WR8wAMLXhGgYNjX/hXSn4Py0jV9vpSXGyJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmo49TrJ6rQLZQKCat410XrZuPxMwHwYDVR0j BBgwFoAUWr/hV+RnpnMjhLZYkJqXZNXYiuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJkMzA1ODctYTdjYS00MTk1LWEzNTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdF NDY3QTY3MzIzODRCNjU4OTA5QTk3NjRENUQ4OEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUJGRTE1N0U0NjdBNjczMjM4NEI2NTg5MDlBOTc2NEQ1RDg4 QUVDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJiZDMwNTg3LWE3Y2EtNDE5NS1h MzU5LTBjMGY2MjdhZjhkYS8wLzMxMzAzMzJlMzEzNTM3MmUzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ50/MA0GCSqG SIb3DQEBCwUAA4IBAQDMxEfZsRRwO9pRQS8ndudErAjo/eD9VB7vq4c/Kouf7XoK uMqGrO8GDhJAP4CcycQLpAebzgn723G7VxlHIdKQDljwafOrnM85O8mEfefe5iOl Liy9nENQ0fL+PdIdo8hyotrTlfAe103zMI3DCcYZDRqEQNjmrDLnoq5S+aFt/xS9 o3USO/2vNG/bQ2oCKBHRI0IZ8yDAWYGauuaRpQD0k6/IHEtFuLJPGN5gNSNERKDU uEDmcRwtyni18ADoJkKPwq8InPm0+4C3ehvjAn0TJiDLyCJLE/DmX2CG7AjyKQ+T X8nVnnBWUs2m6P3dbDkGwBxKg9vN/FVXyX5dC+Jk -----END CERTIFICATE-----Generated at Wed May 13 08:00:12 2026 by rpki-client