$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa File: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (raw, json) Hash identifier: SxuSRhZVuQ01C/J4fBuk49O3beWTR2sEuK9CbWvLAoU= Subject key identifier: FB:E2:60:9E:05:5F:78:88:C4:35:1B:C9:39:4B:3A:34:02:6A:CC:9B Certificate issuer: /CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A Certificate serial: 2518B508C56401BDDEF02C51F2B958238A7F6925 Authority key identifier: 27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa Signing time: Sun 03 May 2026 02:23:11 +0000 ROA not before: Sun 03 May 2026 02:18:11 +0000 ROA not after: Sun 02 May 2027 02:23:11 +0000 asID: 141099 IP address blocks: 103.156.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:18:b5:08:c5:64:01:bd:de:f0:2c:51:f2:b9:58:23:8a:7f:69:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A Validity Not Before: May 3 02:18:11 2026 GMT Not After : May 2 02:23:11 2027 GMT Subject: CN=FBE2609E055F7888C4351BC9394B3A34026ACC9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:40:73:cb:b2:a1:b4:7c:1a:27:ba:cc:e0: 34:15:ab:1c:af:af:6c:8d:65:f5:44:e6:b3:7c:4b: bb:b1:5f:7a:83:8f:5d:f7:94:4f:02:ec:2a:c0:12: 29:f9:50:83:9e:02:80:bb:56:d6:5a:d9:fd:fa:58: ba:85:f1:a2:b2:49:5c:5b:a2:6f:0d:0e:4e:a6:59: c8:b2:63:49:5c:df:59:cf:98:b2:1f:b9:bd:97:f8: 05:8a:9a:dc:c9:aa:db:f6:72:3d:e4:0a:33:cb:14: 51:02:ad:84:9d:2a:9b:6b:7f:5d:69:b0:c3:8d:ec: b1:4b:14:d1:de:59:63:a8:c2:28:ae:05:87:43:1d: a0:e2:e6:56:10:d7:1a:1b:34:37:87:b1:e8:e8:42: 61:42:08:cd:eb:3c:65:43:b6:43:2b:7e:d3:0a:aa: 4f:b4:70:f5:ad:d5:db:d4:b2:24:2f:9b:28:02:2a: 28:6f:ac:fb:b7:8e:ef:ca:5e:41:0d:8d:35:c7:c5: 76:0f:af:50:e2:01:a2:66:31:0c:69:ac:f5:90:7e: b1:1e:b9:9e:dc:81:b1:62:36:a4:d2:2e:2b:0a:5d: ef:1b:af:66:5a:b3:f9:be:2b:5f:9c:81:e0:41:aa: 4d:64:65:f8:fa:b0:f4:2d:44:c1:23:0e:92:38:c5: c9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E2:60:9E:05:5F:78:88:C4:35:1B:C9:39:4B:3A:34:02:6A:CC:9B X509v3 Authority Key Identifier: keyid:27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.234.0/24 Signature Algorithm: sha256WithRSAEncryption a7:2b:56:4c:4a:5f:dc:64:2a:9d:88:ea:4e:8b:ee:59:3b:05: ad:47:4c:f9:45:5b:40:c1:74:ba:7e:28:49:69:3d:70:20:11: 06:dc:01:d8:ef:b3:ab:01:19:02:6e:5f:22:37:5a:8b:7c:ba: 4f:19:19:16:fd:9b:be:b0:c5:b8:ef:77:c7:8e:6b:22:91:c7: 95:0a:08:3c:c1:79:1d:ac:62:18:fd:0a:a3:97:8d:d8:de:f0: 9b:7c:eb:cb:36:71:ff:5c:1a:50:95:72:2f:2a:80:e9:c7:52: 8d:c9:ef:d7:86:42:1f:ea:8b:a0:ed:47:2f:10:4d:cd:ba:0c: dc:d0:6b:ac:fb:1b:65:b1:34:07:82:ec:8b:c1:ad:53:b2:2b: 05:d4:4f:15:f5:56:ea:b7:cd:97:4d:99:c8:02:6b:de:c3:d9: 92:93:1d:44:b7:d2:e4:f7:03:41:5c:dc:4a:85:bf:43:47:7c: 5c:f5:50:6f:b4:ff:45:91:18:2f:75:eb:1f:a8:0d:1e:08:53: 22:6c:07:15:15:3e:f0:6f:1e:bc:4f:f3:73:6c:a9:71:31:c6: ec:f2:5a:0d:fb:41:ac:f0:ba:1c:eb:52:fd:8b:92:f3:d5:87: 0f:b1:26:48:72:d2:b0:eb:59:c4:47:f3:4e:e6:cf:a0:15:59: 9a:0b:52:99 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJRi1CMVkAb3e8CxR8rlYI4p/aSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc2OURDQTNGODlGMEI0NDgxMTI3RkY0RTdEQjM0RDc5 NTdCOUI5QTAeFw0yNjA1MDMwMjE4MTFaFw0yNzA1MDIwMjIzMTFaMDMxMTAvBgNV BAMTKEZCRTI2MDlFMDU1Rjc4ODhDNDM1MUJDOTM5NEIzQTM0MDI2QUNDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCkBzy7KhtHwaJ7rM4DQVqxyv r2yNZfVE5rN8S7uxX3qDj133lE8C7CrAEin5UIOeAoC7VtZa2f36WLqF8aKySVxb om8NDk6mWciyY0lc31nPmLIfub2X+AWKmtzJqtv2cj3kCjPLFFECrYSdKptrf11p sMON7LFLFNHeWWOowiiuBYdDHaDi5lYQ1xobNDeHsejoQmFCCM3rPGVDtkMrftMK qk+0cPWt1dvUsiQvmygCKihvrPu3ju/KXkENjTXHxXYPr1DiAaJmMQxprPWQfrEe uZ7cgbFiNqTSLisKXe8br2Zas/m+K1+cgeBBqk1kZfj6sPQtRMEjDpI4xcmfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU++JgngVfeIjENRvJOUs6NAJqzJswHwYDVR0j BBgwFoAUJ2nco/ifC0SBEn/059s015V7m5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUzYTEzOGUtYTJiMi00NjA0LWFkNTAtM2NhYjc1MGE3NWU3LzAvMjc2OURDQTNG ODlGMEI0NDgxMTI3RkY0RTdEQjM0RDc5NTdCOUI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNzY5RENBM0Y4OUYwQjQ0ODExMjdGRjRFN0RCMzRENzk1N0I5 QjlBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJlM2ExMzhlLWEyYjItNDYwNC1h ZDUwLTNjYWI3NTBhNzVlNy8wLzMxMzAzMzJlMzEzNTM2MmUzMjMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM5Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnOowDQYJ KoZIhvcNAQELBQADggEBAKcrVkxKX9xkKp2I6k6L7lk7Ba1HTPlFW0DBdLp+KElp PXAgEQbcAdjvs6sBGQJuXyI3Wot8uk8ZGRb9m76wxbjvd8eOayKRx5UKCDzBeR2s Yhj9CqOXjdje8Jt868s2cf9cGlCVci8qgOnHUo3J79eGQh/qi6DtRy8QTc26DNzQ a6z7G2WxNAeC7IvBrVOyKwXUTxX1Vuq3zZdNmcgCa97D2ZKTHUS30uT3A0Fc3EqF v0NHfFz1UG+0/0WRGC916x+oDR4IUyJsBxUVPvBvHrxP83NsqXExxuzyWg37Qazw uhzrUv2LkvPVhw+xJkhy0rDrWcRH807mz6AVWZoLUpk= -----END CERTIFICATE-----Generated at Wed May 13 03:00:01 2026 by rpki-client