$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa File: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (raw, json) Hash identifier: PjTS4Hn+0nQcRzsQo6Ms0LRYKKTZlFXIqpYw+ixRnkk= Subject key identifier: D6:B9:55:F5:93:F2:DC:16:65:38:0B:57:F9:79:C7:3D:29:1D:26:10 Certificate issuer: /CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Certificate serial: 792FA39DC6643E2A26CE3FC379E8AC3AD1018C85 Authority key identifier: 9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa Signing time: Sun 03 May 2026 02:28:00 +0000 ROA not before: Sun 03 May 2026 02:23:00 +0000 ROA not after: Sun 02 May 2027 02:28:00 +0000 asID: 140470 IP address blocks: 103.159.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2f:a3:9d:c6:64:3e:2a:26:ce:3f:c3:79:e8:ac:3a:d1:01:8c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Validity Not Before: May 3 02:23:00 2026 GMT Not After : May 2 02:28:00 2027 GMT Subject: CN=D6B955F593F2DC1665380B57F979C73D291D2610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:0b:48:9a:76:2d:ec:81:06:11:e7:f5:55: d4:ab:29:2a:8a:6e:ed:96:81:28:17:24:35:d5:42: 55:f2:d4:a0:5a:a4:dd:54:66:39:23:c3:0e:76:fc: 22:63:90:3b:4a:f1:8e:b4:21:35:44:9d:51:12:a7: 05:2e:61:4d:91:67:10:a7:36:ba:67:c4:9b:91:f7: 94:d5:f2:0b:ee:ef:37:98:67:c4:84:3a:de:ea:18: ae:57:eb:8f:1a:ec:92:3a:dd:26:00:18:28:50:06: 1f:c3:1d:bf:6c:3a:5a:66:60:91:e4:4f:bf:ff:82: 25:38:a2:1d:a0:ea:43:09:61:5b:9e:e1:45:82:27: 3b:d1:6f:d5:da:21:7d:54:3d:f6:28:58:3c:f5:6d: 66:b1:63:03:be:8d:9d:77:85:b8:ea:f3:6f:60:3b: a5:81:60:38:7b:a5:78:b2:22:b7:d2:32:55:28:07: 61:da:ff:6b:25:15:50:25:73:bf:80:d0:95:56:af: a8:df:6b:98:08:ac:a6:df:20:fc:77:a2:50:06:fe: 6b:73:f6:40:34:14:e0:f9:16:80:0c:a0:c4:5c:b6: 6e:bc:35:b3:f2:c8:7e:2e:3d:77:01:81:5a:ca:32: ce:88:78:b9:cf:e8:ab:82:58:0b:be:3c:91:62:2c: ad:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B9:55:F5:93:F2:DC:16:65:38:0B:57:F9:79:C7:3D:29:1D:26:10 X509v3 Authority Key Identifier: keyid:9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.196.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:06:6d:c8:11:82:fb:38:98:46:48:4e:de:09:72:0a:c6:12: 01:df:f4:06:a4:8c:d7:5a:08:ff:1e:ae:c8:71:64:8b:08:16: a3:94:26:2c:24:b6:68:05:7a:c2:ca:c6:87:51:bd:9b:f5:7b: 7a:e3:4f:b9:0e:c9:fa:8f:2a:1d:ef:f0:51:2a:ad:e9:ef:8e: 29:38:60:cf:ac:fc:5f:0f:45:31:94:73:e7:b5:37:a7:d7:32: b7:34:87:29:42:ae:18:1c:b7:c4:78:d7:82:b1:07:ee:ed:09: 52:59:fa:32:6d:04:ec:1d:c4:f0:df:7f:1a:04:40:5a:89:34: 69:43:f2:ba:e7:66:ae:e3:e2:fa:b4:0f:0b:b9:4f:d0:0a:11: e5:ef:68:47:6a:b6:73:1a:c4:de:42:e1:16:3d:9f:dd:c3:59: b8:ad:79:b8:4f:86:8f:77:19:90:fb:80:b3:c3:83:2d:1e:bc: 21:0b:37:59:cb:f0:b5:fa:9d:aa:e4:9b:c3:0d:74:b9:af:8c: 15:81:a3:1b:88:b2:74:b0:34:2e:6e:e7:95:a5:49:c0:e6:91: 57:35:2e:da:4d:9b:b6:a6:d8:20:86:eb:56:c7:c9:6a:8a:7f: 0e:f5:27:7b:a9:a3:b3:6e:11:02:25:1c:33:33:f2:04:27:43: 76:f8:b2:21 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUeS+jncZkPiomzj/DeeisOtEBjIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVERkE2 QUQxNEYxMzAeFw0yNjA1MDMwMjIzMDBaFw0yNzA1MDIwMjI4MDBaMDMxMTAvBgNV BAMTKEQ2Qjk1NUY1OTNGMkRDMTY2NTM4MEI1N0Y5NzlDNzNEMjkxRDI2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVQtImnYt7IEGEef1VdSrKSqK bu2WgSgXJDXVQlXy1KBapN1UZjkjww52/CJjkDtK8Y60ITVEnVESpwUuYU2RZxCn NrpnxJuR95TV8gvu7zeYZ8SEOt7qGK5X648a7JI63SYAGChQBh/DHb9sOlpmYJHk T7//giU4oh2g6kMJYVue4UWCJzvRb9XaIX1UPfYoWDz1bWaxYwO+jZ13hbjq829g O6WBYDh7pXiyIrfSMlUoB2Ha/2slFVAlc7+A0JVWr6jfa5gIrKbfIPx3olAG/mtz 9kA0FOD5FoAMoMRctm68NbPyyH4uPXcBgVrKMs6IeLnP6KuCWAu+PJFiLK2RAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU1rlV9ZPy3BZlOAtX+XnHPSkdJhAwHwYDVR0j BBgwFoAUmjRyQenaGLC7dI5VWPhd+mrRTxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NkZDU3NzQtMzBkZC00YTAwLWIxYTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFF OURBMThCMEJCNzQ4RTU1NThGODVERkE2QUQxNEYxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTM0NzI0MUU5REExOEIwQkI3NDhFNTU1OEY4NURGQTZBRDE0 RjEzLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNjZGQ1Nzc0LTMwZGQtNGEwMC1i MWE5LTliMTI4MjY5MzBjMi8wLzMxMzAzMzJlMzEzNTM5MmUzMTM5MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM3MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnn8QwDQYJ KoZIhvcNAQELBQADggEBAG4GbcgRgvs4mEZITt4JcgrGEgHf9AakjNdaCP8ershx ZIsIFqOUJiwktmgFesLKxodRvZv1e3rjT7kOyfqPKh3v8FEqrenvjik4YM+s/F8P RTGUc+e1N6fXMrc0hylCrhgct8R414KxB+7tCVJZ+jJtBOwdxPDffxoEQFqJNGlD 8rrnZq7j4vq0Dwu5T9AKEeXvaEdqtnMaxN5C4RY9n93DWbitebhPho93GZD7gLPD gy0evCELN1nL8LX6narkm8MNdLmvjBWBoxuIsnSwNC5u55WlScDmkVc1LtpNm7am 2CCG61bHyWqKfw71J3upo7NuEQIlHDMz8gQnQ3b4siE= -----END CERTIFICATE-----Generated at Wed May 13 13:24:02 2026 by rpki-client