$ rpki-client -vvf rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa File: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (raw, json) Hash identifier: 0a0mRTJ0XyRsHSJ+cQxVKt1197ImdVbMp91dK9yMnIY= Subject key identifier: F0:4E:68:A2:CE:FC:9D:33:ED:8B:35:A5:5B:13:38:94:3D:76:9F:C8 Certificate issuer: /CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Certificate serial: 0ABAD071D321707272F893C0B90AE2EC70FD54EB Authority key identifier: CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa Signing time: Sun 03 May 2026 02:28:09 +0000 ROA not before: Sun 03 May 2026 02:23:09 +0000 ROA not after: Sun 02 May 2027 02:28:09 +0000 asID: 149409 IP address blocks: 103.164.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ba:d0:71:d3:21:70:72:72:f8:93:c0:b9:0a:e2:ec:70:fd:54:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Validity Not Before: May 3 02:23:09 2026 GMT Not After : May 2 02:28:09 2027 GMT Subject: CN=F04E68A2CEFC9D33ED8B35A55B1338943D769FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0f:c5:f1:ae:5e:aa:e9:5d:e6:f3:22:8b:1c: bf:77:2e:39:eb:bf:06:7e:95:5a:6e:09:2c:3a:7f: c1:b2:65:ff:44:0d:22:8e:ac:a4:7b:f2:02:fe:7b: 2d:0a:41:46:c0:df:0b:86:68:70:ac:32:d1:8c:c9: f7:12:31:3f:44:58:54:65:4b:e5:e0:75:09:b2:71: 5c:eb:10:da:cc:11:d8:b9:ad:9d:ec:a1:8a:79:10: f6:21:91:56:d5:8b:bc:c4:9b:c7:31:06:70:6f:97: 39:1d:26:0a:6e:b2:8a:8d:b3:6d:81:f1:41:45:54: 5e:db:87:0a:93:bb:f7:f5:5a:b8:17:2e:0b:6d:94: 85:09:4f:9f:20:18:74:df:5a:5e:be:b6:7a:cc:cb: a1:86:16:bf:c3:df:6a:35:02:c4:7c:97:f1:e9:0d: 6c:44:37:0e:14:dd:99:b7:b2:ba:a6:1b:02:8e:3f: 70:e2:bf:5b:74:88:93:5e:b4:e9:a7:af:e5:f3:8a: 99:20:90:e3:5c:e7:dd:84:f8:11:b4:1e:c9:3d:c0: 8f:82:6b:7f:73:4d:e4:89:dd:21:23:fc:63:aa:fc: 7e:b7:db:0a:65:8d:a9:df:a2:25:a0:fe:e5:d5:93: 1c:16:a6:f6:43:f6:73:f3:80:a8:28:96:30:65:d7: b6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4E:68:A2:CE:FC:9D:33:ED:8B:35:A5:5B:13:38:94:3D:76:9F:C8 X509v3 Authority Key Identifier: keyid:CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.69.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:a0:47:3a:e1:ca:78:65:ec:c0:87:7d:0a:4e:b6:b3:07:72: 4c:d2:c8:a7:b3:b1:03:2f:20:4f:99:70:75:3e:b1:fa:53:52: 77:06:29:6c:2c:e0:f4:cc:c7:e3:e5:7f:ff:a9:ab:db:f9:8d: 00:53:96:00:3a:6b:d2:f9:74:01:cf:fd:d5:4f:fe:c6:5b:68: 6c:6a:2e:f0:6a:06:df:ee:29:1c:5b:9e:02:bc:17:af:15:2f: ba:12:7d:51:a8:c2:1a:3a:af:e8:eb:62:09:1e:c9:23:4b:74: 95:4b:78:9a:d3:ed:53:94:11:8b:e1:61:51:11:c1:e5:70:21: 49:09:1b:32:44:42:f0:b0:9a:c0:ef:d2:3a:8a:68:42:eb:6c: 4d:ad:04:37:67:8c:a1:b5:3a:f2:07:b7:b9:c6:76:e9:7a:eb: df:4f:fb:72:df:c2:cb:51:dc:93:6e:9a:20:fd:ff:6f:fb:73: e6:10:6a:83:15:9b:59:0c:c0:f9:28:bb:cf:ba:25:14:3f:79: aa:cc:d3:ac:ac:fc:64:08:e3:db:42:7b:ef:fd:1a:3a:54:94: 9d:48:11:36:75:6f:0a:86:71:c4:f4:fb:21:12:14:cc:c8:d9: 8f:e9:17:c7:51:b6:93:74:f5:b9:f3:00:b3:31:0d:a1:7a:25: 30:9a:1c:e6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCrrQcdMhcHJy+JPAuQri7HD9VOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNG NDhEN0RCRjAeFw0yNjA1MDMwMjIzMDlaFw0yNzA1MDIwMjI4MDlaMDMxMTAvBgNV BAMTKEYwNEU2OEEyQ0VGQzlEMzNFRDhCMzVBNTVCMTMzODk0M0Q3NjlGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeD8Xxrl6q6V3m8yKLHL93Ljnr vwZ+lVpuCSw6f8GyZf9EDSKOrKR78gL+ey0KQUbA3wuGaHCsMtGMyfcSMT9EWFRl S+XgdQmycVzrENrMEdi5rZ3soYp5EPYhkVbVi7zEm8cxBnBvlzkdJgpusoqNs22B 8UFFVF7bhwqTu/f1WrgXLgttlIUJT58gGHTfWl6+tnrMy6GGFr/D32o1AsR8l/Hp DWxENw4U3Zm3srqmGwKOP3Div1t0iJNetOmnr+XzipkgkONc592E+BG0Hsk9wI+C a39zTeSJ3SEj/GOq/H632wpljanfoiWg/uXVkxwWpvZD9nPzgKgoljBl17a/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU8E5oos78nTPtizWlWxM4lD12n8gwHwYDVR0j BBgwFoAUz+nBTsLzGiQeAyKDq+1To/SNfb8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RiNmIzYmMtZmE2NS00OWYzLWFmNjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVD MkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNGNDhEN0RCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkU5QzE0RUMyRjMxQTI0MUUwMzIyODNBQkVENTNBM0Y0OEQ3 REJGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNkYjZiM2JjLWZhNjUtNDlmMy1h ZjYxLTBkNWRjMzkzMzRhMS8wLzMxMzAzMzJlMzEzNjM0MmUzNjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzQzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6RFMA0GCSqG SIb3DQEBCwUAA4IBAQCeoEc64cp4ZezAh30KTrazB3JM0sins7EDLyBPmXB1PrH6 U1J3BilsLOD0zMfj5X//qavb+Y0AU5YAOmvS+XQBz/3VT/7GW2hsai7wagbf7ikc W54CvBevFS+6En1RqMIaOq/o62IJHskjS3SVS3ia0+1TlBGL4WFREcHlcCFJCRsy RELwsJrA79I6imhC62xNrQQ3Z4yhtTryB7e5xnbpeuvfT/ty38LLUdyTbpog/f9v +3PmEGqDFZtZDMD5KLvPuiUUP3mqzNOsrPxkCOPbQnvv/Ro6VJSdSBE2dW8KhnHE 9PshEhTMyNmP6RfHUbaTdPW58wCzMQ2heiUwmhzm -----END CERTIFICATE-----Generated at Wed May 13 06:37:29 2026 by rpki-client