$ rpki-client -vvf rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa File: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (raw, json) Hash identifier: j+y6AXj1f3E3oHmAFOLhkBlzYepk37VPnp6D6mtPQkY= Subject key identifier: 06:65:48:F4:24:22:63:6C:52:4E:00:16:AC:29:38:20:AC:D7:74:88 Certificate issuer: /CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Certificate serial: 4A60778929A10EF78F47A41CC19C3DF32DAFE694 Authority key identifier: E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa Signing time: Sun 03 May 2026 02:28:46 +0000 ROA not before: Sun 03 May 2026 02:23:46 +0000 ROA not after: Sun 02 May 2027 02:28:46 +0000 asID: 138821 IP address blocks: 103.136.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:60:77:89:29:a1:0e:f7:8f:47:a4:1c:c1:9c:3d:f3:2d:af:e6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Validity Not Before: May 3 02:23:46 2026 GMT Not After : May 2 02:28:46 2027 GMT Subject: CN=066548F42422636C524E0016AC293820ACD77488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:e5:d6:c3:5d:84:92:76:66:77:67:47:87: d7:35:6a:f8:aa:3d:92:f8:43:c1:b1:d7:f0:a3:ad: 76:42:16:e1:fc:b3:c6:5e:d9:a3:47:f6:09:0a:f4: 31:80:94:00:2a:63:82:76:8e:45:89:39:50:33:06: 48:f9:e8:0a:e4:f9:70:c8:63:3a:12:d6:98:c7:56: e4:18:ae:db:15:ad:fa:2e:57:3d:5d:6a:79:41:65: 06:36:be:70:49:c6:35:26:d4:e1:ca:07:86:06:f1: 95:90:a3:83:63:3e:06:ad:65:dd:5c:58:13:91:f7: 3a:57:70:f3:6d:bd:67:80:e7:79:c6:08:9c:f3:c2: 08:22:c9:2b:ac:d4:4c:01:0c:7c:d5:df:6b:62:77: b3:63:34:f9:2c:52:6d:b6:26:47:9a:55:66:0c:c6: 49:56:40:53:3f:1b:ab:36:b5:22:47:62:ff:d4:36: ca:cf:c6:45:1f:f5:0f:12:02:80:15:e9:bc:e6:a8: e5:d3:40:fd:cb:52:31:85:46:76:12:6b:f9:b7:a1: 77:3d:de:5a:9d:be:6e:53:34:f0:9b:c8:47:3d:80: 99:20:26:2f:95:7d:b2:f1:bc:d3:af:c0:bf:26:29: 04:27:15:1b:3f:cd:da:de:ad:b7:ba:4e:c9:e2:e0: ed:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:65:48:F4:24:22:63:6C:52:4E:00:16:AC:29:38:20:AC:D7:74:88 X509v3 Authority Key Identifier: keyid:E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.14.0/24 Signature Algorithm: sha256WithRSAEncryption 49:95:cf:d9:d5:f9:71:1c:8e:7b:a0:61:d8:c3:63:45:b7:20: e8:c4:db:a8:10:13:13:47:ec:db:f6:ce:e4:62:8e:ed:48:c4: 64:2d:95:37:f9:06:d5:8a:4a:a9:95:c6:04:85:28:0f:9d:61: 05:fe:02:82:60:e5:02:50:06:6c:59:cd:b2:f6:52:c0:55:1b: f3:ad:d4:02:00:41:c0:a8:7a:3e:70:11:e7:c0:64:86:1d:87: 28:a9:53:63:07:05:15:c3:b1:05:03:32:a6:1b:8d:0c:42:63: 0d:e3:bd:7d:91:2e:e0:ef:83:17:2c:e9:7a:c0:9a:c8:5b:ea: 0c:82:cf:ab:e2:d9:e1:5d:df:f2:b7:b5:33:be:5e:9c:17:6c: d4:bd:91:1f:6c:41:1c:5f:42:97:fd:0b:3f:43:6b:df:6d:ee: a6:3f:54:d2:6c:d1:9d:58:01:70:b5:54:7d:85:5f:ce:1b:b9: 4a:16:ce:9f:85:27:16:ff:54:78:e1:a6:88:80:ee:eb:20:a0: 4c:a8:ee:68:98:da:e4:f3:4f:0b:3e:0d:96:d9:0c:5c:fc:3e: 96:0d:11:2b:a6:75:0f:5b:7d:12:31:22:d3:8d:00:6f:3a:26: fa:e2:e5:16:01:d2:21:32:98:62:43:04:0e:d5:eb:33:50:c8: 6a:c8:55:c9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSmB3iSmhDvePR6QcwZw98y2v5pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJE MDA1NjcyQzAeFw0yNjA1MDMwMjIzNDZaFw0yNzA1MDIwMjI4NDZaMDMxMTAvBgNV BAMTKDA2NjU0OEY0MjQyMjYzNkM1MjRFMDAxNkFDMjkzODIwQUNENzc0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCiOXWw12EknZmd2dHh9c1aviq PZL4Q8Gx1/CjrXZCFuH8s8Ze2aNH9gkK9DGAlAAqY4J2jkWJOVAzBkj56Ark+XDI YzoS1pjHVuQYrtsVrfouVz1danlBZQY2vnBJxjUm1OHKB4YG8ZWQo4NjPgatZd1c WBOR9zpXcPNtvWeA53nGCJzzwggiySus1EwBDHzV32tid7NjNPksUm22JkeaVWYM xklWQFM/G6s2tSJHYv/UNsrPxkUf9Q8SAoAV6bzmqOXTQP3LUjGFRnYSa/m3oXc9 3lqdvm5TNPCbyEc9gJkgJi+VfbLxvNOvwL8mKQQnFRs/zdrerbe6Tsni4O2BAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBmVI9CQiY2xSTgAWrCk4IKzXdIgwHwYDVR0j BBgwFoAU6e0HBZ6wH2G/apAusNlfktAFZywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYjFjMWItNjU2Yy00ODlkLTllZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5 RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJEMDA1NjcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUVEMDcwNTlFQjAxRjYxQkY2QTkwMkVCMEQ5NUY5MkQwMDU2 NzJDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQwMWIxYzFiLTY1NmMtNDg5ZC05 ZWQzLWNjYzc3YzgzMDE4ZC8wLzMxMzAzMzJlMzEzMzM2MmUzMTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4gOMA0GCSqG SIb3DQEBCwUAA4IBAQBJlc/Z1flxHI57oGHYw2NFtyDoxNuoEBMTR+zb9s7kYo7t SMRkLZU3+QbVikqplcYEhSgPnWEF/gKCYOUCUAZsWc2y9lLAVRvzrdQCAEHAqHo+ cBHnwGSGHYcoqVNjBwUVw7EFAzKmG40MQmMN4719kS7g74MXLOl6wJrIW+oMgs+r 4tnhXd/yt7Uzvl6cF2zUvZEfbEEcX0KX/Qs/Q2vfbe6mP1TSbNGdWAFwtVR9hV/O G7lKFs6fhScW/1R44aaIgO7rIKBMqO5omNrk808LPg2W2Qxc/D6WDRErpnUPW30S MSLTjQBvOib64uUWAdIhMphiQwQO1eszUMhqyFXJ -----END CERTIFICATE-----Generated at Wed May 13 02:20:17 2026 by rpki-client