$ rpki-client -vvf rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa File: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (raw, json) Hash identifier: lVbFef/6mdjInFTMm3cO34cZeIrGM0mKpOLsVw5+rAw= Subject key identifier: 02:F5:96:1E:FD:BF:C7:91:DB:FA:5F:5A:B7:1B:F1:3F:56:DB:AD:97 Certificate issuer: /CN=65177A3236E4CDE9DEABA6D24D81798C0342B359 Certificate serial: 60DC398D42A546A9DD2B2B91B818802A0279A71E Authority key identifier: 65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa Signing time: Sun 03 May 2026 02:28:52 +0000 ROA not before: Sun 03 May 2026 02:23:52 +0000 ROA not after: Sun 02 May 2027 02:28:52 +0000 asID: 150186 IP address blocks: 103.146.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:dc:39:8d:42:a5:46:a9:dd:2b:2b:91:b8:18:80:2a:02:79:a7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65177A3236E4CDE9DEABA6D24D81798C0342B359 Validity Not Before: May 3 02:23:52 2026 GMT Not After : May 2 02:28:52 2027 GMT Subject: CN=02F5961EFDBFC791DBFA5F5AB71BF13F56DBAD97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fa:31:49:3d:ca:3d:81:0b:03:f8:ed:fc:36: cf:28:ca:d5:40:07:7d:db:51:e2:c6:4b:c9:0e:f1: 56:66:d5:30:48:68:a8:13:7a:37:60:ec:a3:43:e7: 6d:09:67:19:0b:5d:16:ca:f4:5d:a2:f3:53:e5:00: d7:1b:55:e3:e0:3c:c3:d0:71:52:bf:9b:af:1f:cb: c5:09:db:a1:25:1f:b0:12:ce:6e:ed:f2:e8:90:72: f6:6a:87:ee:97:bf:7a:45:19:54:75:69:84:64:cc: 77:fa:f9:d0:53:52:0e:d8:83:71:ef:7f:7e:d9:ae: 13:e2:6e:09:dc:a2:f9:a9:96:00:1d:06:c5:7f:eb: d4:75:d2:80:f1:38:df:0f:40:46:b9:61:49:aa:8a: cd:48:ba:07:c5:81:54:15:da:77:34:06:68:53:bd: 78:12:7c:9f:3a:66:1b:65:69:f2:c8:f3:ad:56:05: 74:5f:82:a7:42:48:56:c3:74:b7:84:b4:24:37:7f: fa:bb:88:28:1a:99:d3:20:d6:b2:fc:50:3f:3c:f0: 56:c5:ce:cb:1e:7f:d3:2f:e7:6d:92:12:f0:7c:32: f8:35:c8:a5:ad:2b:9b:3d:f9:e6:7c:82:3a:3c:4e: ae:f5:fb:ff:8e:d2:9e:c7:ac:0c:03:22:18:40:e0: 2b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F5:96:1E:FD:BF:C7:91:DB:FA:5F:5A:B7:1B:F1:3F:56:DB:AD:97 X509v3 Authority Key Identifier: keyid:65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.144.0/24 Signature Algorithm: sha256WithRSAEncryption 85:12:6e:c6:b7:fa:1a:7d:26:c8:74:bf:32:23:b2:e3:4c:f3: 30:27:24:d1:7a:3a:a4:67:42:7f:f9:a9:83:30:08:2a:f5:de: 27:cc:96:71:84:5e:70:61:62:eb:0a:03:c7:4c:d5:ec:59:56: 8d:ba:5d:d6:33:bc:8d:66:30:2b:04:c2:f3:b6:c7:77:5e:b7: 9e:ee:c6:9e:16:8d:e1:56:bc:6f:b4:22:c0:7f:63:1b:e9:a2: 15:88:f8:13:98:fb:e9:04:5e:8b:ae:0c:0b:dc:02:6c:a5:12: 19:f0:25:42:fb:ac:dd:33:e1:d8:ed:8f:4b:9c:45:f4:56:60: c8:cc:0c:7f:72:2a:e8:dd:e7:11:2c:f1:3e:da:6e:48:a0:c4: dc:0e:95:3f:8d:c8:34:44:f6:6e:b8:50:23:41:f0:45:e8:66: 7b:44:50:df:14:0d:c5:86:d1:fb:39:52:5d:73:1a:3a:cd:c3: da:b7:0b:d0:82:f2:6c:8c:db:75:b6:8a:b6:31:23:ab:7c:5d: 77:34:11:18:29:78:49:2b:11:63:92:25:24:c8:f4:5b:27:0d: 72:72:1d:8c:07:17:52:16:9f:04:90:f0:01:35:7a:55:e3:1a: 98:7e:5a:50:94:b3:cc:e0:ad:23:f1:85:17:cb:09:f0:f2:6f: f4:c1:c4:a0 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYNw5jUKlRqndKyuRuBiAKgJ5px4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxNzdBMzIzNkU0Q0RFOURFQUJBNkQyNEQ4MTc5OEMw MzQyQjM1OTAeFw0yNjA1MDMwMjIzNTJaFw0yNzA1MDIwMjI4NTJaMDMxMTAvBgNV BAMTKDAyRjU5NjFFRkRCRkM3OTFEQkZBNUY1QUI3MUJGMTNGNTZEQkFEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR+jFJPco9gQsD+O38Ns8oytVA B33bUeLGS8kO8VZm1TBIaKgTejdg7KND520JZxkLXRbK9F2i81PlANcbVePgPMPQ cVK/m68fy8UJ26ElH7ASzm7t8uiQcvZqh+6Xv3pFGVR1aYRkzHf6+dBTUg7Yg3Hv f37ZrhPibgncovmplgAdBsV/69R10oDxON8PQEa5YUmqis1IugfFgVQV2nc0BmhT vXgSfJ86ZhtlafLI861WBXRfgqdCSFbDdLeEtCQ3f/q7iCgamdMg1rL8UD888FbF zssef9Mv522SEvB8Mvg1yKWtK5s9+eZ8gjo8Tq71+/+O0p7HrAwDIhhA4Cs9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUAvWWHv2/x5Hb+l9atxvxP1bbrZcwHwYDVR0j BBgwFoAUZRd6Mjbkzeneq6bSTYF5jANCs1kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA2MTQxNjMtNGNhNC00OTM2LWJmOGItODRkOGMyZDFmMDJkLzAvNjUxNzdBMzIz NkU0Q0RFOURFQUJBNkQyNEQ4MTc5OEMwMzQyQjM1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NTE3N0EzMjM2RTRDREU5REVBQkE2RDI0RDgxNzk4QzAzNDJC MzU5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQwNjE0MTYzLTRjYTQtNDkzNi1i ZjhiLTg0ZDhjMmQxZjAyZC8wLzMxMzAzMzJlMzEzNDM2MmUzMTM0MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzMTM4MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnkpAwDQYJ KoZIhvcNAQELBQADggEBAIUSbsa3+hp9Jsh0vzIjsuNM8zAnJNF6OqRnQn/5qYMw CCr13ifMlnGEXnBhYusKA8dM1exZVo26XdYzvI1mMCsEwvO2x3det57uxp4WjeFW vG+0IsB/YxvpohWI+BOY++kEXouuDAvcAmylEhnwJUL7rN0z4djtj0ucRfRWYMjM DH9yKujd5xEs8T7abkigxNwOlT+NyDRE9m64UCNB8EXoZntEUN8UDcWG0fs5Ul1z GjrNw9q3C9CC8myM23W2irYxI6t8XXc0ERgpeEkrEWOSJSTI9FsnDXJyHYwHF1IW nwSQ8AE1elXjGph+WlCUs8zgrSPxhRfLCfDyb/TBxKA= -----END CERTIFICATE-----Generated at Wed May 13 12:08:23 2026 by rpki-client