$ rpki-client -vvf rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa File: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (raw, json) Hash identifier: 07pLPD2WlKL+vB7ypQ2CjBacLrYgbCjaYdQZk1Lj438= Subject key identifier: E6:3F:DD:B4:6C:61:DE:5E:84:10:22:F8:17:B5:E0:8E:FC:EA:61:01 Certificate issuer: /CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Certificate serial: 140753405D0C31E35AC59F3F6160095C9D66D9DA Authority key identifier: 85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa Signing time: Sun 03 May 2026 02:30:04 +0000 ROA not before: Sun 03 May 2026 02:25:04 +0000 ROA not after: Sun 02 May 2027 02:30:04 +0000 asID: 138096 IP address blocks: 103.124.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:07:53:40:5d:0c:31:e3:5a:c5:9f:3f:61:60:09:5c:9d:66:d9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Validity Not Before: May 3 02:25:04 2026 GMT Not After : May 2 02:30:04 2027 GMT Subject: CN=E63FDDB46C61DE5E841022F817B5E08EFCEA6101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a9:34:eb:2e:f6:dd:1f:04:f1:98:bf:32:78: f5:e3:4b:54:2a:9c:a0:73:da:59:81:97:5f:21:7e: d3:fe:32:a7:85:43:6b:82:f7:3a:5c:a3:35:77:c9: ea:d5:ca:b3:f7:9a:80:2a:ad:e4:71:cc:9f:67:d1: 77:c2:09:09:e4:68:08:74:e6:1f:4e:de:11:f0:2a: 14:d0:80:66:14:74:52:21:72:08:a9:ba:de:4f:04: b7:24:f5:d0:91:b3:26:69:0b:8c:81:84:3d:1e:be: fd:9e:2b:91:d6:ad:36:1a:74:00:b0:c9:33:db:2f: 0d:99:de:11:e4:f9:08:23:1c:eb:4a:05:e2:12:ad: 12:0a:0f:0c:c6:90:ed:69:cd:c3:5d:9d:23:dc:75: 42:99:f7:60:ae:22:6b:6e:48:c7:07:4c:47:83:eb: 9d:8c:84:fe:85:38:ad:93:7a:66:70:c1:ab:a7:7b: eb:18:38:00:e2:46:6e:7c:7a:43:88:c0:48:49:48: bb:a3:38:11:66:70:e4:da:55:30:a2:55:60:d7:df: 9c:11:ed:ce:ff:76:6e:c9:e3:3d:ac:2d:3e:eb:ca: 92:7f:06:30:fc:d5:df:83:00:8f:73:60:80:47:8e: 8b:1a:e9:01:b8:4b:d9:9b:88:60:30:2e:d5:07:67: 8e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:DD:B4:6C:61:DE:5E:84:10:22:F8:17:B5:E0:8E:FC:EA:61:01 X509v3 Authority Key Identifier: keyid:85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.198.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:f4:00:53:8a:dd:2b:60:e4:3d:2b:63:8f:f8:4a:92:0b:fe: b3:9e:44:f1:00:e6:15:4a:bc:97:cf:2a:4b:c9:5a:2b:6d:92: 9a:7e:0f:65:52:6f:35:ec:1f:d4:31:8c:96:96:c8:50:59:fa: 3f:ba:3d:4d:b2:5d:5c:94:36:3e:37:f4:8b:c2:cf:88:ae:a3: c4:f0:9f:c4:08:cb:da:35:e1:a5:85:f7:46:3e:a3:1e:58:ab: 35:2c:74:9b:8b:e1:ba:e0:52:a4:ee:f8:04:a6:78:9c:d9:3b: d2:f9:a6:b1:57:e7:98:b3:1d:da:2f:d6:98:d6:71:b4:c9:16: 02:8b:7c:45:d7:da:27:50:f6:9e:71:c5:cd:3a:5c:ce:ae:32: b3:f2:5b:b8:27:2d:15:7f:c2:06:22:95:0d:92:45:26:dd:1a: bf:af:ec:fe:77:fa:20:c3:0e:44:00:93:77:c5:b4:03:e7:45: ea:8e:34:7e:fe:a9:af:b0:b8:cc:ab:3d:88:57:0c:aa:09:ab: c9:ba:59:f5:16:d9:39:9e:d2:ee:1f:bd:32:fb:cb:72:58:35: 9e:6c:9d:c7:55:1c:f4:7a:1b:b9:f5:83:54:74:dd:78:e7:a7: 42:0f:fb:a5:a9:a7:08:56:1a:1a:fe:38:7f:7d:8a:48:32:14: 1a:fc:36:a6 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUFAdTQF0MMeNaxZ8/YWAJXJ1m2dowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzRUREN0FCM0VGOUExM0EwNzc5RjI2MTI3ODZGNkQy RDdDMDhCRTAeFw0yNjA1MDMwMjI1MDRaFw0yNzA1MDIwMjMwMDRaMDMxMTAvBgNV BAMTKEU2M0ZEREI0NkM2MURFNUU4NDEwMjJGODE3QjVFMDhFRkNFQTYxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSqTTrLvbdHwTxmL8yePXjS1Qq nKBz2lmBl18hftP+MqeFQ2uC9zpcozV3yerVyrP3moAqreRxzJ9n0XfCCQnkaAh0 5h9O3hHwKhTQgGYUdFIhcgiput5PBLck9dCRsyZpC4yBhD0evv2eK5HWrTYadACw yTPbLw2Z3hHk+QgjHOtKBeISrRIKDwzGkO1pzcNdnSPcdUKZ92CuImtuSMcHTEeD 652MhP6FOK2TemZwwaune+sYOADiRm58ekOIwEhJSLujOBFmcOTaVTCiVWDX35wR 7c7/dm7J4z2sLT7rypJ/BjD81d+DAI9zYIBHjosa6QG4S9mbiGAwLtUHZ47dAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU5j/dtGxh3l6EECL4F7XgjvzqYQEwHwYDVR0j BBgwFoAUhT7derPvmhOgd58mEnhvbS18CL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDVkZmY5YjMtOTA0MS00ZGQ2LWI3YWItMDIwNjBkNjVkMDlhLzAvODUzRUREN0FC M0VGOUExM0EwNzc5RjI2MTI3ODZGNkQyRDdDMDhCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTNFREQ3QUIzRUY5QTEzQTA3NzlGMjYxMjc4NkY2RDJEN0Mw OEJFLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ1ZGZmOWIzLTkwNDEtNGRkNi1i N2FiLTAyMDYwZDY1ZDA5YS8wLzMxMzAzMzJlMzEzMjM0MmUzMTM5MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM5MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfMYwDQYJ KoZIhvcNAQELBQADggEBABv0AFOK3Stg5D0rY4/4SpIL/rOeRPEA5hVKvJfPKkvJ Wittkpp+D2VSbzXsH9QxjJaWyFBZ+j+6PU2yXVyUNj439IvCz4iuo8Twn8QIy9o1 4aWF90Y+ox5YqzUsdJuL4brgUqTu+ASmeJzZO9L5prFX55izHdov1pjWcbTJFgKL fEXX2idQ9p5xxc06XM6uMrPyW7gnLRV/wgYilQ2SRSbdGr+v7P53+iDDDkQAk3fF tAPnReqONH7+qa+wuMyrPYhXDKoJq8m6WfUW2Tme0u4fvTL7y3JYNZ5sncdVHPR6 G7n1g1R03Xjnp0IP+6WppwhWGhr+OH99ikgyFBr8NqY= -----END CERTIFICATE-----Generated at Wed May 13 04:19:24 2026 by rpki-client