$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa File: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (raw, json) Hash identifier: 8kH9OYeCGgkpS6ETOYa6DFVI3BcrTxBasG8Wv5iWOP8= Subject key identifier: D7:60:CF:BD:44:14:86:CE:37:6E:C0:5F:9B:F4:88:D1:3A:1C:FD:45 Certificate issuer: /CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Certificate serial: 030D2E0FB03549EBB135B50CE7E06A365B9AE591 Authority key identifier: DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa Signing time: Sun 03 May 2026 02:31:10 +0000 ROA not before: Sun 03 May 2026 02:26:10 +0000 ROA not after: Sun 02 May 2027 02:31:10 +0000 asID: 141596 IP address blocks: 103.160.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:0d:2e:0f:b0:35:49:eb:b1:35:b5:0c:e7:e0:6a:36:5b:9a:e5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Validity Not Before: May 3 02:26:10 2026 GMT Not After : May 2 02:31:10 2027 GMT Subject: CN=D760CFBD441486CE376EC05F9BF488D13A1CFD45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:a8:1b:17:b0:b4:dd:ad:88:e8:e5:44:35: d2:c7:24:f6:62:23:a7:39:1d:41:02:8b:5f:96:9c: d1:a7:8c:d9:e2:b0:6f:43:96:b3:7f:28:76:d9:0d: 3e:b7:c4:b2:c3:5a:81:55:f9:9d:08:a1:e1:d1:29: 37:f9:8b:c4:7d:c1:01:6f:01:c5:63:a2:b5:63:58: 8f:ef:e5:25:9e:92:f0:81:01:15:a8:8c:09:f5:db: e7:8b:61:bb:3b:c5:a2:d4:92:99:6b:9a:f4:9f:13: 66:02:27:f6:8e:5a:26:48:51:2c:a0:90:55:7b:f3: cf:b2:a2:50:08:98:c7:8c:31:4c:43:f8:80:0a:f0: 1c:d8:07:29:27:b1:a2:d1:bc:c7:e1:64:3c:90:19: 03:9f:c7:93:40:17:4a:e8:10:0d:3a:a2:52:07:46: a3:ea:cf:24:1e:72:e6:9b:f3:36:06:1f:a1:75:91: 39:92:c0:ed:8e:20:82:44:89:18:fc:a8:35:10:5e: 20:c8:66:9f:06:0f:a1:00:b5:4d:bd:f0:4d:89:39: 8f:db:ad:14:e3:ad:00:3c:11:75:8b:69:85:75:a3: a2:3c:cb:ed:91:8e:68:25:23:2b:0f:c3:88:de:1e: b7:21:1a:fb:68:31:c3:b5:63:6a:cd:18:5d:46:d2: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:60:CF:BD:44:14:86:CE:37:6E:C0:5F:9B:F4:88:D1:3A:1C:FD:45 X509v3 Authority Key Identifier: keyid:DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.40.0/24 Signature Algorithm: sha256WithRSAEncryption 56:68:bc:e3:59:47:e6:c1:be:b1:ed:45:25:03:55:9f:b6:1c: cc:9b:fa:82:91:3d:da:e4:1e:e4:7b:23:9d:92:a2:56:c8:e0: e6:2f:73:c1:14:e7:50:d0:29:ca:a6:3f:fb:99:13:39:f3:2e: a2:e5:90:a0:fb:14:e0:b0:ce:0d:e0:34:bb:52:97:5c:8c:0b: 31:f4:70:ac:83:b1:3b:c8:c7:27:cf:74:b7:24:10:be:73:a8: 7e:08:17:a4:52:78:60:02:14:20:47:62:8a:86:4b:cf:d1:e1: 29:91:94:f8:c6:07:71:c7:d6:5e:a8:5e:96:5b:9c:25:d6:84: c6:7c:72:df:83:42:40:e5:d8:8c:89:e9:ed:24:91:40:3e:3e: 8f:98:24:b8:4c:9d:f3:45:8e:14:d3:3c:a0:1b:03:bf:15:7a: b4:4c:f9:48:f1:c5:72:a5:39:6a:83:89:91:61:b1:cd:9b:c4: 43:35:aa:32:95:af:02:c8:97:74:60:cf:ce:dd:f4:0b:66:3b: 6a:b4:bd:ea:a0:95:58:b2:4f:9f:25:41:69:79:bf:12:fb:93: 72:ae:1a:3b:c0:67:9b:35:a3:d6:77:38:97:90:57:2c:7e:62: 34:fa:35:89:45:9a:4a:3f:ff:e6:04:9e:16:a0:95:8e:68:95: e7:47:45:28 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAw0uD7A1SeuxNbUM5+BqNlua5ZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2QjdG QjZFNEQwOTAeFw0yNjA1MDMwMjI2MTBaFw0yNzA1MDIwMjMxMTBaMDMxMTAvBgNV BAMTKEQ3NjBDRkJENDQxNDg2Q0UzNzZFQzA1RjlCRjQ4OEQxM0ExQ0ZENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeMqgbF7C03a2I6OVENdLHJPZi I6c5HUECi1+WnNGnjNnisG9DlrN/KHbZDT63xLLDWoFV+Z0IoeHRKTf5i8R9wQFv AcVjorVjWI/v5SWekvCBARWojAn12+eLYbs7xaLUkplrmvSfE2YCJ/aOWiZIUSyg kFV788+yolAImMeMMUxD+IAK8BzYByknsaLRvMfhZDyQGQOfx5NAF0roEA06olIH RqPqzyQecuab8zYGH6F1kTmSwO2OIIJEiRj8qDUQXiDIZp8GD6EAtU298E2JOY/b rRTjrQA8EXWLaYV1o6I8y+2RjmglIysPw4jeHrchGvtoMcO1Y2rNGF1G0m2fAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU12DPvUQUhs43bsBfm/SI0Toc/UUwHwYDVR0j BBgwFoAU3PrNBOlHijbwWM0X3g6mt/tuTQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGEwOTlhZGYtN2UxMi00ZTgzLTk1YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRF OTQ3OEEzNkYwNThDRDE3REUwRUE2QjdGQjZFNEQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0ZBQ0QwNEU5NDc4QTM2RjA1OENEMTdERTBFQTZCN0ZCNkU0 RDA5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRhMDk5YWRmLTdlMTItNGU4My05 NWMyLWRkN2Y3NzQ5NDc4OC8wLzMxMzAzMzJlMzEzNjMwMmUzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzUzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6AoMA0GCSqG SIb3DQEBCwUAA4IBAQBWaLzjWUfmwb6x7UUlA1WfthzMm/qCkT3a5B7keyOdkqJW yODmL3PBFOdQ0CnKpj/7mRM58y6i5ZCg+xTgsM4N4DS7UpdcjAsx9HCsg7E7yMcn z3S3JBC+c6h+CBekUnhgAhQgR2KKhkvP0eEpkZT4xgdxx9ZeqF6WW5wl1oTGfHLf g0JA5diMientJJFAPj6PmCS4TJ3zRY4U0zygGwO/FXq0TPlI8cVypTlqg4mRYbHN m8RDNaoyla8CyJd0YM/O3fQLZjtqtL3qoJVYsk+fJUFpeb8S+5Nyrho7wGebNaPW dziXkFcsfmI0+jWJRZpKP//mBJ4WoJWOaJXnR0Uo -----END CERTIFICATE-----Generated at Wed May 13 03:51:44 2026 by rpki-client