$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa File: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (raw, json) Hash identifier: qwEnHxrWVyiK94N8U1nG/pG5hFflP0C0qwS5eIrzLng= Subject key identifier: C5:7C:D8:8F:92:83:F6:8A:60:D8:42:95:9C:B3:E0:B1:15:10:3E:65 Certificate issuer: /CN=96B0F07CEC87D39FE6D6CF0277109E0C46B50F65 Certificate serial: 4F837AB83E17D3A8CAD6B5C9FC4192D29FD6FA9D Authority key identifier: 96:B0:F0:7C:EC:87:D3:9F:E6:D6:CF:02:77:10:9E:0C:46:B5:0F:65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa Signing time: Sun 03 May 2026 02:31:11 +0000 ROA not before: Sun 03 May 2026 02:26:11 +0000 ROA not after: Sun 02 May 2027 02:31:11 +0000 asID: 141145 IP address blocks: 103.159.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:83:7a:b8:3e:17:d3:a8:ca:d6:b5:c9:fc:41:92:d2:9f:d6:fa:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96B0F07CEC87D39FE6D6CF0277109E0C46B50F65 Validity Not Before: May 3 02:26:11 2026 GMT Not After : May 2 02:31:11 2027 GMT Subject: CN=C57CD88F9283F68A60D842959CB3E0B115103E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:7f:71:59:e0:79:1c:d3:d7:73:c8:a6:29: 75:0d:55:be:7d:52:09:b7:7b:58:1b:52:50:e8:96: 9f:38:cb:d4:6e:08:cd:e4:4e:07:b0:1b:5d:03:60: ae:5d:b9:19:91:87:19:79:e1:e2:f3:25:02:16:a3: b8:d0:f9:82:3d:f3:ce:14:ac:aa:ff:33:a0:77:12: 87:b0:39:7b:51:27:8f:f5:59:bf:ba:6d:37:c7:75: b5:11:93:e0:a8:22:19:ae:7c:40:28:d1:21:a4:87: 73:79:cc:64:35:51:59:60:37:40:14:77:74:d9:db: f3:51:d3:d3:eb:ea:8b:72:e1:51:af:49:8a:1b:9a: ac:af:34:3f:c5:6f:ec:fc:82:a3:40:cc:32:f2:b8: af:34:47:76:a7:6e:ed:10:40:95:39:88:d1:1b:74: ce:d6:f3:06:46:4b:ff:6d:97:92:32:c3:95:cc:14: 2d:00:83:9d:81:ef:32:04:12:c8:64:c5:0c:ee:4c: b9:fd:cd:96:b6:ff:f0:7d:48:d1:10:09:36:6d:f2: d6:51:67:b8:55:ca:03:f4:4d:f9:b0:45:44:ea:82: 71:51:ed:e0:f0:47:3f:cf:d4:b1:73:8a:31:25:a8: 3e:69:cf:61:06:29:52:7c:26:b9:e9:50:6b:b1:7f: 30:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7C:D8:8F:92:83:F6:8A:60:D8:42:95:9C:B3:E0:B1:15:10:3E:65 X509v3 Authority Key Identifier: keyid:96:B0:F0:7C:EC:87:D3:9F:E6:D6:CF:02:77:10:9E:0C:46:B5:0F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.194.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:9e:30:5e:75:d0:c8:04:98:b0:3f:b3:68:8f:4d:b7:28:0f: 43:d9:05:88:8f:6d:f4:ce:e7:92:6d:c4:bb:b2:cf:8d:f8:a7: 79:16:05:5b:00:dd:6c:85:a5:2b:1f:9c:3b:d6:23:50:30:c8: 7f:e1:37:c4:cf:6c:59:85:7c:9f:e8:84:83:ab:98:28:17:59: 97:85:88:96:c7:88:52:53:c3:b6:aa:65:03:41:79:b2:e1:64: 90:97:41:9c:0a:ef:63:f0:44:51:b5:a5:78:04:ad:f8:f0:c7: 4f:d1:d8:f8:23:56:54:bb:f4:4a:96:e7:51:e2:66:d5:14:25: 38:3a:22:ff:74:b9:b4:4f:e1:b4:48:cd:28:d8:34:a6:91:0d: 93:ad:20:9a:1b:0a:41:43:c4:f2:4a:9a:db:4e:cf:c5:92:ce: 40:19:ab:5f:7b:84:18:88:5e:0d:09:1c:3e:11:02:fb:b4:a7: 74:78:6c:cd:63:10:62:4b:f2:8b:b3:9d:12:e8:aa:2c:5e:13: 0f:5d:53:74:25:6b:e7:b0:4e:4d:51:26:97:9f:7d:09:b0:46: b5:75:fe:c5:4a:94:3b:22:df:17:8f:be:bc:98:a4:6b:51:ea: bc:be:a2:76:92:7c:b7:f2:17:74:58:1a:d4:36:a9:a6:8e:ba: 6c:89:c8:ff -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUT4N6uD4X06jK1rXJ/EGS0p/W+p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZCMEYwN0NFQzg3RDM5RkU2RDZDRjAyNzcxMDlFMEM0 NkI1MEY2NTAeFw0yNjA1MDMwMjI2MTFaFw0yNzA1MDIwMjMxMTFaMDMxMTAvBgNV BAMTKEM1N0NEODhGOTI4M0Y2OEE2MEQ4NDI5NTlDQjNFMEIxMTUxMDNFNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9n9xWeB5HNPXc8imKXUNVb59 Ugm3e1gbUlDolp84y9RuCM3kTgewG10DYK5duRmRhxl54eLzJQIWo7jQ+YI9884U rKr/M6B3EoewOXtRJ4/1Wb+6bTfHdbURk+CoIhmufEAo0SGkh3N5zGQ1UVlgN0AU d3TZ2/NR09Pr6oty4VGvSYobmqyvND/Fb+z8gqNAzDLyuK80R3anbu0QQJU5iNEb dM7W8wZGS/9tl5Iyw5XMFC0Ag52B7zIEEshkxQzuTLn9zZa2//B9SNEQCTZt8tZR Z7hVygP0TfmwRUTqgnFR7eDwRz/P1LFzijElqD5pz2EGKVJ8JrnpUGuxfzA/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUxXzYj5KD9opg2EKVnLPgsRUQPmUwHwYDVR0j BBgwFoAUlrDwfOyH05/m1s8CdxCeDEa1D2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGEyMzhhNjItNmE5Ni00M2JjLTg3YWYtMDJkYjY0MWY3MTA5LzAvOTZCMEYwN0NF Qzg3RDM5RkU2RDZDRjAyNzcxMDlFMEM0NkI1MEY2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkIwRjA3Q0VDODdEMzlGRTZENkNGMDI3NzEwOUUwQzQ2QjUw RjY1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRhMjM4YTYyLTZhOTYtNDNiYy04 N2FmLTAyZGI2NDFmNzEwOS8wLzMxMzAzMzJlMzEzNTM5MmUzMTM5MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMTM0MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnn8IwDQYJ KoZIhvcNAQELBQADggEBAB+eMF510MgEmLA/s2iPTbcoD0PZBYiPbfTO55JtxLuy z434p3kWBVsA3WyFpSsfnDvWI1AwyH/hN8TPbFmFfJ/ohIOrmCgXWZeFiJbHiFJT w7aqZQNBebLhZJCXQZwK72PwRFG1pXgErfjwx0/R2PgjVlS79EqW51HiZtUUJTg6 Iv90ubRP4bRIzSjYNKaRDZOtIJobCkFDxPJKmttOz8WSzkAZq197hBiIXg0JHD4R Avu0p3R4bM1jEGJL8ouznRLoqixeEw9dU3Qla+ewTk1RJpeffQmwRrV1/sVKlDsi 3xePvryYpGtR6ry+onaSfLfyF3RYGtQ2qaaOumyJyP8= -----END CERTIFICATE-----Generated at Wed May 13 13:28:17 2026 by rpki-client