$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa File: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (raw, json) Hash identifier: GtQhQt5lC+popSxKBpEXClSBs/pxIHaZp5GFBcVq7Ds= Subject key identifier: 0D:C5:90:FB:A9:78:37:A2:DB:D1:09:0F:55:C2:E7:D9:A7:B0:27:B5 Certificate issuer: /CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Certificate serial: 28EB5971EBB1D16C4EC640E7867F4E3DED0436DB Authority key identifier: 02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa Signing time: Sun 03 May 2026 02:31:52 +0000 ROA not before: Sun 03 May 2026 02:26:52 +0000 ROA not after: Sun 02 May 2027 02:31:52 +0000 asID: 141064 IP address blocks: 103.155.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:eb:59:71:eb:b1:d1:6c:4e:c6:40:e7:86:7f:4e:3d:ed:04:36:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Validity Not Before: May 3 02:26:52 2026 GMT Not After : May 2 02:31:52 2027 GMT Subject: CN=0DC590FBA97837A2DBD1090F55C2E7D9A7B027B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f0:bf:f6:25:aa:7f:58:98:47:79:e0:23:87: 06:a1:94:d1:66:9d:20:72:62:fe:94:9a:44:11:73: e7:57:0c:b6:45:a7:b1:e6:55:ab:61:d6:f5:be:f6: 9e:e4:5c:8e:00:e5:d0:7f:8c:16:a1:d7:f2:17:69: 87:53:f6:d9:c8:d9:8f:76:d0:68:bc:c6:2a:41:63: bf:9a:a2:8c:4c:3d:6d:48:b7:4a:de:08:1d:3f:57: fa:61:92:69:eb:77:ad:c3:c5:f9:85:89:c4:8b:5e: dd:ef:27:56:af:71:a2:fa:7d:b3:49:b1:25:43:8f: eb:4e:cd:e6:4e:02:ad:8c:72:36:b3:23:37:93:b3: 26:86:ac:6b:42:33:a4:21:bc:c2:22:5d:b8:aa:0c: 4c:fc:db:ed:d5:86:0e:98:a9:4e:de:df:94:d7:05: 88:93:ce:e5:7e:d7:f9:8e:9c:b1:af:96:d4:96:9f: 70:f8:37:3c:08:ea:de:b1:95:6e:8b:51:b1:da:9f: d3:03:f8:01:73:02:62:18:96:a3:ef:9b:5c:c2:70: e4:52:22:b7:80:cf:78:ba:c6:82:0b:70:4d:e9:38: ed:66:f2:77:cb:86:be:94:89:84:0f:00:ed:48:f4: 38:e9:93:20:d5:de:6e:76:87:d7:6f:db:ca:58:78: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C5:90:FB:A9:78:37:A2:DB:D1:09:0F:55:C2:E7:D9:A7:B0:27:B5 X509v3 Authority Key Identifier: keyid:02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.166.0/24 Signature Algorithm: sha256WithRSAEncryption ce:75:98:2d:73:eb:3d:0f:d6:ac:47:7e:60:f5:0c:5b:b9:e3: ac:b1:65:17:f7:0d:ce:bc:ad:40:10:40:3b:a6:8f:be:89:82: d7:83:59:1c:c2:93:ad:b5:7e:1c:61:a7:c9:97:b6:8e:8c:8b: 63:0f:0f:32:d9:77:6e:20:8d:8d:ee:27:f9:54:f6:d6:0e:ea: 9a:61:a1:88:93:e0:50:7d:ee:43:10:1b:c6:4c:4e:6b:98:e3: 3d:70:2c:7c:fe:1c:7d:a2:db:e8:5b:50:30:07:a2:e0:3f:c9: 0c:eb:d0:42:f3:38:c6:29:71:47:ca:d8:0f:ba:34:fa:3d:5a: 01:5f:98:2f:5f:81:f0:a9:42:3b:fc:8e:1e:56:c6:23:f7:8c: e5:0c:d2:b4:84:08:b5:ed:94:85:46:7f:8f:b8:e4:6d:71:0b: 08:db:95:d9:30:54:fc:b3:ac:3b:4e:b6:f4:32:ca:f5:85:a6: b3:aa:08:68:60:16:1a:9a:13:28:0b:4c:c9:66:eb:4d:cb:ab: 23:6f:90:27:ef:74:0a:3c:8b:ec:cd:9b:60:e9:fc:db:89:90: 8f:2d:41:b9:0f:f4:3d:e1:84:a1:56:5f:4e:fe:e4:74:d6:5b: da:7e:26:e6:bf:27:ce:32:0d:76:1a:c0:d0:20:cc:89:20:5c: cd:55:d7:00 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKOtZceux0WxOxkDnhn9OPe0ENtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNBMDdD MjE4QTVBNjAeFw0yNjA1MDMwMjI2NTJaFw0yNzA1MDIwMjMxNTJaMDMxMTAvBgNV BAMTKDBEQzU5MEZCQTk3ODM3QTJEQkQxMDkwRjU1QzJFN0Q5QTdCMDI3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8L/2Jap/WJhHeeAjhwahlNFm nSByYv6UmkQRc+dXDLZFp7HmVath1vW+9p7kXI4A5dB/jBah1/IXaYdT9tnI2Y92 0Gi8xipBY7+aooxMPW1It0reCB0/V/phkmnrd63DxfmFicSLXt3vJ1avcaL6fbNJ sSVDj+tOzeZOAq2McjazIzeTsyaGrGtCM6QhvMIiXbiqDEz82+3Vhg6YqU7e35TX BYiTzuV+1/mOnLGvltSWn3D4NzwI6t6xlW6LUbHan9MD+AFzAmIYlqPvm1zCcORS IreAz3i6xoILcE3pOO1m8nfLhr6UiYQPAO1I9DjpkyDV3m52h9dv28pYeE4xAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUDcWQ+6l4N6Lb0QkPVcLn2aewJ7UwHwYDVR0j BBgwFoAUAos+olHDpZevVdTbPvQ6B8IYpaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM2YjJiZDctZDdmMS00ODE1LWE2MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1 MUMzQTU5N0FGNTVENERCM0VGNDNBMDdDMjE4QTVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCM0VBMjUxQzNBNTk3QUY1NUQ0REIzRUY0M0EwN0MyMThB NUE2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRjNmIyYmQ3LWQ3ZjEtNDgxNS1h NjBhLWNhZDU0MDI5Y2U4OC8wLzMxMzAzMzJlMzEzNTM1MmUzMTM2MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM2MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnm6YwDQYJ KoZIhvcNAQELBQADggEBAM51mC1z6z0P1qxHfmD1DFu546yxZRf3Dc68rUAQQDum j76JgteDWRzCk621fhxhp8mXto6Mi2MPDzLZd24gjY3uJ/lU9tYO6pphoYiT4FB9 7kMQG8ZMTmuY4z1wLHz+HH2i2+hbUDAHouA/yQzr0ELzOMYpcUfK2A+6NPo9WgFf mC9fgfCpQjv8jh5WxiP3jOUM0rSECLXtlIVGf4+45G1xCwjbldkwVPyzrDtOtvQy yvWFprOqCGhgFhqaEygLTMlm603LqyNvkCfvdAo8i+zNm2Dp/NuJkI8tQbkP9D3h hKFWX07+5HTWW9p+Jua/J84yDXYawNAgzIkgXM1V1wA= -----END CERTIFICATE-----Generated at Wed May 13 08:48:58 2026 by rpki-client