$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa File: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (raw, json) Hash identifier: HpCznd8LAemIm49TlwLV1GhAVKIU4sZ5BY+7TeR1EA4= Subject key identifier: 6E:B9:2E:96:C5:E9:9A:9B:1E:FA:FD:20:70:B7:D1:F7:3B:95:24:35 Certificate issuer: /CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Certificate serial: 4C9FB5B4535A7978B5AD9636A3B07D34EB2B8760 Authority key identifier: 14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa Signing time: Sun 03 May 2026 02:31:57 +0000 ROA not before: Sun 03 May 2026 02:26:57 +0000 ROA not after: Sun 02 May 2027 02:31:57 +0000 asID: 133800 IP address blocks: 103.89.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9f:b5:b4:53:5a:79:78:b5:ad:96:36:a3:b0:7d:34:eb:2b:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Validity Not Before: May 3 02:26:57 2026 GMT Not After : May 2 02:31:57 2027 GMT Subject: CN=6EB92E96C5E99A9B1EFAFD2070B7D1F73B952435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:a3:13:c0:68:c6:94:fd:c2:19:90:72:12: 1b:a8:c1:73:c0:f2:b1:dc:e9:8f:e1:ba:ac:01:f6: ee:94:a7:62:5f:e4:24:43:76:da:49:d9:c0:44:61: a0:51:dd:00:b2:a7:1f:ba:50:45:a6:8d:33:fc:97: 9e:95:6d:c8:7a:d9:0a:94:fa:ec:76:09:5b:d8:95: 8f:c8:ca:55:80:5e:f6:02:ff:b9:be:f5:e3:21:08: 63:ab:23:0b:2f:af:fa:fa:52:d4:62:f7:47:13:ec: c6:2f:08:dd:55:25:35:09:5d:c0:f4:71:ab:92:5a: f2:90:15:05:f1:3c:c1:58:22:fa:30:1a:96:14:d2: 42:80:09:f6:46:bf:15:10:69:f8:01:e9:0f:a5:08: ed:50:4b:8b:4d:8c:cd:3e:9e:7f:8f:c7:50:11:a8: 1e:ff:14:7d:5f:ce:88:90:2c:99:07:9e:8c:ef:6c: 92:fc:30:21:76:a3:b6:02:3e:36:b0:b9:ca:ec:b8: 1d:2e:0c:2b:cf:f0:36:f9:8c:66:af:bb:56:7d:dd: c4:32:d8:d6:22:2e:42:e7:09:bc:18:a3:40:8a:87: b7:3c:ec:3a:31:0d:1a:65:a9:11:65:e6:7d:d0:87: 1d:91:03:98:90:e5:1d:cb:43:1b:48:ee:13:84:78: 99:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B9:2E:96:C5:E9:9A:9B:1E:FA:FD:20:70:B7:D1:F7:3B:95:24:35 X509v3 Authority Key Identifier: keyid:14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.165.0/24 Signature Algorithm: sha256WithRSAEncryption 32:4f:48:55:c6:3f:f1:6d:4d:5d:b9:c7:71:fe:0e:1d:c2:98: de:49:24:d0:3d:4e:ee:3e:28:eb:55:8c:81:0c:e5:f5:d4:eb: 6e:34:b2:20:f2:17:32:a2:21:04:8c:2e:a0:57:12:f6:bd:2e: 8e:64:46:1d:0e:ee:73:2c:96:14:51:b2:ce:56:e3:d5:ab:60: fe:b3:df:d3:4f:ad:12:b1:fd:ee:38:44:4c:a6:ad:d5:93:23: 5b:7d:a3:16:96:31:b1:48:1b:bd:57:dd:57:25:58:78:ad:a4: 3c:09:b7:c7:02:41:eb:0a:ff:76:69:7e:56:bb:2e:7c:4b:9e: c8:63:be:01:e8:ae:c7:74:65:9b:a8:92:7e:bc:94:9a:b9:9c: ac:5b:9a:a7:43:b7:65:f7:2c:d8:f1:14:b4:f5:af:71:3d:b4: 9a:d8:66:11:73:e9:01:de:45:e9:bc:23:a9:81:68:85:79:dd: 75:31:96:71:fc:02:28:26:15:e2:c2:61:40:35:99:94:2b:21: 6f:2d:c1:75:35:3b:4c:79:d2:12:98:d1:f7:f3:85:8d:e1:9b: 17:f2:d4:4a:6e:9b:b7:4c:36:2f:d4:a1:92:6e:98:04:ca:b7: da:f6:f6:18:75:e7:d2:0d:47:c2:c1:fe:c1:81:ab:8c:11:d6: dd:0f:25:00 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTJ+1tFNaeXi1rZY2o7B9NOsrh2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2 RThBODQ1NDAeFw0yNjA1MDMwMjI2NTdaFw0yNzA1MDIwMjMxNTdaMDMxMTAvBgNV BAMTKDZFQjkyRTk2QzVFOTlBOUIxRUZBRkQyMDcwQjdEMUY3M0I5NTI0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJtKMTwGjGlP3CGZByEhuowXPA 8rHc6Y/huqwB9u6Up2Jf5CRDdtpJ2cBEYaBR3QCypx+6UEWmjTP8l56Vbch62QqU +ux2CVvYlY/IylWAXvYC/7m+9eMhCGOrIwsvr/r6UtRi90cT7MYvCN1VJTUJXcD0 cauSWvKQFQXxPMFYIvowGpYU0kKACfZGvxUQafgB6Q+lCO1QS4tNjM0+nn+Px1AR qB7/FH1fzoiQLJkHnozvbJL8MCF2o7YCPjawucrsuB0uDCvP8Db5jGavu1Z93cQy 2NYiLkLnCbwYo0CKh7c87DoxDRplqRFl5n3Qhx2RA5iQ5R3LQxtI7hOEeJlTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbrkulsXpmpse+v0gcLfR9zuVJDUwHwYDVR0j BBgwFoAUFGSbEG+gxBHX/Nc6SwFHIm6KhFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQxNzZkZGQtYTk4MC00M2Q2LTk0YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2 RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2RThBODQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDY0OUIxMDZGQTBDNDExRDdGQ0Q3M0E0QjAxNDcyMjZFOEE4 NDU0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRkMTc2ZGRkLWE5ODAtNDNkNi05 NGE3LTk1ZWVkYTUzOTY2NS8wLzMxMzAzMzJlMzgzOTJlMzEzNjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1mlMA0GCSqG SIb3DQEBCwUAA4IBAQAyT0hVxj/xbU1ducdx/g4dwpjeSSTQPU7uPijrVYyBDOX1 1OtuNLIg8hcyoiEEjC6gVxL2vS6OZEYdDu5zLJYUUbLOVuPVq2D+s9/TT60Ssf3u OERMpq3VkyNbfaMWljGxSBu9V91XJVh4raQ8CbfHAkHrCv92aX5Wuy58S57IY74B 6K7HdGWbqJJ+vJSauZysW5qnQ7dl9yzY8RS09a9xPbSa2GYRc+kB3kXpvCOpgWiF ed11MZZx/AIoJhXiwmFANZmUKyFvLcF1NTtMedISmNH384WN4ZsX8tRKbpu3TDYv 1KGSbpgEyrfa9vYYdefSDUfCwf7BgauMEdbdDyUA -----END CERTIFICATE-----Generated at Wed May 13 11:47:05 2026 by rpki-client