$ rpki-client -vvf rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa File: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (raw, json) Hash identifier: AQenx1dt+kU1dllLrJ4J77w2s2czEkS4jP/ajMi229M= Subject key identifier: 07:70:CF:3C:6E:C8:E5:1A:C2:AA:69:4D:13:BB:B2:DD:94:1E:52:A8 Certificate issuer: /CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Certificate serial: 501220D04E0556DD3A9015CA63E6100CC5CDB1F8 Authority key identifier: 3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa Signing time: Sun 03 May 2026 02:33:26 +0000 ROA not before: Sun 03 May 2026 02:28:26 +0000 ROA not after: Sun 02 May 2027 02:33:26 +0000 asID: 141126 IP address blocks: 103.158.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:12:20:d0:4e:05:56:dd:3a:90:15:ca:63:e6:10:0c:c5:cd:b1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Validity Not Before: May 3 02:28:26 2026 GMT Not After : May 2 02:33:26 2027 GMT Subject: CN=0770CF3C6EC8E51AC2AA694D13BBB2DD941E52A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:01:f7:9f:9d:8b:4a:76:1e:ed:fa:69:32:24: 3c:9c:93:2c:4a:96:29:e9:45:4f:83:05:ee:f1:17: 82:41:bc:77:8a:60:f5:58:7c:bc:f6:c1:a2:81:7a: 45:38:cd:72:35:8e:51:4a:0d:4b:3d:18:ad:16:40: bd:fa:b2:47:81:b5:4e:e2:7c:7d:ee:57:51:17:71: b4:65:91:05:3d:83:79:0e:ef:ec:59:42:19:fa:0d: da:db:75:2a:0d:80:c0:8b:e5:37:0e:25:c6:ea:74: e5:a9:7a:0c:f1:25:81:88:a4:74:07:c5:2e:82:13: 5e:3d:55:7b:37:e6:b8:4f:68:48:a8:7b:00:a9:90: 6b:3b:e8:db:54:d0:90:a7:d1:db:57:e5:5d:f9:83: 37:16:3d:1e:54:f4:37:7f:ec:b6:b1:4e:5d:70:e0: 06:08:43:39:d7:a3:5b:dd:13:6e:55:c2:b9:b8:2b: 8b:de:f7:71:9f:18:15:f5:e3:04:ba:25:0b:24:43: 1e:14:cc:ba:ba:9f:2f:cb:17:87:0d:07:0c:20:a8: 66:27:47:38:83:79:cc:21:30:1f:40:9d:bd:d5:8c: d9:b4:b7:10:6f:23:5b:4d:79:2a:1f:60:49:9c:84: a7:fa:0a:9a:10:89:19:01:84:a9:f3:83:25:16:ef: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:70:CF:3C:6E:C8:E5:1A:C2:AA:69:4D:13:BB:B2:DD:94:1E:52:A8 X509v3 Authority Key Identifier: keyid:3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.154.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:20:9b:77:6f:30:87:4b:65:de:d1:f7:b3:68:2e:bd:93:47: 32:be:61:fc:37:a5:a1:cb:e2:b5:7c:45:0d:22:6a:e7:ce:cd: 5f:6a:59:9c:ce:8c:5d:5c:7e:8e:5a:96:e8:e7:a0:6e:02:52: 6e:cf:08:a7:f1:02:7f:23:96:d8:42:0a:82:70:7f:ac:d5:95: b9:74:9a:f6:6f:f1:0d:9a:45:5f:0e:5e:d9:01:1e:8b:a0:bd: 19:89:1f:3d:33:75:ad:63:5b:99:ca:82:b4:8f:ff:5b:a6:b4: 65:8b:ff:8d:6c:9a:49:35:4d:c9:ca:23:4c:19:87:b7:16:c8: 45:df:f8:26:af:01:6b:dd:0e:6f:b4:31:a1:c1:b4:ac:46:40: b3:8c:38:44:bd:a7:95:13:79:ea:e6:82:02:e4:69:21:5d:1e: 59:ed:d4:a1:25:61:1e:4e:1e:e9:16:21:cb:38:1b:09:63:cd: d7:1f:48:b0:7c:03:39:28:e7:51:06:da:26:2b:99:4f:25:d6: 3b:34:1d:f0:5e:87:f2:98:f3:55:c9:87:7c:c0:76:fa:f3:e3: 8a:a3:20:b4:8a:bf:76:8a:3c:ac:8b:bc:84:00:e7:88:28:1f: 47:bd:90:16:fa:74:ec:2b:23:6f:a4:94:80:33:7b:6f:02:4a: 86:fe:d7:10 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUBIg0E4FVt06kBXKY+YQDMXNsfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDQ0IxMjRDRTYzMzA4MjcyNjkxNzk2NTZCQzlBN0Yw NEJDQUNGMzAeFw0yNjA1MDMwMjI4MjZaFw0yNzA1MDIwMjMzMjZaMDMxMTAvBgNV BAMTKDA3NzBDRjNDNkVDOEU1MUFDMkFBNjk0RDEzQkJCMkREOTQxRTUyQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFAfefnYtKdh7t+mkyJDyckyxK linpRU+DBe7xF4JBvHeKYPVYfLz2waKBekU4zXI1jlFKDUs9GK0WQL36skeBtU7i fH3uV1EXcbRlkQU9g3kO7+xZQhn6DdrbdSoNgMCL5TcOJcbqdOWpegzxJYGIpHQH xS6CE149VXs35rhPaEioewCpkGs76NtU0JCn0dtX5V35gzcWPR5U9Dd/7LaxTl1w 4AYIQznXo1vdE25Vwrm4K4ve93GfGBX14wS6JQskQx4UzLq6ny/LF4cNBwwgqGYn RziDecwhMB9Anb3VjNm0txBvI1tNeSofYEmchKf6CpoQiRkBhKnzgyUW73X7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUB3DPPG7I5RrCqmlNE7uy3ZQeUqgwHwYDVR0j BBgwFoAUP8yxJM5jMIJyaReWVryafwS8rPMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMzZjYwZTYtYWZkZC00ZTEwLTgzYjQtZThjYmQ2NDFjNTJmLzAvM0ZDQ0IxMjRD RTYzMzA4MjcyNjkxNzk2NTZCQzlBN0YwNEJDQUNGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNDQjEyNENFNjMzMDgyNzI2OTE3OTY1NkJDOUE3RjA0QkNB Q0YzLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUzM2Y2MGU2LWFmZGQtNGUxMC04 M2I0LWU4Y2JkNjQxYzUyZi8wLzMxMzAzMzJlMzEzNTM4MmUzMTM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMyMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnpowDQYJ KoZIhvcNAQELBQADggEBAEsgm3dvMIdLZd7R97NoLr2TRzK+Yfw3paHL4rV8RQ0i aufOzV9qWZzOjF1cfo5alujnoG4CUm7PCKfxAn8jlthCCoJwf6zVlbl0mvZv8Q2a RV8OXtkBHougvRmJHz0zda1jW5nKgrSP/1umtGWL/41smkk1TcnKI0wZh7cWyEXf +CavAWvdDm+0MaHBtKxGQLOMOES9p5UTeermggLkaSFdHlnt1KElYR5OHukWIcs4 GwljzdcfSLB8Azko51EG2iYrmU8l1js0HfBeh/KY81XJh3zAdvrz44qjILSKv3aK PKyLvIQA54goH0e9kBb6dOwrI2+klIAze28CSob+1xA= -----END CERTIFICATE-----Generated at Wed May 13 02:27:27 2026 by rpki-client