$ rpki-client -vvf rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa File: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (raw, json) Hash identifier: vx1f/H1o8xw6yHs/uKwjoGpoC2+0kPIAw2YagPjwnHE= Subject key identifier: 9F:BF:32:3E:72:58:64:65:B8:70:5C:DA:60:BF:7F:AB:B8:44:54:A3 Certificate issuer: /CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Certificate serial: 51CC36EB343B1FD6A57B772C5FC9898E08AA0DAA Authority key identifier: CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa Signing time: Sun 03 May 2026 02:36:19 +0000 ROA not before: Sun 03 May 2026 02:31:19 +0000 ROA not after: Sun 02 May 2027 02:36:19 +0000 asID: 141055 IP address blocks: 103.149.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:cc:36:eb:34:3b:1f:d6:a5:7b:77:2c:5f:c9:89:8e:08:aa:0d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Validity Not Before: May 3 02:31:19 2026 GMT Not After : May 2 02:36:19 2027 GMT Subject: CN=9FBF323E72586465B8705CDA60BF7FABB84454A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:26:9a:39:0f:49:ee:18:f2:d1:58:15:f2: f5:6d:8a:44:8f:0a:dd:a2:f1:3a:53:21:0e:de:55: d1:ed:1b:b1:bc:06:d0:10:b9:01:95:5d:c9:93:e2: 8d:f0:27:89:f4:2f:9d:e5:5a:75:95:3f:2d:b7:5d: 61:86:1c:cd:6c:d3:14:18:af:c5:68:5c:05:59:32: 75:c1:ca:7d:08:75:89:2b:9a:e4:1e:66:d3:d9:e1: 27:bf:7f:af:cf:38:42:09:90:1a:1b:b1:25:02:34: 6c:b1:85:e8:96:d8:c4:7b:4b:59:22:8b:d7:3b:4d: ac:b3:f5:16:b6:59:d8:17:1e:5c:2b:7a:70:0b:71: 51:21:89:2c:21:d3:a4:ac:20:3b:06:85:26:ac:88: 3b:a8:d9:55:14:1d:bc:e7:1c:96:48:d4:90:a3:ae: a9:77:c5:15:c8:f1:e7:ce:84:9a:80:41:30:17:bb: 97:5c:71:f5:51:f4:78:a2:8d:17:8a:ba:d5:6f:f6: a8:05:5d:13:98:19:b0:55:ed:0f:94:8c:dd:83:2d: a5:24:92:0c:56:e9:6e:5b:fb:d9:a6:82:16:33:e4: 57:5c:81:3b:ba:99:b1:2c:c6:ae:06:0a:3d:19:ba: 7d:9a:eb:a9:14:e3:3a:24:9c:5d:4d:f1:6b:39:c5: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BF:32:3E:72:58:64:65:B8:70:5C:DA:60:BF:7F:AB:B8:44:54:A3 X509v3 Authority Key Identifier: keyid:CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.118.0/23 Signature Algorithm: sha256WithRSAEncryption 24:ee:c2:df:d6:92:33:67:af:f2:be:64:ed:15:91:4e:71:6c: 7d:e9:66:38:08:c7:bf:19:58:12:16:12:02:bf:ec:dd:35:a1: 46:f1:19:a4:bc:c0:cf:6a:74:8f:96:30:60:e9:21:06:93:96: c2:41:6c:41:64:7a:0c:30:ee:e2:6e:41:30:3e:a5:8b:00:f3: 6d:20:56:19:fa:39:cd:52:ac:16:80:33:90:7f:95:af:ba:37: 18:9d:ec:51:b7:4e:82:e4:bb:53:cb:56:e9:b2:8f:0b:e6:53: ab:69:08:a0:38:21:63:5e:38:5e:78:10:0e:e9:3f:49:ff:03: 1e:f0:f9:30:18:35:4e:fc:1a:40:00:e1:71:5e:1f:55:03:a6: 7e:cd:76:6e:46:34:a7:7c:d0:65:b6:8b:b7:e8:d8:89:b4:fe: d7:9f:3e:ad:65:27:27:4b:ae:3f:e2:35:ed:8c:46:7e:48:9a: 6e:25:af:2d:8e:13:47:c4:62:40:ba:17:3e:97:0b:5a:8e:d9: 5d:f7:1e:bf:fa:fb:5e:0a:cc:aa:16:bf:90:fb:4d:70:91:9d: a5:7c:cb:7f:e9:bb:cb:1e:33:10:fd:7c:d4:0b:e2:e0:36:2f: f0:18:90:fd:7a:6c:fd:cb:e7:9d:05:a7:62:ef:38:f5:31:db: 0e:bc:eb:be -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUcw26zQ7H9ale3csX8mJjgiqDaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3MjNF MEY5OEIwMDAeFw0yNjA1MDMwMjMxMTlaFw0yNzA1MDIwMjM2MTlaMDMxMTAvBgNV BAMTKDlGQkYzMjNFNzI1ODY0NjVCODcwNUNEQTYwQkY3RkFCQjg0NDU0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKyaaOQ9J7hjy0VgV8vVtikSP Ct2i8TpTIQ7eVdHtG7G8BtAQuQGVXcmT4o3wJ4n0L53lWnWVPy23XWGGHM1s0xQY r8VoXAVZMnXByn0IdYkrmuQeZtPZ4Se/f6/POEIJkBobsSUCNGyxheiW2MR7S1ki i9c7Tayz9Ra2WdgXHlwrenALcVEhiSwh06SsIDsGhSasiDuo2VUUHbznHJZI1JCj rql3xRXI8efOhJqAQTAXu5dccfVR9HiijReKutVv9qgFXROYGbBV7Q+UjN2DLaUk kgxW6W5b+9mmghYz5FdcgTu6mbEsxq4GCj0Zun2a66kU4zoknF1N8Ws5xV3LAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUn78yPnJYZGW4cFzaYL9/q7hEVKMwHwYDVR0j BBgwFoAUzsqGMMeqhUia63t1wbgXI+D5iwAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWNjNzBmN2QtMzNmZS00ZGYyLTgxZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBD N0FBODU0ODlBRUI3Qjc1QzFCODE3MjNFMEY5OEIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNBODYzMEM3QUE4NTQ4OUFFQjdCNzVDMUI4MTcyM0UwRjk4 QjAwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjYzcwZjdkLTMzZmUtNGRmMi04 MWU1LWRjMGQ1NWFjNTE3MC8wLzMxMzAzMzJlMzEzNDM5MmUzMTMxMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM1MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlXYwDQYJ KoZIhvcNAQELBQADggEBACTuwt/WkjNnr/K+ZO0VkU5xbH3pZjgIx78ZWBIWEgK/ 7N01oUbxGaS8wM9qdI+WMGDpIQaTlsJBbEFkegww7uJuQTA+pYsA820gVhn6Oc1S rBaAM5B/la+6Nxid7FG3ToLku1PLVumyjwvmU6tpCKA4IWNeOF54EA7pP0n/Ax7w +TAYNU78GkAA4XFeH1UDpn7Ndm5GNKd80GW2i7fo2Im0/tefPq1lJydLrj/iNe2M Rn5Imm4lry2OE0fEYkC6Fz6XC1qO2V33Hr/6+14KzKoWv5D7TXCRnaV8y3/pu8se MxD9fNQL4uA2L/AYkP16bP3L550Fp2LvOPUx2w68674= -----END CERTIFICATE-----Generated at Wed May 13 04:09:05 2026 by rpki-client