$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa File: 3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa (raw, json) Hash identifier: wL8mPbrDXSqS55aHxdLNlPMS48d9sDFxyNKF6bE5qfk= Subject key identifier: 79:FE:67:8E:98:98:06:4E:97:61:19:3D:50:55:D1:70:C9:56:C1:04 Certificate issuer: /CN=6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0 Certificate serial: 77059F9AA1738F55ED113DCD15CDFBC3ED45E6AB Authority key identifier: 6D:B4:41:CB:4C:FB:11:6A:FE:8A:E0:30:14:3C:7D:E4:0A:F8:9B:B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa Signing time: Sun 03 May 2026 02:41:13 +0000 ROA not before: Sun 03 May 2026 02:36:13 +0000 ROA not after: Sun 02 May 2027 02:41:13 +0000 asID: 149973 IP address blocks: 103.149.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:05:9f:9a:a1:73:8f:55:ed:11:3d:cd:15:cd:fb:c3:ed:45:e6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0 Validity Not Before: May 3 02:36:13 2026 GMT Not After : May 2 02:41:13 2027 GMT Subject: CN=79FE678E9898064E9761193D5055D170C956C104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:98:87:cc:18:82:c7:06:7b:6b:c0:a9:e1:2b: 1a:e0:76:fa:b7:34:0a:24:53:52:7e:e6:fd:27:2a: f5:33:d9:1e:be:ca:4c:2d:92:7f:c3:98:c2:b2:0c: 59:97:ba:87:9b:d7:6d:e4:85:86:4c:1b:af:63:20: f5:2d:c5:fc:2f:12:c4:63:68:0f:cf:ed:b7:71:ac: bc:2f:f0:99:59:6e:74:bc:6e:9c:bd:c6:5b:87:84: 89:07:c4:ff:35:aa:67:6c:50:c7:28:59:bf:33:90: 82:2f:32:f9:58:07:c2:53:ae:d5:89:41:c4:e4:46: 22:34:8d:1d:8e:00:65:6c:c3:29:f4:fd:cd:e0:60: 96:09:c4:36:56:11:1e:2b:3f:47:41:e8:66:a1:f7: 3c:ee:55:f2:ff:a7:9a:5b:44:99:3b:4f:34:2c:b1: 56:48:cb:84:56:35:84:3e:86:7a:2e:95:51:67:03: 95:39:90:97:c3:5e:2b:9a:bb:26:71:c3:3f:33:a0: 0e:40:2a:50:6d:37:b7:20:17:16:c8:44:5d:5d:ab: 50:b8:85:41:04:55:7a:6f:5a:c8:77:d5:a4:99:24: 8f:ee:2a:a7:30:4c:33:8d:67:da:75:e4:06:94:8e: fb:d6:8a:ca:a8:78:ef:79:cb:66:5f:a1:a9:15:26: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FE:67:8E:98:98:06:4E:97:61:19:3D:50:55:D1:70:C9:56:C1:04 X509v3 Authority Key Identifier: keyid:6D:B4:41:CB:4C:FB:11:6A:FE:8A:E0:30:14:3C:7D:E4:0A:F8:9B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.228.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:ec:cf:a9:e7:af:c1:58:53:9c:57:65:5e:b1:8a:7b:bf:f3: b7:4e:0f:2d:0a:ca:cf:20:6e:53:65:c2:a3:08:85:da:ef:0e: 76:c7:c9:28:f8:cc:80:9b:f6:a7:8e:b1:bf:86:06:c1:aa:2d: 40:3c:ab:e5:c3:33:e2:f8:06:b2:a5:02:4c:a1:a3:14:a1:e3: 25:d1:09:1e:38:0f:7d:66:22:a7:db:90:57:9e:d2:3e:e0:4f: 16:ad:f0:11:f3:c5:a7:77:ad:58:2b:45:e0:ac:be:9a:d4:48: 0a:f4:d0:24:80:8c:f4:18:d0:54:ce:4f:53:42:7d:46:03:b2: b1:7b:30:ed:56:e7:49:d5:23:1c:a6:fe:f3:2e:a6:d6:c9:bc: 71:0a:2c:5f:00:aa:34:ad:67:5f:13:20:46:cc:fe:f2:be:dc: 2c:0c:35:d4:e3:06:02:f2:db:7f:86:60:41:d7:5a:65:00:64: d9:60:04:db:6b:41:44:c3:b7:82:e9:ba:07:ac:ba:f7:2f:26: 07:a6:06:6c:c7:4b:a9:91:9c:05:06:41:ed:d8:31:d2:0b:cf: bd:73:b5:ad:85:6f:43:cc:01:bd:34:48:35:10:76:c0:e5:c5: 72:5a:71:39:c3:7f:03:75:67:30:87:9a:33:91:3d:3c:35:7f: 8a:49:a8:33 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUdwWfmqFzj1XtET3NFc37w+1F5qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCNDQxQ0I0Q0ZCMTE2QUZFOEFFMDMwMTQzQzdERTQw QUY4OUJCMDAeFw0yNjA1MDMwMjM2MTNaFw0yNzA1MDIwMjQxMTNaMDMxMTAvBgNV BAMTKDc5RkU2NzhFOTg5ODA2NEU5NzYxMTkzRDUwNTVEMTcwQzk1NkMxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7mIfMGILHBntrwKnhKxrgdvq3 NAokU1J+5v0nKvUz2R6+ykwtkn/DmMKyDFmXuoeb123khYZMG69jIPUtxfwvEsRj aA/P7bdxrLwv8JlZbnS8bpy9xluHhIkHxP81qmdsUMcoWb8zkIIvMvlYB8JTrtWJ QcTkRiI0jR2OAGVswyn0/c3gYJYJxDZWER4rP0dB6Gah9zzuVfL/p5pbRJk7TzQs sVZIy4RWNYQ+hnoulVFnA5U5kJfDXiuauyZxwz8zoA5AKlBtN7cgFxbIRF1dq1C4 hUEEVXpvWsh31aSZJI/uKqcwTDONZ9p15AaUjvvWisqoeO95y2ZfoakVJmTVAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUef5njpiYBk6XYRk9UFXRcMlWwQQwHwYDVR0j BBgwFoAUbbRBy0z7EWr+iuAwFDx95Ar4m7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmM3ODQ0MDktM2Y4Mi00NGMxLWExNGUtNjgxZGY1MWIwMjM0LzAvNkRCNDQxQ0I0 Q0ZCMTE2QUZFOEFFMDMwMTQzQzdERTQwQUY4OUJCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82REI0NDFDQjRDRkIxMTZBRkU4QUUwMzAxNDNDN0RFNDBBRjg5 QkIwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZjNzg0NDA5LTNmODItNDRjMS1h MTRlLTY4MWRmNTFiMDIzNC8wLzMxMzAzMzJlMzEzNDM5MmUzMjMyMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnleQwDQYJ KoZIhvcNAQELBQADggEBABvsz6nnr8FYU5xXZV6xinu/87dODy0Kys8gblNlwqMI hdrvDnbHySj4zICb9qeOsb+GBsGqLUA8q+XDM+L4BrKlAkyhoxSh4yXRCR44D31m IqfbkFee0j7gTxat8BHzxad3rVgrReCsvprUSAr00CSAjPQY0FTOT1NCfUYDsrF7 MO1W50nVIxym/vMuptbJvHEKLF8AqjStZ18TIEbM/vK+3CwMNdTjBgLy23+GYEHX WmUAZNlgBNtrQUTDt4LpugesuvcvJgemBmzHS6mRnAUGQe3YMdILz71zta2Fb0PM Ab00SDUQdsDlxXJacTnDfwN1ZzCHmjORPTw1f4pJqDM= -----END CERTIFICATE-----Generated at Wed May 13 16:48:29 2026 by rpki-client