$ rpki-client -vvf rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa File: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (raw, json) Hash identifier: fD3NLzLgoJ82TLwu7Dwyse03F0V8LT4TWwHSpMtUfEc= Subject key identifier: 81:6F:12:9A:5B:A4:B3:EC:D7:AA:F5:AA:56:8F:EC:AF:F1:FD:01:CB Certificate issuer: /CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Certificate serial: 56D3D189A4D35157F21409C8F00DA9A4F01A3DAA Authority key identifier: DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa Signing time: Sun 03 May 2026 02:42:25 +0000 ROA not before: Sun 03 May 2026 02:37:25 +0000 ROA not after: Sun 02 May 2027 02:42:25 +0000 asID: 23947 IP address blocks: 103.148.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d3:d1:89:a4:d3:51:57:f2:14:09:c8:f0:0d:a9:a4:f0:1a:3d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Validity Not Before: May 3 02:37:25 2026 GMT Not After : May 2 02:42:25 2027 GMT Subject: CN=816F129A5BA4B3ECD7AAF5AA568FECAFF1FD01CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:32:33:cc:63:38:e4:36:c5:a8:0a:01:a0: 2e:b3:8b:fd:17:b2:02:c0:e5:f4:79:3d:3a:d1:75: c4:0b:fa:2a:8a:95:af:a8:a9:0e:70:b1:aa:96:9e: cb:4f:10:49:8f:14:f4:9e:48:ce:1d:04:12:1a:81: 0c:4c:6c:95:d7:4e:00:4f:e7:b1:45:df:67:9c:13: 83:00:01:bf:66:00:f0:54:5a:63:55:c5:bf:db:91: 9a:40:13:9c:de:af:9e:58:9a:3e:ae:c6:e1:44:8f: 9c:ac:16:74:2d:ca:e8:41:d6:9a:93:5e:9e:cb:ce: 08:8f:5e:83:21:b4:3a:9b:b4:96:eb:f7:b8:dc:6f: df:9d:ab:b5:59:8d:69:62:30:da:71:a6:5b:f7:b3: 4e:3f:07:6d:db:ca:3b:c2:3d:87:2f:4c:f2:c5:b6: 21:1e:96:5b:b4:25:45:9e:2d:42:3e:bf:98:87:c6: 08:98:07:eb:a6:18:08:11:fe:18:93:37:7d:b0:c1: a9:0d:09:6c:0c:20:ac:4f:68:41:33:ac:ac:25:31: 6e:04:b4:a0:ed:9e:e0:5d:b8:24:45:fd:e7:4c:50: 38:72:a2:6f:85:5c:b9:94:0d:f1:c6:9a:3a:cc:92: fb:65:13:d9:55:2a:1b:4f:8c:c3:ea:d9:f9:99:85: 97:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6F:12:9A:5B:A4:B3:EC:D7:AA:F5:AA:56:8F:EC:AF:F1:FD:01:CB X509v3 Authority Key Identifier: keyid:DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.198.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:75:a0:b4:ed:3b:db:78:22:68:6a:8a:13:69:e3:98:59:a4: 75:55:b2:e0:c3:d8:c2:dc:b8:7e:ee:d2:18:ef:8b:62:1d:4a: e4:f4:47:2d:05:d0:e6:6d:81:24:7b:33:74:4e:7d:11:fc:f3: 9b:58:fa:94:a7:c4:3e:24:ef:a1:a6:b4:4a:7f:3f:db:3f:12: c3:e3:6a:36:23:aa:c8:df:be:a0:c5:ff:0f:b9:4c:06:84:a9: 03:94:90:a0:1f:90:49:3f:90:78:4c:32:f7:08:68:4d:20:da: 7e:0a:f3:36:c0:b8:61:50:a2:61:2e:68:8a:29:da:99:5d:f5: ef:76:c6:40:c4:c7:2a:9d:de:f6:7e:c8:06:e5:58:fc:66:e1: fe:3d:c7:ac:94:5c:e2:ca:23:9a:7e:db:13:b0:28:22:2f:c2: 0b:b8:44:e2:57:94:5e:6d:28:fa:34:c6:73:83:ee:e7:10:d5: be:3e:e5:4b:35:61:fb:bb:0c:6a:f9:c3:e3:73:87:eb:01:72: f2:c7:71:42:46:be:e7:75:be:38:aa:09:82:f8:f5:9a:84:19: f3:70:b6:25:c3:61:d5:fe:ae:7f:c5:58:2f:09:06:e3:c8:f3: af:f5:cd:9b:3c:df:b7:ed:32:ad:82:60:36:4b:65:f1:4f:88: 73:01:12:93 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVtPRiaTTUVfyFAnI8A2ppPAaPaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNGNEM1 MUM1QTc0RDAeFw0yNjA1MDMwMjM3MjVaFw0yNzA1MDIwMjQyMjVaMDMxMTAvBgNV BAMTKDgxNkYxMjlBNUJBNEIzRUNEN0FBRjVBQTU2OEZFQ0FGRjFGRDAxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+TIzzGM45DbFqAoBoC6zi/0X sgLA5fR5PTrRdcQL+iqKla+oqQ5wsaqWnstPEEmPFPSeSM4dBBIagQxMbJXXTgBP 57FF32ecE4MAAb9mAPBUWmNVxb/bkZpAE5zer55Ymj6uxuFEj5ysFnQtyuhB1pqT Xp7LzgiPXoMhtDqbtJbr97jcb9+dq7VZjWliMNpxplv3s04/B23byjvCPYcvTPLF tiEellu0JUWeLUI+v5iHxgiYB+umGAgR/hiTN32wwakNCWwMIKxPaEEzrKwlMW4E tKDtnuBduCRF/edMUDhyom+FXLmUDfHGmjrMkvtlE9lVKhtPjMPq2fmZhZc5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgW8Smluks+zXqvWqVo/sr/H9AcswHwYDVR0j BBgwFoAU32qYfi+b8QS5k4kR6Pg/TFHFp00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBjMmExM2ItMWY0MC00YzAzLWJjMzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0Uy RjlCRjEwNEI5OTM4OTExRThGODNGNEM1MUM1QTc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjZBOTg3RTJGOUJGMTA0Qjk5Mzg5MTFFOEY4M0Y0QzUxQzVB NzRELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzcwYzJhMTNiLTFmNDAtNGMwMy1i YzM1LWY2OTYxNTE2ZDRkOS8wLzMxMzAzMzJlMzEzNDM4MmUzMTM5MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzkzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5TGMA0GCSqG SIb3DQEBCwUAA4IBAQAedaC07TvbeCJoaooTaeOYWaR1VbLgw9jC3Lh+7tIY74ti HUrk9EctBdDmbYEkezN0Tn0R/PObWPqUp8Q+JO+hprRKfz/bPxLD42o2I6rI376g xf8PuUwGhKkDlJCgH5BJP5B4TDL3CGhNINp+CvM2wLhhUKJhLmiKKdqZXfXvdsZA xMcqnd72fsgG5Vj8ZuH+PceslFziyiOaftsTsCgiL8ILuETiV5RebSj6NMZzg+7n ENW+PuVLNWH7uwxq+cPjc4frAXLyx3FCRr7ndb44qgmC+PWahBnzcLYlw2HV/q5/ xVgvCQbjyPOv9c2bPN+37TKtgmA2S2XxT4hzARKT -----END CERTIFICATE-----Generated at Wed May 13 15:27:29 2026 by rpki-client