$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa File: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (raw, json) Hash identifier: DMAkYGbCY1WEwHU0IOjQhVEMGtSyZ2MqAap0CYYpSAU= Subject key identifier: 01:52:DE:89:8C:6E:01:1A:50:BA:59:92:20:5D:EC:81:69:BF:0B:7C Certificate issuer: /CN=20960DA2C8391ACA821C6A472677485F6C49F24B Certificate serial: 18A254D94390774907C1B530316C512F5FFF9885 Authority key identifier: 20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa Signing time: Sun 03 May 2026 02:45:33 +0000 ROA not before: Sun 03 May 2026 02:40:33 +0000 ROA not after: Sun 02 May 2027 02:45:33 +0000 asID: 141907 IP address blocks: 103.163.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a2:54:d9:43:90:77:49:07:c1:b5:30:31:6c:51:2f:5f:ff:98:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20960DA2C8391ACA821C6A472677485F6C49F24B Validity Not Before: May 3 02:40:33 2026 GMT Not After : May 2 02:45:33 2027 GMT Subject: CN=0152DE898C6E011A50BA5992205DEC8169BF0B7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:1b:36:18:4f:3a:7a:69:bd:8e:db:26:88: 4f:f6:bc:3f:76:6e:bc:1c:e1:73:2d:de:a4:71:54: 39:ca:0e:13:99:fe:e7:ea:26:d7:8f:49:ad:bf:35: 79:e0:34:4d:75:39:58:b1:fd:b9:03:a8:33:80:6b: ed:7d:d8:30:22:45:43:ee:53:72:96:20:8d:df:26: 9c:49:4c:24:23:42:fb:c8:6d:ad:a1:36:81:7b:1c: 9e:5f:cb:82:2b:56:9b:b3:38:15:09:d4:f6:d4:77: 55:d6:86:e1:db:2e:27:15:2f:c7:de:71:3b:5f:58: 7f:29:63:cc:6c:40:b2:2e:8f:62:5b:84:db:74:0e: 87:92:08:3b:e7:21:d4:43:e3:13:87:63:26:f0:00: 05:08:82:cc:0a:c4:b7:3b:fd:59:ad:2c:90:52:a3: e9:ea:b0:6b:d4:ed:43:bc:95:bc:9b:e2:e1:7e:79: d0:f5:ad:97:6b:b1:eb:61:1b:51:2e:d6:e0:ea:90: 9d:55:0f:e1:79:c9:88:17:8d:85:45:3e:d0:e2:a3: 6a:33:95:ba:81:e5:9b:7e:a2:5b:38:28:69:01:19: d8:63:1f:7d:b3:63:bd:6b:76:96:20:19:9e:1f:7e: 21:9e:c9:8d:07:9b:b2:f6:6f:92:2c:dd:3e:42:2c: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:52:DE:89:8C:6E:01:1A:50:BA:59:92:20:5D:EC:81:69:BF:0B:7C X509v3 Authority Key Identifier: keyid:20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.231.0/24 Signature Algorithm: sha256WithRSAEncryption 00:a8:12:8c:04:f6:a6:53:8f:17:60:8a:ef:78:79:e8:23:9d: 13:03:6d:84:48:a3:23:f7:25:56:94:c3:25:ab:6f:66:76:bc: df:d6:e9:f5:3a:64:f6:5c:42:74:fd:4d:49:f4:34:82:27:1f: 48:3c:51:ec:70:94:d6:4d:8d:8b:c2:77:bb:07:ee:88:60:69: ce:82:8c:22:b8:e3:66:c9:fa:94:02:02:87:c3:14:11:aa:f3: e4:42:14:33:35:e4:2d:8a:b7:0f:c5:c1:c7:a3:d6:74:9b:1f: fa:71:ef:25:5c:ff:36:07:c1:87:65:fb:64:37:b2:bd:e1:12: a7:46:d4:a3:9f:85:86:17:39:d7:6e:78:a5:b9:bd:94:8d:a6: b3:95:0d:08:af:f6:32:f1:2d:51:ad:a0:f9:e1:f5:80:b7:45: 43:a3:6a:2e:83:24:dd:83:47:75:33:24:0b:97:ca:b1:57:8e: 11:13:05:03:74:02:bb:ce:96:3f:a4:42:a6:98:80:0f:ac:cb: c3:be:88:18:48:71:e3:fe:1c:5f:b3:da:0b:19:7c:98:3c:ac: 8b:4e:52:5f:4d:c6:4b:3e:73:6f:2f:76:04:63:04:55:36:5b: 35:9e:d4:0b:3e:6d:94:ba:fa:7d:cb:fe:ff:a8:fa:18:1e:8e: dd:c6:d3:06 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGKJU2UOQd0kHwbUwMWxRL1//mIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2 QzQ5RjI0QjAeFw0yNjA1MDMwMjQwMzNaFw0yNzA1MDIwMjQ1MzNaMDMxMTAvBgNV BAMTKDAxNTJERTg5OEM2RTAxMUE1MEJBNTk5MjIwNURFQzgxNjlCRjBCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjBs2GE86emm9jtsmiE/2vD92 brwc4XMt3qRxVDnKDhOZ/ufqJtePSa2/NXngNE11OVix/bkDqDOAa+192DAiRUPu U3KWII3fJpxJTCQjQvvIba2hNoF7HJ5fy4IrVpuzOBUJ1PbUd1XWhuHbLicVL8fe cTtfWH8pY8xsQLIuj2JbhNt0DoeSCDvnIdRD4xOHYybwAAUIgswKxLc7/VmtLJBS o+nqsGvU7UO8lbyb4uF+edD1rZdrsethG1Eu1uDqkJ1VD+F5yYgXjYVFPtDio2oz lbqB5Zt+ols4KGkBGdhjH32zY71rdpYgGZ4ffiGeyY0Hm7L2b5Is3T5CLOI/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUAVLeiYxuARpQulmSIF3sgWm/C3wwHwYDVR0j BBgwFoAUIJYNosg5GsqCHGpHJndIX2xJ8kswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2QwMzViM2ItZTZjNS00N2Y4LTk5YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJD ODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2QzQ5RjI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDk2MERBMkM4MzkxQUNBODIxQzZBNDcyNjc3NDg1RjZDNDlG MjRCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdkMDM1YjNiLWU2YzUtNDdmOC05 OWI0LTFjYjAzMjZlZGFlNS8wLzMxMzAzMzJlMzEzNjMzMmUzMjMzMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMwMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABno+cwDQYJ KoZIhvcNAQELBQADggEBAACoEowE9qZTjxdgiu94eegjnRMDbYRIoyP3JVaUwyWr b2Z2vN/W6fU6ZPZcQnT9TUn0NIInH0g8UexwlNZNjYvCd7sH7ohgac6CjCK442bJ +pQCAofDFBGq8+RCFDM15C2Ktw/Fwcej1nSbH/px7yVc/zYHwYdl+2Q3sr3hEqdG 1KOfhYYXOddueKW5vZSNprOVDQiv9jLxLVGtoPnh9YC3RUOjai6DJN2DR3UzJAuX yrFXjhETBQN0ArvOlj+kQqaYgA+sy8O+iBhIceP+HF+z2gsZfJg8rItOUl9Nxks+ c28vdgRjBFU2WzWe1As+bZS6+n3L/v+o+hgejt3G0wY= -----END CERTIFICATE-----Generated at Wed May 13 03:22:48 2026 by rpki-client