$ rpki-client -vvf rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa File: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (raw, json) Hash identifier: GT1/9A1T1IHuKtVAU+XRFXaTDB7gCJgDb4j3AFpErYA= Subject key identifier: 4A:F2:B5:8E:0A:E0:1D:10:7F:E8:14:51:F3:7D:8D:52:E1:35:EC:D6 Certificate issuer: /CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Certificate serial: 0A94BA49D75234409687ED27D561094FC85BD327 Authority key identifier: 1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa Signing time: Sun 03 May 2026 02:47:23 +0000 ROA not before: Sun 03 May 2026 02:42:23 +0000 ROA not after: Sun 02 May 2027 02:47:23 +0000 asID: 139941 IP address blocks: 103.146.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:94:ba:49:d7:52:34:40:96:87:ed:27:d5:61:09:4f:c8:5b:d3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Validity Not Before: May 3 02:42:23 2026 GMT Not After : May 2 02:47:23 2027 GMT Subject: CN=4AF2B58E0AE01D107FE81451F37D8D52E135ECD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:17:0e:39:a3:24:70:2a:16:42:1e:b8:0f:8e: 29:af:b4:14:6e:19:f0:40:fc:5f:c9:75:48:05:ce: 2d:46:3e:0d:8a:59:d0:32:dc:19:de:09:27:d1:a6: 02:b0:66:c9:07:d8:6e:95:19:24:c6:a2:20:27:e7: fd:ab:12:eb:62:b5:eb:ed:8a:71:1a:7a:57:8a:89: 15:3e:00:d4:bf:bf:ad:1a:f3:be:06:cf:28:ed:b6: c2:12:cd:03:ab:c3:db:0b:9f:e6:8b:91:e7:2f:f2: e8:87:70:93:5a:92:cb:d0:9a:6c:69:d1:61:6b:50: 88:95:2e:0e:6c:69:7e:1d:f4:49:b4:2a:1f:99:8f: a7:3e:c0:2e:60:50:41:bc:e8:44:ad:9d:79:e3:2d: 4a:2f:0d:c6:30:ec:3f:ba:e4:15:0a:f4:d0:f6:a7: 45:aa:1e:78:d1:99:f9:d4:b0:49:6e:9e:dd:7b:e5: 7a:0d:37:bd:0b:6b:d8:40:f8:56:12:50:a8:df:75: 99:05:0c:1f:de:8f:ab:e6:65:1b:a5:6a:19:20:ff: b6:c5:96:fc:28:ff:07:33:d5:af:88:36:6c:2b:6b: 48:07:f4:00:9d:d9:68:ab:15:bc:88:10:7b:0a:02: 49:b0:40:fe:5b:73:9d:f0:df:d5:ed:2d:2d:44:a4: e4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F2:B5:8E:0A:E0:1D:10:7F:E8:14:51:F3:7D:8D:52:E1:35:EC:D6 X509v3 Authority Key Identifier: keyid:1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.196.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:84:23:fb:36:55:98:e9:79:31:d0:a6:0a:c6:ca:c7:f3:ea: 3f:bc:44:06:0b:f9:49:f1:64:95:5e:3a:da:da:ef:81:0e:23: 5a:f3:93:2d:64:8f:ba:79:02:e2:84:53:41:8a:4c:2e:76:86: e0:fd:19:bb:03:f1:ee:0e:56:ef:cf:3a:d9:85:e8:fa:30:97: f4:c7:3f:10:9a:0a:aa:60:e5:1f:9b:5c:60:17:bc:18:1f:f8: cc:9f:8c:45:7d:3c:16:9b:5d:c3:ad:75:99:8e:90:5c:3c:64: 1b:f8:37:21:33:ef:6f:de:d9:6f:6b:18:9b:16:2b:2d:ba:f0: e9:63:e5:fc:da:98:07:0f:41:76:90:32:6f:87:65:8b:5f:ae: 32:4b:34:8b:e1:68:36:c4:2f:d8:f4:13:7c:d8:a7:00:31:14: cf:ac:ec:c0:55:75:2b:44:fa:c0:6f:27:91:93:43:97:08:cb: 64:9d:1e:99:a9:62:85:b8:91:fe:2f:7f:0d:9d:6b:17:c3:25: eb:bf:c2:11:c6:c5:25:9d:34:18:31:1a:c7:78:d6:8c:0c:66: 20:c8:fa:6d:b7:89:68:b6:86:ea:81:94:b1:06:fc:03:e5:cc: 00:dc:b4:9e:29:8d:2f:6c:bc:92:f0:0f:fb:c0:07:02:b6:f9: 33:1f:68:15 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUCpS6SddSNECWh+0n1WEJT8hb0ycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2NTkwOUMxNDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEz Rjg4MURFNTAeFw0yNjA1MDMwMjQyMjNaFw0yNzA1MDIwMjQ3MjNaMDMxMTAvBgNV BAMTKDRBRjJCNThFMEFFMDFEMTA3RkU4MTQ1MUYzN0Q4RDUyRTEzNUVDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKFw45oyRwKhZCHrgPjimvtBRu GfBA/F/JdUgFzi1GPg2KWdAy3BneCSfRpgKwZskH2G6VGSTGoiAn5/2rEutitevt inEaeleKiRU+ANS/v60a874GzyjttsISzQOrw9sLn+aLkecv8uiHcJNaksvQmmxp 0WFrUIiVLg5saX4d9Em0Kh+Zj6c+wC5gUEG86EStnXnjLUovDcYw7D+65BUK9ND2 p0WqHnjRmfnUsElunt175XoNN70La9hA+FYSUKjfdZkFDB/ej6vmZRulahkg/7bF lvwo/wcz1a+INmwra0gH9ACd2WirFbyIEHsKAkmwQP5bc53w39XtLS1EpOQ5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUSvK1jgrgHRB/6BRR832NUuE17NYwHwYDVR0j BBgwFoAUG2WQnBQEsPB/jzZ84+5u+j+IHeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM1MDQ4YzYtOGNjZC00NjNkLWFkMzQtYWU3NDI4NjQ3YTljLzAvMUI2NTkwOUMx NDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEzRjg4MURFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjY1OTA5QzE0MDRCMEYwN0Y4RjM2N0NFM0VFNkVGQTNGODgx REU1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgzNTA0OGM2LThjY2QtNDYzZC1h ZDM0LWFlNzQyODY0N2E5Yy8wLzMxMzAzMzJlMzEzNDM2MmUzMTM5MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnksQwDQYJ KoZIhvcNAQELBQADggEBAB+EI/s2VZjpeTHQpgrGysfz6j+8RAYL+UnxZJVeOtra 74EOI1rzky1kj7p5AuKEU0GKTC52huD9GbsD8e4OVu/POtmF6Powl/THPxCaCqpg 5R+bXGAXvBgf+MyfjEV9PBabXcOtdZmOkFw8ZBv4NyEz72/e2W9rGJsWKy268Olj 5fzamAcPQXaQMm+HZYtfrjJLNIvhaDbEL9j0E3zYpwAxFM+s7MBVdStE+sBvJ5GT Q5cIy2SdHpmpYoW4kf4vfw2daxfDJeu/whHGxSWdNBgxGsd41owMZiDI+m23iWi2 huqBlLEG/APlzADctJ4pjS9svJLwD/vABwK2+TMfaBU= -----END CERTIFICATE-----Generated at Wed May 13 15:06:07 2026 by rpki-client