$ rpki-client -vvf rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa File: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (raw, json) Hash identifier: jNEFs2GtzFKSgVBlfyDoiMOmxKN4+FK/qSYbZvqpibs= Subject key identifier: 66:3A:B8:59:A1:95:AF:1D:AC:6E:25:BD:F1:A2:86:A6:7D:8C:99:49 Certificate issuer: /CN=1345157B61F361F583DCB52DB3ECBCA10862599B Certificate serial: 73F1571014D83E9AE4D0BFBF24FBB368A1473532 Authority key identifier: 13:45:15:7B:61:F3:61:F5:83:DC:B5:2D:B3:EC:BC:A1:08:62:59:9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa Signing time: Sun 03 May 2026 02:48:09 +0000 ROA not before: Sun 03 May 2026 02:43:09 +0000 ROA not after: Sun 02 May 2027 02:48:09 +0000 asID: 142312 IP address blocks: 103.168.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.crl rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f1:57:10:14:d8:3e:9a:e4:d0:bf:bf:24:fb:b3:68:a1:47:35:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1345157B61F361F583DCB52DB3ECBCA10862599B Validity Not Before: May 3 02:43:09 2026 GMT Not After : May 2 02:48:09 2027 GMT Subject: CN=663AB859A195AF1DAC6E25BDF1A286A67D8C9949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:19:7e:13:2e:31:f6:c7:8c:a7:df:7b:d0:ab: eb:86:28:4c:5f:18:35:57:1e:4c:f4:87:08:d8:8d: 45:55:88:25:f1:b0:fd:59:0d:7a:0d:6f:e4:e6:5f: 10:f4:b6:36:29:8a:30:35:83:2b:69:27:d4:07:ec: 70:51:4d:48:1c:fc:83:0d:75:1a:5c:02:bf:5e:de: 7f:3b:51:d8:85:48:00:66:5e:5c:04:c6:4f:1a:42: a8:7a:21:fe:36:86:5c:d2:1a:2f:5c:5c:9a:cc:d6: b6:f5:53:8c:54:fc:e8:1c:91:d8:e1:2d:95:7c:02: da:02:b8:cd:d3:3d:37:ca:a0:bf:f1:31:cc:f7:91: 3d:eb:42:a6:b8:1d:a0:c3:53:2f:88:87:00:de:5a: d2:13:b4:58:20:1e:8d:b3:75:f1:49:9a:ca:f7:2b: a9:b9:74:f5:d7:cc:3d:a9:dc:8d:41:06:b9:84:93: fb:2e:7a:fb:42:e4:7e:bc:f8:58:1a:a9:2e:61:27: 41:c1:1e:7b:2c:04:f0:6a:c2:cf:88:d0:7a:96:66: 15:3e:2c:f7:3b:29:ff:4a:4e:f2:bf:8b:9a:12:71: 33:26:96:29:36:83:81:f9:d4:b2:e4:52:f5:16:e5: 59:ec:6f:bf:63:7e:12:ba:86:35:44:67:3c:62:9b: fb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3A:B8:59:A1:95:AF:1D:AC:6E:25:BD:F1:A2:86:A6:7D:8C:99:49 X509v3 Authority Key Identifier: keyid:13:45:15:7B:61:F3:61:F5:83:DC:B5:2D:B3:EC:BC:A1:08:62:59:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.28.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:5f:b2:00:c0:16:cd:b9:fe:92:de:a9:f8:4e:83:d3:7d:aa: 0e:c8:f0:17:9f:1f:c7:3a:81:4e:13:a8:f5:2b:a2:ae:fe:af: dd:38:99:04:eb:c3:9d:4b:4a:55:2d:b7:a9:46:f6:6e:36:8f: 74:07:6f:0e:ee:9d:e5:05:c1:97:3c:ee:2b:5b:83:cd:33:ae: f5:d8:d8:a1:10:4c:a3:9b:83:f2:1a:f3:55:fe:62:f1:20:cd: be:ec:c3:e7:25:72:a8:df:78:20:21:d3:9f:3e:a0:62:31:31: 9e:6c:7f:d5:e0:7e:c9:be:c4:0d:6e:7c:d3:64:0d:1f:14:0b: 27:1b:ac:40:f1:b8:f2:fa:0a:c0:8a:a9:8c:16:a4:c8:1e:84: 13:13:39:87:36:19:8f:7b:b1:c7:89:e9:78:ba:b8:0e:97:20: 0d:97:2b:a4:a3:5f:df:d7:7d:43:76:5a:f4:ab:49:38:f4:3b: 6b:8b:22:45:e7:fe:ee:40:1f:6c:6c:0b:c6:33:d9:64:6c:86: dc:4e:3a:6f:d9:aa:3a:a3:2a:e4:e2:4d:b9:15:84:2d:04:5d: 7e:79:95:5a:80:d7:5d:da:ce:94:eb:d0:58:2e:be:0b:7a:52: 4f:13:5e:cb:17:bc:e6:0e:c6:42:4c:e5:27:55:3f:67:5e:82: d2:a3:c3:f0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUc/FXEBTYPprk0L+/JPuzaKFHNTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0NTE1N0I2MUYzNjFGNTgzRENCNTJEQjNFQ0JDQTEw ODYyNTk5QjAeFw0yNjA1MDMwMjQzMDlaFw0yNzA1MDIwMjQ4MDlaMDMxMTAvBgNV BAMTKDY2M0FCODU5QTE5NUFGMURBQzZFMjVCREYxQTI4NkE2N0Q4Qzk5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcGX4TLjH2x4yn33vQq+uGKExf GDVXHkz0hwjYjUVViCXxsP1ZDXoNb+TmXxD0tjYpijA1gytpJ9QH7HBRTUgc/IMN dRpcAr9e3n87UdiFSABmXlwExk8aQqh6If42hlzSGi9cXJrM1rb1U4xU/Ogckdjh LZV8AtoCuM3TPTfKoL/xMcz3kT3rQqa4HaDDUy+IhwDeWtITtFggHo2zdfFJmsr3 K6m5dPXXzD2p3I1BBrmEk/suevtC5H68+FgaqS5hJ0HBHnssBPBqws+I0HqWZhU+ LPc7Kf9KTvK/i5oScTMmlik2g4H51LLkUvUW5Vnsb79jfhK6hjVEZzxim/txAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZjq4WaGVrx2sbiW98aKGpn2MmUkwHwYDVR0j BBgwFoAUE0UVe2HzYfWD3LUts+y8oQhiWZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVlZTQwZGMtNTFiYS00NzY5LTg2MTktMjI4OWNjZTk2MjllLzAvMTM0NTE1N0I2 MUYzNjFGNTgzRENCNTJEQjNFQ0JDQTEwODYyNTk5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzQ1MTU3QjYxRjM2MUY1ODNEQ0I1MkRCM0VDQkNBMTA4NjI1 OTlCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZWU0MGRjLTUxYmEtNDc2OS04 NjE5LTIyODljY2U5NjI5ZS8wLzMxMzAzMzJlMzEzNjM4MmUzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6gcMA0GCSqG SIb3DQEBCwUAA4IBAQBuX7IAwBbNuf6S3qn4ToPTfaoOyPAXnx/HOoFOE6j1K6Ku /q/dOJkE68OdS0pVLbepRvZuNo90B28O7p3lBcGXPO4rW4PNM6712NihEEyjm4Py GvNV/mLxIM2+7MPnJXKo33ggIdOfPqBiMTGebH/V4H7JvsQNbnzTZA0fFAsnG6xA 8bjy+grAiqmMFqTIHoQTEzmHNhmPe7HHiel4urgOlyANlyuko1/f131Ddlr0q0k4 9DtriyJF5/7uQB9sbAvGM9lkbIbcTjpv2ao6oyrk4k25FYQtBF1+eZVagNdd2s6U 69BYLr4LelJPE17LF7zmDsZCTOUnVT9nXoLSo8Pw -----END CERTIFICATE-----Generated at Wed May 13 12:39:11 2026 by rpki-client