$ rpki-client -vvf rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa File: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (raw, json) Hash identifier: JAIdekl6qx6Yav3DLzW5vQbW9XO1mtiJq5doPkJbVhQ= Subject key identifier: A8:A0:81:7D:32:B3:1F:92:BF:71:78:40:B9:1E:DE:EE:9B:69:AE:67 Certificate issuer: /CN=7C6942D9E39D2E0708854282CB6A37230729EB7C Certificate serial: 136644DE15C612CCD1EEB4F920D06693387DDA7A Authority key identifier: 7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa Signing time: Sun 03 May 2026 02:48:23 +0000 ROA not before: Sun 03 May 2026 02:43:23 +0000 ROA not after: Sun 02 May 2027 02:48:23 +0000 asID: 58369 IP address blocks: 103.188.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:66:44:de:15:c6:12:cc:d1:ee:b4:f9:20:d0:66:93:38:7d:da:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C6942D9E39D2E0708854282CB6A37230729EB7C Validity Not Before: May 3 02:43:23 2026 GMT Not After : May 2 02:48:23 2027 GMT Subject: CN=A8A0817D32B31F92BF717840B91EDEEE9B69AE67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fa:2f:6f:7e:fa:ea:69:09:8e:95:72:e1:74: 87:67:21:cb:6f:a8:7f:95:5a:0a:24:d9:53:08:eb: aa:62:f4:00:b9:cc:fa:26:69:c4:d2:68:4f:80:90: 88:06:57:79:c3:24:09:41:7b:af:98:8c:27:1a:59: 73:0a:b2:7e:ac:14:85:84:d7:f2:cb:92:89:8e:e8: 7c:5f:9f:d0:85:10:59:1b:97:21:83:cd:b8:58:84: 05:fc:2a:0b:bf:4d:ad:3b:7d:49:57:5f:6d:77:81: 46:46:b5:9a:87:6b:26:21:11:e8:a6:34:34:88:d3: 25:2a:13:60:00:6f:fa:6c:68:56:59:c1:7c:f6:7a: 30:09:a5:b0:87:94:d7:8d:f3:f3:01:a3:99:92:74: d9:3d:75:f6:2f:12:2b:d8:74:79:f3:5d:91:42:08: 23:82:38:f5:30:41:34:f8:4a:0d:07:8f:28:97:49: 54:b9:8b:aa:93:cc:c7:34:79:8d:a8:73:a1:45:4c: cb:06:b1:86:f9:54:f4:31:6d:a6:6f:92:22:17:ed: 26:28:6c:8f:2d:7d:63:f2:3a:50:90:93:50:8e:1f: b5:3f:01:73:f9:69:ba:66:44:d8:e2:1c:64:e8:38: 62:c1:f9:be:b5:1b:cf:ed:1d:57:f9:ae:60:d3:1d: a8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A0:81:7D:32:B3:1F:92:BF:71:78:40:B9:1E:DE:EE:9B:69:AE:67 X509v3 Authority Key Identifier: keyid:7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.174.0/23 Signature Algorithm: sha256WithRSAEncryption a0:15:72:4e:c2:20:31:09:bb:f6:fb:e5:0e:c7:73:ec:49:97: cc:c1:07:f9:52:f0:78:e6:78:af:bd:06:49:f0:ce:97:4c:34: c6:93:d4:f7:e8:4f:d7:f7:a0:d5:e2:a2:e8:15:de:7b:4f:99: 1f:ab:28:37:de:78:9f:08:ad:c3:09:8c:35:db:52:ce:23:01: 76:39:92:d2:a2:ad:6a:d4:42:4e:99:18:52:75:e3:1d:11:1d: 78:a8:46:46:9e:84:ae:48:a6:d8:c7:b1:28:9a:ba:80:ee:39: e9:9b:a9:f4:aa:7f:c3:0b:40:8f:46:c3:49:e0:9d:4d:36:16: 57:1b:a9:b6:37:8a:e8:04:2e:0f:23:66:c4:6f:c2:72:97:5f: d0:48:f8:ad:5d:7f:d2:41:99:12:b7:21:10:72:b5:ad:8b:cc: 1c:a0:60:92:12:f8:e6:3a:ce:24:5c:57:73:46:a6:95:f1:83: cb:ea:72:29:12:20:06:ce:a7:c9:51:e1:5e:e0:32:6b:34:2d: 04:75:48:03:ea:a2:f5:00:66:91:6e:a2:9f:bf:0a:1c:d4:79: 7e:b7:76:86:c6:8c:b3:4c:8b:5c:70:96:21:2f:20:85:4a:2e: 56:5e:3a:7f:ba:e2:16:c4:98:3d:9e:1e:b0:bb:c9:7e:cf:e7: 99:3d:3f:11 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUE2ZE3hXGEszR7rT5INBmkzh92nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M2OTQyRDlFMzlEMkUwNzA4ODU0MjgyQ0I2QTM3MjMw NzI5RUI3QzAeFw0yNjA1MDMwMjQzMjNaFw0yNzA1MDIwMjQ4MjNaMDMxMTAvBgNV BAMTKEE4QTA4MTdEMzJCMzFGOTJCRjcxNzg0MEI5MUVERUVFOUI2OUFFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn+i9vfvrqaQmOlXLhdIdnIctv qH+VWgok2VMI66pi9AC5zPomacTSaE+AkIgGV3nDJAlBe6+YjCcaWXMKsn6sFIWE 1/LLkomO6Hxfn9CFEFkblyGDzbhYhAX8Kgu/Ta07fUlXX213gUZGtZqHayYhEeim NDSI0yUqE2AAb/psaFZZwXz2ejAJpbCHlNeN8/MBo5mSdNk9dfYvEivYdHnzXZFC CCOCOPUwQTT4Sg0HjyiXSVS5i6qTzMc0eY2oc6FFTMsGsYb5VPQxbaZvkiIX7SYo bI8tfWPyOlCQk1COH7U/AXP5abpmRNjiHGToOGLB+b61G8/tHVf5rmDTHai7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqKCBfTKzH5K/cXhAuR7e7ptprmcwHwYDVR0j BBgwFoAUfGlC2eOdLgcIhUKCy2o3Iwcp63wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZiZDU1MzgtNDI3MC00MTJkLTlkNjYtYzJiNTE1N2QzZDZlLzAvN0M2OTQyRDlF MzlEMkUwNzA4ODU0MjgyQ0I2QTM3MjMwNzI5RUI3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzY5NDJEOUUzOUQyRTA3MDg4NTQyODJDQjZBMzcyMzA3MjlF QjdDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg2YmQ1NTM4LTQyNzAtNDEyZC05 ZDY2LWMyYjUxNTdkM2Q2ZS8wLzMxMzAzMzJlMzEzODM4MmUzMTM3MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7yuMA0GCSqG SIb3DQEBCwUAA4IBAQCgFXJOwiAxCbv2++UOx3PsSZfMwQf5UvB45nivvQZJ8M6X TDTGk9T36E/X96DV4qLoFd57T5kfqyg33nifCK3DCYw121LOIwF2OZLSoq1q1EJO mRhSdeMdER14qEZGnoSuSKbYx7EomrqA7jnpm6n0qn/DC0CPRsNJ4J1NNhZXG6m2 N4roBC4PI2bEb8Jyl1/QSPitXX/SQZkStyEQcrWti8wcoGCSEvjmOs4kXFdzRqaV 8YPL6nIpEiAGzqfJUeFe4DJrNC0EdUgD6qL1AGaRbqKfvwoc1Hl+t3aGxoyzTItc cJYhLyCFSi5WXjp/uuIWxJg9nh6wu8l+z+eZPT8R -----END CERTIFICATE-----Generated at Wed May 13 07:59:29 2026 by rpki-client