$ rpki-client -vvf rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa File: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (raw, json) Hash identifier: SJ+P4+oX8hijYzZ9qA/WaUDV4gideRVgm7o6icDoWoM= Subject key identifier: 59:E1:45:58:50:31:0D:CC:38:C0:61:E8:A4:A4:16:DA:98:EE:74:43 Certificate issuer: /CN=A8D211A540A0A57C5D6ACB5032091B1A80BA458A Certificate serial: 769CE79D2A441F16386C18756C60C935A91AB376 Authority key identifier: A8:D2:11:A5:40:A0:A5:7C:5D:6A:CB:50:32:09:1B:1A:80:BA:45:8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa Signing time: Sun 03 May 2026 02:48:28 +0000 ROA not before: Sun 03 May 2026 02:43:28 +0000 ROA not after: Sun 02 May 2027 02:48:28 +0000 asID: 135462 IP address blocks: 103.70.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:9c:e7:9d:2a:44:1f:16:38:6c:18:75:6c:60:c9:35:a9:1a:b3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D211A540A0A57C5D6ACB5032091B1A80BA458A Validity Not Before: May 3 02:43:28 2026 GMT Not After : May 2 02:48:28 2027 GMT Subject: CN=59E1455850310DCC38C061E8A4A416DA98EE7443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:c9:65:a8:e3:a2:f0:46:d4:91:e4:82:c4: 11:78:c3:f4:32:fc:fc:b9:de:8d:31:22:56:9e:d3: a8:c3:d0:6b:9a:ef:22:fd:cb:60:96:c2:d2:ac:85: a0:25:92:12:d2:db:a3:74:92:36:bf:ba:67:76:1e: e1:50:74:35:79:e0:93:1d:48:16:48:38:c8:2d:2c: 5e:b2:d2:c8:7e:fb:70:08:67:d0:f7:f1:f2:bb:89: a9:8e:6c:f9:5b:22:87:cf:d8:4d:95:43:f1:6c:bc: 26:4a:6d:35:b0:97:3c:d5:cb:11:ac:a2:2a:4b:b3: 87:c9:98:41:06:9b:17:c8:1d:d9:22:d5:47:44:9c: 03:a8:b0:e4:1f:d1:5a:6b:a6:e2:ef:52:1a:b8:ef: 3f:2c:17:ff:0d:cc:4b:39:3a:c4:3a:99:74:13:8a: 1e:dc:4b:21:2a:47:a5:8e:35:6f:6e:86:4d:33:b2: ed:57:fb:06:97:ac:6e:97:ad:a9:e6:6d:48:b1:59: 75:f2:d8:cd:0d:92:ea:76:c7:a5:64:3f:93:df:df: 49:ea:7a:7a:5b:13:f9:bc:4e:7a:f4:2a:70:09:6e: 6f:ee:64:93:36:28:47:9f:25:82:80:31:b3:57:67: 08:62:e1:04:92:86:ba:dd:62:12:19:ac:35:20:20: ff:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E1:45:58:50:31:0D:CC:38:C0:61:E8:A4:A4:16:DA:98:EE:74:43 X509v3 Authority Key Identifier: keyid:A8:D2:11:A5:40:A0:A5:7C:5D:6A:CB:50:32:09:1B:1A:80:BA:45:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.70.16.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:f2:c3:77:b6:84:e0:32:ef:4f:9a:47:57:e8:9f:a1:45:34: 19:d0:5b:f7:a6:38:59:ac:10:e1:e7:3a:df:3e:f9:c8:a7:ca: de:3c:2f:bf:af:5a:6f:3f:fc:82:77:6b:7d:e8:28:56:1d:8f: ae:8f:d3:e1:e7:ac:2c:ce:d2:87:41:0b:0a:c5:a8:f4:36:bf: 31:e4:7e:dc:60:2a:51:ee:9a:d4:a5:62:b9:2b:08:d3:0e:6f: a9:2d:84:0e:00:ff:db:57:20:95:9c:98:68:e0:53:61:16:30: d1:a0:f9:c1:e2:f4:9a:d9:fd:3b:bc:8a:48:ee:a9:b4:89:1e: 19:a4:0f:b9:f6:a5:1f:74:8b:cb:d9:00:96:71:70:03:45:b9: 8a:36:3c:17:fa:69:3d:6e:96:b2:eb:f1:cb:ab:56:2e:63:ea: bf:a6:2a:74:74:c3:32:f4:cd:d9:c5:0f:1d:c8:88:74:63:47: ce:9e:cd:26:91:d3:82:75:4d:a6:3c:bc:0c:76:24:61:04:4c: 7c:3a:43:f1:f4:75:61:b7:24:a4:11:a5:b1:70:7d:62:14:e6: a6:33:ad:aa:5a:39:88:c5:87:39:ab:5e:77:57:a9:a7:30:b7: 3e:6f:ca:2c:de:38:5f:1f:12:ec:59:7b:30:c7:f7:67:de:d8: 96:11:58:34 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdpznnSpEHxY4bBh1bGDJNakas3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThEMjExQTU0MEEwQTU3QzVENkFDQjUwMzIwOTFCMUE4 MEJBNDU4QTAeFw0yNjA1MDMwMjQzMjhaFw0yNzA1MDIwMjQ4MjhaMDMxMTAvBgNV BAMTKDU5RTE0NTU4NTAzMTBEQ0MzOEMwNjFFOEE0QTQxNkRBOThFRTc0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC818llqOOi8EbUkeSCxBF4w/Qy /Py53o0xIlae06jD0Gua7yL9y2CWwtKshaAlkhLS26N0kja/umd2HuFQdDV54JMd SBZIOMgtLF6y0sh++3AIZ9D38fK7iamObPlbIofP2E2VQ/FsvCZKbTWwlzzVyxGs oipLs4fJmEEGmxfIHdki1UdEnAOosOQf0VprpuLvUhq47z8sF/8NzEs5OsQ6mXQT ih7cSyEqR6WONW9uhk0zsu1X+waXrG6XranmbUixWXXy2M0Nkup2x6VkP5Pf30nq enpbE/m8Tnr0KnAJbm/uZJM2KEefJYKAMbNXZwhi4QSShrrdYhIZrDUgIP+fAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWeFFWFAxDcw4wGHopKQW2pjudEMwHwYDVR0j BBgwFoAUqNIRpUCgpXxdastQMgkbGoC6RYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4NDQtNGU2YzdhM2M5N2Q5LzAvQThEMjExQTU0 MEEwQTU3QzVENkFDQjUwMzIwOTFCMUE4MEJBNDU4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEQyMTFBNTQwQTBBNTdDNUQ2QUNCNTAzMjA5MUIxQTgwQkE0 NThBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg2ZjRkNGYxLWIzNmMtNGE0Ni04 ODQ0LTRlNmM3YTNjOTdkOS8wLzMxMzAzMzJlMzczMDJlMzEzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdGEDANBgkqhkiG 9w0BAQsFAAOCAQEADfLDd7aE4DLvT5pHV+ifoUU0GdBb96Y4WawQ4ec63z75yKfK 3jwvv69abz/8gndrfegoVh2Pro/T4eesLM7Sh0ELCsWo9Da/MeR+3GAqUe6a1KVi uSsI0w5vqS2EDgD/21cglZyYaOBTYRYw0aD5weL0mtn9O7yKSO6ptIkeGaQPufal H3SLy9kAlnFwA0W5ijY8F/ppPW6Wsuvxy6tWLmPqv6YqdHTDMvTN2cUPHciIdGNH zp7NJpHTgnVNpjy8DHYkYQRMfDpD8fR1YbckpBGlsXB9YhTmpjOtqlo5iMWHOate d1eppzC3Pm/KLN44Xx8S7Fl7MMf3Z97YlhFYNA== -----END CERTIFICATE-----Generated at Wed May 13 02:40:42 2026 by rpki-client