$ rpki-client -vvf rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa File: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (raw, json) Hash identifier: M8QTZuDsRpJ1yY06WkCYeFwFPm5+TLSWxZVTx0+FX3U= Subject key identifier: 6E:3B:15:8D:CF:11:25:6B:08:6E:5E:15:B6:E3:49:EA:F0:BE:46:BA Certificate issuer: /CN=873409842DEE948D3DE05C618194C87A259E04BF Certificate serial: 24F9B73BAE2BA9350B4A99DF0E68FAC4313A6746 Authority key identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa Signing time: Sun 03 May 2026 02:51:05 +0000 ROA not before: Sun 03 May 2026 02:46:05 +0000 ROA not after: Sun 02 May 2027 02:51:05 +0000 asID: 140475 IP address blocks: 103.153.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f9:b7:3b:ae:2b:a9:35:0b:4a:99:df:0e:68:fa:c4:31:3a:67:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873409842DEE948D3DE05C618194C87A259E04BF Validity Not Before: May 3 02:46:05 2026 GMT Not After : May 2 02:51:05 2027 GMT Subject: CN=6E3B158DCF11256B086E5E15B6E349EAF0BE46BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:ff:91:81:cf:75:41:27:9c:3b:30:91:64: 65:f8:5f:51:63:55:bd:19:1c:43:7b:c6:10:77:d2: 5c:0c:1b:e9:b2:e6:c5:1a:9b:b6:2c:67:ea:90:7d: 8f:10:9e:c7:a3:fc:00:87:b0:f6:4b:1c:64:17:3b: 9e:3f:d3:c3:30:fb:90:30:1f:fd:8d:0a:d4:7f:c0: 7a:13:21:e6:0e:00:7e:f7:e2:f0:80:43:0e:b7:d9: 56:a8:3c:d8:b6:86:83:1c:36:9c:f2:57:13:4d:2a: 8d:d9:b6:72:be:b7:56:71:6e:7f:bc:7c:f4:eb:f0: 51:1c:39:a3:b5:4e:02:6f:ce:52:02:54:73:8b:1e: b8:3b:97:46:3a:2a:54:42:14:28:21:9c:cd:38:b1: a3:7c:47:b4:2f:ab:83:15:9b:8f:d2:1a:53:e4:79: c4:6a:c9:0d:5e:e2:87:f8:65:82:69:38:cb:70:24: 43:34:75:3c:b8:e8:16:f2:eb:87:fc:6b:e8:1e:c4: a5:8c:8d:7a:a6:7d:cc:7a:d1:83:02:7c:7c:1e:8d: 68:5d:66:7b:a7:8e:43:e6:60:d2:07:1d:7b:1f:99: 1f:f5:61:f5:2d:21:4a:36:29:ba:65:19:1f:7f:64: 7b:3d:57:ee:3b:db:aa:ce:da:bf:4c:11:ab:e6:7a: 48:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3B:15:8D:CF:11:25:6B:08:6E:5E:15:B6:E3:49:EA:F0:BE:46:BA X509v3 Authority Key Identifier: keyid:87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.246.0/24 Signature Algorithm: sha256WithRSAEncryption 20:cc:da:97:85:c4:a7:ef:c5:34:3a:c2:f1:79:9c:e4:a6:e9: 9e:89:d5:1e:23:df:40:08:18:7e:42:e9:aa:d7:18:86:68:ad: 58:5d:e7:c3:b2:e1:d0:8e:0a:2a:1a:9f:90:a5:1f:70:db:3b: 55:a0:1d:57:3f:65:d4:10:4f:11:04:9b:e8:39:22:55:60:a0: 91:af:75:37:63:3b:c9:05:ba:8c:8a:c0:5c:a1:3e:50:05:a6: 48:2b:9b:35:18:4f:11:4b:93:23:e2:cf:a1:74:99:1d:0f:c2: 57:19:fa:15:dc:d1:13:2e:da:28:a7:03:44:c8:d2:e7:da:30: e0:a2:c7:55:6e:5d:c5:53:a9:f6:8f:87:0f:98:cb:c1:9c:af: 23:9c:d6:a5:02:05:ed:75:4e:d2:81:ec:dc:47:98:54:2d:0f: 47:7f:5e:58:ca:03:05:c1:fd:6c:ac:6c:3a:15:18:e5:a8:fc: 7c:37:b4:c9:c0:a3:10:11:37:8e:cf:cb:40:45:f1:ab:98:6d: 8f:5d:e1:04:ee:3b:bf:9d:39:88:81:3e:4b:0e:68:1e:52:46: 8e:d5:7f:b2:45:2a:0f:7f:23:bf:cd:12:64:4b:b0:5c:2b:21: 23:c4:ea:20:0e:c4:63:32:4f:47:7e:e8:99:09:0a:41:3c:f1: 77:de:1a:0e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJPm3O64rqTULSpnfDmj6xDE6Z0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4N0Ey NTlFMDRCRjAeFw0yNjA1MDMwMjQ2MDVaFw0yNzA1MDIwMjUxMDVaMDMxMTAvBgNV BAMTKDZFM0IxNThEQ0YxMTI1NkIwODZFNUUxNUI2RTM0OUVBRjBCRTQ2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTf+Rgc91QSecOzCRZGX4X1Fj Vb0ZHEN7xhB30lwMG+my5sUam7YsZ+qQfY8Qnsej/ACHsPZLHGQXO54/08Mw+5Aw H/2NCtR/wHoTIeYOAH734vCAQw632VaoPNi2hoMcNpzyVxNNKo3ZtnK+t1Zxbn+8 fPTr8FEcOaO1TgJvzlICVHOLHrg7l0Y6KlRCFCghnM04saN8R7Qvq4MVm4/SGlPk ecRqyQ1e4of4ZYJpOMtwJEM0dTy46Bby64f8a+gexKWMjXqmfcx60YMCfHwejWhd ZnunjkPmYNIHHXsfmR/1YfUtIUo2KbplGR9/ZHs9V+4726rO2r9MEavmekjHAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUbjsVjc8RJWsIbl4VtuNJ6vC+RrowHwYDVR0j BBgwFoAUhzQJhC3ulI094FxhgZTIeiWeBL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRjZjQwNjctYTY5ZC00OTA4LWJlZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQy REVFOTQ4RDNERTA1QzYxODE5NEM4N0EyNTlFMDRCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzM0MDk4NDJERUU5NDhEM0RFMDVDNjE4MTk0Qzg3QTI1OUUw NEJGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhkY2Y0MDY3LWE2OWQtNDkwOC1i ZWU4LWI0NjU1YmRjMTVmOC8wLzMxMzAzMzJlMzEzNTMzMmUzMjM0MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmfYwDQYJ KoZIhvcNAQELBQADggEBACDM2peFxKfvxTQ6wvF5nOSm6Z6J1R4j30AIGH5C6arX GIZorVhd58Oy4dCOCioan5ClH3DbO1WgHVc/ZdQQTxEEm+g5IlVgoJGvdTdjO8kF uoyKwFyhPlAFpkgrmzUYTxFLkyPiz6F0mR0PwlcZ+hXc0RMu2iinA0TI0ufaMOCi x1VuXcVTqfaPhw+Yy8GcryOc1qUCBe11TtKB7NxHmFQtD0d/XljKAwXB/WysbDoV GOWo/Hw3tMnAoxARN47Py0BF8auYbY9d4QTuO7+dOYiBPksOaB5SRo7Vf7JFKg9/ I7/NEmRLsFwrISPE6iAOxGMyT0d+6JkJCkE88XfeGg4= -----END CERTIFICATE-----Generated at Wed May 13 06:47:36 2026 by rpki-client