$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa File: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (raw, json) Hash identifier: tu3AmkYv6OjKULA1Hlhe48YSBX8fxkzhYqyVPC8IjFo= Subject key identifier: 21:D0:4C:FB:28:19:C9:1F:83:CF:EF:00:EA:42:39:B6:A1:87:9B:DF Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B Certificate serial: 117695030B5114449DD06630B1001BBE63A4359C Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa Signing time: Sun 03 May 2026 02:51:07 +0000 ROA not before: Sun 03 May 2026 02:46:07 +0000 ROA not after: Sun 02 May 2027 02:51:07 +0000 asID: 136079 IP address blocks: 103.86.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:76:95:03:0b:51:14:44:9d:d0:66:30:b1:00:1b:be:63:a4:35:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B Validity Not Before: May 3 02:46:07 2026 GMT Not After : May 2 02:51:07 2027 GMT Subject: CN=21D04CFB2819C91F83CFEF00EA4239B6A1879BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:53:8b:a6:23:52:05:fa:0b:32:ee:48:26:07: 89:b1:4d:20:27:d4:d6:08:be:fb:1a:06:50:21:39: 27:00:c7:67:b9:c7:c3:83:cb:7b:75:e1:ac:20:b1: e2:5f:d4:c7:ff:5a:c0:d4:58:ad:7c:eb:c2:7f:aa: 52:17:7c:f3:1b:70:6b:a1:2f:90:79:51:04:db:09: 8b:ac:10:21:d0:4b:44:80:0a:67:d8:c7:10:9c:d0: fa:80:87:cf:1d:e4:4a:d8:55:55:79:7d:74:c4:1a: 4a:dd:06:c9:fb:f4:34:47:61:0a:35:84:a2:a6:05: 5c:ec:e7:70:9d:c2:3b:71:51:da:d6:c8:cb:68:35: 24:87:4f:1e:91:5f:95:bc:b4:4e:6d:c1:ef:59:26: 20:5b:4a:9f:15:82:c0:7f:b6:61:8a:98:f5:c7:e9: ee:83:18:f1:8f:cf:14:23:5b:46:82:fe:3d:0a:1b: 08:3a:6f:8a:ab:6f:55:c2:f1:36:04:ff:22:99:9c: 20:de:20:ec:8f:19:1c:86:db:53:4c:ba:55:95:ca: 53:e7:77:1d:31:d6:a4:34:c3:6b:b2:0a:16:ab:f4: 77:45:64:44:9c:56:7c:11:bc:b1:b1:1a:04:dd:aa: d6:46:ef:00:d0:5a:0c:8c:99:ea:33:e6:4b:f1:ec: ef:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D0:4C:FB:28:19:C9:1F:83:CF:EF:00:EA:42:39:B6:A1:87:9B:DF X509v3 Authority Key Identifier: keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.86.100.0/23 Signature Algorithm: sha256WithRSAEncryption 17:42:74:cc:95:da:1a:4b:bf:bf:99:9f:5a:bb:7b:b8:ac:27: 8c:e5:77:7f:9d:36:b1:94:ce:90:f5:5d:92:b7:96:49:a8:54: f5:88:32:17:01:d2:c1:f5:c4:af:3a:af:c0:f6:78:ae:91:d5: 55:c6:9a:c4:00:33:a3:3d:73:35:93:0c:c0:67:8a:e1:c1:dc: aa:fd:62:6e:ff:a6:43:bc:dc:d9:ea:00:bf:3c:1c:21:33:25: 58:9c:27:ba:92:20:83:9d:d0:0d:05:2e:c7:4b:e7:ab:19:d3: c5:2b:e2:0a:b5:23:d4:47:88:2e:5a:42:59:cc:56:57:e1:3c: 27:50:11:77:1c:2c:2d:9d:a4:90:73:47:df:4f:40:90:f6:4b: 11:2a:1b:2a:60:36:9c:fe:77:02:c7:24:dc:ec:87:38:ce:2b: 1b:cc:16:13:40:f3:6a:c8:60:f5:88:1b:5c:bf:95:52:76:f0: c8:9b:db:23:8c:0b:9c:e8:90:02:86:61:f4:e0:63:4e:dd:fd: b4:5c:5f:da:11:55:8b:41:32:0d:b9:46:b7:51:78:d8:f2:49: 4b:94:bc:26:c6:ef:51:17:76:c3:e7:55:30:59:b0:b9:d8:4d: c2:19:bd:d0:c9:15:be:e2:16:8d:3f:cb:1e:84:c9:15:37:b7: e9:b7:99:5a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEXaVAwtRFESd0GYwsQAbvmOkNZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUyRDdERjY3NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3 NDUwOTU5QjAeFw0yNjA1MDMwMjQ2MDdaFw0yNzA1MDIwMjUxMDdaMDMxMTAvBgNV BAMTKDIxRDA0Q0ZCMjgxOUM5MUY4M0NGRUYwMEVBNDIzOUI2QTE4NzlCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeU4umI1IF+gsy7kgmB4mxTSAn 1NYIvvsaBlAhOScAx2e5x8ODy3t14awgseJf1Mf/WsDUWK1868J/qlIXfPMbcGuh L5B5UQTbCYusECHQS0SACmfYxxCc0PqAh88d5ErYVVV5fXTEGkrdBsn79DRHYQo1 hKKmBVzs53CdwjtxUdrWyMtoNSSHTx6RX5W8tE5twe9ZJiBbSp8VgsB/tmGKmPXH 6e6DGPGPzxQjW0aC/j0KGwg6b4qrb1XC8TYE/yKZnCDeIOyPGRyG21NMulWVylPn dx0x1qQ0w2uyChar9HdFZEScVnwRvLGxGgTdqtZG7wDQWgyMmeoz5kvx7O+fAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUIdBM+ygZyR+Dz+8A6kI5tqGHm98wHwYDVR0j BBgwFoAUFS199nU/32gJr47sQVigeHRQlZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU2OTNiODktNDU5Ny00MGI1LTkyYjAtYjI5OWZhNzY5YWZhLzAvMTUyRDdERjY3 NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3NDUwOTU5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTJEN0RGNjc1M0ZERjY4MDlBRjhFRUM0MTU4QTA3ODc0NTA5 NTlCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMxMzAzMzJlMzgzNjJlMzEzMDMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM2MzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1ZkMA0GCSqG SIb3DQEBCwUAA4IBAQAXQnTMldoaS7+/mZ9au3u4rCeM5Xd/nTaxlM6Q9V2St5ZJ qFT1iDIXAdLB9cSvOq/A9niukdVVxprEADOjPXM1kwzAZ4rhwdyq/WJu/6ZDvNzZ 6gC/PBwhMyVYnCe6kiCDndANBS7HS+erGdPFK+IKtSPUR4guWkJZzFZX4TwnUBF3 HCwtnaSQc0ffT0CQ9ksRKhsqYDac/ncCxyTc7Ic4zisbzBYTQPNqyGD1iBtcv5VS dvDIm9sjjAuc6JAChmH04GNO3f20XF/aEVWLQTINuUa3UXjY8klLlLwmxu9RF3bD 51UwWbC52E3CGb3QyRW+4haNP8sehMkVN7fpt5la -----END CERTIFICATE-----Generated at Wed May 13 05:36:40 2026 by rpki-client