$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa File: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (raw, json) Hash identifier: S3Lt8Yj0Bj89QV3dgVMcSiUeVm0W6yG3NUqqTsEb6WE= Subject key identifier: A5:11:9E:2D:D3:A3:6B:8A:04:D0:02:DE:5D:BA:EF:88:85:C7:C4:24 Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B Certificate serial: 11F8B58F87A412E142E8AE2427949BD32372376B Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa Signing time: Sun 03 May 2026 02:51:12 +0000 ROA not before: Sun 03 May 2026 02:46:12 +0000 ROA not after: Sun 02 May 2027 02:51:12 +0000 asID: 136079 IP address blocks: 103.86.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f8:b5:8f:87:a4:12:e1:42:e8:ae:24:27:94:9b:d3:23:72:37:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B Validity Not Before: May 3 02:46:12 2026 GMT Not After : May 2 02:51:12 2027 GMT Subject: CN=A5119E2DD3A36B8A04D002DE5DBAEF8885C7C424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:c3:e3:3a:08:f7:7e:d1:ff:6d:b3:8c:71: ca:b6:1a:1a:58:9b:43:fc:49:9a:23:33:31:29:07: 52:46:81:3b:08:50:38:06:c4:db:6b:68:da:34:f9: 2b:2c:a8:20:f3:ca:db:e4:89:e1:25:6a:0d:9f:a7: 97:e7:0f:06:01:23:1e:b4:6a:e4:22:cd:35:c7:99: f7:1a:c8:71:66:4a:81:6b:ba:97:0f:98:d7:5f:80: d9:0d:48:d7:8f:22:32:72:cb:47:ea:73:b8:f9:e5: f8:3e:5d:19:42:86:9d:1b:03:e5:65:00:2e:3e:c2: d6:a6:84:5d:79:83:50:95:60:b1:e3:f4:8a:1f:3b: 16:a6:db:88:66:ad:36:14:9f:d2:e0:14:e9:b4:e3: 07:a1:3b:23:44:10:62:26:d9:9c:88:f7:75:d1:3d: 2b:3c:83:2a:0b:6f:d6:2f:a8:38:17:13:d3:fb:25: 94:d2:eb:33:2a:70:a0:de:e7:aa:66:6e:83:e8:89: 25:60:2d:f9:85:9e:f6:08:6e:46:f7:75:73:85:27: ba:e9:30:7d:3e:9d:70:7b:c7:f3:e1:41:a1:f5:ce: 7f:fd:7c:66:71:5a:d3:3c:bb:4a:49:01:84:db:8e: 6a:bf:fe:03:e7:73:f7:c0:d0:d8:6a:f3:72:c9:27: 92:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:11:9E:2D:D3:A3:6B:8A:04:D0:02:DE:5D:BA:EF:88:85:C7:C4:24 X509v3 Authority Key Identifier: keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.86.101.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:51:6a:71:0c:87:43:a2:a2:ef:94:d4:da:90:b2:c4:d1:b6: 41:f0:b4:72:fd:c7:d9:b8:66:95:b2:0a:4a:b8:a4:af:d1:bb: 9a:50:86:e9:49:9d:9a:55:39:80:2f:c6:03:e7:34:7f:a1:09: 19:42:09:82:d6:50:e8:0e:99:0a:63:9b:a4:8d:e6:7c:99:58: 8d:58:4c:88:9f:84:2e:7f:19:3d:34:66:1d:7e:22:05:87:c8: 7d:6b:70:d2:a8:18:18:12:8c:bb:87:d2:51:38:62:91:e3:21: 87:87:41:83:45:02:51:8f:58:08:2f:37:8d:27:4b:85:14:b4: 25:49:ca:c2:9c:b9:2c:ed:8f:76:8b:44:22:46:c2:44:d3:d8: fe:0d:32:ce:c7:fb:fb:12:6c:20:f9:83:c3:44:8d:55:93:b0: 13:c6:cf:3f:1b:ed:58:a9:b3:2e:16:42:9a:6f:90:6f:0c:62: 36:f2:22:8d:be:70:c0:af:a0:ac:1f:3e:de:9c:ec:9d:f0:e3: bf:cf:ff:9b:86:d4:c3:0f:1f:2b:c6:4a:59:ba:e1:55:81:7d: c6:9c:86:b9:d3:ed:46:44:87:5a:bc:05:82:02:6b:d6:2f:22: 60:ed:42:85:c4:e6:82:4a:8c:c3:a7:4f:d9:0a:a4:7d:90:36: 6c:00:91:74 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEfi1j4ekEuFC6K4kJ5Sb0yNyN2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUyRDdERjY3NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3 NDUwOTU5QjAeFw0yNjA1MDMwMjQ2MTJaFw0yNzA1MDIwMjUxMTJaMDMxMTAvBgNV BAMTKEE1MTE5RTJERDNBMzZCOEEwNEQwMDJERTVEQkFFRjg4ODVDN0M0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWlcPjOgj3ftH/bbOMccq2GhpY m0P8SZojMzEpB1JGgTsIUDgGxNtraNo0+SssqCDzytvkieElag2fp5fnDwYBIx60 auQizTXHmfcayHFmSoFrupcPmNdfgNkNSNePIjJyy0fqc7j55fg+XRlChp0bA+Vl AC4+wtamhF15g1CVYLHj9IofOxam24hmrTYUn9LgFOm04wehOyNEEGIm2ZyI93XR PSs8gyoLb9YvqDgXE9P7JZTS6zMqcKDe56pmboPoiSVgLfmFnvYIbkb3dXOFJ7rp MH0+nXB7x/PhQaH1zn/9fGZxWtM8u0pJAYTbjmq//gPnc/fA0Nhq83LJJ5KdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUpRGeLdOja4oE0ALeXbrviIXHxCQwHwYDVR0j BBgwFoAUFS199nU/32gJr47sQVigeHRQlZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU2OTNiODktNDU5Ny00MGI1LTkyYjAtYjI5OWZhNzY5YWZhLzAvMTUyRDdERjY3 NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3NDUwOTU5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTJEN0RGNjc1M0ZERjY4MDlBRjhFRUM0MTU4QTA3ODc0NTA5 NTlCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMxMzAzMzJlMzgzNjJlMzEzMDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1ZlMA0GCSqG SIb3DQEBCwUAA4IBAQAKUWpxDIdDoqLvlNTakLLE0bZB8LRy/cfZuGaVsgpKuKSv 0buaUIbpSZ2aVTmAL8YD5zR/oQkZQgmC1lDoDpkKY5ukjeZ8mViNWEyIn4Qufxk9 NGYdfiIFh8h9a3DSqBgYEoy7h9JROGKR4yGHh0GDRQJRj1gILzeNJ0uFFLQlScrC nLks7Y92i0QiRsJE09j+DTLOx/v7Emwg+YPDRI1Vk7ATxs8/G+1YqbMuFkKab5Bv DGI28iKNvnDAr6CsHz7enOyd8OO/z/+bhtTDDx8rxkpZuuFVgX3GnIa50+1GRIda vAWCAmvWLyJg7UKFxOaCSozDp0/ZCqR9kDZsAJF0 -----END CERTIFICATE-----Generated at Wed May 13 09:34:23 2026 by rpki-client