$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa File: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (raw, json) Hash identifier: vGdo0aPhNFfXshch3eNd6YkNvIG8QzHxW2xedSDSTPc= Subject key identifier: 21:91:8B:E2:A6:08:C4:26:59:FB:83:A4:0C:22:FB:AA:84:2A:3D:24 Certificate issuer: /CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Certificate serial: 1C1CD0751A9E6DDB4B71C4638A17C5B14F67473D Authority key identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa Signing time: Sun 03 May 2026 02:51:22 +0000 ROA not before: Sun 03 May 2026 02:46:22 +0000 ROA not after: Sun 02 May 2027 02:51:22 +0000 asID: 141959 IP address blocks: 103.166.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1c:d0:75:1a:9e:6d:db:4b:71:c4:63:8a:17:c5:b1:4f:67:47:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Validity Not Before: May 3 02:46:22 2026 GMT Not After : May 2 02:51:22 2027 GMT Subject: CN=21918BE2A608C42659FB83A40C22FBAA842A3D24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d3:d8:db:be:b8:2c:79:5e:fa:51:57:b2:4e: a7:b0:81:60:ec:41:f1:6c:16:67:c3:90:ae:34:94: b1:8e:21:f8:66:74:72:c5:78:80:d7:0e:44:9c:46: 1a:88:13:7e:85:fa:c7:97:9d:e8:9b:cf:cf:41:03: d1:f1:96:9a:86:ce:ae:83:57:c4:80:8f:90:c0:bd: 3b:84:0c:e1:3e:32:27:f2:98:b8:03:35:0c:86:79: 4a:e6:a9:92:6e:9d:68:22:04:8b:ce:07:01:bd:ae: bd:c9:02:e3:81:4b:54:d9:42:4c:86:81:a6:f3:43: 01:6b:49:e9:0f:04:b5:74:f0:35:a7:3b:37:b7:5c: ad:a5:ab:59:c2:85:af:21:ea:85:14:0a:47:de:68: 66:8d:98:c8:b6:e5:6d:1b:45:47:22:f8:13:12:06: 75:fa:29:9d:03:0d:a3:fc:d4:9a:d3:93:33:45:0d: 6c:41:da:63:e9:3d:c5:9e:a3:6a:8c:00:1e:e9:63: 81:8a:16:cb:b9:ea:26:40:02:cc:b8:76:51:1d:ae: 01:00:17:bc:32:9d:00:1c:6e:88:ba:0e:cf:49:b3: 00:00:70:67:11:c3:8a:b9:4b:b6:bd:41:07:7c:5a: e5:b4:cf:e4:b5:19:24:79:79:02:3b:bb:cf:6a:d8: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:91:8B:E2:A6:08:C4:26:59:FB:83:A4:0C:22:FB:AA:84:2A:3D:24 X509v3 Authority Key Identifier: keyid:B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.227.0/24 Signature Algorithm: sha256WithRSAEncryption 98:ae:cc:39:8d:8d:25:8b:0d:a6:1d:72:29:09:86:00:77:86: f4:c4:a5:f5:8d:61:57:85:9b:97:97:97:d3:7b:5f:12:12:5a: 5c:51:a4:00:c4:c2:45:0b:5b:e9:1e:37:be:78:68:f4:8b:fb: 7a:e2:5a:88:d6:7c:e2:24:4b:9f:2d:ae:ee:18:1c:28:23:13: cb:81:7f:53:61:14:e6:09:b8:c3:c9:d0:ef:b6:f2:69:99:47: 7d:27:69:1d:92:69:c5:24:f8:1a:1e:0e:35:57:c1:6e:13:d5: e6:45:f6:c2:e5:1d:98:3f:39:d5:45:d9:16:2a:ed:7f:15:fa: 19:52:17:f9:8d:34:32:76:96:7a:b0:b7:f8:b7:ff:ca:45:77: e0:4e:7e:40:9f:da:90:a5:9d:30:04:ca:1b:4c:70:7e:f1:e1: 62:0a:85:37:ed:a5:6f:76:45:c3:c2:41:6a:49:da:a2:0d:08: 38:58:83:df:5d:ce:fe:8d:ac:4e:12:2b:d6:dd:09:79:e7:23: 2a:29:f8:90:b7:f8:58:76:f9:43:30:32:63:b7:f3:0f:e6:a8: d1:2f:a9:c1:af:d8:0e:e9:f7:e6:ae:18:0b:2f:31:65:0d:f0: f8:26:60:7d:1c:be:d2:a2:63:c4:f4:9e:df:41:f1:a1:5b:f5: ad:e9:23:74 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHBzQdRqebdtLccRjihfFsU9nRz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5QzVF Q0QyRDcwOTAeFw0yNjA1MDMwMjQ2MjJaFw0yNzA1MDIwMjUxMjJaMDMxMTAvBgNV BAMTKDIxOTE4QkUyQTYwOEM0MjY1OUZCODNBNDBDMjJGQkFBODQyQTNEMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU09jbvrgseV76UVeyTqewgWDs QfFsFmfDkK40lLGOIfhmdHLFeIDXDkScRhqIE36F+seXneibz89BA9HxlpqGzq6D V8SAj5DAvTuEDOE+MifymLgDNQyGeUrmqZJunWgiBIvOBwG9rr3JAuOBS1TZQkyG gabzQwFrSekPBLV08DWnOze3XK2lq1nCha8h6oUUCkfeaGaNmMi25W0bRUci+BMS BnX6KZ0DDaP81JrTkzNFDWxB2mPpPcWeo2qMAB7pY4GKFsu56iZAAsy4dlEdrgEA F7wynQAcboi6Ds9JswAAcGcRw4q5S7a9QQd8WuW0z+S1GSR5eQI7u89q2C+nAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUIZGL4qYIxCZZ+4OkDCL7qoQqPSQwHwYDVR0j BBgwFoAUsxbGPS2hOH0ZGn6m3AtZxezS1wkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGZmMDk1ODQtOTExMC00YjBkLThmNmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0Qy REExMzg3RDE5MUE3RUE2REMwQjU5QzVFQ0QyRDcwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzE2QzYzRDJEQTEzODdEMTkxQTdFQTZEQzBCNTlDNUVDRDJE NzA5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhmZjA5NTg0LTkxMTAtNGIwZC04 ZjZkLTJjZTUyNThlODQ2Yi8wLzMxMzAzMzJlMzEzNjM2MmUzMjMyMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM1Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpuMwDQYJ KoZIhvcNAQELBQADggEBAJiuzDmNjSWLDaYdcikJhgB3hvTEpfWNYVeFm5eXl9N7 XxISWlxRpADEwkULW+keN754aPSL+3riWojWfOIkS58tru4YHCgjE8uBf1NhFOYJ uMPJ0O+28mmZR30naR2SacUk+BoeDjVXwW4T1eZF9sLlHZg/OdVF2RYq7X8V+hlS F/mNNDJ2lnqwt/i3/8pFd+BOfkCf2pClnTAEyhtMcH7x4WIKhTftpW92RcPCQWpJ 2qINCDhYg99dzv6NrE4SK9bdCXnnIyop+JC3+Fh2+UMwMmO38w/mqNEvqcGv2A7p 9+auGAsvMWUN8PgmYH0cvtKiY8T0nt9B8aFb9a3pI3Q= -----END CERTIFICATE-----Generated at Wed May 13 10:43:51 2026 by rpki-client