$ rpki-client -vvf rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa File: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (raw, json) Hash identifier: +KI9lluNblEh0OS/xQ9qvin+Rvp0BPbAFEdcf5tYUSM= Subject key identifier: 8A:B2:BD:ED:C1:E5:E9:D7:97:5A:DA:8E:44:69:24:16:40:B5:6C:63 Certificate issuer: /CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Certificate serial: 5F29A5710E8B7F8300151CB24DDFE302A68C4A8B Authority key identifier: CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa Signing time: Sun 03 May 2026 02:52:04 +0000 ROA not before: Sun 03 May 2026 02:47:04 +0000 ROA not after: Sun 02 May 2027 02:52:04 +0000 asID: 150930 IP address blocks: 103.101.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:29:a5:71:0e:8b:7f:83:00:15:1c:b2:4d:df:e3:02:a6:8c:4a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Validity Not Before: May 3 02:47:04 2026 GMT Not After : May 2 02:52:04 2027 GMT Subject: CN=8AB2BDEDC1E5E9D7975ADA8E4469241640B56C63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:0f:16:79:b0:60:86:5f:4f:02:92:56:c3: c8:8c:32:87:1b:e5:1b:01:93:92:e6:5f:7b:5a:f9: 52:0d:62:be:48:d5:0d:26:89:02:8a:3d:3d:c8:a2: 36:0d:8a:65:6a:d6:aa:e6:b0:f8:ed:ea:7f:29:4a: e4:f5:8b:eb:fc:d2:6a:5d:9e:aa:1f:5d:99:24:84: 34:52:49:99:2e:12:7e:c9:3d:3f:5f:b6:85:51:4f: 53:ca:79:79:6b:33:3a:2b:e1:f2:eb:73:75:64:46: d9:1d:90:45:26:67:b1:e4:1e:9c:d2:9b:a0:be:25: 80:54:93:62:15:2d:38:6c:ef:dd:6e:6e:40:42:bd: d2:10:d7:40:d7:07:f4:38:b2:ec:0a:ab:7e:05:92: dd:8a:bb:b1:c1:30:f8:d6:a2:21:3d:76:2e:31:c4: 3e:7a:8b:48:ba:08:9c:6e:f0:df:2c:38:e1:07:da: 3f:1c:7e:90:75:54:ef:4b:11:cc:aa:6d:09:74:40: 9c:88:65:6b:86:5f:bc:ea:e1:80:94:7c:f0:ba:74: 46:03:06:e8:d7:6c:5d:e2:32:03:4f:43:7a:53:f3: 38:16:12:ae:8c:5c:5d:7a:02:0e:2d:ce:5a:d9:65: 2b:fb:df:6e:5e:0f:bf:9b:96:a9:3a:0a:48:11:3f: 62:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B2:BD:ED:C1:E5:E9:D7:97:5A:DA:8E:44:69:24:16:40:B5:6C:63 X509v3 Authority Key Identifier: keyid:CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.142.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:3d:ce:07:f0:0e:aa:03:8a:36:26:be:6e:e9:a8:14:f2:6f: b9:a5:9c:9f:ba:1d:15:60:a3:48:57:27:df:61:95:60:3e:b0: 0e:c9:53:49:31:e4:1b:bb:e7:7a:91:8b:3e:8b:ee:f3:e8:a1: 3a:c6:91:34:81:99:78:a4:70:4f:53:90:9d:46:34:00:a6:53: fc:bb:08:1e:b6:ff:43:d7:6d:eb:66:10:dd:ed:e6:fd:77:79: ff:73:7e:35:33:ea:ea:b7:3c:7f:a2:19:23:9f:90:24:fa:de: f3:4c:80:c7:52:04:c8:46:cd:c7:79:95:97:b2:02:0c:18:5b: 35:21:8e:ac:49:48:9c:f5:6c:e3:ee:ad:23:2e:5e:75:13:2f: dd:2c:0b:b7:87:32:1f:e3:c4:c5:68:72:d7:72:ef:d5:5b:90: 49:3f:d9:79:ec:92:f9:0f:88:e0:8a:31:56:9a:ff:02:8f:4e: 42:55:44:64:ea:98:89:34:4a:51:d3:91:4c:cd:9f:b9:b0:76: 10:d4:45:23:8a:6b:84:b5:85:1d:c1:c0:2a:8f:78:d8:a0:58: 98:ce:42:85:a7:e3:48:2c:c6:53:cb:70:c7:56:c9:27:5b:2e: af:38:d4:41:e0:3e:af:e8:2f:93:b4:03:0d:fb:98:b3:c0:03: 27:f4:ee:d6 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXymlcQ6Lf4MAFRyyTd/jAqaMSoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1NDM4 RjUxNkU0NTAeFw0yNjA1MDMwMjQ3MDRaFw0yNzA1MDIwMjUyMDRaMDMxMTAvBgNV BAMTKDhBQjJCREVEQzFFNUU5RDc5NzVBREE4RTQ0NjkyNDE2NDBCNTZDNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6A8WebBghl9PApJWw8iMMocb 5RsBk5LmX3ta+VINYr5I1Q0miQKKPT3IojYNimVq1qrmsPjt6n8pSuT1i+v80mpd nqofXZkkhDRSSZkuEn7JPT9ftoVRT1PKeXlrMzor4fLrc3VkRtkdkEUmZ7HkHpzS m6C+JYBUk2IVLThs791ubkBCvdIQ10DXB/Q4suwKq34Fkt2Ku7HBMPjWoiE9di4x xD56i0i6CJxu8N8sOOEH2j8cfpB1VO9LEcyqbQl0QJyIZWuGX7zq4YCUfPC6dEYD BujXbF3iMgNPQ3pT8zgWEq6MXF16Ag4tzlrZZSv7325eD7+blqk6CkgRP2K/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUirK97cHl6deXWtqORGkkFkC1bGMwHwYDVR0j BBgwFoAUy8s14jwHcCtN3h4enoAVQ49RbkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYzcxY2QtYWNjYS00MTVjLWIyODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIz QzA3NzAyQjREREUxRTFFOUU4MDE1NDM4RjUxNkU0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkNCMzVFMjNDMDc3MDJCNERERTFFMUU5RTgwMTU0MzhGNTE2 RTQ1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxZGM3MWNkLWFjY2EtNDE1Yy1i MjgzLWI5MzcyYzBkNGNlOC8wLzMxMzAzMzJlMzEzMDMxMmUzMTM0MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZY4wDQYJ KoZIhvcNAQELBQADggEBAHs9zgfwDqoDijYmvm7pqBTyb7mlnJ+6HRVgo0hXJ99h lWA+sA7JU0kx5Bu753qRiz6L7vPooTrGkTSBmXikcE9TkJ1GNACmU/y7CB62/0PX betmEN3t5v13ef9zfjUz6uq3PH+iGSOfkCT63vNMgMdSBMhGzcd5lZeyAgwYWzUh jqxJSJz1bOPurSMuXnUTL90sC7eHMh/jxMVoctdy79VbkEk/2XnskvkPiOCKMVaa /wKPTkJVRGTqmIk0SlHTkUzNn7mwdhDURSOKa4S1hR3BwCqPeNigWJjOQoWn40gs xlPLcMdWySdbLq841EHgPq/oL5O0Aw37mLPAAyf07tY= -----END CERTIFICATE-----Generated at Wed May 13 05:25:35 2026 by rpki-client