$ rpki-client -vvf rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa File: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (raw, json) Hash identifier: YESQQe584DxGo0SLuNik4wkwCQuVf9tDli0g7fG2mUQ= Subject key identifier: BE:F0:15:E1:75:D0:DC:41:2D:B0:A7:FF:1E:17:8C:3F:F1:54:F1:F3 Certificate issuer: /CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Certificate serial: 08A92EC0EB8991C867BDD93646A776AF500D4435 Authority key identifier: E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa Signing time: Sun 03 May 2026 02:53:15 +0000 ROA not before: Sun 03 May 2026 02:48:15 +0000 ROA not after: Sun 02 May 2027 02:53:15 +0000 asID: 63872 IP address blocks: 103.127.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a9:2e:c0:eb:89:91:c8:67:bd:d9:36:46:a7:76:af:50:0d:44:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Validity Not Before: May 3 02:48:15 2026 GMT Not After : May 2 02:53:15 2027 GMT Subject: CN=BEF015E175D0DC412DB0A7FF1E178C3FF154F1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:f2:47:b4:d4:01:34:c6:92:a3:94:39:ad: 55:55:92:2a:99:02:89:d8:17:45:c7:86:04:1a:42: cb:a6:59:8a:3b:1f:f7:01:cd:8a:f7:b7:c8:4a:ed: ee:f7:e4:01:17:c3:11:71:6a:e6:20:8d:e4:c2:ab: 10:84:55:1e:af:21:75:e3:57:9f:89:3d:00:82:c0: 81:b5:18:b9:16:87:ad:e3:80:c9:22:d2:73:9d:23: 55:9c:ea:64:85:bb:55:b3:51:ec:4a:a1:68:35:70: 51:ae:0b:cd:f7:25:71:ea:8d:dc:a4:4e:5f:d0:ea: 8e:4f:e5:59:a5:c9:c4:d7:fb:10:b0:31:b7:15:3e: d1:87:83:c5:49:6e:88:58:76:f6:c4:b2:99:f2:d7: 9d:71:92:48:dd:63:81:67:71:dd:79:f2:dd:ec:44: 67:fa:d4:47:21:c3:64:e4:72:12:ae:a1:9e:39:89: df:93:4b:7a:90:09:8f:b1:eb:f6:30:e6:43:09:c0: 3b:b0:24:85:8a:11:0c:cb:71:9b:7a:41:ad:f5:6e: 59:23:d2:5b:19:6c:b8:41:f5:a1:4b:c9:60:cc:6d: 1c:b2:e1:78:f1:37:17:c5:ae:c6:07:45:ce:63:82: f2:20:cc:1d:c9:36:cf:fc:04:89:51:35:fa:bc:8a: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F0:15:E1:75:D0:DC:41:2D:B0:A7:FF:1E:17:8C:3F:F1:54:F1:F3 X509v3 Authority Key Identifier: keyid:E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.127.144.0/23 Signature Algorithm: sha256WithRSAEncryption b8:53:00:6a:e6:5f:a9:f5:a0:a0:70:31:ec:33:aa:f5:f8:94: c0:31:f3:bd:b4:ab:84:e9:44:c1:4a:31:78:c2:a6:da:de:de: 99:48:5f:58:4b:b9:bd:4c:fe:a4:e5:67:22:df:ca:00:20:8f: 25:0d:6f:aa:b7:ec:f7:44:ac:9f:04:5e:c7:37:75:e2:da:7e: c5:ef:77:48:ba:d7:5f:59:74:7e:de:3b:ce:2c:61:b0:78:21: a9:8d:a4:4f:a2:9a:8f:33:f7:c3:0f:57:39:fe:91:f4:61:ce: ee:0c:6f:e6:5f:35:f5:4e:fa:c5:01:f0:d7:d9:02:f8:f5:3c: 1b:c8:4e:15:04:2b:61:21:da:ff:33:da:cf:23:30:43:bd:4d: 4b:24:04:80:81:c1:04:f7:06:d3:91:c5:d5:80:db:d0:7f:72: 55:98:00:0b:ea:44:c9:f6:1b:d6:0c:c0:66:0f:10:21:bf:d0: 5e:02:9f:11:2b:5a:a5:0a:dd:84:27:e7:7b:6a:dc:25:c2:5b: e6:f2:ba:1d:d2:29:8c:1c:0a:91:78:b8:cf:be:19:ad:ab:88: 9a:75:68:dd:6c:5c:d0:f9:63:fa:1c:18:fa:ae:2d:ef:e7:2e: b4:ea:92:4e:85:55:7b:fd:00:0c:e3:3f:74:0b:a3:79:79:dd: 77:c5:a4:2f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCKkuwOuJkchnvdk2Rqd2r1ANRDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRGN0NC ODAwNDlCNTAeFw0yNjA1MDMwMjQ4MTVaFw0yNzA1MDIwMjUzMTVaMDMxMTAvBgNV BAMTKEJFRjAxNUUxNzVEMERDNDEyREIwQTdGRjFFMTc4QzNGRjE1NEYxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcfJHtNQBNMaSo5Q5rVVVkiqZ AonYF0XHhgQaQsumWYo7H/cBzYr3t8hK7e735AEXwxFxauYgjeTCqxCEVR6vIXXj V5+JPQCCwIG1GLkWh63jgMki0nOdI1Wc6mSFu1WzUexKoWg1cFGuC833JXHqjdyk Tl/Q6o5P5VmlycTX+xCwMbcVPtGHg8VJbohYdvbEspny151xkkjdY4Fncd158t3s RGf61Echw2TkchKuoZ45id+TS3qQCY+x6/Yw5kMJwDuwJIWKEQzLcZt6Qa31blkj 0lsZbLhB9aFLyWDMbRyy4XjxNxfFrsYHRc5jgvIgzB3JNs/8BIlRNfq8isHHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUvvAV4XXQ3EEtsKf/HheMP/FU8fMwHwYDVR0j BBgwFoAU6G2BYAwuDECKg6EP4XNPfLgASbUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZiYjMzM2MtOTgyYi00ZmNlLWFjODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAw QzJFMEM0MDhBODNBMTBGRTE3MzRGN0NCODAwNDlCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODZEODE2MDBDMkUwQzQwOEE4M0ExMEZFMTczNEY3Q0I4MDA0 OUI1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk2YmIzMzNjLTk4MmItNGZjZS1h YzgxLWJjMDY5MjI5ZTI0My8wLzMxMzAzMzJlMzEzMjM3MmUzMTM0MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNjMzMzgzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ3+QMA0GCSqG SIb3DQEBCwUAA4IBAQC4UwBq5l+p9aCgcDHsM6r1+JTAMfO9tKuE6UTBSjF4wqba 3t6ZSF9YS7m9TP6k5Wci38oAII8lDW+qt+z3RKyfBF7HN3Xi2n7F73dIutdfWXR+ 3jvOLGGweCGpjaRPopqPM/fDD1c5/pH0Yc7uDG/mXzX1TvrFAfDX2QL49TwbyE4V BCthIdr/M9rPIzBDvU1LJASAgcEE9wbTkcXVgNvQf3JVmAAL6kTJ9hvWDMBmDxAh v9BeAp8RK1qlCt2EJ+d7atwlwlvm8rod0imMHAqReLjPvhmtq4iadWjdbFzQ+WP6 HBj6ri3v5y606pJOhVV7/QAM4z90C6N5ed13xaQv -----END CERTIFICATE-----Generated at Wed May 13 03:48:42 2026 by rpki-client