$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa File: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (raw, json) Hash identifier: +9zDigXxWl0KHwFSHRJ8vK8jloGtZKIEVRmfMrusxTQ= Subject key identifier: 40:04:5D:73:AB:34:DE:82:8B:FF:75:85:21:F8:BA:C3:B4:E1:12:B7 Certificate issuer: /CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Certificate serial: 50D191031160C4900ED1AF23C0A039BA046F7097 Authority key identifier: 8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa Signing time: Sun 03 May 2026 02:54:08 +0000 ROA not before: Sun 03 May 2026 02:49:08 +0000 ROA not after: Sun 02 May 2027 02:54:08 +0000 asID: 138608 IP address blocks: 103.171.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d1:91:03:11:60:c4:90:0e:d1:af:23:c0:a0:39:ba:04:6f:70:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Validity Not Before: May 3 02:49:08 2026 GMT Not After : May 2 02:54:08 2027 GMT Subject: CN=40045D73AB34DE828BFF758521F8BAC3B4E112B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:17:a1:68:38:e4:ef:ff:43:0c:b4:78:d4: 38:f4:99:fa:87:e7:56:3c:6c:36:f7:72:bf:2b:0e: 6b:46:45:94:69:bb:ae:e9:e7:7c:06:52:ef:06:fc: a3:b7:94:ad:83:e4:65:a1:51:70:4f:1f:22:ee:fa: bd:f6:53:77:39:93:df:a8:a7:de:d7:f7:a3:55:15: d5:10:61:96:c8:e6:0b:69:5e:6c:6f:50:43:fb:ea: 05:8d:24:70:3e:e5:67:9e:c6:81:94:11:db:7c:66: c7:e9:04:ca:de:ed:76:ab:d3:a2:7b:d8:53:38:88: d9:84:ac:5e:47:03:0e:4e:ab:a0:6b:c0:19:f0:1b: af:1a:14:d7:4a:a2:dd:bd:6a:f4:16:51:b1:ef:15: bc:cd:04:cb:b4:f9:45:4d:76:df:ef:ba:bc:44:30: 26:10:27:43:ca:16:69:63:02:1e:68:c0:79:44:5a: f5:e8:a7:31:81:6e:64:62:c1:25:1b:87:ca:42:92: 10:5e:e2:2b:66:3e:d6:87:34:0a:b5:c6:03:cc:7b: fc:7c:4b:1b:7c:c0:0c:c6:7c:9a:d5:d8:53:6c:6e: b2:d9:64:e7:80:4e:74:80:7b:13:32:18:39:ec:7f: 62:ef:09:1f:2b:1d:fc:20:d2:b2:64:16:6d:cb:75: e7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:04:5D:73:AB:34:DE:82:8B:FF:75:85:21:F8:BA:C3:B4:E1:12:B7 X509v3 Authority Key Identifier: keyid:8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.19.0/24 Signature Algorithm: sha256WithRSAEncryption 13:9a:41:ee:a6:f3:fa:01:09:71:21:b4:e2:b0:aa:4c:cb:f7: c1:14:a7:55:48:58:35:ac:b4:0c:86:3e:c9:4c:78:88:ed:75: bd:ab:10:e6:ab:cb:8b:54:55:86:3a:57:4d:88:c9:8c:3a:ea: f3:81:da:29:0c:9e:04:73:48:8a:df:41:66:f0:23:d4:8d:bb: 20:b4:3a:7e:9c:1b:de:b1:66:80:9d:46:46:b5:dc:6b:08:50: 8d:ac:7b:14:e7:62:0f:80:db:dd:07:85:88:cb:0b:30:f8:6e: 2e:47:d2:c1:86:ee:36:0f:7b:a6:68:55:33:2b:67:cc:5d:9a: f0:1d:a4:94:1c:9a:bb:5f:06:36:c4:fd:df:59:0c:8b:97:76: 99:d7:f7:c1:2f:4a:c0:f7:e2:05:f4:1e:0f:71:a4:71:a5:1e: 9b:fe:c3:44:af:87:3a:d0:7b:98:3e:c7:7c:22:74:4a:b9:c1: 48:c5:15:91:c3:8d:36:05:61:63:86:63:71:4c:0e:95:a3:88: 19:3d:ba:bf:7b:9f:42:ad:2f:46:45:7d:8d:f8:e9:3d:45:38: e2:47:1f:20:9e:00:14:f5:1a:6a:d2:d7:49:70:e2:09:a3:8b: 5e:ba:5c:38:d7:e7:a9:63:0e:3e:65:0b:91:da:34:ab:ab:3e: d9:3f:f5:d8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUNGRAxFgxJAO0a8jwKA5ugRvcJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1 NjZEMDA2MDAeFw0yNjA1MDMwMjQ5MDhaFw0yNzA1MDIwMjU0MDhaMDMxMTAvBgNV BAMTKDQwMDQ1RDczQUIzNERFODI4QkZGNzU4NTIxRjhCQUMzQjRFMTEyQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCBehaDjk7/9DDLR41Dj0mfqH 51Y8bDb3cr8rDmtGRZRpu67p53wGUu8G/KO3lK2D5GWhUXBPHyLu+r32U3c5k9+o p97X96NVFdUQYZbI5gtpXmxvUEP76gWNJHA+5WeexoGUEdt8ZsfpBMre7Xar06J7 2FM4iNmErF5HAw5Oq6BrwBnwG68aFNdKot29avQWUbHvFbzNBMu0+UVNdt/vurxE MCYQJ0PKFmljAh5owHlEWvXopzGBbmRiwSUbh8pCkhBe4itmPtaHNAq1xgPMe/x8 Sxt8wAzGfJrV2FNsbrLZZOeATnSAexMyGDnsf2LvCR8rHfwg0rJkFm3LdedrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQARdc6s03oKL/3WFIfi6w7ThErcwHwYDVR0j BBgwFoAUjx9Sxju4dITUxenYVRrnZ1ZtAGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWE4ZjY5ZjctOTMzMi00Y2Q0LWIzZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYz QkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1NjZEMDA2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjFGNTJDNjNCQjg3NDg0RDRDNUU5RDg1NTFBRTc2NzU2NkQw MDYwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzlhOGY2OWY3LTkzMzItNGNkNC1i M2U1LWNjNmM0NzcyY2Y3My8wLzMxMzAzMzJlMzEzNzMxMmUzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzYzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6sTMA0GCSqG SIb3DQEBCwUAA4IBAQATmkHupvP6AQlxIbTisKpMy/fBFKdVSFg1rLQMhj7JTHiI 7XW9qxDmq8uLVFWGOldNiMmMOurzgdopDJ4Ec0iK30Fm8CPUjbsgtDp+nBvesWaA nUZGtdxrCFCNrHsU52IPgNvdB4WIywsw+G4uR9LBhu42D3umaFUzK2fMXZrwHaSU HJq7XwY2xP3fWQyLl3aZ1/fBL0rA9+IF9B4PcaRxpR6b/sNEr4c60HuYPsd8InRK ucFIxRWRw402BWFjhmNxTA6Vo4gZPbq/e59CrS9GRX2N+Ok9RTjiRx8gngAU9Rpq 0tdJcOIJo4teulw41+epYw4+ZQuR2jSrqz7ZP/XY -----END CERTIFICATE-----Generated at Wed May 13 02:26:58 2026 by rpki-client