$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/3130332e3136312e37322e302f32342d3234203d3e203538333738.roa File: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (raw, json) Hash identifier: lP4x2eURdSlbv1g2ymW9KzMnGg6tWIQJ2QaIxsnxvtg= Subject key identifier: F7:C7:0B:05:D7:61:CA:BF:AC:E6:36:BF:BE:4E:AC:0F:28:5B:2E:8B Certificate issuer: /CN=D88374740C8E344956042586CFB98762292C9BED Certificate serial: 2CFD2A67420D474FCD21E5152EE155C28D818A Authority key identifier: D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/3130332e3136312e37322e302f32342d3234203d3e203538333738.roa Signing time: Sun 03 May 2026 02:55:03 +0000 ROA not before: Sun 03 May 2026 02:50:03 +0000 ROA not after: Sun 02 May 2027 02:55:03 +0000 asID: 58378 IP address blocks: 103.161.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fd:2a:67:42:0d:47:4f:cd:21:e5:15:2e:e1:55:c2:8d:81:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88374740C8E344956042586CFB98762292C9BED Validity Not Before: May 3 02:50:03 2026 GMT Not After : May 2 02:55:03 2027 GMT Subject: CN=F7C70B05D761CABFACE636BFBE4EAC0F285B2E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:03:94:9a:58:94:bb:a6:d0:a5:dc:2f:d2:77: 89:22:b2:ee:04:3f:1d:9c:62:b0:37:48:cb:b5:91: f4:25:19:ec:93:29:25:31:ec:06:fc:dc:1c:1c:35: a9:8e:6d:74:52:83:e0:c4:c6:9e:3b:e3:ea:69:15: 30:bd:71:77:67:3b:8c:89:7f:04:41:db:31:fb:d0: a4:0a:bb:d1:bc:63:ac:08:8f:af:51:59:2f:f6:05: 33:ec:87:c8:5f:af:db:97:68:e3:e5:d6:37:fc:c7: fa:74:5d:05:33:70:0a:4b:29:f5:3c:9a:b4:bd:23: 97:dc:09:7e:23:22:e3:a0:ea:82:31:57:66:e5:2d: 3b:6e:c4:26:c1:30:82:72:c4:c8:c5:48:ea:36:af: 1c:d4:aa:ba:a8:5e:ac:2d:3c:2c:f5:94:ed:23:1b: fc:5d:e6:06:82:e8:ec:4a:92:9a:e1:a0:d1:32:dd: ac:30:d0:8c:7f:21:5b:b0:64:1c:bb:e8:9a:75:16: 48:29:91:aa:4a:30:35:ea:6f:19:12:3e:03:cc:12: f4:a1:7d:01:0a:32:03:73:0c:80:8c:68:11:4a:23: 39:d1:36:e7:12:7b:c1:14:37:82:2c:01:88:61:0b: bb:7c:ee:7c:20:e4:5e:b3:3c:aa:34:6b:57:0d:69: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C7:0B:05:D7:61:CA:BF:AC:E6:36:BF:BE:4E:AC:0F:28:5B:2E:8B X509v3 Authority Key Identifier: keyid:D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/3130332e3136312e37322e302f32342d3234203d3e203538333738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.72.0/24 Signature Algorithm: sha256WithRSAEncryption 50:14:c6:dc:2f:b5:b1:b2:70:7a:0d:c8:2d:ea:6d:8d:ee:96: 80:ef:56:4f:49:98:45:af:e6:83:01:66:da:62:e0:5e:23:f1: ee:7c:c0:1f:56:69:ce:f3:c1:4a:64:1d:11:6f:bc:8b:87:2e: 43:57:86:0f:d2:cd:04:e9:a1:92:34:79:a5:2b:8c:0c:03:79: 88:1a:87:3a:c0:f4:ef:08:a0:5d:c1:8e:36:f7:a1:65:da:2e: fc:2e:89:94:6a:99:a4:1c:fd:e4:03:d5:4e:cc:83:93:a7:68: cb:02:06:6d:be:d7:61:4c:b4:05:0b:89:87:12:0f:ed:97:09: 12:63:83:37:b9:ec:a1:c6:37:0a:c2:a3:fe:ec:11:df:0b:3c: ad:f5:e8:a3:07:85:10:c9:6f:1a:f4:df:a6:d7:3a:8f:45:14: 80:46:91:4e:a3:e0:8d:89:cb:52:6f:77:9f:12:ea:f0:70:b5: d4:9e:9d:f8:c0:d9:18:56:88:9a:e0:d1:42:3f:af:9a:e0:52: e2:f8:fb:c3:d4:35:81:3e:dd:3c:8a:d3:dd:d5:6a:8a:48:c8: ee:d4:09:da:b8:c3:aa:a3:3a:c3:d5:3e:dc:12:8b:ec:b7:2d: 18:c4:9a:fc:86:03:07:7b:84:3e:53:ce:34:39:8a:d0:4a:2e: 67:b9:7c:06 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgITLP0qZ0INR0/NIeUVLuFVwo2BijANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhEODgzNzQ3NDBDOEUzNDQ5NTYwNDI1ODZDRkI5ODc2MjI5 MkM5QkVEMB4XDTI2MDUwMzAyNTAwM1oXDTI3MDUwMjAyNTUwM1owMzExMC8GA1UE AxMoRjdDNzBCMDVENzYxQ0FCRkFDRTYzNkJGQkU0RUFDMEYyODVCMkU4QjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOkDlJpYlLum0KXcL9J3iSKy7gQ/ HZxisDdIy7WR9CUZ7JMpJTHsBvzcHBw1qY5tdFKD4MTGnjvj6mkVML1xd2c7jIl/ BEHbMfvQpAq70bxjrAiPr1FZL/YFM+yHyF+v25do4+XWN/zH+nRdBTNwCksp9Tya tL0jl9wJfiMi46DqgjFXZuUtO27EJsEwgnLEyMVI6javHNSquqherC08LPWU7SMb /F3mBoLo7EqSmuGg0TLdrDDQjH8hW7BkHLvomnUWSCmRqkowNepvGRI+A8wS9KF9 AQoyA3MMgIxoEUojOdE25xJ7wRQ3giwBiGELu3zufCDkXrM8qjRrVw1pcBcCAwEA AaOCAjIwggIuMB0GA1UdDgQWBBT3xwsF12HKv6zmNr++TqwPKFsuizAfBgNVHSME GDAWgBTYg3R0DI40SVYEJYbPuYdiKSyb7TAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85 ZWJlN2FkOC1lMTVjLTQwMTQtYmZiMy1iZTY5YjdkNWRlODgvMC9EODgzNzQ3NDBD OEUzNDQ5NTYwNDI1ODZDRkI5ODc2MjI5MkM5QkVELmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xL0Q4ODM3NDc0MEM4RTM0NDk1NjA0MjU4NkNGQjk4NzYyMjkyQzlC RUQuY2VyMIGjBggrBgEFBQcBCwSBljCBkzCBkAYIKwYBBQUHMAuGgYNyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvMzEzMDMzMmUzMTM2MzEyZTM3MzIyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzNTM4MzMzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6FIMA0GCSqGSIb3 DQEBCwUAA4IBAQBQFMbcL7WxsnB6Dcgt6m2N7paA71ZPSZhFr+aDAWbaYuBeI/Hu fMAfVmnO88FKZB0Rb7yLhy5DV4YP0s0E6aGSNHmlK4wMA3mIGoc6wPTvCKBdwY42 96Fl2i78LomUapmkHP3kA9VOzIOTp2jLAgZtvtdhTLQFC4mHEg/tlwkSY4M3ueyh xjcKwqP+7BHfCzyt9eijB4UQyW8a9N+m1zqPRRSARpFOo+CNictSb3efEurwcLXU np34wNkYVoia4NFCP6+a4FLi+PvD1DWBPt08itPd1WqKSMju1AnauMOqozrD1T7c Eovsty0YxJr8hgMHe4Q+U840OYrQSi5nuXwG -----END CERTIFICATE-----Generated at Tue May 12 22:32:38 2026 by rpki-client