$ rpki-client -vvf rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa File: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (raw, json) Hash identifier: 1CtwSZrdYmNAUlXmKjVFOdbMEpxyH9OiC6UXCxpqUZc= Subject key identifier: 1F:F0:D7:B2:83:D6:1B:2C:9E:40:3D:DA:EA:50:97:6C:A3:29:C7:D6 Certificate issuer: /CN=D697630349B220DF8CC6B12F2E1478386BFA976D Certificate serial: 54BB339515B62F8D211CAE0A3723F9DDA4F28A03 Authority key identifier: D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa Signing time: Sun 03 May 2026 02:55:57 +0000 ROA not before: Sun 03 May 2026 02:50:57 +0000 ROA not after: Sun 02 May 2027 02:55:57 +0000 asID: 141602 IP address blocks: 103.159.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:bb:33:95:15:b6:2f:8d:21:1c:ae:0a:37:23:f9:dd:a4:f2:8a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D697630349B220DF8CC6B12F2E1478386BFA976D Validity Not Before: May 3 02:50:57 2026 GMT Not After : May 2 02:55:57 2027 GMT Subject: CN=1FF0D7B283D61B2C9E403DDAEA50976CA329C7D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:67:3a:80:62:e0:9e:50:8b:75:4b:23:83: f1:1b:d3:b5:73:66:63:68:a9:46:88:4d:c2:50:c1: e2:48:92:b7:72:ac:9e:de:53:53:04:f7:32:8d:7f: dd:55:1b:ce:31:3c:c7:c1:a4:20:e1:fe:15:9e:04: 7a:7f:29:73:c3:46:07:71:de:f5:de:f6:85:01:1f: 41:41:b7:e7:bc:d9:d6:a0:55:a5:c2:92:4c:ce:68: 60:d7:35:3c:1b:f5:ec:df:b2:08:cd:d3:b1:2a:ed: 4c:98:e6:67:02:9a:2a:aa:94:d6:e0:3b:fc:f8:a2: 36:6c:f8:f0:33:2f:c5:ad:ca:d8:34:da:76:ec:51: 9a:b7:36:83:61:39:4f:5f:91:6e:51:eb:10:59:51: a1:09:ff:6c:38:33:23:1d:65:84:7c:8d:da:d8:49: c1:a3:a5:be:2a:63:d3:3c:98:b1:42:1f:98:15:2c: f6:9d:69:40:46:82:2f:1b:49:28:ba:32:50:d5:b3: 6e:81:12:44:98:5b:d1:33:35:cb:83:a5:e5:85:da: e6:05:44:97:c1:5d:2f:88:2e:73:90:49:d8:60:e1: 1c:8c:ae:d1:88:4c:d2:6d:2f:c1:12:64:52:f2:97: 3a:99:dd:b3:d6:08:f6:73:93:0f:ae:af:80:8d:7f: 46:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F0:D7:B2:83:D6:1B:2C:9E:40:3D:DA:EA:50:97:6C:A3:29:C7:D6 X509v3 Authority Key Identifier: keyid:D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.112.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:8a:0d:69:87:11:ba:28:f4:be:c6:d0:04:97:e7:cb:74:35: 81:25:14:9f:ee:49:97:86:c7:24:37:06:ac:bb:89:da:98:2d: fe:e3:8b:0e:3f:9f:55:79:d9:65:a1:45:b5:b9:0d:23:3e:8e: d7:fe:00:d2:e1:18:89:eb:1f:86:5a:c7:5e:e2:c3:0b:e5:e1: ad:28:7c:f5:6a:ed:ae:10:46:de:9d:1d:c8:54:8c:27:d5:a0: c1:c6:d3:70:46:66:c5:fb:da:1a:ec:8a:71:44:9b:e8:79:47: 31:07:6f:92:25:b6:34:7e:67:a6:b1:fd:60:13:9a:11:70:d7: 69:25:b9:a6:93:34:fa:cc:c4:ce:df:70:f8:11:52:44:ef:a0: ce:e9:dd:45:50:dd:5d:4a:7e:8f:2d:bc:1d:eb:30:1f:de:a5: 4f:db:93:56:48:79:ec:e7:d1:28:12:bf:12:83:04:d7:bf:39: 0f:7e:51:e1:8c:d5:17:e5:e1:cc:a0:5f:35:3c:9b:43:cf:2a: 53:c2:70:d3:7b:32:3f:7c:3f:fd:95:42:6e:37:56:85:13:b9: d4:2e:c6:46:57:f1:a2:d9:42:10:9c:3e:11:73:ec:53:67:e6: 34:f0:e5:ff:9b:5f:3c:e9:50:b9:b1:4d:ce:f5:b2:86:f6:7c: 71:4f:16:c3 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUVLszlRW2L40hHK4KNyP53aTyigMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2 QkZBOTc2RDAeFw0yNjA1MDMwMjUwNTdaFw0yNzA1MDIwMjU1NTdaMDMxMTAvBgNV BAMTKDFGRjBEN0IyODNENjFCMkM5RTQwM0REQUVBNTA5NzZDQTMyOUM3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+Gc6gGLgnlCLdUsjg/Eb07Vz ZmNoqUaITcJQweJIkrdyrJ7eU1ME9zKNf91VG84xPMfBpCDh/hWeBHp/KXPDRgdx 3vXe9oUBH0FBt+e82dagVaXCkkzOaGDXNTwb9ezfsgjN07Eq7UyY5mcCmiqqlNbg O/z4ojZs+PAzL8Wtytg02nbsUZq3NoNhOU9fkW5R6xBZUaEJ/2w4MyMdZYR8jdrY ScGjpb4qY9M8mLFCH5gVLPadaUBGgi8bSSi6MlDVs26BEkSYW9EzNcuDpeWF2uYF RJfBXS+ILnOQSdhg4RyMrtGITNJtL8ESZFLylzqZ3bPWCPZzkw+ur4CNf0aRAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUH/DXsoPWGyyeQD3a6lCXbKMpx9YwHwYDVR0j BBgwFoAU1pdjA0myIN+MxrEvLhR4OGv6l20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE5OGY3ZjgtZTcxNS00Yjc5LWFmMzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0 OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2QkZBOTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk3NjMwMzQ5QjIyMERGOENDNkIxMkYyRTE0NzgzODZCRkE5 NzZELmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ExOThmN2Y4LWU3MTUtNGI3OS1h ZjMyLTJlNTE1NDFhMzRmZi8wLzMxMzAzMzJlMzEzNTM5MmUzMTMxMzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjMwMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnn3AwDQYJ KoZIhvcNAQELBQADggEBABqKDWmHEboo9L7G0ASX58t0NYElFJ/uSZeGxyQ3Bqy7 idqYLf7jiw4/n1V52WWhRbW5DSM+jtf+ANLhGInrH4Zax17iwwvl4a0ofPVq7a4Q Rt6dHchUjCfVoMHG03BGZsX72hrsinFEm+h5RzEHb5IltjR+Z6ax/WATmhFw12kl uaaTNPrMxM7fcPgRUkTvoM7p3UVQ3V1Kfo8tvB3rMB/epU/bk1ZIeezn0SgSvxKD BNe/OQ9+UeGM1Rfl4cygXzU8m0PPKlPCcNN7Mj98P/2VQm43VoUTudQuxkZX8aLZ QhCcPhFz7FNn5jTw5f+bXzzpULmxTc71sob2fHFPFsM= -----END CERTIFICATE-----Generated at Wed May 13 02:50:31 2026 by rpki-client