$ rpki-client -vvf rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa File: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (raw, json) Hash identifier: rH0EBEYwFNkXIM8Mj3asy0ipU8+X9tTfzMeEAFrvYrM= Subject key identifier: FA:93:A1:AB:66:4B:F1:6A:86:F6:9D:08:B9:AF:FE:AB:85:36:05:6E Certificate issuer: /CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Certificate serial: 6AF017D0152CE568240603D727B78BB17E1880E9 Authority key identifier: A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa Signing time: Sun 03 May 2026 02:56:55 +0000 ROA not before: Sun 03 May 2026 02:51:55 +0000 ROA not after: Sun 02 May 2027 02:56:55 +0000 asID: 150211 IP address blocks: 103.196.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f0:17:d0:15:2c:e5:68:24:06:03:d7:27:b7:8b:b1:7e:18:80:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Validity Not Before: May 3 02:51:55 2026 GMT Not After : May 2 02:56:55 2027 GMT Subject: CN=FA93A1AB664BF16A86F69D08B9AFFEAB8536056E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:81:0f:ca:ce:a0:3f:9e:ce:8b:db:c0:e9: b1:e4:a9:62:b5:3a:ef:d7:dc:b6:d8:bf:f0:60:c4: 2f:4a:c2:eb:b7:08:57:6b:86:c8:d2:a3:9e:f4:70: 03:9b:ed:e3:19:75:36:09:f5:21:a6:d0:fb:b7:0d: 16:8a:0f:2a:74:7c:11:34:14:80:84:65:df:bc:45: ca:b2:49:1d:0a:ef:75:ee:4b:4d:40:12:ea:cd:d7: 0f:22:f9:a5:56:3a:88:47:e6:bf:df:70:d5:72:ff: 79:94:7c:ea:a5:20:64:d3:83:f3:95:04:58:c7:bc: ef:06:93:b3:7b:51:b0:37:88:54:d4:04:4c:c4:48: ba:d0:12:85:05:86:05:30:b5:40:4f:29:a3:0d:c6: 19:8d:84:95:dc:ad:be:a4:90:9f:fb:a2:33:88:ca: 99:53:d0:87:a9:f0:f8:bd:ec:98:f9:24:21:d6:ad: d7:0e:cc:d0:0e:d1:af:1e:93:25:94:a0:36:7e:28: 2c:21:55:13:26:89:0a:81:bd:e4:6b:32:b7:35:4e: 30:d8:f6:12:2f:5e:b7:03:fc:c6:eb:d3:eb:72:1c: 56:ac:b6:9f:54:61:0f:ef:78:15:89:e9:df:bc:a2: 13:d2:ea:3c:9f:e8:0f:3b:ee:c7:43:62:d6:1b:64: 16:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:93:A1:AB:66:4B:F1:6A:86:F6:9D:08:B9:AF:FE:AB:85:36:05:6E X509v3 Authority Key Identifier: keyid:A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.196.118.0/24 Signature Algorithm: sha256WithRSAEncryption c2:fb:17:a1:e2:73:91:f0:8d:20:0a:c0:a1:f1:15:7a:0d:61: 82:78:78:df:27:73:8f:9b:ac:3d:70:63:7f:b9:1d:99:98:c1: 59:ee:f7:00:1d:9c:0a:e3:34:52:30:12:6e:f5:94:bc:cf:b5: a6:d9:44:42:bb:48:12:f3:1d:cd:91:5f:56:b8:2c:08:8d:01: e3:b3:4d:1b:ae:aa:53:99:b4:df:50:0f:43:cd:54:fa:cd:7f: 5a:cb:92:f5:b2:af:2a:4c:eb:82:03:45:14:52:48:83:b8:b5: 01:1a:0d:25:0c:1c:2f:32:39:c4:eb:ce:64:31:46:46:f3:79: e6:5d:8d:1c:9d:7c:16:b7:6c:de:5f:3a:a8:65:91:e4:f4:c8: 94:a3:cf:0a:f5:d8:cd:c9:0e:4c:e8:63:a4:66:5c:ff:e5:19: a7:d0:78:7b:2d:da:1a:90:d8:29:21:5b:97:76:d5:5d:26:77: 04:4f:b3:a5:8f:43:b9:6b:b6:5f:2b:23:f7:29:7f:65:92:54: 12:f3:97:ac:0a:08:9f:38:1a:3f:d4:9d:c5:63:ca:ab:0d:65: 7e:a3:55:1d:1d:06:f2:2f:c4:79:dc:db:ee:d7:33:cb:a2:cc: a7:03:6a:44:89:a4:aa:84:9a:ef:c6:e1:d2:63:15:d2:51:7b: 12:a4:cb:b9 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUavAX0BUs5WgkBgPXJ7eLsX4YgOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMw RTZDMUFFRjAeFw0yNjA1MDMwMjUxNTVaFw0yNzA1MDIwMjU2NTVaMDMxMTAvBgNV BAMTKEZBOTNBMUFCNjY0QkYxNkE4NkY2OUQwOEI5QUZGRUFCODUzNjA1NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcqoEPys6gP57Oi9vA6bHkqWK1 Ou/X3LbYv/BgxC9Kwuu3CFdrhsjSo570cAOb7eMZdTYJ9SGm0Pu3DRaKDyp0fBE0 FICEZd+8RcqySR0K73XuS01AEurN1w8i+aVWOohH5r/fcNVy/3mUfOqlIGTTg/OV BFjHvO8Gk7N7UbA3iFTUBEzESLrQEoUFhgUwtUBPKaMNxhmNhJXcrb6kkJ/7ojOI yplT0Iep8Pi97Jj5JCHWrdcOzNAO0a8ekyWUoDZ+KCwhVRMmiQqBveRrMrc1TjDY 9hIvXrcD/Mbr0+tyHFastp9UYQ/veBWJ6d+8ohPS6jyf6A877sdDYtYbZBazAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU+pOhq2ZL8WqG9p0Iua/+q4U2BW4wHwYDVR0j BBgwFoAUqJ4oAI9DtwTC/cPq0/rwgw5sGu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY0MGFiZTYtOGRlZS00YmQxLTgxNGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4 RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMwRTZDMUFFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODlFMjgwMDhGNDNCNzA0QzJGREMzRUFEM0ZBRjA4MzBFNkMx QUVGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2NDBhYmU2LThkZWUtNGJkMS04 MTRjLTJhZjMxYTNkOWNkZi8wLzMxMzAzMzJlMzEzOTM2MmUzMTMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzMjMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnxHYwDQYJ KoZIhvcNAQELBQADggEBAML7F6Hic5HwjSAKwKHxFXoNYYJ4eN8nc4+brD1wY3+5 HZmYwVnu9wAdnArjNFIwEm71lLzPtabZREK7SBLzHc2RX1a4LAiNAeOzTRuuqlOZ tN9QD0PNVPrNf1rLkvWyrypM64IDRRRSSIO4tQEaDSUMHC8yOcTrzmQxRkbzeeZd jRydfBa3bN5fOqhlkeT0yJSjzwr12M3JDkzoY6RmXP/lGafQeHst2hqQ2CkhW5d2 1V0mdwRPs6WPQ7lrtl8rI/cpf2WSVBLzl6wKCJ84Gj/UncVjyqsNZX6jVR0dBvIv xHnc2+7XM8uizKcDakSJpKqEmu/G4dJjFdJRexKky7k= -----END CERTIFICATE-----Generated at Wed May 13 07:35:58 2026 by rpki-client