$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39342e302f32342d3234203d3e203137353338.roa File: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (raw, json) Hash identifier: zK6cRL88GJh6m3ulXU/23rYWx1uCoF/U17/Vb4bnDxI= Subject key identifier: 2E:E8:10:3C:D5:B2:F9:29:A5:F9:0B:A7:4E:C4:79:FA:18:85:CF:6E Certificate issuer: /CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Certificate serial: 79E6CC8817ABC23B241C5DAB52E5581CB7C9CD2E Authority key identifier: 43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39342e302f32342d3234203d3e203137353338.roa Signing time: Sun 03 May 2026 02:58:13 +0000 ROA not before: Sun 03 May 2026 02:53:13 +0000 ROA not after: Sun 02 May 2027 02:58:13 +0000 asID: 17538 IP address blocks: 103.151.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e6:cc:88:17:ab:c2:3b:24:1c:5d:ab:52:e5:58:1c:b7:c9:cd:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Validity Not Before: May 3 02:53:13 2026 GMT Not After : May 2 02:58:13 2027 GMT Subject: CN=2EE8103CD5B2F929A5F90BA74EC479FA1885CF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:21:e2:c2:41:06:4f:70:59:af:a8:39:5d:d3: 4d:73:3c:56:5c:5b:86:0f:6d:d7:e4:6f:0f:67:5e: 12:c9:47:f5:46:3a:ec:d0:22:ca:3e:ea:c9:92:bc: ef:f9:83:8d:a8:e0:5f:8e:a3:df:7f:61:05:db:50: 8e:ca:7d:33:87:76:9f:3e:f6:22:e7:e1:e3:fd:2a: b0:56:e5:d6:c3:a7:d5:5c:52:9a:aa:7f:6a:f5:1d: 4e:11:00:79:23:57:10:9a:92:37:6e:9b:d2:5b:23: 64:96:4a:c0:96:7d:fb:a1:9e:94:dc:69:b8:78:77: 35:f3:3f:b2:2a:c7:f3:27:d1:01:5f:b2:b5:39:a9: 43:b7:11:21:6c:2c:7f:ff:bf:a6:1e:9c:d0:ee:9f: 9d:43:44:ff:b2:d0:91:bc:dd:93:fa:a5:0d:75:d4: 17:1a:09:0c:54:db:48:a8:6a:0d:ef:d4:a1:5b:dd: e9:3a:37:98:e5:04:9d:34:42:8f:fc:f5:f3:5c:4e: 95:06:7a:2d:78:f9:61:dd:3e:b3:25:16:a6:56:cb: 50:bd:a7:6a:85:16:bf:23:31:11:05:07:6a:8a:c5: 99:f9:f9:42:27:d8:02:58:7d:2e:8c:5f:b2:89:6d: 80:91:01:62:f0:41:5d:63:ef:17:a0:a0:7a:83:ec: 99:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E8:10:3C:D5:B2:F9:29:A5:F9:0B:A7:4E:C4:79:FA:18:85:CF:6E X509v3 Authority Key Identifier: keyid:43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39342e302f32342d3234203d3e203137353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.94.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:f0:88:89:ac:01:37:da:e7:da:8a:cd:40:02:9a:6d:27:72: ec:e0:e2:90:76:ba:28:ca:75:fb:ec:2e:42:16:ba:14:59:be: 79:68:b8:90:cf:75:06:41:65:a3:6e:07:66:5d:98:2d:33:f5: 39:6d:56:c9:61:f0:ee:cb:b0:66:c9:51:54:c5:dc:dd:17:13: 83:66:b0:71:0b:86:eb:5d:1c:87:aa:ea:ce:82:71:16:3c:23: bc:78:68:39:50:30:21:fd:b5:be:b3:3d:75:58:42:2f:5f:a8: 47:0a:56:a5:ce:18:e6:56:a5:03:07:39:d4:eb:6c:ae:85:4e: 26:63:9b:6c:6c:36:0c:65:7d:04:9d:34:03:7e:29:33:7f:b3: cf:58:e0:62:04:c1:e8:35:fc:f8:81:d0:fe:89:b2:6c:07:05: ac:6d:9d:0d:ee:cd:ec:ca:6f:83:5f:81:ee:b2:46:9c:63:81: 17:70:10:af:e5:f1:39:36:62:9f:01:7b:1a:de:bc:61:51:e2: 71:50:69:aa:9e:73:31:ee:a4:12:09:db:00:ad:c1:15:d1:2b: c6:f3:34:e9:7c:2f:e9:55:2b:50:f8:50:a9:65:51:c3:8b:92: 4f:f8:ed:43:02:e3:40:fe:16:17:c4:f9:b9:4c:86:af:c0:56: 7f:4c:a7:39 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeebMiBerwjskHF2rUuVYHLfJzS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGODk2RUVCNzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQz NzQyQjNCQzAeFw0yNjA1MDMwMjUzMTNaFw0yNzA1MDIwMjU4MTNaMDMxMTAvBgNV BAMTKDJFRTgxMDNDRDVCMkY5MjlBNUY5MEJBNzRFQzQ3OUZBMTg4NUNGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIeLCQQZPcFmvqDld001zPFZc W4YPbdfkbw9nXhLJR/VGOuzQIso+6smSvO/5g42o4F+Oo99/YQXbUI7KfTOHdp8+ 9iLn4eP9KrBW5dbDp9VcUpqqf2r1HU4RAHkjVxCakjdum9JbI2SWSsCWffuhnpTc abh4dzXzP7Iqx/Mn0QFfsrU5qUO3ESFsLH//v6YenNDun51DRP+y0JG83ZP6pQ11 1BcaCQxU20ioag3v1KFb3ek6N5jlBJ00Qo/89fNcTpUGei14+WHdPrMlFqZWy1C9 p2qFFr8jMREFB2qKxZn5+UIn2AJYfS6MX7KJbYCRAWLwQV1j7xegoHqD7Jm9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULugQPNWy+Sml+QunTsR5+hiFz24wHwYDVR0j BBgwFoAUQ/iW7rcPL5eIP/RZyuOstDdCs7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MzM5MzQtMzg0NC00NjUzLThmYWMtMTg1OGIyODIzZDFjLzAvNDNGODk2RUVC NzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQzNzQyQjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0Y4OTZFRUI3MEYyRjk3ODgzRkY0NTlDQUUzQUNCNDM3NDJC M0JDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FhNDMzOTM0LTM4NDQtNDY1My04 ZmFjLTE4NThiMjgyM2QxYy8wLzMxMzAzMzJlMzEzNTMxMmUzOTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeXXjANBgkqhkiG 9w0BAQsFAAOCAQEAC/CIiawBN9rn2orNQAKabSdy7ODikHa6KMp1++wuQha6FFm+ eWi4kM91BkFlo24HZl2YLTP1OW1WyWHw7suwZslRVMXc3RcTg2awcQuG610ch6rq zoJxFjwjvHhoOVAwIf21vrM9dVhCL1+oRwpWpc4Y5lalAwc51OtsroVOJmObbGw2 DGV9BJ00A34pM3+zz1jgYgTB6DX8+IHQ/omybAcFrG2dDe7N7Mpvg1+B7rJGnGOB F3AQr+XxOTZinwF7Gt68YVHicVBpqp5zMe6kEgnbAK3BFdErxvM06Xwv6VUrUPhQ qWVRw4uST/jtQwLjQP4WF8T5uUyGr8BWf0ynOQ== -----END CERTIFICATE-----Generated at Wed May 13 11:49:29 2026 by rpki-client