$ rpki-client -vvf rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa File: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (raw, json) Hash identifier: 6VIXf9PufTTIF0jlFfBvIGu6EFZnq37iO9mrrQ1/lbk= Subject key identifier: D9:7F:3A:36:CA:71:15:8F:86:1D:A5:77:B6:64:FF:9F:B3:93:24:F4 Certificate issuer: /CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Certificate serial: 7BC345D8AB65B9047EC88FBD26020A3E34FA74F4 Authority key identifier: D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa Signing time: Sun 03 May 2026 03:00:16 +0000 ROA not before: Sun 03 May 2026 02:55:16 +0000 ROA not after: Sun 02 May 2027 03:00:16 +0000 asID: 138881 IP address blocks: 103.169.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c3:45:d8:ab:65:b9:04:7e:c8:8f:bd:26:02:0a:3e:34:fa:74:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Validity Not Before: May 3 02:55:16 2026 GMT Not After : May 2 03:00:16 2027 GMT Subject: CN=D97F3A36CA71158F861DA577B664FF9FB39324F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:26:69:ad:7a:fc:b7:c9:1e:bd:06:5e:2a:d7: b9:00:35:70:7a:8b:cc:c8:9b:6c:4c:82:77:47:08: 32:58:f6:99:7b:27:b3:4a:47:c5:81:92:9d:4c:05: 49:ad:90:2f:6a:96:7d:32:3c:06:8f:cb:d3:94:4c: 7c:a9:a9:10:85:28:b1:e0:cb:34:6a:f2:5c:03:6d: 8e:fd:cb:65:49:30:bd:35:8f:b5:c3:d8:47:1e:75: fe:bf:1a:ea:59:af:6f:36:bd:a4:90:84:d4:f0:ae: d5:69:52:54:d6:ff:59:fe:7e:e0:a9:d8:0a:ea:e6: 2b:4f:70:bd:51:3f:45:04:34:9b:90:66:c5:c7:c2: 59:6c:c6:81:c3:08:69:3b:1f:a7:55:0e:d8:7e:a9: 52:f6:62:f6:35:aa:8f:3c:5a:fe:66:1a:09:a1:2d: eb:6f:ea:e0:b1:2f:a9:35:9e:48:c1:43:d6:62:97: 33:3e:60:16:a3:b8:49:fc:b4:ea:a5:0d:07:80:35: be:5c:3a:86:4a:14:1f:d7:8f:89:47:25:f0:89:42: 2b:1f:24:e3:fa:c3:a1:f2:79:cc:3e:6e:7f:6c:b8: ef:60:35:3e:41:30:77:ac:ca:ae:dc:4e:14:99:30: 9f:b2:de:4a:5a:02:b2:97:9c:f7:46:ed:8d:e5:92: 69:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7F:3A:36:CA:71:15:8F:86:1D:A5:77:B6:64:FF:9F:B3:93:24:F4 X509v3 Authority Key Identifier: keyid:D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.238.0/23 Signature Algorithm: sha256WithRSAEncryption 89:65:2d:e1:09:30:7b:83:4f:2c:ad:f6:1a:6b:bc:07:49:b5: 12:bf:36:3a:68:a4:07:32:d2:39:a4:b5:66:10:55:09:01:95: ad:f3:e7:27:32:d1:95:72:f6:9e:72:52:8e:ef:4d:b5:91:bb: 1a:83:36:ed:71:f7:11:84:2f:b1:fb:a3:a8:8a:4a:26:b1:07: 4a:5a:96:71:21:38:b8:a0:27:aa:a1:ce:84:12:63:19:bb:6b: d9:7d:12:82:89:35:e2:34:04:2d:7a:c7:35:3e:8a:27:43:2c: 97:67:bb:d6:dd:f8:7e:24:47:a5:0d:9e:12:d9:82:69:a8:60: bf:0a:77:71:e4:8f:44:cf:f0:07:a0:da:43:63:fa:74:26:26: 9f:ac:44:36:19:6b:1c:58:db:cf:47:80:c3:fc:e2:16:12:c1: 87:2c:d2:38:32:37:d8:69:3b:ce:66:9e:73:13:e9:aa:cd:4e: fd:1f:1f:11:a8:94:67:51:19:dc:fc:be:77:9a:f2:1f:7d:ff: 6e:36:17:6f:13:31:0f:a7:ea:4a:e1:23:c7:69:48:14:fd:b4: 77:f7:ec:ed:90:91:45:9f:dd:44:4a:dc:fc:cd:7b:46:88:be: 19:8b:b9:6d:a8:73:0f:12:5d:18:b7:12:5f:bc:08:5f:85:2a: 79:2b:36:7d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUe8NF2KtluQR+yI+9JgIKPjT6dPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2 OEJCMDEyQTAeFw0yNjA1MDMwMjU1MTZaFw0yNzA1MDIwMzAwMTZaMDMxMTAvBgNV BAMTKEQ5N0YzQTM2Q0E3MTE1OEY4NjFEQTU3N0I2NjRGRjlGQjM5MzI0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJmmtevy3yR69Bl4q17kANXB6 i8zIm2xMgndHCDJY9pl7J7NKR8WBkp1MBUmtkC9qln0yPAaPy9OUTHypqRCFKLHg yzRq8lwDbY79y2VJML01j7XD2Ecedf6/GupZr282vaSQhNTwrtVpUlTW/1n+fuCp 2Arq5itPcL1RP0UENJuQZsXHwllsxoHDCGk7H6dVDth+qVL2YvY1qo88Wv5mGgmh Letv6uCxL6k1nkjBQ9ZilzM+YBajuEn8tOqlDQeANb5cOoZKFB/Xj4lHJfCJQisf JOP6w6Hyecw+bn9suO9gNT5BMHesyq7cThSZMJ+y3kpaArKXnPdG7Y3lkmkbAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU2X86NspxFY+GHaV3tmT/n7OTJPQwHwYDVR0j BBgwFoAU2Kljzlfpmxq+FiqEUtnk02i7ASowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjExY2E2MjAtZGFjZS00YTlmLWI4ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1 N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2OEJCMDEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEE5NjNDRTU3RTk5QjFBQkUxNjJBODQ1MkQ5RTREMzY4QkIw MTJBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IxMWNhNjIwLWRhY2UtNGE5Zi1i OGU4LWEzYTJlNTgxNTAwZS8wLzMxMzAzMzJlMzEzNjM5MmUzMjMzMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzgzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqe4wDQYJ KoZIhvcNAQELBQADggEBAIllLeEJMHuDTyyt9hprvAdJtRK/NjpopAcy0jmktWYQ VQkBla3z5ycy0ZVy9p5yUo7vTbWRuxqDNu1x9xGEL7H7o6iKSiaxB0palnEhOLig J6qhzoQSYxm7a9l9EoKJNeI0BC16xzU+iidDLJdnu9bd+H4kR6UNnhLZgmmoYL8K d3Hkj0TP8Aeg2kNj+nQmJp+sRDYZaxxY289HgMP84hYSwYcs0jgyN9hpO85mnnMT 6arNTv0fHxGolGdRGdz8vnea8h99/242F28TMQ+n6krhI8dpSBT9tHf37O2QkUWf 3URK3PzNe0aIvhmLuW2ocw8SXRi3El+8CF+FKnkrNn0= -----END CERTIFICATE-----Generated at Wed May 13 02:47:17 2026 by rpki-client