$ rpki-client -vvf rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa File: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (raw, json) Hash identifier: UF6agt0uAGTYKvSykXC4qalAzD3vwK1cnzV5myQ1GUY= Subject key identifier: C9:32:22:3E:FD:6A:0A:2A:46:AB:7E:D7:BB:2F:D6:6B:A6:9D:2C:39 Certificate issuer: /CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Certificate serial: 66DB9EC527BE86E287ACCB0D7CBD76CC371592CB Authority key identifier: 43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa Signing time: Sun 03 May 2026 03:01:45 +0000 ROA not before: Sun 03 May 2026 02:56:45 +0000 ROA not after: Sun 02 May 2027 03:01:45 +0000 asID: 58378 IP address blocks: 103.161.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:db:9e:c5:27:be:86:e2:87:ac:cb:0d:7c:bd:76:cc:37:15:92:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Validity Not Before: May 3 02:56:45 2026 GMT Not After : May 2 03:01:45 2027 GMT Subject: CN=C932223EFD6A0A2A46AB7ED7BB2FD66BA69D2C39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:58:60:7f:2a:77:3c:31:a1:98:73:e5:f6:e8: 56:5f:cb:09:ac:9c:97:87:9c:23:2d:5c:d6:20:df: e5:58:9e:83:b4:1f:4c:be:1d:36:22:00:d3:16:e4: cc:2a:05:4c:bf:24:27:e6:79:ea:17:3e:7c:82:4a: 5e:76:a8:46:fc:51:dd:45:96:2d:bc:36:22:46:c6: 2d:ac:f8:2d:f7:1e:25:5c:0d:93:e2:b3:08:f8:88: 47:2c:58:77:ff:bf:14:47:3f:0a:ca:3a:4d:21:4d: ee:05:7d:22:b9:b6:b2:58:13:9d:7e:ee:9b:a2:48: 5e:9f:68:f6:b4:95:ab:4e:a7:fa:ff:8f:4f:8c:c6: 41:a5:d1:03:1a:37:84:d2:4b:bb:6c:b6:3e:6e:af: f4:f6:93:2a:19:a4:ea:b1:d6:72:68:11:8c:f1:c1: 94:ef:ec:e0:c3:ea:15:87:1b:c1:22:9b:7c:34:5e: f8:0e:4a:7b:9e:d2:24:5d:5b:07:0e:85:5c:a8:ca: c8:77:8b:89:3d:cd:c2:3c:b8:aa:86:c6:d1:fe:cb: 0e:e3:3f:3c:03:8d:5b:f3:28:47:79:2c:3c:a1:93: 97:60:8d:54:6d:5f:79:80:78:50:fc:78:06:3d:3d: c2:f6:2a:cf:f6:b5:42:ae:6a:ea:45:8c:02:4f:70: 1d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:32:22:3E:FD:6A:0A:2A:46:AB:7E:D7:BB:2F:D6:6B:A6:9D:2C:39 X509v3 Authority Key Identifier: keyid:43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.117.0/24 Signature Algorithm: sha256WithRSAEncryption 14:4b:1d:b9:7a:19:5d:58:42:ba:a5:d7:ff:3c:2c:ca:aa:77: 6d:32:64:6e:12:0a:4b:d9:75:48:ee:58:36:07:ad:66:41:52: 71:87:f6:ec:13:d6:7a:ef:b4:31:be:1a:7d:38:90:52:6c:bf: d0:08:27:03:58:f5:3b:dd:54:1f:03:82:c3:11:2b:22:8f:4f: 5a:cb:01:db:1d:a1:79:00:77:db:83:1c:44:cd:dc:58:25:c4: 3c:48:ac:1b:92:78:cf:e6:00:f1:67:10:bf:33:6b:f4:1b:4f: 02:29:79:f6:ea:af:f8:ef:2d:2c:eb:85:18:ae:41:37:99:76: c9:d7:b0:e0:d2:84:60:6d:d5:ee:b8:52:2f:4f:2d:40:9f:71: 02:5d:b0:59:a2:bf:53:33:28:8e:0a:e0:6e:52:74:51:73:50: 70:26:0c:27:eb:a6:59:23:bb:53:c3:b7:a8:94:e4:6b:54:73: 7b:89:8c:27:21:b9:8a:ab:4b:9b:52:38:67:f6:24:4b:21:7c: 1e:b9:19:85:fc:19:7a:4d:da:84:42:73:20:e7:98:c3:e9:69: 9b:85:15:be:81:0e:61:56:be:1a:b4:54:09:1d:04:15:1c:bb: 94:35:f7:db:13:21:47:6d:c7:52:1d:94:54:64:8b:32:59:22: 7f:24:bc:4b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZtuexSe+huKHrMsNfL12zDcVksswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1 NTJGNjcwMjAeFw0yNjA1MDMwMjU2NDVaFw0yNzA1MDIwMzAxNDVaMDMxMTAvBgNV BAMTKEM5MzIyMjNFRkQ2QTBBMkE0NkFCN0VEN0JCMkZENjZCQTY5RDJDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsWGB/Knc8MaGYc+X26FZfywms nJeHnCMtXNYg3+VYnoO0H0y+HTYiANMW5MwqBUy/JCfmeeoXPnyCSl52qEb8Ud1F li28NiJGxi2s+C33HiVcDZPiswj4iEcsWHf/vxRHPwrKOk0hTe4FfSK5trJYE51+ 7puiSF6faPa0latOp/r/j0+MxkGl0QMaN4TSS7tstj5ur/T2kyoZpOqx1nJoEYzx wZTv7ODD6hWHG8Eim3w0XvgOSnue0iRdWwcOhVyoysh3i4k9zcI8uKqGxtH+yw7j PzwDjVvzKEd5LDyhk5dgjVRtX3mAeFD8eAY9PcL2Ks/2tUKuaupFjAJPcB1NAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyTIiPv1qCipGq37Xuy/Wa6adLDkwHwYDVR0j BBgwFoAUQ9CUPQrUn9NNeaf0Ntn3r1UvZwIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjczNTA3ZjMtZjhjMC00MTBiLWIxOWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0Qw QUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1NTJGNjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0QwOTQzRDBBRDQ5RkQzNEQ3OUE3RjQzNkQ5RjdBRjU1MkY2 NzAyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I3MzUwN2YzLWY4YzAtNDEwYi1i MTllLTU3ZTQ4YmYzMjMwNS8wLzMxMzAzMzJlMzEzNjMxMmUzMTMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzMzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6F1MA0GCSqG SIb3DQEBCwUAA4IBAQAUSx25ehldWEK6pdf/PCzKqndtMmRuEgpL2XVI7lg2B61m QVJxh/bsE9Z677Qxvhp9OJBSbL/QCCcDWPU73VQfA4LDESsij09aywHbHaF5AHfb gxxEzdxYJcQ8SKwbknjP5gDxZxC/M2v0G08CKXn26q/47y0s64UYrkE3mXbJ17Dg 0oRgbdXuuFIvTy1An3ECXbBZor9TMyiOCuBuUnRRc1BwJgwn66ZZI7tTw7eolORr VHN7iYwnIbmKq0ubUjhn9iRLIXweuRmF/Bl6TdqEQnMg55jD6WmbhRW+gQ5hVr4a tFQJHQQVHLuUNffbEyFHbcdSHZRUZIsyWSJ/JLxL -----END CERTIFICATE-----Generated at Wed May 13 11:59:26 2026 by rpki-client