$ rpki-client -vvf rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/3130332e3135362e3134372e302f32342d3234203d3e20313338383130.roa File: 3130332e3135362e3134372e302f32342d3234203d3e20313338383130.roa (raw, json) Hash identifier: 5C93GzuwPEwzfZCO761jlr9+kP+U+BLor2EmxZBdJ5Q= Subject key identifier: 64:3A:9E:96:53:6B:AC:B2:A7:96:6E:53:4F:F3:0F:32:C9:11:51:F1 Certificate issuer: /CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Certificate serial: 0F75F2C617F4C3E44503DEE204220F62061E2857 Authority key identifier: 99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/3130332e3135362e3134372e302f32342d3234203d3e20313338383130.roa Signing time: Sun 03 May 2026 03:02:04 +0000 ROA not before: Sun 03 May 2026 02:57:04 +0000 ROA not after: Sun 02 May 2027 03:02:04 +0000 asID: 138810 IP address blocks: 103.156.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:75:f2:c6:17:f4:c3:e4:45:03:de:e2:04:22:0f:62:06:1e:28:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Validity Not Before: May 3 02:57:04 2026 GMT Not After : May 2 03:02:04 2027 GMT Subject: CN=643A9E96536BACB2A7966E534FF30F32C91151F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:96:6a:a0:b1:68:03:85:63:66:ab:31:8a: c6:2c:27:a3:24:35:9e:63:e2:f6:c1:03:42:fe:a2: 4d:41:90:62:a3:45:8b:ea:2f:8a:17:f3:ca:d2:f5: 2f:60:ef:e3:4f:bc:fe:84:d2:53:aa:a2:b0:15:01: b2:67:33:61:59:14:4d:d5:42:3e:f1:09:ce:e2:18: ec:ae:34:4f:97:18:a7:e4:58:26:5f:0c:c7:e8:65: e5:19:ed:c9:f4:8e:2d:a8:ec:c6:7f:16:ce:ae:bd: c5:0d:9b:76:28:0c:86:fd:e4:09:ed:04:f1:25:b2: c8:5e:57:41:48:bb:5a:5d:a3:69:6f:4a:c6:9e:26: 43:f5:f7:3c:3d:27:55:27:fe:1e:83:97:34:1f:b5: 00:96:1c:4c:3f:a3:ef:a9:b9:8f:41:31:ab:d2:0c: f4:39:26:32:ce:7e:7e:dd:54:57:1e:52:b9:16:b3: 77:4a:f8:a2:14:2e:43:fc:db:8a:68:f3:d9:18:73: 5c:e3:32:49:e5:76:91:b2:03:db:bd:4c:1d:ad:a9: eb:39:ac:1b:95:bc:9c:2e:73:2a:2b:eb:aa:98:92: 16:96:74:56:92:62:5c:1d:03:22:3f:05:c7:c4:40: 01:77:37:b0:0f:6a:9c:5e:70:b6:1a:a0:30:ac:88: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3A:9E:96:53:6B:AC:B2:A7:96:6E:53:4F:F3:0F:32:C9:11:51:F1 X509v3 Authority Key Identifier: keyid:99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/3130332e3135362e3134372e302f32342d3234203d3e20313338383130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.147.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:6c:3e:aa:93:62:64:03:f9:e6:b2:6c:4a:11:a0:c8:3b:2d: d8:3c:d1:df:30:db:52:65:75:e8:c0:59:ea:6a:8e:87:98:a9: 1f:61:5c:b1:8a:0c:9f:c6:d1:77:0e:28:fc:eb:a6:6a:11:fb: ef:09:2d:6e:5c:37:14:fe:71:7d:c3:27:d6:45:ca:1c:da:61: b4:c1:a8:a3:6b:e9:b0:8d:18:40:9a:65:5e:8c:e0:59:cd:f7: f1:0d:43:50:d1:ed:24:11:ca:36:aa:8f:38:39:33:65:bf:0c: b4:4b:ec:71:f5:58:56:a9:bd:fa:2f:f1:f3:34:11:1d:3c:c6: 8d:a3:0b:a7:c4:40:d3:07:a4:ec:70:41:d0:00:b2:b9:14:ce: 6e:d7:7f:3e:b2:6c:12:60:5d:d4:e5:7f:aa:63:e9:35:d3:18: 68:44:e8:c7:1e:70:4a:e5:59:c9:2e:de:c4:cc:d6:26:dc:ee: fe:c4:0e:cf:d5:56:b3:d0:7b:b9:cc:c9:8b:00:91:a7:ae:c3: 93:27:4d:63:91:e6:40:36:d1:7e:1c:0a:6e:2c:7c:80:b9:a8: 3e:df:fc:ab:7b:fb:18:e3:c1:22:83:b6:db:75:b3:aa:68:e5: c5:24:cc:68:96:75:07:d6:31:f5:a1:3c:02:ff:3f:2a:62:13: 67:28:6d:44 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUD3Xyxhf0w+RFA97iBCIPYgYeKFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5 NjRDOTJEMzAeFw0yNjA1MDMwMjU3MDRaFw0yNzA1MDIwMzAyMDRaMDMxMTAvBgNV BAMTKDY0M0E5RTk2NTM2QkFDQjJBNzk2NkU1MzRGRjMwRjMyQzkxMTUxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdgpZqoLFoA4VjZqsxisYsJ6Mk NZ5j4vbBA0L+ok1BkGKjRYvqL4oX88rS9S9g7+NPvP6E0lOqorAVAbJnM2FZFE3V Qj7xCc7iGOyuNE+XGKfkWCZfDMfoZeUZ7cn0ji2o7MZ/Fs6uvcUNm3YoDIb95Ant BPElssheV0FIu1pdo2lvSsaeJkP19zw9J1Un/h6DlzQftQCWHEw/o++puY9BMavS DPQ5JjLOfn7dVFceUrkWs3dK+KIULkP824po89kYc1zjMknldpGyA9u9TB2tqes5 rBuVvJwucyor66qYkhaWdFaSYlwdAyI/BcfEQAF3N7APapxecLYaoDCsiFVHAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUZDqellNrrLKnlm5TT/MPMskRUfEwHwYDVR0j BBgwFoAUmXB5XzsndIHuc+o6FuT6M5ZMktMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OWExNWItZDVhZS00NWVjLTgwMTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYz QjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5NjRDOTJEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTcwNzk1RjNCMjc3NDgxRUU3M0VBM0ExNkU0RkEzMzk2NEM5 MkQzLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I4OTlhMTViLWQ1YWUtNDVlYy04 MDEyLWE2Y2FhYjNkZDg4Yi8wLzMxMzAzMzJlMzEzNTM2MmUzMTM0MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODMxMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnJMwDQYJ KoZIhvcNAQELBQADggEBABpsPqqTYmQD+eaybEoRoMg7Ldg80d8w21JldejAWepq joeYqR9hXLGKDJ/G0XcOKPzrpmoR++8JLW5cNxT+cX3DJ9ZFyhzaYbTBqKNr6bCN GECaZV6M4FnN9/ENQ1DR7SQRyjaqjzg5M2W/DLRL7HH1WFapvfov8fM0ER08xo2j C6fEQNMHpOxwQdAAsrkUzm7Xfz6ybBJgXdTlf6pj6TXTGGhE6McecErlWcku3sTM 1ibc7v7EDs/VVrPQe7nMyYsAkaeuw5MnTWOR5kA20X4cCm4sfIC5qD7f/Kt7+xjj wSKDttt1s6po5cUkzGiWdQfWMfWhPAL/PypiE2cobUQ= -----END CERTIFICATE-----Generated at Wed May 13 07:38:58 2026 by rpki-client