$ rpki-client -vvf rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa File: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (raw, json) Hash identifier: Sw+OUdszsTIUzZ+1lqD/i8/2BPm17GQD5VfJxVXp+AM= Subject key identifier: 5B:EB:FC:4F:D2:BB:09:A4:B6:5C:E9:8F:E9:A6:4F:AB:B8:F0:86:D1 Certificate issuer: /CN=CB78BE291F4C68861081295C7864E4DC5943795A Certificate serial: 11FDD534D640B8C590FED99D6D898A2DBF567EAF Authority key identifier: CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa Signing time: Sun 03 May 2026 03:02:25 +0000 ROA not before: Sun 03 May 2026 02:57:25 +0000 ROA not after: Sun 02 May 2027 03:02:25 +0000 asID: 140003 IP address blocks: 103.148.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:fd:d5:34:d6:40:b8:c5:90:fe:d9:9d:6d:89:8a:2d:bf:56:7e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB78BE291F4C68861081295C7864E4DC5943795A Validity Not Before: May 3 02:57:25 2026 GMT Not After : May 2 03:02:25 2027 GMT Subject: CN=5BEBFC4FD2BB09A4B65CE98FE9A64FABB8F086D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:5a:29:54:e8:79:97:38:c6:30:07:a5:0c: 1f:cf:bc:62:00:32:d1:41:13:cf:be:b4:0e:1d:58: b9:26:cc:cf:02:11:dc:c6:eb:c6:4b:2f:35:82:ac: 32:07:57:2a:62:cc:23:56:1e:47:0d:46:5c:d4:13: 23:28:70:2c:fb:3d:3f:52:de:26:e7:49:7b:c4:c8: ae:a5:37:db:85:51:ca:75:8b:df:25:e1:6c:a2:57: 0e:22:ff:2c:d1:30:8d:28:2d:c9:ed:95:85:a5:ad: a5:f8:fb:c6:2a:17:2a:d6:7b:1d:84:58:32:b6:2e: a0:b8:ce:c0:d5:e2:10:c5:35:30:e1:1e:3d:15:f1: 74:16:65:9f:b7:f7:bc:ed:d5:3f:fa:31:65:6a:e9: 56:b5:bd:fd:0e:04:88:ed:34:c1:58:ab:0a:ae:a5: e2:2a:b2:05:a0:93:6b:73:06:d7:18:17:44:01:c2: 09:bd:73:c1:86:a2:91:35:cb:7e:57:07:71:78:81: 93:1f:ee:7e:67:dd:15:72:e1:96:b2:4c:6c:fc:ee: 5d:1e:06:f8:c0:d6:76:37:8e:dc:93:bb:67:55:5e: 6d:12:18:5f:c2:66:65:d7:74:73:ff:f9:86:b2:16: a2:d6:e7:59:69:13:de:e0:f2:04:f0:b9:f1:77:47: c9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EB:FC:4F:D2:BB:09:A4:B6:5C:E9:8F:E9:A6:4F:AB:B8:F0:86:D1 X509v3 Authority Key Identifier: keyid:CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.194.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:59:96:e6:dc:69:fa:91:1e:59:a7:d4:df:80:cc:3e:81:24: 1b:09:59:17:19:78:65:04:65:5c:13:21:8e:89:63:60:88:47: de:8d:e5:5a:bd:c5:74:8a:5d:6c:d4:d7:1b:07:7a:75:9a:09: e0:ba:0a:e9:1e:36:25:b9:f0:c7:a6:02:61:d6:a7:04:4b:e4: 8e:67:6e:69:de:5b:f6:d5:8e:85:35:d5:db:64:e7:5f:c2:66: 48:15:ed:1a:5d:d5:f2:19:ff:1c:7e:11:35:fc:ab:06:e9:70: cc:f1:3f:7f:4a:f3:b1:ec:3a:50:87:b6:24:73:78:87:0a:69: 10:8d:fa:24:d5:83:a2:20:76:dc:0f:46:ef:a2:2d:42:d1:8e: d2:90:58:c8:a4:b7:c0:2b:6c:62:60:57:e0:a6:a0:36:4d:ab: 64:8d:2e:31:b5:d4:26:36:5e:64:84:3c:08:6b:b8:94:30:13: a5:72:3e:c7:62:0f:ca:d1:36:0a:c3:20:a4:63:0b:17:75:33: 9b:17:1e:8d:36:b6:f5:fa:05:70:26:6a:18:91:f0:6c:c6:90: 0c:f7:45:ee:85:2c:0a:1f:b6:5d:f0:70:07:04:29:02:41:c0: a1:61:08:41:7c:f0:3b:80:61:1f:ef:3c:6a:67:28:a6:d3:aa: 74:86:f6:f8 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEf3VNNZAuMWQ/tmdbYmKLb9Wfq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0REM1 OTQzNzk1QTAeFw0yNjA1MDMwMjU3MjVaFw0yNzA1MDIwMzAyMjVaMDMxMTAvBgNV BAMTKDVCRUJGQzRGRDJCQjA5QTRCNjVDRTk4RkU5QTY0RkFCQjhGMDg2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UFopVOh5lzjGMAelDB/PvGIA MtFBE8++tA4dWLkmzM8CEdzG68ZLLzWCrDIHVypizCNWHkcNRlzUEyMocCz7PT9S 3ibnSXvEyK6lN9uFUcp1i98l4WyiVw4i/yzRMI0oLcntlYWlraX4+8YqFyrWex2E WDK2LqC4zsDV4hDFNTDhHj0V8XQWZZ+397zt1T/6MWVq6Va1vf0OBIjtNMFYqwqu peIqsgWgk2tzBtcYF0QBwgm9c8GGopE1y35XB3F4gZMf7n5n3RVy4ZayTGz87l0e BvjA1nY3jtyTu2dVXm0SGF/CZmXXdHP/+YayFqLW51lpE97g8gTwufF3R8kFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUW+v8T9K7CaS2XOmP6aZPq7jwhtEwHwYDVR0j BBgwFoAUy3i+KR9MaIYQgSlceGTk3FlDeVowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmNiOWJhN2YtZWZkMS00OTk0LWEyYTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkx RjRDNjg4NjEwODEyOTVDNzg2NEU0REM1OTQzNzk1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjc4QkUyOTFGNEM2ODg2MTA4MTI5NUM3ODY0RTREQzU5NDM3 OTVBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JjYjliYTdmLWVmZDEtNDk5NC1h MmEzLTc3OTkzMzM4YjI0Mi8wLzMxMzAzMzJlMzEzNDM4MmUzMTM5MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMwMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnlMIwDQYJ KoZIhvcNAQELBQADggEBAJpZlubcafqRHlmn1N+AzD6BJBsJWRcZeGUEZVwTIY6J Y2CIR96N5Vq9xXSKXWzU1xsHenWaCeC6CukeNiW58MemAmHWpwRL5I5nbmneW/bV joU11dtk51/CZkgV7Rpd1fIZ/xx+ETX8qwbpcMzxP39K87HsOlCHtiRzeIcKaRCN +iTVg6IgdtwPRu+iLULRjtKQWMikt8ArbGJgV+CmoDZNq2SNLjG11CY2XmSEPAhr uJQwE6VyPsdiD8rRNgrDIKRjCxd1M5sXHo02tvX6BXAmahiR8GzGkAz3Re6FLAof tl3wcAcEKQJBwKFhCEF88DuAYR/vPGpnKKbTqnSG9vg= -----END CERTIFICATE-----Generated at Wed May 13 07:15:22 2026 by rpki-client