$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa File: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (raw, json) Hash identifier: b6jqSGzO23ax7FGySYAB/IT1h4HAm4Nn/5ElYlZlniI= Subject key identifier: 57:E4:AA:91:7D:50:35:C7:F6:38:CD:4F:49:51:16:2A:6A:A2:D9:AF Certificate issuer: /CN=3B239D6443F9FF34F93D5AA39DF28D7EDEE80689 Certificate serial: 421787B615CD826C31C96279D3FB6213624666C8 Authority key identifier: 3B:23:9D:64:43:F9:FF:34:F9:3D:5A:A3:9D:F2:8D:7E:DE:E8:06:89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa Signing time: Sun 03 May 2026 03:04:55 +0000 ROA not before: Sun 03 May 2026 02:59:55 +0000 ROA not after: Sun 02 May 2027 03:04:55 +0000 asID: 140467 IP address blocks: 103.153.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:17:87:b6:15:cd:82:6c:31:c9:62:79:d3:fb:62:13:62:46:66:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B239D6443F9FF34F93D5AA39DF28D7EDEE80689 Validity Not Before: May 3 02:59:55 2026 GMT Not After : May 2 03:04:55 2027 GMT Subject: CN=57E4AA917D5035C7F638CD4F4951162A6AA2D9AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:14:1a:1a:2f:f7:b0:49:24:9a:6c:73:aa:48: 3b:5d:d1:8e:3c:96:0d:f0:ba:58:cc:f4:10:26:e1: b3:fb:08:83:d5:0f:a5:e5:cb:7e:d8:b0:b2:36:59: 7f:e4:2d:4a:08:61:78:15:a1:64:05:a5:0c:81:1b: b9:3b:47:aa:95:56:71:48:d2:05:ac:36:26:ab:ee: 57:bb:82:12:20:e2:ad:17:c2:d4:a3:b4:ac:e3:79: f0:f6:09:d2:ac:bf:78:45:4d:8a:3a:48:57:6b:5a: ff:ce:43:7b:5b:0d:9b:85:39:aa:f0:fa:dd:0e:85: 54:ae:48:91:cb:28:ba:63:04:08:04:13:f4:40:d7: 8b:e2:66:d1:49:d9:20:61:da:ec:54:84:86:76:66: 00:c0:ab:fd:7c:18:25:cd:b0:99:b6:94:e7:36:05: 43:4c:cd:2f:25:8e:ad:fc:58:c0:a4:c9:05:5f:fa: b2:cb:0b:22:3c:b0:b2:78:a3:9e:cf:78:1f:dc:69: e6:9c:66:a4:1e:11:57:f2:30:57:b8:36:e1:59:1e: f6:e1:df:29:28:d8:7c:32:4b:af:70:bf:f9:c8:54: 31:6b:c8:4d:cf:96:1f:ab:e2:3e:e4:98:3c:dd:c9: 41:ae:10:12:07:c7:a7:12:68:32:fc:24:5d:13:33: 05:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E4:AA:91:7D:50:35:C7:F6:38:CD:4F:49:51:16:2A:6A:A2:D9:AF X509v3 Authority Key Identifier: keyid:3B:23:9D:64:43:F9:FF:34:F9:3D:5A:A3:9D:F2:8D:7E:DE:E8:06:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.150.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:48:20:86:84:49:b7:4f:ff:64:de:6b:51:b6:49:18:6e:ed: bc:65:b7:91:0f:87:ec:9c:54:be:fa:b2:02:dd:c2:79:94:89: 62:aa:29:be:14:0d:03:2b:9c:4c:c3:56:20:a2:4f:09:ca:28: b5:bc:9f:c2:82:8b:cb:eb:e4:32:63:cb:74:80:b4:79:66:e7: 52:da:a9:e0:c6:96:3f:d8:22:52:2f:3b:1f:ac:ed:be:ed:2c: 69:33:a7:5c:b9:e6:fd:64:5b:5e:14:9c:f2:5c:e3:70:0e:b6: 06:22:78:9f:10:f8:51:4d:a5:3d:3f:23:ea:ca:24:36:a9:73: 4a:06:a3:17:ea:cc:9b:60:6b:e7:64:97:8b:54:45:f3:f7:67: d2:92:c9:cb:62:5d:37:f7:a2:2e:a7:0f:15:9e:e6:3c:7a:26: b0:4e:e0:6d:1b:35:bf:c6:43:8f:b5:01:cf:73:d3:e1:c0:3e: ff:c7:d9:b3:5b:18:96:68:cd:e1:4c:b9:18:01:17:23:27:66: 8b:96:37:56:54:0c:cf:8c:c0:d1:11:69:05:af:eb:03:6d:e8: 9d:0b:d3:af:42:59:e2:3a:92:48:64:d2:f2:05:f6:a2:d4:b4: 31:e2:ff:0e:96:60:b7:af:33:f0:26:6a:70:c4:f8:68:1b:e8: 0b:ed:a8:84 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQheHthXNgmwxyWJ50/tiE2JGZsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyMzlENjQ0M0Y5RkYzNEY5M0Q1QUEzOURGMjhEN0VE RUU4MDY4OTAeFw0yNjA1MDMwMjU5NTVaFw0yNzA1MDIwMzA0NTVaMDMxMTAvBgNV BAMTKDU3RTRBQTkxN0Q1MDM1QzdGNjM4Q0Q0RjQ5NTExNjJBNkFBMkQ5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVFBoaL/ewSSSabHOqSDtd0Y48 lg3wuljM9BAm4bP7CIPVD6Xly37YsLI2WX/kLUoIYXgVoWQFpQyBG7k7R6qVVnFI 0gWsNiar7le7ghIg4q0XwtSjtKzjefD2CdKsv3hFTYo6SFdrWv/OQ3tbDZuFOarw +t0OhVSuSJHLKLpjBAgEE/RA14viZtFJ2SBh2uxUhIZ2ZgDAq/18GCXNsJm2lOc2 BUNMzS8ljq38WMCkyQVf+rLLCyI8sLJ4o57PeB/caeacZqQeEVfyMFe4NuFZHvbh 3yko2HwyS69wv/nIVDFryE3Plh+r4j7kmDzdyUGuEBIHx6cSaDL8JF0TMwULAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUV+SqkX1QNcf2OM1PSVEWKmqi2a8wHwYDVR0j BBgwFoAUOyOdZEP5/zT5PVqjnfKNft7oBokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ5NTY1MDUtZDZiMy00M2RjLTkwNzAtZDRkYmRiN2NmOTYzLzAvM0IyMzlENjQ0 M0Y5RkYzNEY5M0Q1QUEzOURGMjhEN0VERUU4MDY4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjIzOUQ2NDQzRjlGRjM0RjkzRDVBQTM5REYyOEQ3RURFRTgw Njg5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M0OTU2NTA1LWQ2YjMtNDNkYy05 MDcwLWQ0ZGJkYjdjZjk2My8wLzMxMzAzMzJlMzEzNTMzMmUzMTM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM2Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmZYwDQYJ KoZIhvcNAQELBQADggEBAJ9IIIaESbdP/2Tea1G2SRhu7bxlt5EPh+ycVL76sgLd wnmUiWKqKb4UDQMrnEzDViCiTwnKKLW8n8KCi8vr5DJjy3SAtHlm51LaqeDGlj/Y IlIvOx+s7b7tLGkzp1y55v1kW14UnPJc43AOtgYieJ8Q+FFNpT0/I+rKJDapc0oG oxfqzJtga+dkl4tURfP3Z9KSyctiXTf3oi6nDxWe5jx6JrBO4G0bNb/GQ4+1Ac9z 0+HAPv/H2bNbGJZozeFMuRgBFyMnZouWN1ZUDM+MwNERaQWv6wNt6J0L069CWeI6 kkhk0vIF9qLUtDHi/w6WYLevM/AmanDE+Ggb6AvtqIQ= -----END CERTIFICATE-----Generated at Wed May 13 07:36:11 2026 by rpki-client