$ rpki-client -vvf rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa File: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (raw, json) Hash identifier: zegPh8h8i8vXslaukZ/A0UJgubb+r4V2izsS5x1SFA0= Subject key identifier: 38:86:24:10:78:58:E8:FC:25:F7:91:C0:63:39:3A:07:65:C7:EB:18 Certificate issuer: /CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1 Certificate serial: 0A0D98848B0B0A02C94086B728E3E13A42916A91 Authority key identifier: AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa Signing time: Sun 03 May 2026 03:05:04 +0000 ROA not before: Sun 03 May 2026 03:00:04 +0000 ROA not after: Sun 02 May 2027 03:05:04 +0000 asID: 140407 IP address blocks: 103.151.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:0d:98:84:8b:0b:0a:02:c9:40:86:b7:28:e3:e1:3a:42:91:6a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1 Validity Not Before: May 3 03:00:04 2026 GMT Not After : May 2 03:05:04 2027 GMT Subject: CN=388624107858E8FC25F791C063393A0765C7EB18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:10:bd:03:91:94:62:33:1a:73:8d:97:e3: e1:53:3d:04:09:a6:95:8a:de:40:2c:c0:f9:58:28: e9:0a:65:9e:64:25:b3:2f:d9:03:b7:a4:7d:29:d6: 2b:77:90:6d:40:e3:24:86:0e:89:4f:0d:b4:9c:2e: 4d:df:82:1c:20:96:0e:e2:26:2c:5e:66:c6:51:bf: 30:c2:2d:82:3b:97:cc:4a:ed:2d:8f:34:39:8b:b6: 75:02:3b:9f:cc:d3:06:78:ff:22:47:47:29:6c:49: 91:a7:6f:06:52:c8:27:d6:c2:cd:32:89:08:02:41: 17:21:f5:67:ea:db:fe:16:ad:d4:23:b1:9f:37:78: dc:28:93:e6:78:6f:9b:34:d9:dc:6d:7a:78:e7:dc: 52:90:0b:06:dc:ef:11:3c:64:0e:36:10:60:8e:5e: 66:2a:95:d3:02:10:8a:04:0f:ac:38:53:b5:e0:4f: bb:74:80:16:81:89:81:ea:ac:52:65:7a:44:6a:3f: e4:24:ce:69:a2:9e:9e:59:eb:bb:bc:f8:06:e7:4c: ba:b2:3a:22:61:a8:0b:37:6e:cb:a1:a6:01:2e:73: 8f:cc:8b:5a:e0:ba:b6:24:fb:b3:84:26:27:89:10: 31:75:56:ce:ab:36:f6:f1:b9:48:49:57:07:a6:68: c1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:86:24:10:78:58:E8:FC:25:F7:91:C0:63:39:3A:07:65:C7:EB:18 X509v3 Authority Key Identifier: keyid:AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.32.0/23 Signature Algorithm: sha256WithRSAEncryption 02:a2:e1:b6:6b:ed:e8:e6:8f:16:55:20:15:55:3c:4d:d5:bb: 8c:a5:21:fb:95:e5:8b:d8:30:fa:2c:aa:c1:fa:92:12:bb:b4: e2:fd:75:37:3a:35:34:06:90:14:fa:10:cd:a8:cc:2e:42:32: a8:43:0d:7e:a4:32:43:18:c6:1e:a1:e8:56:f7:e3:55:ec:e8: 54:17:56:e0:a3:89:ef:55:f6:3f:45:b0:39:5e:66:54:16:a3: 90:3e:d6:70:5b:f9:a6:0e:be:d1:98:60:e2:41:2e:49:c4:2c: 6d:3e:bf:ea:fc:b8:cd:a0:40:6a:1a:47:f3:3e:6b:00:ee:9e: 39:9b:e8:13:1e:53:07:40:39:21:ee:d1:c1:1b:df:57:d7:f2: 7b:b4:98:3c:65:d3:1f:bf:ec:28:66:1b:51:5f:c6:73:14:9b: 47:d8:c3:51:05:93:c6:c8:d8:46:2a:92:8f:38:d8:28:15:b0: ac:ed:7b:4d:ec:86:d3:b5:14:dc:76:5f:70:7b:02:72:9f:cc: 8c:71:7c:a7:8e:f5:53:d8:1e:6d:6a:58:1e:f7:be:16:1a:9e: 38:eb:81:9e:77:d3:b9:04:10:34:67:ae:7f:fd:63:51:c4:58: 65:49:fc:c6:7a:18:37:06:83:cb:39:48:b1:fc:a5:89:1e:99: 30:f9:e2:59 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCg2YhIsLCgLJQIa3KOPhOkKRapEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNCNUY1QkQ0ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0 NzZDNzJEMTAeFw0yNjA1MDMwMzAwMDRaFw0yNzA1MDIwMzA1MDRaMDMxMTAvBgNV BAMTKDM4ODYyNDEwNzg1OEU4RkMyNUY3OTFDMDYzMzkzQTA3NjVDN0VCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2zRC9A5GUYjMac42X4+FTPQQJ ppWK3kAswPlYKOkKZZ5kJbMv2QO3pH0p1it3kG1A4ySGDolPDbScLk3fghwglg7i JixeZsZRvzDCLYI7l8xK7S2PNDmLtnUCO5/M0wZ4/yJHRylsSZGnbwZSyCfWws0y iQgCQRch9Wfq2/4WrdQjsZ83eNwok+Z4b5s02dxtenjn3FKQCwbc7xE8ZA42EGCO XmYqldMCEIoED6w4U7XgT7t0gBaBiYHqrFJlekRqP+Qkzmminp5Z67u8+AbnTLqy OiJhqAs3bsuhpgEuc4/Mi1rgurYk+7OEJieJEDF1Vs6rNvbxuUhJVwemaMFnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOIYkEHhY6Pwl95HAYzk6B2XH6xgwHwYDVR0j BBgwFoAUrLX1vUhFFn9VuNvEkkXEDEdsctEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzU5NmJjYzgtMzhjZC00NDM3LTgwYjEtNWJhZTlmODU3OTM3LzAvQUNCNUY1QkQ0 ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0NzZDNzJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQ0I1RjVCRDQ4NDUxNjdGNTVCOERCQzQ5MjQ1QzQwQzQ3NkM3 MkQxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M1OTZiY2M4LTM4Y2QtNDQzNy04 MGIxLTViYWU5Zjg1NzkzNy8wLzMxMzAzMzJlMzEzNTMxMmUzMzMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMwMzQzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5cgMA0GCSqG SIb3DQEBCwUAA4IBAQACouG2a+3o5o8WVSAVVTxN1buMpSH7leWL2DD6LKrB+pIS u7Ti/XU3OjU0BpAU+hDNqMwuQjKoQw1+pDJDGMYeoehW9+NV7OhUF1bgo4nvVfY/ RbA5XmZUFqOQPtZwW/mmDr7RmGDiQS5JxCxtPr/q/LjNoEBqGkfzPmsA7p45m+gT HlMHQDkh7tHBG99X1/J7tJg8ZdMfv+woZhtRX8ZzFJtH2MNRBZPGyNhGKpKPONgo FbCs7XtN7IbTtRTcdl9wewJyn8yMcXynjvVT2B5talge974WGp4464Ged9O5BBA0 Z65//WNRxFhlSfzGehg3BoPLOUix/KWJHpkw+eJZ -----END CERTIFICATE-----Generated at Wed May 13 04:08:37 2026 by rpki-client