$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/3130332e3135362e31342e302f32332d3234203d3e203538383231.roa File: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (raw, json) Hash identifier: ObskdzHhJM5YPi+vb1AkQ8nGE9gX1uyY1inXWD6vNXo= Subject key identifier: FD:02:A2:D1:FA:9E:5C:97:82:95:5A:8A:4A:F5:89:30:73:39:58:47 Certificate issuer: /CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Certificate serial: 0C6217DDFB580DDBF421EC439D5822A403B71B59 Authority key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/3130332e3135362e31342e302f32332d3234203d3e203538383231.roa Signing time: Sun 03 May 2026 03:07:33 +0000 ROA not before: Sun 03 May 2026 03:02:33 +0000 ROA not after: Sun 02 May 2027 03:07:33 +0000 asID: 58821 IP address blocks: 103.156.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:62:17:dd:fb:58:0d:db:f4:21:ec:43:9d:58:22:a4:03:b7:1b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Validity Not Before: May 3 03:02:33 2026 GMT Not After : May 2 03:07:33 2027 GMT Subject: CN=FD02A2D1FA9E5C9782955A8A4AF5893073395847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:83:67:64:05:01:33:8f:c1:09:b3:62:79: f5:ce:c6:ff:76:ae:57:93:3f:81:01:76:e3:6d:21: 78:17:22:1e:cb:33:7f:64:f1:a1:b1:09:13:da:77: fc:f0:b7:e9:11:ff:d1:89:12:38:78:05:e1:7e:40: f8:c7:24:ca:db:81:4d:07:0c:cf:f2:16:41:2d:cd: 79:c7:fa:ee:63:6a:ba:1e:d0:90:90:e0:46:9d:f7: 68:89:35:e1:8b:01:84:0a:f6:e5:03:68:82:0f:bf: 0f:ab:a3:90:9d:2d:ab:54:d8:22:b3:c6:64:09:b8: 06:f4:a6:2b:b7:19:ba:1d:a6:ff:9c:29:e9:71:fc: 13:fa:41:c6:9d:bb:fa:8a:fd:b4:be:d7:67:b1:bf: c8:c1:57:5e:5d:f9:ce:74:7b:07:a8:4c:6b:29:bf: af:ee:d9:75:af:98:27:da:ac:71:5a:f1:2f:76:9b: 4c:35:7a:ef:0c:7b:5e:b6:ea:4b:2d:c2:ec:eb:5a: 4a:d1:7d:ae:42:ce:79:04:9c:20:2c:88:db:20:8f: ee:1d:8a:a9:6e:d8:14:88:12:a1:c6:b2:0d:e1:f9: de:e7:ff:90:63:5d:24:63:86:83:de:a8:e8:4c:8c: 19:dd:f1:c1:19:7b:35:e6:86:b2:e8:fd:23:43:43: 92:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:02:A2:D1:FA:9E:5C:97:82:95:5A:8A:4A:F5:89:30:73:39:58:47 X509v3 Authority Key Identifier: keyid:38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/3130332e3135362e31342e302f32332d3234203d3e203538383231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.14.0/23 Signature Algorithm: sha256WithRSAEncryption 14:d0:9d:2c:9c:f6:3f:d3:97:cc:d8:66:89:3f:25:90:19:ca: be:bb:90:aa:40:0a:8a:b2:bc:c6:f2:48:2a:02:3b:80:a3:a7: ca:9a:4e:cc:c1:d8:2b:f5:1e:1c:c7:7d:17:12:4f:3a:73:4e: c7:cc:2f:15:f8:b4:89:6f:10:69:2b:ad:66:48:36:8f:07:5a: 2d:46:fb:d5:1a:94:42:81:66:a6:36:e7:39:c8:7b:fe:73:00: e0:37:00:9b:35:46:55:ce:80:b9:78:ee:41:4c:13:a8:3b:63: 6b:bb:4e:00:0c:ae:65:50:5c:1b:05:3a:a0:fc:3b:bd:b5:ce: 3b:e8:3f:31:26:97:c3:fd:93:a7:df:a4:5e:57:96:d9:4d:8f: 4e:ad:05:69:35:3b:2f:a0:83:e5:f8:e0:78:3a:f4:6e:ad:ae: d8:c5:f9:b7:57:38:33:8b:cf:38:1b:f6:b5:1b:3e:3e:8f:a6: 89:79:9e:b1:e1:40:ce:86:66:de:8f:15:c7:70:eb:78:93:49: 16:d1:ca:f4:44:55:f4:63:58:f4:07:34:5b:34:b1:c7:9e:89: 6e:f1:03:4e:a8:9f:5a:4c:33:be:3f:dc:31:b9:7d:e5:27:80: 6a:45:98:02:59:66:7f:91:97:dc:14:01:0f:dd:eb:53:a5:0b: c8:fa:b3:4a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDGIX3ftYDdv0IexDnVgipAO3G1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1 QTlBMEU4QjAeFw0yNjA1MDMwMzAyMzNaFw0yNzA1MDIwMzA3MzNaMDMxMTAvBgNV BAMTKEZEMDJBMkQxRkE5RTVDOTc4Mjk1NUE4QTRBRjU4OTMwNzMzOTU4NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCngoNnZAUBM4/BCbNiefXOxv92 rleTP4EBduNtIXgXIh7LM39k8aGxCRPad/zwt+kR/9GJEjh4BeF+QPjHJMrbgU0H DM/yFkEtzXnH+u5jaroe0JCQ4Ead92iJNeGLAYQK9uUDaIIPvw+ro5CdLatU2CKz xmQJuAb0piu3Gbodpv+cKelx/BP6Qcadu/qK/bS+12exv8jBV15d+c50eweoTGsp v6/u2XWvmCfarHFa8S92m0w1eu8Me1626kstwuzrWkrRfa5CznkEnCAsiNsgj+4d iqlu2BSIEqHGsg3h+d7n/5BjXSRjhoPeqOhMjBnd8cEZezXmhrLo/SNDQ5K1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU/QKi0fqeXJeClVqKSvWJMHM5WEcwHwYDVR0j BBgwFoAUOLkHw+LBEM5mOxaEx6rW2FqaDoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UxZWE1MTMtYWM2ZS00YTVmLWIzZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNF MkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1QTlBMEU4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEI5MDdDM0UyQzExMENFNjYzQjE2ODRDN0FBRDZEODVBOUEw RThCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NlMWVhNTEzLWFjNmUtNGE1Zi1i M2ViLWQ1MzUyY2FmNDg2Yi8wLzMxMzAzMzJlMzEzNTM2MmUzMTM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzUzODM4MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWecDjANBgkqhkiG 9w0BAQsFAAOCAQEAFNCdLJz2P9OXzNhmiT8lkBnKvruQqkAKirK8xvJIKgI7gKOn yppOzMHYK/UeHMd9FxJPOnNOx8wvFfi0iW8QaSutZkg2jwdaLUb71RqUQoFmpjbn Och7/nMA4DcAmzVGVc6AuXjuQUwTqDtja7tOAAyuZVBcGwU6oPw7vbXOO+g/MSaX w/2Tp9+kXleW2U2PTq0FaTU7L6CD5fjgeDr0bq2u2MX5t1c4M4vPOBv2tRs+Po+m iXmeseFAzoZm3o8Vx3DreJNJFtHK9ERV9GNY9Ac0WzSxx56JbvEDTqifWkwzvj/c Mbl95SeAakWYAllmf5GX3BQBD93rU6ULyPqzSg== -----END CERTIFICATE-----Generated at Tue May 12 22:33:01 2026 by rpki-client