$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa File: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (raw, json) Hash identifier: PCTRx4Db0OJeT2h639ct7xi+9uM7E+6KAvrUncz4724= Subject key identifier: ED:DD:09:2D:3D:9E:29:58:74:9C:83:A3:8C:E8:FC:A3:6A:D6:51:B7 Certificate issuer: /CN=0852B9571B10B9E010A24AEF65D8CD2D47886515 Certificate serial: 5C51B18382FF23EC3C3BD7FD4A99A92F7277B327 Authority key identifier: 08:52:B9:57:1B:10:B9:E0:10:A2:4A:EF:65:D8:CD:2D:47:88:65:15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa Signing time: Sun 03 May 2026 03:08:31 +0000 ROA not before: Sun 03 May 2026 03:03:31 +0000 ROA not after: Sun 02 May 2027 03:08:31 +0000 asID: 150554 IP address blocks: 103.167.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.crl rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:51:b1:83:82:ff:23:ec:3c:3b:d7:fd:4a:99:a9:2f:72:77:b3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0852B9571B10B9E010A24AEF65D8CD2D47886515 Validity Not Before: May 3 03:03:31 2026 GMT Not After : May 2 03:08:31 2027 GMT Subject: CN=EDDD092D3D9E2958749C83A38CE8FCA36AD651B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fd:a6:26:89:11:4b:37:13:e1:99:82:f8:27: a3:07:51:22:d5:1a:7f:17:d5:0c:fa:b4:ba:66:58: 10:55:ba:0f:f1:9a:63:4a:be:66:d2:47:dd:45:8b: 14:07:5f:52:44:7c:2e:b5:38:1c:b1:4e:d4:3c:92: 88:62:32:bf:09:fa:2e:0d:2a:6a:4a:a8:a5:7f:2d: 78:94:98:16:be:81:ec:3b:d1:69:da:fa:b3:f9:14: db:d9:ff:36:ec:31:e6:ff:3f:c5:56:c1:ca:e3:f6: cb:87:09:9f:99:4e:7f:d2:80:f4:ed:8a:c3:82:88: 8f:34:19:21:54:11:9a:26:a6:03:31:66:65:8c:90: cf:09:81:eb:e5:4a:6e:43:47:1d:34:d0:0d:6b:2a: ce:6a:c4:7a:2a:df:ae:8c:3b:73:d7:5a:0d:cb:88: 14:20:5b:4e:05:9d:44:5e:70:3f:80:0b:0f:99:cd: d6:23:8a:ca:ac:30:40:6c:80:91:96:e0:82:fd:7f: 0c:59:3c:0c:05:57:4a:9c:86:b4:cf:df:a8:a9:0f: 7a:b2:23:4f:14:da:fa:4e:a3:d0:0d:67:9d:35:ff: 2a:24:9f:ec:83:2d:95:8c:50:5f:b7:c3:45:57:4a: 67:12:ca:db:97:24:d0:0d:b6:a2:8d:05:07:3f:45: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DD:09:2D:3D:9E:29:58:74:9C:83:A3:8C:E8:FC:A3:6A:D6:51:B7 X509v3 Authority Key Identifier: keyid:08:52:B9:57:1B:10:B9:E0:10:A2:4A:EF:65:D8:CD:2D:47:88:65:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.156.0/24 Signature Algorithm: sha256WithRSAEncryption 45:32:7f:4d:8f:d0:fd:af:06:cd:c1:28:1f:85:13:1a:ee:9e: 37:f7:9c:55:64:7d:fd:28:11:17:31:ac:a0:ac:e4:7b:be:12: 06:6f:f4:3d:cc:42:24:d6:38:c1:3f:df:45:d7:68:d6:e2:ca: b4:71:3a:95:1f:71:ad:9a:dc:d1:17:32:e0:4a:d1:dd:bc:71: 40:57:2f:7f:dc:45:04:db:36:3d:38:9f:87:5b:1b:1d:91:7f: 58:59:53:7e:95:3a:69:bd:2b:95:65:fa:c0:d2:78:47:48:9a: bb:26:0b:3b:40:7b:6a:18:24:5d:75:74:04:3b:5a:41:91:6e: e4:c5:3f:04:c1:ea:77:87:40:22:85:b6:26:6d:e7:cb:ff:08: 36:87:0e:ec:79:4a:4a:57:d1:3c:72:9e:07:0a:6f:c9:61:b2: b6:1a:03:a2:be:0b:69:3f:a5:62:fc:3d:8a:86:2c:3f:3a:80: 06:4e:fd:44:45:e3:01:16:01:10:82:89:d3:db:2e:2f:d1:43: 3c:a9:6b:a2:90:4d:7e:13:8d:ca:02:42:a0:65:aa:98:44:ae: aa:72:91:7f:3c:09:43:a6:a7:16:40:3a:ee:40:c2:69:b8:b2: cc:fe:a2:cf:9d:a6:ba:bd:16:9d:21:c2:00:f4:dc:f0:b0:36: 85:a2:38:18 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXFGxg4L/I+w8O9f9SpmpL3J3sycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg1MkI5NTcxQjEwQjlFMDEwQTI0QUVGNjVEOENEMkQ0 Nzg4NjUxNTAeFw0yNjA1MDMwMzAzMzFaFw0yNzA1MDIwMzA4MzFaMDMxMTAvBgNV BAMTKEVEREQwOTJEM0Q5RTI5NTg3NDlDODNBMzhDRThGQ0EzNkFENjUxQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt/aYmiRFLNxPhmYL4J6MHUSLV Gn8X1Qz6tLpmWBBVug/xmmNKvmbSR91FixQHX1JEfC61OByxTtQ8kohiMr8J+i4N KmpKqKV/LXiUmBa+gew70Wna+rP5FNvZ/zbsMeb/P8VWwcrj9suHCZ+ZTn/SgPTt isOCiI80GSFUEZompgMxZmWMkM8JgevlSm5DRx000A1rKs5qxHoq366MO3PXWg3L iBQgW04FnURecD+ACw+ZzdYjisqsMEBsgJGW4IL9fwxZPAwFV0qchrTP36ipD3qy I08U2vpOo9ANZ501/yokn+yDLZWMUF+3w0VXSmcSytuXJNANtqKNBQc/RcWpAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU7d0JLT2eKVh0nIOjjOj8o2rWUbcwHwYDVR0j BBgwFoAUCFK5VxsQueAQokrvZdjNLUeIZRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE4MDMxMjUtZDc3Ny00MDU2LTg0NGQtOGQxYmVmZDAxNjNkLzAvMDg1MkI5NTcx QjEwQjlFMDEwQTI0QUVGNjVEOENEMkQ0Nzg4NjUxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODUyQjk1NzFCMTBCOUUwMTBBMjRBRUY2NUQ4Q0QyRDQ3ODg2 NTE1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxODAzMTI1LWQ3NzctNDA1Ni04 NDRkLThkMWJlZmQwMTYzZC8wLzMxMzAzMzJlMzEzNjM3MmUzMTM1MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzNTM1MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnp5wwDQYJ KoZIhvcNAQELBQADggEBAEUyf02P0P2vBs3BKB+FExrunjf3nFVkff0oERcxrKCs 5Hu+EgZv9D3MQiTWOME/30XXaNbiyrRxOpUfca2a3NEXMuBK0d28cUBXL3/cRQTb Nj04n4dbGx2Rf1hZU36VOmm9K5Vl+sDSeEdImrsmCztAe2oYJF11dAQ7WkGRbuTF PwTB6neHQCKFtiZt58v/CDaHDux5SkpX0TxyngcKb8lhsrYaA6K+C2k/pWL8PYqG LD86gAZO/URF4wEWARCCidPbLi/RQzypa6KQTX4TjcoCQqBlqphErqpykX88CUOm pxZAOu5Awmm4ssz+os+dprq9Fp0hwgD03PCwNoWiOBg= -----END CERTIFICATE-----Generated at Wed May 13 08:34:44 2026 by rpki-client