$ rpki-client -vvf rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa File: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (raw, json) Hash identifier: r0Gg/zKNGtmT6o5+BprFlCiKD1vB9gPWIu5WDkU9BlY= Subject key identifier: 81:07:9E:75:EC:4B:A9:98:DC:FC:3A:15:08:B4:40:62:D4:41:14:0D Certificate issuer: /CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Certificate serial: 23DAE66CE7C8752FB093878E23FD3C52872AFE56 Authority key identifier: 20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa Signing time: Sun 03 May 2026 03:08:32 +0000 ROA not before: Sun 03 May 2026 03:03:32 +0000 ROA not after: Sun 02 May 2027 03:08:32 +0000 asID: 149924 IP address blocks: 103.191.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:da:e6:6c:e7:c8:75:2f:b0:93:87:8e:23:fd:3c:52:87:2a:fe:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Validity Not Before: May 3 03:03:32 2026 GMT Not After : May 2 03:08:32 2027 GMT Subject: CN=81079E75EC4BA998DCFC3A1508B44062D441140D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:2e:ca:d0:00:a4:95:42:48:5e:fe:fd:ae: 54:2d:eb:6d:94:1d:85:85:ca:64:85:c7:ff:c8:5a: 62:e0:2a:cc:6e:40:0a:a6:67:d3:a5:b3:7c:99:51: c1:6c:1e:8d:7f:b2:88:56:8f:31:e7:2e:c2:b9:92: a5:a6:2b:9f:24:67:5c:ce:e7:8a:ba:85:d5:5f:e4: fb:fb:72:f7:87:8a:68:d9:c8:71:c0:bf:9f:c5:b5: 4b:1c:67:a5:b4:fb:67:27:be:f3:19:98:86:17:30: 7a:d0:a3:08:4b:97:52:77:9f:a3:38:db:64:06:ec: 9a:41:bc:8c:4a:2a:d1:b7:d9:f0:0f:1d:d6:38:af: ba:5d:e5:dc:5f:46:05:e1:3c:1b:db:80:77:48:73: c4:b6:1e:c8:b1:39:82:4e:da:9e:cd:af:91:78:49: d4:d9:bf:0b:62:3c:48:93:1f:b5:49:ed:b8:b9:d9: cb:40:fe:cf:81:c7:55:17:e4:96:33:bb:b0:66:d1: a7:18:ae:48:29:79:be:9a:f9:d4:f0:2c:0c:ce:5d: e1:4c:1b:8c:d0:64:fb:90:4a:96:ee:eb:1e:4f:7f: 21:5b:36:47:40:9d:1e:ff:4c:52:fe:23:d3:19:e3: c2:c7:f6:6b:e1:d0:06:86:0b:c1:e2:32:88:87:01: 62:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:07:9E:75:EC:4B:A9:98:DC:FC:3A:15:08:B4:40:62:D4:41:14:0D X509v3 Authority Key Identifier: keyid:20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.168.0/24 Signature Algorithm: sha256WithRSAEncryption 41:46:27:0a:90:73:63:88:e5:1e:fa:89:6d:a9:48:91:03:ef: c4:51:32:0d:74:a5:ec:60:05:4a:b4:8a:83:32:25:f8:06:b6: 3d:cf:e2:48:53:1f:00:35:2e:6c:77:7b:4d:58:21:f7:9f:f0: ce:4b:11:da:e7:a4:f1:0d:fb:6e:c7:26:ac:61:e5:f3:7a:88: 7c:9a:41:59:c7:74:e8:84:86:86:f3:07:dc:cc:66:4f:f2:79: a5:10:2b:31:cd:3c:2a:5d:64:66:bd:e2:13:18:5a:82:3d:89: 40:66:5f:84:b7:94:75:01:28:a9:1a:7a:5c:bf:02:07:56:2e: a2:f3:c8:ca:34:57:95:be:46:12:ac:26:c9:5f:7b:f2:a5:23: 05:5f:7a:0a:44:e5:d0:1b:5e:84:2f:a0:c6:f2:3f:69:c6:d0: e9:97:84:57:3c:c2:65:bd:d3:0e:02:1e:66:78:13:46:83:5a: d4:c6:e7:e1:cb:06:8a:08:34:5f:f9:24:2a:b4:b4:ab:0e:f5: d1:3e:94:48:e6:fd:89:47:29:25:2e:c8:a0:b5:90:bb:61:80: a3:3a:f8:5f:4a:51:2d:eb:9b:65:6b:e5:61:d6:04:83:1d:eb: 51:4f:91:61:97:94:c7:8f:ae:4c:18:9c:2f:49:bb:7c:90:bf: 15:1f:45:f6 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUI9rmbOfIdS+wk4eOI/08Uocq/lYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZBNDky MEIxRjQwOTAeFw0yNjA1MDMwMzAzMzJaFw0yNzA1MDIwMzA4MzJaMDMxMTAvBgNV BAMTKDgxMDc5RTc1RUM0QkE5OThEQ0ZDM0ExNTA4QjQ0MDYyRDQ0MTE0MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+y7K0ACklUJIXv79rlQt622U HYWFymSFx//IWmLgKsxuQAqmZ9Ols3yZUcFsHo1/sohWjzHnLsK5kqWmK58kZ1zO 54q6hdVf5Pv7cveHimjZyHHAv5/FtUscZ6W0+2cnvvMZmIYXMHrQowhLl1J3n6M4 22QG7JpBvIxKKtG32fAPHdY4r7pd5dxfRgXhPBvbgHdIc8S2HsixOYJO2p7Nr5F4 SdTZvwtiPEiTH7VJ7bi52ctA/s+Bx1UX5JYzu7Bm0acYrkgpeb6a+dTwLAzOXeFM G4zQZPuQSpbu6x5PfyFbNkdAnR7/TFL+I9MZ48LH9mvh0AaGC8HiMoiHAWL3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUgQeedexLqZjc/DoVCLRAYtRBFA0wHwYDVR0j BBgwFoAUINsVhSKf8dTi1r06zBNqSSCx9AkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE4YzAzODMtNjI5Zi00NmUyLWIxMTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUy MjlGRjFENEUyRDZCRDNBQ0MxMzZBNDkyMEIxRjQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMERCMTU4NTIyOUZGMUQ0RTJENkJEM0FDQzEzNkE0OTIwQjFG NDA5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxOGMwMzgzLTYyOWYtNDZlMi1i MTE0LTE4OGNjOTIxYTZhNS8wLzMxMzAzMzJlMzEzOTMxMmUzMTM2MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMyMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnv6gwDQYJ KoZIhvcNAQELBQADggEBAEFGJwqQc2OI5R76iW2pSJED78RRMg10pexgBUq0ioMy JfgGtj3P4khTHwA1Lmx3e01YIfef8M5LEdrnpPEN+27HJqxh5fN6iHyaQVnHdOiE hobzB9zMZk/yeaUQKzHNPCpdZGa94hMYWoI9iUBmX4S3lHUBKKkaely/AgdWLqLz yMo0V5W+RhKsJslfe/KlIwVfegpE5dAbXoQvoMbyP2nG0OmXhFc8wmW90w4CHmZ4 E0aDWtTG5+HLBooINF/5JCq0tKsO9dE+lEjm/YlHKSUuyKC1kLthgKM6+F9KUS3r m2Vr5WHWBIMd61FPkWGXlMePrkwYnC9Ju3yQvxUfRfY= -----END CERTIFICATE-----Generated at Wed May 13 13:41:24 2026 by rpki-client