$ rpki-client -vvf rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa File: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (raw, json) Hash identifier: rJ0RuaPqeHdzv0NiG8lmzkirR+rqM1xOWW0dZ1tCox0= Subject key identifier: CA:D9:D6:89:2B:88:DD:BC:B6:59:DA:C7:9B:59:BD:C2:9D:6A:05:6C Certificate issuer: /CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Certificate serial: 36AE378D3B8DFF249CFCC64D30213AC841E5E78C Authority key identifier: 83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa Signing time: Sun 03 May 2026 03:09:06 +0000 ROA not before: Sun 03 May 2026 03:04:06 +0000 ROA not after: Sun 02 May 2027 03:09:06 +0000 asID: 131111 IP address blocks: 103.159.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ae:37:8d:3b:8d:ff:24:9c:fc:c6:4d:30:21:3a:c8:41:e5:e7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Validity Not Before: May 3 03:04:06 2026 GMT Not After : May 2 03:09:06 2027 GMT Subject: CN=CAD9D6892B88DDBCB659DAC79B59BDC29D6A056C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:99:74:a3:11:70:0d:42:7d:1c:cf:cd:0a: 02:50:a9:27:1a:d0:26:ca:4e:2b:d2:32:e9:e5:fb: 76:d3:e9:f8:b5:ad:09:6d:62:cd:25:ec:5d:8c:33: 38:a8:3a:56:b3:06:88:c3:0f:fe:9a:2f:d0:c5:7f: bf:9d:69:6b:d6:d8:eb:42:5e:f4:3e:d4:b5:16:bd: 14:c7:68:f9:bd:fd:37:77:6b:15:ac:5e:44:a5:81: 52:5e:3e:ec:39:1f:0c:ac:e8:4e:04:ce:24:66:9c: 71:4f:dc:79:f5:d7:5a:7a:0f:c3:bd:d3:46:ab:64: 23:6c:ff:ea:cb:78:45:b7:16:79:4b:a1:54:b9:82: 98:c7:6b:1f:58:fc:0d:92:b3:99:42:e7:bf:20:1f: 1a:f9:96:c2:a6:24:b4:58:7d:03:3e:1d:dc:b3:43: 27:63:99:1b:c6:6c:6f:d2:b3:3e:6c:bb:27:2b:02: 26:b7:93:05:95:de:f4:c0:c9:a4:a0:ca:ea:59:1e: 0c:ed:91:2c:b0:d7:fd:19:81:2f:5c:62:ac:f1:da: 8d:09:31:bc:bd:e0:15:8b:32:22:32:06:d3:76:29: ed:3f:93:4c:d6:10:bb:2b:e4:b4:78:46:3e:3d:68: 7c:9e:1a:6c:c4:c4:59:34:d6:8d:df:a7:e6:53:3a: be:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D9:D6:89:2B:88:DD:BC:B6:59:DA:C7:9B:59:BD:C2:9D:6A:05:6C X509v3 Authority Key Identifier: keyid:83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.204.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:89:54:26:d1:6d:ea:ab:94:93:f9:27:b9:92:25:03:47:3e: ac:9e:ee:ad:97:45:95:ba:19:72:9f:e4:0b:6a:ec:9e:62:19: 13:83:4d:7d:25:70:f0:d9:46:b2:96:d2:c4:30:04:d5:59:50: 16:2c:77:c9:26:ae:47:ab:b8:6c:1e:f2:5c:62:52:71:87:ab: 19:23:5b:eb:96:74:e1:b2:5c:7f:48:99:66:26:1e:c8:82:f9: 01:0a:b7:b4:bb:2c:d7:65:f2:8f:8a:a2:8e:c2:46:00:6b:d2: 74:ab:18:60:b8:a0:df:2a:57:76:89:02:a2:15:f7:99:30:b7: e5:42:e5:3c:fe:a5:0e:1c:75:d9:05:3f:0c:d4:83:b3:3a:60: b1:fb:6b:d5:f0:f3:ed:0f:20:88:e1:d8:1c:40:9e:f6:9a:4d: 66:7a:8a:aa:39:b8:6b:cd:53:a6:74:2a:0b:7f:b3:06:37:36: 62:84:0d:4e:c1:54:ce:8d:2f:f0:59:f7:62:4a:42:1b:f9:86: ec:87:cc:ef:5f:04:b0:6d:ac:0d:f9:d5:d6:93:b5:55:7b:d2: cc:ff:5f:81:16:e6:d4:79:10:ed:f1:47:91:e4:94:99:6b:e4: dd:bb:0c:a9:10:a3:21:92:7d:b7:fd:81:99:8d:06:bf:d8:94: 4f:48:1c:3a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNq43jTuN/ySc/MZNMCE6yEHl54wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYy RjNBOEREMTAeFw0yNjA1MDMwMzA0MDZaFw0yNzA1MDIwMzA5MDZaMDMxMTAvBgNV BAMTKENBRDlENjg5MkI4OEREQkNCNjU5REFDNzlCNTlCREMyOUQ2QTA1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Spl0oxFwDUJ9HM/NCgJQqSca 0CbKTivSMunl+3bT6fi1rQltYs0l7F2MMzioOlazBojDD/6aL9DFf7+daWvW2OtC XvQ+1LUWvRTHaPm9/Td3axWsXkSlgVJePuw5Hwys6E4EziRmnHFP3Hn111p6D8O9 00arZCNs/+rLeEW3FnlLoVS5gpjHax9Y/A2Ss5lC578gHxr5lsKmJLRYfQM+Hdyz QydjmRvGbG/Ssz5suycrAia3kwWV3vTAyaSgyupZHgztkSyw1/0ZgS9cYqzx2o0J Mby94BWLMiIyBtN2Ke0/k0zWELsr5LR4Rj49aHyeGmzExFk01o3fp+ZTOr4pAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUytnWiSuI3by2WdrHm1m9wp1qBWwwHwYDVR0j BBgwFoAUgy8C4UAkMGwwZVenHgv6Ly86jdEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwZmExNGEtYWFhYy00MGY0LTljODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0 MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYyRjNBOEREMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MzJGMDJFMTQwMjQzMDZDMzA2NTU3QTcxRTBCRkEyRjJGM0E4 REQxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QyMGZhMTRhLWFhYWMtNDBmNC05 Yzg0LTY5MjU3ODY4ZjJjYi8wLzMxMzAzMzJlMzEzNTM5MmUzMjMwMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnn8wwDQYJ KoZIhvcNAQELBQADggEBAA6JVCbRbeqrlJP5J7mSJQNHPqye7q2XRZW6GXKf5Atq 7J5iGRODTX0lcPDZRrKW0sQwBNVZUBYsd8kmrkeruGwe8lxiUnGHqxkjW+uWdOGy XH9ImWYmHsiC+QEKt7S7LNdl8o+Koo7CRgBr0nSrGGC4oN8qV3aJAqIV95kwt+VC 5Tz+pQ4cddkFPwzUg7M6YLH7a9Xw8+0PIIjh2BxAnvaaTWZ6iqo5uGvNU6Z0Kgt/ swY3NmKEDU7BVM6NL/BZ92JKQhv5huyHzO9fBLBtrA351daTtVV70sz/X4EW5tR5 EO3xR5HklJlr5N27DKkQoyGSfbf9gZmNBr/YlE9IHDo= -----END CERTIFICATE-----Generated at Wed May 13 05:55:28 2026 by rpki-client