$ rpki-client -vvf rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa File: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (raw, json) Hash identifier: FY4TsqDTq2GdCg6xoOXLww6pp19CeU/LlUR8ZBQGedg= Subject key identifier: E6:3F:1C:D3:AA:7B:55:FE:64:E5:B1:1E:A5:2B:FB:DA:FC:A2:56:85 Certificate issuer: /CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Certificate serial: 7C406486DCAACA370A07FFF6F1DD43670E015450 Authority key identifier: CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa Signing time: Sun 03 May 2026 03:12:24 +0000 ROA not before: Sun 03 May 2026 03:07:24 +0000 ROA not after: Sun 02 May 2027 03:12:24 +0000 asID: 17769 IP address blocks: 103.147.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:40:64:86:dc:aa:ca:37:0a:07:ff:f6:f1:dd:43:67:0e:01:54:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Validity Not Before: May 3 03:07:24 2026 GMT Not After : May 2 03:12:24 2027 GMT Subject: CN=E63F1CD3AA7B55FE64E5B11EA52BFBDAFCA25685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:01:13:4b:3e:a8:5b:4d:59:6e:30:9e:f3: 2c:01:38:32:1f:18:15:11:5d:c2:cf:e4:fc:4e:7b: 8f:1b:fe:26:62:d6:5f:88:13:cc:8c:d4:f6:a0:0b: 98:94:0a:15:42:d3:73:3d:ab:1d:07:ca:f6:2e:1d: 50:82:f2:d0:d7:bb:36:59:32:8e:26:ab:4c:02:71: 3e:c3:5c:e0:29:14:40:f3:be:77:d0:40:d3:18:6f: 91:e9:b4:fe:e8:5a:8c:3a:22:79:5e:ca:59:11:6f: cb:63:06:1f:5d:59:44:86:6e:08:af:fd:59:c2:8a: e3:d3:41:18:36:7f:ab:24:02:e3:3b:99:db:33:ff: 0e:4c:5e:df:41:32:61:cb:38:cf:78:11:d0:f9:14: 2f:f9:ba:e6:90:d7:4b:1d:55:b5:b3:9f:ec:40:82: 09:0e:69:aa:d7:06:79:6a:22:8a:01:47:0c:5a:c6: 0e:91:6b:1a:fa:a2:57:7d:e7:57:32:04:1f:d4:95: 94:4e:b4:e5:b0:24:39:d3:5d:7f:5c:e9:db:1b:c2: 54:23:c3:4e:2e:42:8d:e3:30:d7:2b:a8:9f:6f:46: a4:53:02:57:38:ed:36:1d:ae:ef:92:52:76:a0:a4: 2a:c2:49:72:83:10:7e:c8:80:b1:1f:33:1b:12:7d: 46:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:1C:D3:AA:7B:55:FE:64:E5:B1:1E:A5:2B:FB:DA:FC:A2:56:85 X509v3 Authority Key Identifier: keyid:CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.142.0/23 Signature Algorithm: sha256WithRSAEncryption 60:ea:7a:b8:33:f3:ae:6a:38:7c:bd:6a:9f:b4:fb:50:e8:39: cf:19:60:f7:a1:1c:38:19:8f:e3:8f:26:08:ee:64:f9:f8:8e: 92:fd:f1:7a:9b:6f:55:64:31:db:6a:8d:ea:b4:73:dc:80:be: ce:13:9e:3d:68:d2:28:1a:ef:62:52:56:52:88:28:0b:cb:1f: 9b:6d:8b:06:31:ed:63:58:97:65:b1:b3:21:34:5c:27:90:7d: 98:f6:88:8a:83:67:c0:ac:4a:75:03:5e:f2:a5:5f:77:14:ff: 38:e0:12:b0:ef:50:fe:0f:b8:b4:ee:80:bf:d2:04:6d:b6:ef: ec:83:39:25:21:ce:ee:fd:d7:06:90:ff:f3:86:36:b9:32:c5: 10:d1:2f:32:d6:8b:5a:86:d6:12:d3:43:cb:70:04:5f:95:1a: 4c:ef:7d:32:3b:53:ba:e3:9a:40:68:43:b7:7b:40:b8:5e:4f: ce:6a:c0:6b:7d:f5:81:ba:02:70:98:90:b0:a2:ff:ad:0a:5d: 1b:3f:54:9f:59:c6:67:45:0a:22:f7:12:26:d9:bd:b8:11:7a: 2b:10:f4:61:28:09:ae:cd:97:23:31:1c:15:29:9b:40:a9:bc: 86:e2:28:35:30:83:6b:5f:8f:10:2a:f7:c3:d5:af:d3:0a:39: 0e:74:4d:67 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfEBkhtyqyjcKB//28d1DZw4BVFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNE OEEyNUJGQjAeFw0yNjA1MDMwMzA3MjRaFw0yNzA1MDIwMzEyMjRaMDMxMTAvBgNV BAMTKEU2M0YxQ0QzQUE3QjU1RkU2NEU1QjExRUE1MkJGQkRBRkNBMjU2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwgETSz6oW01ZbjCe8ywBODIf GBURXcLP5PxOe48b/iZi1l+IE8yM1PagC5iUChVC03M9qx0HyvYuHVCC8tDXuzZZ Mo4mq0wCcT7DXOApFEDzvnfQQNMYb5HptP7oWow6InleylkRb8tjBh9dWUSGbgiv /VnCiuPTQRg2f6skAuM7mdsz/w5MXt9BMmHLOM94EdD5FC/5uuaQ10sdVbWzn+xA ggkOaarXBnlqIooBRwxaxg6Raxr6old951cyBB/UlZROtOWwJDnTXX9c6dsbwlQj w04uQo3jMNcrqJ9vRqRTAlc47TYdru+SUnagpCrCSXKDEH7IgLEfMxsSfUZxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU5j8c06p7Vf5k5bEepSv72vyiVoUwHwYDVR0j BBgwFoAUy/2x8YukNBPOvFuTeMo/o9iiW/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZmMGFmNmEtYzY4MC00NzMxLTliOTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4 QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNEOEEyNUJGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkZEQjFGMThCQTQzNDEzQ0VCQzVCOTM3OENBM0ZBM0Q4QTI1 QkZCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmZjBhZjZhLWM2ODAtNDczMS05 YjkyLTlhYTkzZDljMDE2Yy8wLzMxMzAzMzJlMzEzNDM3MmUzMTM0MzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzczNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5OOMA0GCSqG SIb3DQEBCwUAA4IBAQBg6nq4M/Ouajh8vWqftPtQ6DnPGWD3oRw4GY/jjyYI7mT5 +I6S/fF6m29VZDHbao3qtHPcgL7OE549aNIoGu9iUlZSiCgLyx+bbYsGMe1jWJdl sbMhNFwnkH2Y9oiKg2fArEp1A17ypV93FP844BKw71D+D7i07oC/0gRttu/sgzkl Ic7u/dcGkP/zhja5MsUQ0S8y1otahtYS00PLcARflRpM730yO1O645pAaEO3e0C4 Xk/OasBrffWBugJwmJCwov+tCl0bP1SfWcZnRQoi9xIm2b24EXorEPRhKAmuzZcj MRwVKZtAqbyG4ig1MINrX48QKvfD1a/TCjkOdE1n -----END CERTIFICATE-----Generated at Wed May 13 05:51:05 2026 by rpki-client