$ rpki-client -vvf rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa File: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (raw, json) Hash identifier: BrjeraCPyUffk29JD70GjyNah0k3nj4heiQybdMxnEQ= Subject key identifier: B1:E7:3B:34:E7:A4:FF:AD:54:FB:27:83:98:91:95:9C:9D:17:EE:10 Certificate issuer: /CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Certificate serial: 2B657E81C7F7E75251C62960AD3D6DD37131ED6C Authority key identifier: 04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa Signing time: Sun 03 May 2026 03:13:16 +0000 ROA not before: Sun 03 May 2026 03:08:16 +0000 ROA not after: Sun 02 May 2027 03:13:16 +0000 asID: 64300 IP address blocks: 103.153.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:65:7e:81:c7:f7:e7:52:51:c6:29:60:ad:3d:6d:d3:71:31:ed:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Validity Not Before: May 3 03:08:16 2026 GMT Not After : May 2 03:13:16 2027 GMT Subject: CN=B1E73B34E7A4FFAD54FB27839891959C9D17EE10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:94:30:f6:13:01:04:b0:01:2d:de:bc:dc: 83:66:27:34:88:47:06:ec:1d:30:07:1e:5a:b2:c5: f2:6d:1d:1a:8a:58:2a:3f:ce:c2:dc:b3:96:dd:40: be:98:09:96:9a:99:d2:7a:8f:e0:e8:77:1c:e9:4b: 25:40:56:50:19:e9:de:0d:3b:46:fd:36:73:59:04: e4:06:85:b1:a5:30:c6:1b:4b:c7:db:6e:50:d4:72: b3:77:f1:37:1d:d8:f8:e5:7b:a6:a9:a2:30:6f:80: 40:02:2b:7b:bd:bf:bf:91:89:10:dc:34:42:b2:12: 26:ee:ef:30:90:ba:ca:e3:54:28:f9:8a:43:55:4f: a0:ac:98:e7:6b:a4:d2:61:7b:74:b9:3c:ff:2c:e3: ad:ab:7d:9f:1d:74:ad:8c:26:b7:1b:19:d4:a4:7e: 3d:c9:7a:b4:e1:58:02:40:d7:c6:56:d3:17:7d:3a: 82:b6:8c:d9:2d:3a:c4:66:82:10:40:a6:f0:f6:47: ad:1d:62:1f:52:36:d2:a1:6d:b5:57:45:b4:d7:d4: cd:09:c5:1d:c3:93:79:9b:56:cf:93:29:09:d0:64: ec:6b:21:cc:e9:54:e4:3a:20:93:c5:75:cc:33:40: 82:3b:37:13:07:80:ec:ac:2b:3e:e5:a2:d4:4c:40: f8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E7:3B:34:E7:A4:FF:AD:54:FB:27:83:98:91:95:9C:9D:17:EE:10 X509v3 Authority Key Identifier: keyid:04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.148.0/23 Signature Algorithm: sha256WithRSAEncryption a5:65:ed:17:39:1f:13:9c:73:bb:37:42:f5:30:60:e0:7d:29: 47:30:6d:67:10:ec:ef:9d:a9:a7:fb:0c:5a:23:07:90:ab:3e: d1:bd:c9:a8:0f:1e:0d:fc:2c:14:07:de:95:9e:89:b2:a4:9c: 4b:ee:04:6b:e2:cd:29:06:cf:32:f4:43:69:9e:6b:c8:15:ce: 11:d8:0d:d2:2f:bd:e0:41:65:9c:9f:da:ef:f3:2a:dd:8e:cf: fa:38:17:78:6c:70:51:1c:85:65:71:0c:9d:f2:94:9a:08:f0: eb:9a:69:90:85:b9:3b:27:65:8f:a2:86:e5:4c:d9:9a:b2:b1: b3:b3:e4:86:23:e0:e1:12:e0:40:05:5d:33:5a:ad:9e:24:a3: 91:62:ad:ca:46:0e:ad:ac:19:91:19:b2:96:74:e0:7c:2d:01: c2:c5:e4:f5:ba:69:37:ed:05:86:9e:6a:13:25:80:44:34:84: a1:69:eb:a1:07:6e:8d:94:d6:d4:f7:e2:5a:3c:60:fd:ae:61: 3b:67:3d:b6:d6:6c:9b:d1:64:98:de:7f:5d:be:ce:28:11:51: c6:e3:73:8a:e7:46:0a:aa:80:80:ea:b4:4e:d8:e8:c4:60:9f: 7c:4e:24:57:05:81:6e:de:d9:58:00:5c:1a:e3:db:30:50:7e: 2a:c0:e2:07 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUK2V+gcf351JRxilgrT1t03Ex7WwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFF RDJERjJENDAeFw0yNjA1MDMwMzA4MTZaFw0yNzA1MDIwMzEzMTZaMDMxMTAvBgNV BAMTKEIxRTczQjM0RTdBNEZGQUQ1NEZCMjc4Mzk4OTE5NTlDOUQxN0VFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxJQw9hMBBLABLd683INmJzSI RwbsHTAHHlqyxfJtHRqKWCo/zsLcs5bdQL6YCZaamdJ6j+DodxzpSyVAVlAZ6d4N O0b9NnNZBOQGhbGlMMYbS8fbblDUcrN38Tcd2Pjle6apojBvgEACK3u9v7+RiRDc NEKyEibu7zCQusrjVCj5ikNVT6CsmOdrpNJhe3S5PP8s462rfZ8ddK2MJrcbGdSk fj3JerThWAJA18ZW0xd9OoK2jNktOsRmghBApvD2R60dYh9SNtKhbbVXRbTX1M0J xR3Dk3mbVs+TKQnQZOxrIczpVOQ6IJPFdcwzQII7NxMHgOysKz7lotRMQPivAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUsec7NOek/61U+yeDmJGVnJ0X7hAwHwYDVR0j BBgwFoAUBNtHVcdagxzZGBfmqbfk4e0t8tQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQzMDRiNjQtMjg5OS00ODMwLTljM2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVD NzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFFRDJERjJENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNERCNDc1NUM3NUE4MzFDRDkxODE3RTZBOUI3RTRFMUVEMkRG MkQ0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U0MzA0YjY0LTI4OTktNDgzMC05 YzNjLTM3NTg0YTMyN2UxZS8wLzMxMzAzMzJlMzEzNTMzMmUzMTM0MzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNjM0MzMzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5mUMA0GCSqG SIb3DQEBCwUAA4IBAQClZe0XOR8TnHO7N0L1MGDgfSlHMG1nEOzvnamn+wxaIweQ qz7RvcmoDx4N/CwUB96VnomypJxL7gRr4s0pBs8y9ENpnmvIFc4R2A3SL73gQWWc n9rv8yrdjs/6OBd4bHBRHIVlcQyd8pSaCPDrmmmQhbk7J2WPooblTNmasrGzs+SG I+DhEuBABV0zWq2eJKORYq3KRg6trBmRGbKWdOB8LQHCxeT1umk37QWGnmoTJYBE NIShaeuhB26NlNbU9+JaPGD9rmE7Zz221myb0WSY3n9dvs4oEVHG43OK50YKqoCA 6rRO2OjEYJ98TiRXBYFu3tlYAFwa49swUH4qwOIH -----END CERTIFICATE-----Generated at Wed May 13 07:56:56 2026 by rpki-client