$ rpki-client -vvf rpki-rsync.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa File: 3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa (raw, json) Hash identifier: paNa4LK278PO0yF2Mmlfe2VZ4CE0og2IDovU3tlszFA= Subject key identifier: 10:D1:5C:34:59:74:38:1E:42:8F:98:1E:D7:C0:DA:B8:F9:18:F1:4B Certificate issuer: /CN=1F0051B886C24E93822687732688E26A670CE6EF Certificate serial: 491A23671D66D49ACF9B907271E5B49A71C03CE7 Authority key identifier: 1F:00:51:B8:86:C2:4E:93:82:26:87:73:26:88:E2:6A:67:0C:E6:EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F0051B886C24E93822687732688E26A670CE6EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa Signing time: Sun 03 May 2026 03:14:48 +0000 ROA not before: Sun 03 May 2026 03:09:48 +0000 ROA not after: Sun 02 May 2027 03:14:48 +0000 asID: 131111 IP address blocks: 103.159.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/1F0051B886C24E93822687732688E26A670CE6EF.crl rsync://rpki-rsync.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/1F0051B886C24E93822687732688E26A670CE6EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F0051B886C24E93822687732688E26A670CE6EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1a:23:67:1d:66:d4:9a:cf:9b:90:72:71:e5:b4:9a:71:c0:3c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F0051B886C24E93822687732688E26A670CE6EF Validity Not Before: May 3 03:09:48 2026 GMT Not After : May 2 03:14:48 2027 GMT Subject: CN=10D15C345974381E428F981ED7C0DAB8F918F14B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:64:54:0e:f9:46:74:73:56:0c:0f:89:57:54: 72:80:cb:d8:de:a8:84:50:b0:55:00:94:8f:f2:f4: 43:32:50:fc:32:04:b7:15:86:e0:9e:8b:7a:3d:33: 64:6d:e8:05:7f:3c:d0:06:ab:45:88:6a:13:06:e0: ed:25:e2:dd:d4:f2:f3:67:ec:7d:ea:f0:cd:3d:25: 5e:27:52:df:d0:92:cd:b3:7f:65:68:17:eb:47:af: a9:02:44:0e:d2:da:8e:52:ac:0d:e0:e9:c4:03:02: 61:b2:a9:38:0d:b4:e5:e8:ad:1b:e3:16:0d:34:d0: d2:18:6c:12:4b:ce:ea:15:47:36:0d:84:45:46:f6: be:94:ed:d0:bc:a1:21:eb:c7:6a:37:22:fa:38:fa: 00:c7:7b:bb:73:64:3d:0e:c9:ed:50:e2:e7:42:2c: 19:4a:ed:d4:54:62:5b:e2:4a:82:69:bb:8f:ef:60: 30:24:c4:fd:64:e9:65:bc:cc:83:dc:4d:36:09:bb: 52:dc:ef:1a:0d:74:f6:a1:9c:7c:ec:68:3d:9d:e8: a7:bc:2d:22:64:18:a5:21:d5:97:71:2e:51:fe:83: d5:c2:9b:0f:65:d8:65:3a:a3:33:3e:e3:15:43:65: dc:b8:d3:73:c5:7f:45:d0:27:ee:42:75:28:c7:9c: 9c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D1:5C:34:59:74:38:1E:42:8F:98:1E:D7:C0:DA:B8:F9:18:F1:4B X509v3 Authority Key Identifier: keyid:1F:00:51:B8:86:C2:4E:93:82:26:87:73:26:88:E2:6A:67:0C:E6:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/1F0051B886C24E93822687732688E26A670CE6EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F0051B886C24E93822687732688E26A670CE6EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.198.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:37:bf:18:5d:9f:5b:7e:75:5c:ef:56:e7:06:bf:8a:3f:50: d1:f4:f5:30:a9:70:36:57:d9:cd:a4:90:1c:16:83:bd:ad:7c: f7:7d:9e:1e:26:dc:fe:a8:36:95:80:60:b9:e7:06:33:fe:89: 64:ab:36:92:27:35:3b:95:85:74:28:82:05:9e:36:b6:2a:d3: 78:de:6f:fb:58:01:3d:cd:59:39:0e:19:67:aa:d5:c4:9c:32: 79:3b:93:70:81:97:92:d3:5e:54:82:f2:5f:cf:19:7c:80:f6: bc:bd:8d:84:59:14:74:4a:8a:eb:8f:3d:43:44:29:e3:ec:3b: bc:b0:1f:fa:37:b4:07:6d:6b:9d:34:3f:a9:02:22:61:d9:7c: 21:6f:40:8a:b3:8f:82:4b:97:f1:d0:ff:af:8e:55:76:3e:7a: 5b:04:a6:41:1a:91:71:cd:e8:0d:05:e4:b4:32:9c:09:7d:72: 59:b6:36:ba:ad:cf:17:a5:f1:00:ab:be:33:31:c5:4b:56:b8: 81:77:14:05:e7:37:6f:2b:40:45:f1:d7:cd:0a:7e:c1:eb:ea: 08:1b:1b:71:32:3e:f0:aa:b4:b4:c2:89:6b:2a:12:35:20:e8: bb:be:b6:0d:d8:e5:e4:65:69:07:7b:6b:75:6c:ee:2b:25:c2: 8f:f6:ad:71 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSRojZx1m1JrPm5ByceW0mnHAPOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYwMDUxQjg4NkMyNEU5MzgyMjY4NzczMjY4OEUyNkE2 NzBDRTZFRjAeFw0yNjA1MDMwMzA5NDhaFw0yNzA1MDIwMzE0NDhaMDMxMTAvBgNV BAMTKDEwRDE1QzM0NTk3NDM4MUU0MjhGOTgxRUQ3QzBEQUI4RjkxOEYxNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfZFQO+UZ0c1YMD4lXVHKAy9je qIRQsFUAlI/y9EMyUPwyBLcVhuCei3o9M2Rt6AV/PNAGq0WIahMG4O0l4t3U8vNn 7H3q8M09JV4nUt/Qks2zf2VoF+tHr6kCRA7S2o5SrA3g6cQDAmGyqTgNtOXorRvj Fg000NIYbBJLzuoVRzYNhEVG9r6U7dC8oSHrx2o3Ivo4+gDHe7tzZD0Oye1Q4udC LBlK7dRUYlviSoJpu4/vYDAkxP1k6WW8zIPcTTYJu1Lc7xoNdPahnHzsaD2d6Ke8 LSJkGKUh1ZdxLlH+g9XCmw9l2GU6ozM+4xVDZdy403PFf0XQJ+5CdSjHnJx/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUENFcNFl0OB5Cj5ge18DauPkY8UswHwYDVR0j BBgwFoAUHwBRuIbCTpOCJodzJojiamcM5u8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTkzMWNiMDctMWI1Mi00Y2FlLTllOGUtNDY4OTkxZWNjNzMxLzAvMUYwMDUxQjg4 NkMyNEU5MzgyMjY4NzczMjY4OEUyNkE2NzBDRTZFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRjAwNTFCODg2QzI0RTkzODIyNjg3NzMyNjg4RTI2QTY3MENF NkVGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U5MzFjYjA3LTFiNTItNGNhZS05 ZThlLTQ2ODk5MWVjYzczMS8wLzMxMzAzMzJlMzEzNTM5MmUzMTM5MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnn8YwDQYJ KoZIhvcNAQELBQADggEBAJ03vxhdn1t+dVzvVucGv4o/UNH09TCpcDZX2c2kkBwW g72tfPd9nh4m3P6oNpWAYLnnBjP+iWSrNpInNTuVhXQoggWeNrYq03jeb/tYAT3N WTkOGWeq1cScMnk7k3CBl5LTXlSC8l/PGXyA9ry9jYRZFHRKiuuPPUNEKePsO7yw H/o3tAdta500P6kCImHZfCFvQIqzj4JLl/HQ/6+OVXY+elsEpkEakXHN6A0F5LQy nAl9clm2Nrqtzxel8QCrvjMxxUtWuIF3FAXnN28rQEXx180KfsHr6ggbG3EyPvCq tLTCiWsqEjUg6Lu+tg3Y5eRlaQd7a3Vs7islwo/2rXE= -----END CERTIFICATE-----Generated at Wed May 13 07:56:17 2026 by rpki-client