$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa File: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (raw, json) Hash identifier: PAkY9cD4hOLFVdGNgMNY2HQi6aJ2ztIpajYc1pjG9X8= Subject key identifier: 61:F4:F2:76:A1:94:AE:06:31:35:2D:62:AD:81:45:CD:90:EF:1F:5C Certificate issuer: /CN=1AD9403233542883A89282A52F92A9AC66CB9D45 Certificate serial: 16D249D8F32E6C5FE5DF68AE2E92978C140C1F88 Authority key identifier: 1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa Signing time: Sun 03 May 2026 03:15:16 +0000 ROA not before: Sun 03 May 2026 03:10:16 +0000 ROA not after: Sun 02 May 2027 03:15:16 +0000 asID: 136835 IP address blocks: 103.141.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d2:49:d8:f3:2e:6c:5f:e5:df:68:ae:2e:92:97:8c:14:0c:1f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD9403233542883A89282A52F92A9AC66CB9D45 Validity Not Before: May 3 03:10:16 2026 GMT Not After : May 2 03:15:16 2027 GMT Subject: CN=61F4F276A194AE0631352D62AD8145CD90EF1F5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e2:b1:f6:bf:eb:5d:fb:21:58:7a:8e:a4:48: ae:14:b2:fb:84:bc:ea:de:0b:90:5f:fc:4d:47:69: fd:31:be:59:ae:77:4b:ac:6e:c0:bd:c7:9f:ee:b8: fd:b1:16:7e:45:f9:6c:bb:11:d5:bd:0e:09:ad:bd: c0:70:e5:62:eb:88:3e:f8:97:e9:95:d2:52:29:e8: 0d:75:5d:32:a5:fb:5f:a4:65:80:f9:5b:83:a7:b4: ab:c4:b3:84:79:97:f5:87:bd:05:71:de:f8:97:40: fa:89:92:96:78:a0:38:c2:95:35:c0:f0:45:12:a3: c1:eb:c5:9f:35:74:ac:3e:83:6d:f8:5c:cf:58:17: b0:49:e3:23:1c:85:41:98:28:ca:9a:b1:e6:29:1a: f1:3a:af:ef:ce:55:aa:7b:fe:39:55:b7:74:79:b8: 9e:32:35:95:70:21:4a:7e:2f:2c:5e:80:46:03:05: 2e:4d:c3:dd:bc:93:47:9d:63:2d:91:3e:db:37:28: f0:1e:7d:61:c7:a4:f1:67:09:30:2e:cb:b6:ca:2e: b4:c6:6c:b4:b0:04:8c:99:34:27:02:aa:32:30:3e: 6c:03:0c:4a:d5:e9:bd:83:bc:09:24:67:0a:2b:23: 77:20:93:db:21:2e:53:66:bf:e7:ca:94:12:04:45: b1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F4:F2:76:A1:94:AE:06:31:35:2D:62:AD:81:45:CD:90:EF:1F:5C X509v3 Authority Key Identifier: keyid:1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.154.0/24 Signature Algorithm: sha256WithRSAEncryption bb:c9:25:74:ad:20:72:d5:9b:c0:60:84:ac:4f:ed:59:0b:8b: 88:e2:72:83:9c:9a:98:b3:92:89:c4:9e:fa:c5:40:69:0b:68: 36:47:1a:ba:bb:ad:0a:0f:6f:11:3e:20:bf:db:33:88:48:d3: fb:d7:f1:17:75:56:15:f9:7f:99:27:fd:fd:ff:61:94:d5:ed: dc:52:49:af:44:0c:af:7a:c2:4d:d3:6f:bf:e5:75:9c:9b:aa: ca:72:c5:d0:24:43:98:07:8e:8b:b1:57:97:a6:aa:d6:0b:88: 91:3a:5c:2d:7e:ef:37:80:9e:3d:c7:c2:5b:27:06:80:f7:cb: 44:a6:7f:2d:35:8e:93:e5:c3:9b:95:8a:8d:6e:ed:7f:5a:e3: 37:01:be:bd:d8:0a:97:e9:90:a6:5c:20:aa:df:21:79:9d:01: eb:13:f6:8c:45:2e:ba:57:45:42:8c:6a:de:18:6f:f7:dd:0a: eb:12:2f:48:30:65:c6:68:56:85:70:e1:81:ce:a1:52:d5:43: 47:2a:88:d2:87:82:95:1a:ee:88:b6:23:a4:83:ee:26:df:76: 27:d8:59:c9:39:b3:65:42:eb:e3:74:9b:f7:cf:1c:f1:e5:4e: cb:ec:2e:bd:43:66:b0:80:b3:20:4d:3f:2a:f4:b2:cc:37:f9: a8:92:8e:18 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUFtJJ2PMubF/l32iuLpKXjBQMH4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFEOTQwMzIzMzU0Mjg4M0E4OTI4MkE1MkY5MkE5QUM2 NkNCOUQ0NTAeFw0yNjA1MDMwMzEwMTZaFw0yNzA1MDIwMzE1MTZaMDMxMTAvBgNV BAMTKDYxRjRGMjc2QTE5NEFFMDYzMTM1MkQ2MkFEODE0NUNEOTBFRjFGNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX4rH2v+td+yFYeo6kSK4UsvuE vOreC5Bf/E1Haf0xvlmud0usbsC9x5/uuP2xFn5F+Wy7EdW9DgmtvcBw5WLriD74 l+mV0lIp6A11XTKl+1+kZYD5W4OntKvEs4R5l/WHvQVx3viXQPqJkpZ4oDjClTXA 8EUSo8HrxZ81dKw+g234XM9YF7BJ4yMchUGYKMqaseYpGvE6r+/OVap7/jlVt3R5 uJ4yNZVwIUp+LyxegEYDBS5Nw928k0edYy2RPts3KPAefWHHpPFnCTAuy7bKLrTG bLSwBIyZNCcCqjIwPmwDDErV6b2DvAkkZworI3cgk9shLlNmv+fKlBIERbEvAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUYfTydqGUrgYxNS1irYFFzZDvH1wwHwYDVR0j BBgwFoAUGtlAMjNUKIOokoKlL5KprGbLnUUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE4MTQ1MDctNzE3NC00ZjFlLTg1NjMtZWY1MDM3MDkxM2M5LzAvMUFEOTQwMzIz MzU0Mjg4M0E4OTI4MkE1MkY5MkE5QUM2NkNCOUQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUQ5NDAzMjMzNTQyODgzQTg5MjgyQTUyRjkyQTlBQzY2Q0I5 RDQ1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhODE0NTA3LTcxNzQtNGYxZS04 NTYzLWVmNTAzNzA5MTNjOS8wLzMxMzAzMzJlMzEzNDMxMmUzMTM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODMzMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjZowDQYJ KoZIhvcNAQELBQADggEBALvJJXStIHLVm8BghKxP7VkLi4jicoOcmpizkonEnvrF QGkLaDZHGrq7rQoPbxE+IL/bM4hI0/vX8Rd1VhX5f5kn/f3/YZTV7dxSSa9EDK96 wk3Tb7/ldZybqspyxdAkQ5gHjouxV5emqtYLiJE6XC1+7zeAnj3HwlsnBoD3y0Sm fy01jpPlw5uVio1u7X9a4zcBvr3YCpfpkKZcIKrfIXmdAesT9oxFLrpXRUKMat4Y b/fdCusSL0gwZcZoVoVw4YHOoVLVQ0cqiNKHgpUa7oi2I6SD7ibfdifYWck5s2VC 6+N0m/fPHPHlTsvsLr1DZrCAsyBNPyr0ssw3+aiSjhg= -----END CERTIFICATE-----Generated at Wed May 13 10:36:16 2026 by rpki-client