$ rpki-client -vvf rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa File: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (raw, json) Hash identifier: OQo3zpkJfNFwloJE5sK8Hg/XYpqL1j4buZq64xsDXvM= Subject key identifier: 7D:00:BE:37:9B:C1:B7:62:04:75:DE:04:D6:37:33:43:0E:FB:B2:19 Certificate issuer: /CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Certificate serial: 24AF5FE083F7DDD15ADA9525D209590B0C3039D6 Authority key identifier: CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa Signing time: Sun 03 May 2026 02:56:51 +0000 ROA not before: Sun 03 May 2026 02:51:51 +0000 ROA not after: Sun 02 May 2027 02:56:51 +0000 asID: 17995 IP address blocks: 103.166.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 22:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:af:5f:e0:83:f7:dd:d1:5a:da:95:25:d2:09:59:0b:0c:30:39:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Validity Not Before: May 3 02:51:51 2026 GMT Not After : May 2 02:56:51 2027 GMT Subject: CN=7D00BE379BC1B7620475DE04D63733430EFBB219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:af:3f:a9:70:5e:d0:94:c3:d9:6a:cd:77: 52:a7:c8:50:52:5f:db:52:81:87:3a:96:41:2a:4f: d7:5a:1b:07:bc:8a:0e:0c:2e:e7:ab:af:3d:0e:d5: 29:01:d7:82:e0:52:1e:84:9a:59:09:aa:da:c2:6b: c8:1f:92:7f:60:06:1f:5d:63:24:5b:39:d7:89:47: 91:93:9c:58:6e:31:e9:0e:4f:98:ad:88:b6:70:e7: 6c:5b:9b:4b:e5:36:e0:86:59:0a:96:02:cc:8a:4e: 6a:4c:6b:40:ef:21:cb:bc:cb:a1:2c:f7:06:87:da: 3d:c0:e7:60:68:4e:88:78:a7:54:60:4f:aa:1b:39: 5a:9a:89:63:9e:7f:41:72:7e:be:1d:15:b8:82:04: fc:e5:c2:8c:09:16:9b:01:76:e9:c3:07:15:a1:ae: 07:35:06:cb:d5:3e:f2:4f:e3:6c:c2:ed:4f:35:c1: af:5d:31:c9:9d:d5:3b:75:52:1c:1e:77:91:43:4e: c6:a5:c0:a6:aa:57:f0:47:90:65:36:b8:1b:53:8a: dc:52:2d:de:63:10:61:b9:67:80:6e:28:6b:f7:5a: 2e:99:c1:1b:45:44:0c:7c:bc:0b:81:32:76:83:a0: 98:dd:14:32:d7:26:5e:dd:b5:b2:39:9e:42:39:e9: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:00:BE:37:9B:C1:B7:62:04:75:DE:04:D6:37:33:43:0E:FB:B2:19 X509v3 Authority Key Identifier: keyid:CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.136.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:01:81:5f:ac:aa:eb:91:e3:b8:27:8e:44:c6:f2:f1:e0:49: 93:a1:8b:e9:54:7d:ce:c0:78:8b:c2:83:e0:5d:a8:af:ec:78: 13:6e:51:1b:dd:37:a3:a7:b9:90:c4:fe:c1:55:db:f1:82:d5: 5f:6c:f7:b2:b7:d6:d6:8d:09:3d:e9:df:ba:a0:92:e5:d4:63: 32:2a:78:0c:b8:ad:6e:f5:29:91:44:da:3f:da:8f:7d:dc:58: b5:aa:68:d7:bd:af:64:c2:e5:90:5d:2e:66:b1:83:13:5d:b7: 43:e4:bf:0d:7b:ed:60:2c:ef:2a:ff:a9:0c:ee:18:02:30:7d: 1b:e1:2d:0d:b8:ed:f1:6f:8c:14:2a:c2:99:58:cb:d1:42:a5: a2:0a:3c:ba:53:43:bf:2e:4a:ba:72:43:cf:f6:a6:0c:17:f6: d7:32:96:6a:46:48:e2:50:4f:33:b2:8c:cc:07:66:9e:c2:51: 29:df:29:7d:09:b9:16:ff:65:d9:5a:d0:78:95:ee:99:f1:03: 71:59:e4:a0:2f:e0:34:86:71:a0:03:e6:b2:e0:f1:74:e2:26: a5:ee:a3:d8:ff:07:94:7e:6c:08:06:96:ee:12:67:18:5f:51: 62:07:ab:e8:23:48:35:09:20:89:00:ef:5d:50:6a:b7:c3:d5: 42:6b:b1:af -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJK9f4IP33dFa2pUl0glZCwwwOdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4 QTU5MUFEODAeFw0yNjA1MDMwMjUxNTFaFw0yNzA1MDIwMjU2NTFaMDMxMTAvBgNV BAMTKDdEMDBCRTM3OUJDMUI3NjIwNDc1REUwNEQ2MzczMzQzMEVGQkIyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPaK8/qXBe0JTD2WrNd1KnyFBS X9tSgYc6lkEqT9daGwe8ig4MLuerrz0O1SkB14LgUh6EmlkJqtrCa8gfkn9gBh9d YyRbOdeJR5GTnFhuMekOT5itiLZw52xbm0vlNuCGWQqWAsyKTmpMa0DvIcu8y6Es 9waH2j3A52BoToh4p1RgT6obOVqaiWOef0Fyfr4dFbiCBPzlwowJFpsBdunDBxWh rgc1BsvVPvJP42zC7U81wa9dMcmd1Tt1Uhwed5FDTsalwKaqV/BHkGU2uBtTitxS Ld5jEGG5Z4BuKGv3Wi6ZwRtFRAx8vAuBMnaDoJjdFDLXJl7dtbI5nkI56U1xAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUfQC+N5vBt2IEdd4E1jczQw77shkwHwYDVR0j BBgwFoAUy+uEllimuJg2ZrHqJRi1YIpZGtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNGM4ZGMtODg1My00ZjY1LTgyMDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1 OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4QTU5MUFEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkVCODQ5NjU4QTZCODk4MzY2NkIxRUEyNTE4QjU2MDhBNTkx QUQ4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2MzRjOGRjLTg4NTMtNGY2NS04 MjA5LTRmYmVlN2FiNDI1Mi8wLzMxMzAzMzJlMzEzNjM2MmUzMTMzMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6aIMA0GCSqG SIb3DQEBCwUAA4IBAQB9AYFfrKrrkeO4J45ExvLx4EmToYvpVH3OwHiLwoPgXaiv 7HgTblEb3Tejp7mQxP7BVdvxgtVfbPeyt9bWjQk96d+6oJLl1GMyKngMuK1u9SmR RNo/2o993Fi1qmjXva9kwuWQXS5msYMTXbdD5L8Ne+1gLO8q/6kM7hgCMH0b4S0N uO3xb4wUKsKZWMvRQqWiCjy6U0O/Lkq6ckPP9qYMF/bXMpZqRkjiUE8zsozMB2ae wlEp3yl9CbkW/2XZWtB4le6Z8QNxWeSgL+A0hnGgA+ay4PF04ial7qPY/weUfmwI BpbuEmcYX1FiB6voI0g1CSCJAO9dUGq3w9VCa7Gv -----END CERTIFICATE-----Generated at Fri May 8 06:35:43 2026 by rpki-client