$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa File: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (raw, json) Hash identifier: OLWauFfmrw2a6NVsZr060P9JMbawsYC5rFsVrmOkFCE= Subject key identifier: DB:BE:29:D5:3D:9E:C1:64:9C:CE:7C:FF:9C:10:51:25:FE:61:82:9B Certificate issuer: /CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Certificate serial: 1BDCA49D84BDC4849B66C91BCDDE21286A504060 Authority key identifier: AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa Signing time: Sun 03 May 2026 03:08:33 +0000 ROA not before: Sun 03 May 2026 03:03:33 +0000 ROA not after: Sun 02 May 2027 03:08:33 +0000 asID: 17995 IP address blocks: 103.162.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 13:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:dc:a4:9d:84:bd:c4:84:9b:66:c9:1b:cd:de:21:28:6a:50:40:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Validity Not Before: May 3 03:03:33 2026 GMT Not After : May 2 03:08:33 2027 GMT Subject: CN=DBBE29D53D9EC1649CCE7CFF9C105125FE61829B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1b:35:a1:e0:c2:d3:2a:f1:4e:c1:37:da:c5: ec:fe:a5:9e:13:6e:09:2f:85:e4:33:91:46:95:26: c4:27:57:5c:39:65:29:91:78:c0:03:02:ad:bd:b5: 24:5e:33:f3:2b:e6:be:20:e2:ce:df:13:90:89:7e: d6:e5:b4:c1:a3:c7:cc:2e:00:cc:82:53:d1:67:ed: ea:cc:9d:26:1b:ff:18:bb:8e:4f:d2:8b:ed:0d:9b: 79:8a:5f:20:71:29:73:00:a4:23:47:0f:ea:3c:44: 8b:ba:84:92:8d:3a:eb:1d:fc:e9:72:66:4c:a2:8f: 9e:f1:76:b4:d5:c5:99:11:67:24:3d:1e:00:6c:cb: 23:03:a2:98:55:62:64:c6:3f:61:d5:d7:90:69:5f: 25:0f:cf:f0:c9:d9:3b:fd:13:8b:74:bf:e6:9a:87: a0:91:b3:c4:95:e3:5f:e0:0f:88:cd:26:e2:45:9d: 97:95:38:2d:36:7b:75:04:dd:e6:6a:d8:53:72:fc: f9:a8:b6:b6:38:c8:fb:9d:02:07:24:34:43:36:c6: 37:bf:4c:bc:11:2f:e8:65:a6:43:52:d3:af:4c:7b: a3:86:ac:65:88:21:f0:32:6f:34:e5:22:56:73:25: 7f:a9:b6:76:30:bd:47:2e:22:c6:76:db:6f:5b:45: 28:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BE:29:D5:3D:9E:C1:64:9C:CE:7C:FF:9C:10:51:25:FE:61:82:9B X509v3 Authority Key Identifier: keyid:AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.122.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:e9:54:64:f8:a5:78:c1:f3:39:dc:73:a2:b7:12:af:91:86: e1:a8:da:96:8d:62:a6:d1:e3:42:0c:c4:82:d8:b3:e9:17:a1: 5a:5e:8f:c5:0b:87:d7:0d:1f:25:a4:6f:49:d5:2b:15:51:d2: ad:02:b5:39:88:23:67:92:2f:2a:7a:dd:03:d8:f7:64:04:99: 2e:49:80:c0:7f:bf:4e:8f:37:e3:75:cc:0e:56:21:e9:a9:1a: dd:ae:6e:c6:ec:63:60:e4:ba:ae:14:41:e4:61:8e:41:c6:72: a1:ac:64:b7:7f:e4:68:f1:89:81:de:67:66:b7:59:15:4d:2c: fa:f7:2f:6c:e7:1a:1c:6b:20:28:e5:45:24:16:e4:9c:37:9d: 29:e6:f2:53:65:0e:e8:8c:00:b0:31:0d:cd:78:23:2b:29:e0: 97:21:0c:66:01:ba:2c:92:ef:ed:4d:db:7d:92:f4:d0:93:b8: d4:a8:6c:c1:f9:59:07:b6:94:14:d0:6e:60:3e:01:dc:76:97: 1d:a3:9c:3e:b1:bb:14:e5:e8:f5:69:b1:c0:f2:29:c9:c1:e5: 7f:4c:4f:ec:da:e8:f4:f0:ff:3d:2a:50:06:67:75:36:1f:d1: 37:07:0a:c4:eb:59:34:cf:e1:1a:1f:fa:65:ca:b2:41:95:20: 3f:33:68:50 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUG9yknYS9xISbZskbzd4hKGpQQGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3MURG NjE5NUVCMDAeFw0yNjA1MDMwMzAzMzNaFw0yNzA1MDIwMzA4MzNaMDMxMTAvBgNV BAMTKERCQkUyOUQ1M0Q5RUMxNjQ5Q0NFN0NGRjlDMTA1MTI1RkU2MTgyOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuGzWh4MLTKvFOwTfaxez+pZ4T bgkvheQzkUaVJsQnV1w5ZSmReMADAq29tSReM/Mr5r4g4s7fE5CJftbltMGjx8wu AMyCU9Fn7erMnSYb/xi7jk/Si+0Nm3mKXyBxKXMApCNHD+o8RIu6hJKNOusd/Oly Zkyij57xdrTVxZkRZyQ9HgBsyyMDophVYmTGP2HV15BpXyUPz/DJ2Tv9E4t0v+aa h6CRs8SV41/gD4jNJuJFnZeVOC02e3UE3eZq2FNy/PmotrY4yPudAgckNEM2xje/ TLwRL+hlpkNS069Me6OGrGWIIfAybzTlIlZzJX+ptnYwvUcuIsZ2229bRSgtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU274p1T2ewWScznz/nBBRJf5hgpswHwYDVR0j BBgwFoAUrJ7l1Kz3/Q39Zs3+0SAXHfYZXrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDFiM2ZlNDUtYjU4OC00YmI3LWFlOTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRB Q0Y3RkQwREZENjZDREZFRDEyMDE3MURGNjE5NUVCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzlFRTVENEFDRjdGRDBERkQ2NkNERkVEMTIwMTcxREY2MTk1 RUIwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxYjNmZTQ1LWI1ODgtNGJiNy1h ZTkwLTkxZjU3ZjU5M2NiNS8wLzMxMzAzMzJlMzEzNjMyMmUzMTMyMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6J6MA0GCSqG SIb3DQEBCwUAA4IBAQBd6VRk+KV4wfM53HOitxKvkYbhqNqWjWKm0eNCDMSC2LPp F6FaXo/FC4fXDR8lpG9J1SsVUdKtArU5iCNnki8qet0D2PdkBJkuSYDAf79Ojzfj dcwOViHpqRrdrm7G7GNg5LquFEHkYY5BxnKhrGS3f+Ro8YmB3mdmt1kVTSz69y9s 5xocayAo5UUkFuScN50p5vJTZQ7ojACwMQ3NeCMrKeCXIQxmAbosku/tTdt9kvTQ k7jUqGzB+VkHtpQU0G5gPgHcdpcdo5w+sbsU5ej1abHA8inJweV/TE/s2uj08P89 KlAGZ3U2H9E3BwrE61k0z+EaH/plyrJBlSA/M2hQ -----END CERTIFICATE-----Generated at Fri May 8 06:35:02 2026 by rpki-client