$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa File: 3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa (raw, json) Hash identifier: hoSC+lbX0Tkwhiv+g3kpjeQWsaCSoiHXXaRz1lER43s= Subject key identifier: 9C:C3:0C:29:2D:91:3C:A8:82:AC:37:2F:2F:0A:63:AC:03:AD:B0:FC Certificate issuer: /CN=E34636B91D55DEC107F8443633FC4A24F1F386CD Certificate serial: 0CCE3F176038053C5C4D01EFA714C18467A37B0B Authority key identifier: E3:46:36:B9:1D:55:DE:C1:07:F8:44:36:33:FC:4A:24:F1:F3:86:CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34636B91D55DEC107F8443633FC4A24F1F386CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa Signing time: Sun 03 May 2026 02:17:14 +0000 ROA not before: Sun 03 May 2026 02:12:14 +0000 ROA not after: Sun 02 May 2027 02:17:14 +0000 asID: 138886 IP address blocks: 103.163.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/E34636B91D55DEC107F8443633FC4A24F1F386CD.crl rsync://rpki-rsync.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/E34636B91D55DEC107F8443633FC4A24F1F386CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34636B91D55DEC107F8443633FC4A24F1F386CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ce:3f:17:60:38:05:3c:5c:4d:01:ef:a7:14:c1:84:67:a3:7b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E34636B91D55DEC107F8443633FC4A24F1F386CD Validity Not Before: May 3 02:12:14 2026 GMT Not After : May 2 02:17:14 2027 GMT Subject: CN=9CC30C292D913CA882AC372F2F0A63AC03ADB0FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:97:f1:8d:ed:ca:21:90:b1:2d:bb:00:e4:21: bb:bb:35:b6:68:3f:69:5e:17:00:58:85:cd:35:44: 64:4b:1d:f1:cd:ac:91:60:f4:4c:e6:34:bc:90:05: 8e:0a:b4:c6:3d:4f:a7:ce:e6:57:33:d2:21:0a:e8: c8:1e:0b:94:23:59:96:26:b3:40:c6:77:30:4c:b6: 3e:37:f0:f7:5c:30:ae:fe:bd:4c:36:7a:aa:19:b9: 83:e9:89:dd:4f:b6:2d:94:48:74:b2:18:dc:9d:48: 4c:54:34:6a:c4:0a:c4:ba:d6:bf:f7:08:82:af:f6: 9e:0b:ee:a7:ba:aa:bc:b1:a4:e0:0b:b9:fc:4f:f6: 01:22:c6:4d:b9:81:20:30:49:7c:bb:4b:b7:c8:8d: 8d:4f:e2:ee:0b:a9:7b:0f:5b:7b:0f:d2:49:74:26: 52:48:15:22:a2:62:fa:11:e4:76:0c:de:03:74:2e: 80:46:d6:89:10:27:de:06:62:9c:8d:3f:b2:31:d2: 20:15:37:9c:0f:2b:4e:cc:6b:d7:86:9c:51:98:91: a5:bb:0b:5b:9e:57:7f:8d:0d:3f:89:50:fe:21:85: 81:e1:28:78:1c:e0:91:ca:e2:a3:7e:ef:99:12:02: 75:f5:73:9c:a4:48:64:4d:da:66:8f:e5:6b:27:74: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C3:0C:29:2D:91:3C:A8:82:AC:37:2F:2F:0A:63:AC:03:AD:B0:FC X509v3 Authority Key Identifier: keyid:E3:46:36:B9:1D:55:DE:C1:07:F8:44:36:33:FC:4A:24:F1:F3:86:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/E34636B91D55DEC107F8443633FC4A24F1F386CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34636B91D55DEC107F8443633FC4A24F1F386CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.36.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:e1:39:e2:79:f8:17:9b:02:66:dc:ef:8f:b4:50:c7:d2:47: 4c:84:a8:5f:76:91:79:5b:a3:da:11:06:c7:17:92:86:1d:06: f0:12:d8:4e:f0:1e:0e:11:2d:8a:64:e2:a3:07:0d:dc:ed:8c: 75:ad:bd:66:fc:6d:e7:02:38:cb:33:a9:84:6e:b0:f7:df:88: 57:4b:8a:e4:c6:0a:c5:3b:1b:ec:2f:b7:da:9c:b2:ff:a1:b4: b4:37:41:fb:32:f5:e7:1b:9d:8e:31:c7:6e:58:99:0a:a7:2a: 66:d8:57:e8:cf:40:07:73:d2:f2:0e:f0:47:9d:cc:de:1f:1a: 34:08:1c:ca:19:51:bc:3f:2d:4c:45:cf:9b:35:c9:48:68:b8: 9f:38:35:3a:88:70:4b:00:da:05:8f:68:1f:64:30:ba:eb:50: ad:d4:03:79:7d:38:85:39:19:a3:3d:91:48:13:2c:2c:cf:6b: b0:66:a2:db:8d:b5:52:18:67:9e:ad:76:99:57:38:cb:dc:7a: 38:4b:b4:8d:0b:75:56:88:1f:7b:5d:a4:1d:61:88:e4:62:92: 6d:08:9b:0c:eb:e2:00:50:ef:3a:10:88:f7:e9:e2:e5:3b:c1: 53:b5:a9:b0:8c:e0:8f:8c:e8:28:33:cd:12:a2:cb:83:c8:ad: 02:a6:bb:0f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDM4/F2A4BTxcTQHvpxTBhGejewswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM0NjM2QjkxRDU1REVDMTA3Rjg0NDM2MzNGQzRBMjRG MUYzODZDRDAeFw0yNjA1MDMwMjEyMTRaFw0yNzA1MDIwMjE3MTRaMDMxMTAvBgNV BAMTKDlDQzMwQzI5MkQ5MTNDQTg4MkFDMzcyRjJGMEE2M0FDMDNBREIwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIl/GN7cohkLEtuwDkIbu7NbZo P2leFwBYhc01RGRLHfHNrJFg9EzmNLyQBY4KtMY9T6fO5lcz0iEK6MgeC5QjWZYm s0DGdzBMtj438PdcMK7+vUw2eqoZuYPpid1Pti2USHSyGNydSExUNGrECsS61r/3 CIKv9p4L7qe6qryxpOALufxP9gEixk25gSAwSXy7S7fIjY1P4u4LqXsPW3sP0kl0 JlJIFSKiYvoR5HYM3gN0LoBG1okQJ94GYpyNP7Ix0iAVN5wPK07Ma9eGnFGYkaW7 C1ueV3+NDT+JUP4hhYHhKHgc4JHK4qN+75kSAnX1c5ykSGRN2maP5WsndEgHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUnMMMKS2RPKiCrDcvLwpjrAOtsPwwHwYDVR0j BBgwFoAU40Y2uR1V3sEH+EQ2M/xKJPHzhs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI5MGFkYTYtYjcyMS00YjVmLTkwY2EtZThmNGI5NzdkNTYxLzAvRTM0NjM2Qjkx RDU1REVDMTA3Rjg0NDM2MzNGQzRBMjRGMUYzODZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMzQ2MzZCOTFENTVERUMxMDdGODQ0MzYzM0ZDNEEyNEYxRjM4 NkNELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFiOTBhZGE2LWI3MjEtNGI1Zi05 MGNhLWU4ZjRiOTc3ZDU2MS8wLzMxMzAzMzJlMzEzNjMzMmUzMzM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6MkMA0GCSqG SIb3DQEBCwUAA4IBAQAs4TniefgXmwJm3O+PtFDH0kdMhKhfdpF5W6PaEQbHF5KG HQbwEthO8B4OES2KZOKjBw3c7Yx1rb1m/G3nAjjLM6mEbrD334hXS4rkxgrFOxvs L7fanLL/obS0N0H7MvXnG52OMcduWJkKpypm2Ffoz0AHc9LyDvBHnczeHxo0CBzK GVG8Py1MRc+bNclIaLifODU6iHBLANoFj2gfZDC661Ct1AN5fTiFORmjPZFIEyws z2uwZqLbjbVSGGeerXaZVzjL3Ho4S7SNC3VWiB97XaQdYYjkYpJtCJsM6+IAUO86 EIj36eLlO8FTtamwjOCPjOgoM80SosuDyK0CprsP -----END CERTIFICATE-----Generated at Tue May 5 16:49:04 2026 by rpki-client