$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa File: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (raw, json) Hash identifier: 1g+y0imkE46p3egXComeqIG0umuFfgQzJzzyy2lkq6g= Subject key identifier: 30:76:9A:45:0B:13:FB:DA:4C:F1:F6:4E:9B:22:F8:17:74:62:4F:59 Certificate issuer: /CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Certificate serial: 347E20557C1EDA4F08A7E0EF3CB4557F52395D47 Authority key identifier: 4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa Signing time: Sun 03 May 2026 02:17:21 +0000 ROA not before: Sun 03 May 2026 02:12:21 +0000 ROA not after: Sun 02 May 2027 02:17:21 +0000 asID: 140392 IP address blocks: 103.150.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7e:20:55:7c:1e:da:4f:08:a7:e0:ef:3c:b4:55:7f:52:39:5d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Validity Not Before: May 3 02:12:21 2026 GMT Not After : May 2 02:17:21 2027 GMT Subject: CN=30769A450B13FBDA4CF1F64E9B22F81774624F59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:34:0e:a3:06:88:83:cd:c5:df:5d:f9:c2:bd: 89:be:b6:af:4b:a0:8c:4e:f9:65:68:46:2a:98:30: 1f:ed:2a:77:01:f5:b2:95:9c:52:d8:c3:6d:40:e9: fb:5f:f8:e2:9d:e6:09:be:fc:8e:0a:6f:d2:cc:69: 94:f9:83:df:b0:2b:89:a7:68:71:fb:62:15:82:12: e4:55:9f:81:f5:06:39:00:12:10:7a:34:47:56:18: 97:ea:c0:ca:ad:3a:bf:63:85:36:1f:f3:0e:f2:0d: f0:a4:ea:31:8f:c2:bf:de:e3:23:ef:98:d9:51:3e: 53:47:b9:fe:67:29:d3:b6:a1:d2:39:0a:b1:61:dc: c5:32:83:6a:ba:db:20:cc:b5:c2:7e:83:d5:66:da: e8:6f:51:fa:f0:b5:0c:79:63:e2:bc:cd:ae:d7:56: 95:f0:8a:7e:43:7b:53:cb:3a:7c:aa:04:27:d7:52: 72:63:d0:ae:cf:d4:13:da:98:c8:94:f4:c6:9c:2e: f7:d5:1b:ad:a2:23:08:4d:98:90:b6:fc:4e:0b:31: aa:a2:54:bf:18:2d:1a:84:69:48:30:77:d9:a1:7b: 73:57:ec:7c:54:45:cf:ad:cf:b6:bb:8c:41:be:c5: 36:96:da:0a:19:b9:11:f1:80:52:11:1a:13:0d:b2: 55:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:76:9A:45:0B:13:FB:DA:4C:F1:F6:4E:9B:22:F8:17:74:62:4F:59 X509v3 Authority Key Identifier: keyid:4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.148.0/23 Signature Algorithm: sha256WithRSAEncryption 56:03:84:37:eb:a7:04:8a:72:05:31:1d:75:d6:1a:2f:cc:b3: a8:51:4d:61:5b:6d:8c:73:01:f8:e6:7e:90:e3:eb:f4:bf:b2: 6e:05:9a:6f:a0:1e:54:3f:27:62:a2:90:2e:63:8a:96:bb:e2: 6a:30:e7:87:81:f2:49:cd:81:67:f1:82:b9:a5:4d:24:31:a6: f0:3b:ac:44:e3:73:0b:f4:91:ee:4c:a1:b0:5e:a3:3e:b7:69: d6:8e:c7:5e:5a:37:a2:e3:7c:ed:31:88:36:1a:e0:66:65:73: 86:b3:03:50:60:aa:19:9a:37:fd:6f:d7:35:65:80:f0:0e:07: 16:18:c2:07:bd:aa:e6:5d:7a:91:26:d5:c6:5e:f7:40:05:94: 37:39:02:1f:f5:9a:f8:d4:f7:17:dd:8d:d5:fb:1f:94:a5:b7: a2:cf:29:37:98:4b:52:63:2c:f5:ab:d1:4c:78:52:fd:7a:3c: f4:6f:73:31:4b:52:f2:83:e2:1c:34:1d:69:f6:a4:89:69:a0: f9:4b:c2:b1:61:c0:26:72:1f:50:33:b2:97:c0:87:c5:b0:b9: 15:df:9c:c7:f0:cd:8c:90:d9:50:92:b4:74:2a:d0:94:14:cd: 44:91:11:e9:70:bd:8b:c4:de:a9:4b:cc:a4:a0:39:02:92:2a: cf:1b:d4:00 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNH4gVXwe2k8Ip+DvPLRVf1I5XUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2 N0UwN0Y2NTAeFw0yNjA1MDMwMjEyMjFaFw0yNzA1MDIwMjE3MjFaMDMxMTAvBgNV BAMTKDMwNzY5QTQ1MEIxM0ZCREE0Q0YxRjY0RTlCMjJGODE3NzQ2MjRGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1NA6jBoiDzcXfXfnCvYm+tq9L oIxO+WVoRiqYMB/tKncB9bKVnFLYw21A6ftf+OKd5gm+/I4Kb9LMaZT5g9+wK4mn aHH7YhWCEuRVn4H1BjkAEhB6NEdWGJfqwMqtOr9jhTYf8w7yDfCk6jGPwr/e4yPv mNlRPlNHuf5nKdO2odI5CrFh3MUyg2q62yDMtcJ+g9Vm2uhvUfrwtQx5Y+K8za7X VpXwin5De1PLOnyqBCfXUnJj0K7P1BPamMiU9MacLvfVG62iIwhNmJC2/E4LMaqi VL8YLRqEaUgwd9mhe3NX7HxURc+tz7a7jEG+xTaW2goZuRHxgFIRGhMNslVTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUMHaaRQsT+9pM8fZOmyL4F3RiT1kwHwYDVR0j BBgwFoAUTdQQawMAPZxbUb+JNjHI5Gfgf2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkZTkzNmItNTNjZi00YjA4LWI1ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIw MzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2N0UwN0Y2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REQ0MTA2QjAzMDAzRDlDNUI1MUJGODkzNjMxQzhFNDY3RTA3 RjY1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFiZGU5MzZiLTUzY2YtNGIwOC1i NWY3LTJiOTBkZTIxZmU5NC8wLzMxMzAzMzJlMzEzNTMwMmUzMTM0MzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzMzM5MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlpQwDQYJ KoZIhvcNAQELBQADggEBAFYDhDfrpwSKcgUxHXXWGi/Ms6hRTWFbbYxzAfjmfpDj 6/S/sm4Fmm+gHlQ/J2KikC5jipa74mow54eB8knNgWfxgrmlTSQxpvA7rETjcwv0 ke5MobBeoz63adaOx15aN6LjfO0xiDYa4GZlc4azA1BgqhmaN/1v1zVlgPAOBxYY wge9quZdepEm1cZe90AFlDc5Ah/1mvjU9xfdjdX7H5Slt6LPKTeYS1JjLPWr0Ux4 Uv16PPRvczFLUvKD4hw0HWn2pIlpoPlLwrFhwCZyH1AzspfAh8WwuRXfnMfwzYyQ 2VCStHQq0JQUzUSREelwvYvE3qlLzKSgOQKSKs8b1AA= -----END CERTIFICATE-----Generated at Tue May 5 18:56:34 2026 by rpki-client