$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa File: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (raw, json) Hash identifier: +/Z+l46w62+euzVttfTbUpjA36xrgfvJsPvniMmOZIM= Subject key identifier: A1:A6:B6:CD:71:2E:E5:B0:11:6E:C2:94:AD:39:C6:A3:4A:B7:42:19 Certificate issuer: /CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Certificate serial: 402E9605853BD70296941BBECEE79B50E1D416CC Authority key identifier: BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa Signing time: Sun 03 May 2026 02:23:35 +0000 ROA not before: Sun 03 May 2026 02:18:35 +0000 ROA not after: Sun 02 May 2027 02:23:35 +0000 asID: 137331 IP address blocks: 103.112.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2e:96:05:85:3b:d7:02:96:94:1b:be:ce:e7:9b:50:e1:d4:16:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Validity Not Before: May 3 02:18:35 2026 GMT Not After : May 2 02:23:35 2027 GMT Subject: CN=A1A6B6CD712EE5B0116EC294AD39C6A34AB74219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:74:e0:2d:ff:13:55:49:ec:fc:6d:30:12:ee: d8:08:25:ed:40:43:64:e8:1c:62:e6:f0:3d:81:05: d0:c0:18:7c:9c:b8:9b:f7:02:b6:f9:ed:e7:62:4b: af:da:1d:2c:54:8a:de:ce:1f:0a:bf:eb:a5:34:20: 94:eb:3b:df:35:32:67:51:0f:7f:0e:e7:ae:fe:d4: 17:e0:5d:91:e8:bb:72:31:d9:fd:5b:82:36:88:07: ba:9f:ec:37:67:df:0b:e5:a2:64:33:40:72:d4:5e: c5:3d:22:44:12:e1:f6:be:cb:e7:86:9a:c6:d4:11: 7f:6e:18:0b:40:8f:7a:5e:46:84:8b:9c:c2:a4:92: c6:6e:6f:af:16:23:5f:55:6a:6c:09:8a:38:66:b9: 6b:71:eb:60:23:27:fd:c0:0b:67:6b:86:82:97:bb: af:e1:b1:e2:48:08:af:ab:dd:86:25:93:11:8d:64: 9a:e5:c6:eb:9d:1b:d2:d2:1a:b5:d7:06:db:0b:d4: 5c:5e:61:f0:1d:91:79:45:7c:86:1a:75:d6:30:21: 4a:bb:5c:ba:92:5e:70:fc:73:d1:aa:83:43:66:cf: 54:44:72:6b:6f:57:ac:76:26:84:51:94:b5:be:07: cb:b6:0e:1e:d2:0a:09:e9:ae:05:e4:2e:9e:a1:a6: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A6:B6:CD:71:2E:E5:B0:11:6E:C2:94:AD:39:C6:A3:4A:B7:42:19 X509v3 Authority Key Identifier: keyid:BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.162.0/23 Signature Algorithm: sha256WithRSAEncryption a5:19:fc:e1:eb:51:75:ae:11:9a:30:ec:dd:49:11:a2:e1:80: d7:1b:e8:00:1f:0c:a0:e8:a8:e7:ca:4c:8f:44:92:77:9d:db: 20:6e:9f:b1:de:3f:a3:14:2e:fc:69:00:30:ef:7c:fa:5e:03: 5e:02:fb:a6:05:f5:3a:9c:3a:93:c0:57:ce:23:65:12:90:84: b4:76:36:2e:52:5d:52:ea:f9:d2:d6:35:e3:03:4e:9d:09:87: 58:5c:e1:54:25:b5:cc:5b:c2:62:38:28:f5:1d:cf:81:ca:f8: a7:51:bb:13:76:9c:d9:64:16:37:fc:cd:5f:9c:bd:22:e2:7d: 01:b8:ac:c7:fc:7b:75:ad:63:db:29:28:f6:a4:70:ba:e1:98: 9d:45:ed:dd:c8:f4:13:64:02:cb:23:71:38:4c:c3:22:76:ac: 80:cc:f8:df:4e:f6:76:46:0e:7d:c0:a7:2e:70:b6:93:df:e8: 9e:bb:c7:79:f3:6a:86:b1:63:eb:7c:2a:cf:57:8c:bc:29:06: 94:c7:e1:85:d0:d0:07:97:be:24:fd:cd:11:ba:1d:23:7e:0f: bb:e5:5e:ba:f4:43:e2:f6:06:8d:4e:e4:1b:03:3c:71:5c:b7: e7:cd:e7:3d:5d:f1:21:1d:c7:93:d9:38:04:7c:33:ad:5d:cd: b7:bd:9d:2f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQC6WBYU71wKWlBu+zuebUOHUFswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQzMTQy QkRGM0M2NzAeFw0yNjA1MDMwMjE4MzVaFw0yNzA1MDIwMjIzMzVaMDMxMTAvBgNV BAMTKEExQTZCNkNENzEyRUU1QjAxMTZFQzI5NEFEMzlDNkEzNEFCNzQyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCedOAt/xNVSez8bTAS7tgIJe1A Q2ToHGLm8D2BBdDAGHycuJv3Arb57ediS6/aHSxUit7OHwq/66U0IJTrO981MmdR D38O567+1BfgXZHou3Ix2f1bgjaIB7qf7Ddn3wvlomQzQHLUXsU9IkQS4fa+y+eG msbUEX9uGAtAj3peRoSLnMKkksZub68WI19VamwJijhmuWtx62AjJ/3AC2drhoKX u6/hseJICK+r3YYlkxGNZJrlxuudG9LSGrXXBtsL1FxeYfAdkXlFfIYaddYwIUq7 XLqSXnD8c9Gqg0Nmz1REcmtvV6x2JoRRlLW+B8u2Dh7SCgnprgXkLp6hpvAdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUoaa2zXEu5bARbsKUrTnGo0q3QhkwHwYDVR0j BBgwFoAUulo4pND7iqqN0Y4fs5pDFCvfPGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkODBkOTYtZWYxYi00NGIyLTkwM2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTRE MEZCOEFBQThERDE4RTFGQjM5QTQzMTQyQkRGM0M2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTVBMzhBNEQwRkI4QUFBOEREMThFMUZCMzlBNDMxNDJCREYz QzY3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJmZDgwZDk2LWVmMWItNDRiMi05 MDNhLTdmNmRhOTQxYTgzNi8wLzMxMzAzMzJlMzEzMTMyMmUzMTM2MzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFncKIwDQYJ KoZIhvcNAQELBQADggEBAKUZ/OHrUXWuEZow7N1JEaLhgNcb6AAfDKDoqOfKTI9E kned2yBun7HeP6MULvxpADDvfPpeA14C+6YF9TqcOpPAV84jZRKQhLR2Ni5SXVLq +dLWNeMDTp0Jh1hc4VQltcxbwmI4KPUdz4HK+KdRuxN2nNlkFjf8zV+cvSLifQG4 rMf8e3WtY9spKPakcLrhmJ1F7d3I9BNkAssjcThMwyJ2rIDM+N9O9nZGDn3Apy5w tpPf6J67x3nzaoaxY+t8Ks9XjLwpBpTH4YXQ0AeXviT9zRG6HSN+D7vlXrr0Q+L2 Bo1O5BsDPHFct+fN5z1d8SEdx5PZOAR8M61dzbe9nS8= -----END CERTIFICATE-----Generated at Tue May 5 16:55:59 2026 by rpki-client