$ rpki-client -vvf rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa File: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (raw, json) Hash identifier: zSTZmjwwvstpM097HDN5CyNHXwexcoEZ8IJmEdlxEdw= Subject key identifier: 3C:AC:F5:AD:ED:7B:7E:B6:F4:00:40:56:4A:83:6F:28:01:BF:25:0B Certificate issuer: /CN=19B95601293E4FA827B74012327843B2622893C0 Certificate serial: 2A1EE6040E2EEBEFFCF42756C422FF570699496E Authority key identifier: 19:B9:56:01:29:3E:4F:A8:27:B7:40:12:32:78:43:B2:62:28:93:C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19B95601293E4FA827B74012327843B2622893C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa Signing time: Sun 03 May 2026 02:44:23 +0000 ROA not before: Sun 03 May 2026 02:39:23 +0000 ROA not after: Sun 02 May 2027 02:44:23 +0000 asID: 142321 IP address blocks: 103.168.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.crl rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19B95601293E4FA827B74012327843B2622893C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1e:e6:04:0e:2e:eb:ef:fc:f4:27:56:c4:22:ff:57:06:99:49:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B95601293E4FA827B74012327843B2622893C0 Validity Not Before: May 3 02:39:23 2026 GMT Not After : May 2 02:44:23 2027 GMT Subject: CN=3CACF5ADED7B7EB6F40040564A836F2801BF250B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:60:3f:ae:a7:c7:57:3e:39:8a:4c:59:9a: 44:17:56:09:38:ba:7e:d7:e8:f8:40:23:97:36:55: 8a:a9:d2:16:a7:f0:3b:66:4c:b6:59:d1:6b:c9:29: 97:66:8c:c5:31:08:2b:53:25:7a:01:be:55:4b:27: d7:b3:5d:76:2f:44:c6:d8:fc:48:60:a6:5c:c6:50: 95:f1:d6:2d:d5:9e:4b:77:ff:9e:3a:ad:d8:e9:f5: 51:49:54:04:36:96:fc:40:6c:ef:1c:00:81:db:7d: 61:b5:18:53:46:d7:d4:99:d0:bf:23:11:d3:f8:da: 36:78:27:e1:88:f7:63:66:dc:a2:ae:b8:53:b0:06: b6:6f:7f:58:7d:45:4d:73:7c:5c:db:44:2d:19:66: 16:10:f7:5d:1e:74:08:34:06:75:85:52:1d:c5:92: 11:38:f2:51:f0:1b:67:da:25:a3:dc:d3:80:7b:01: 28:d9:6a:83:f9:7b:c1:e7:7a:f3:d4:e8:da:81:a3: 2f:83:57:19:05:84:de:c4:c2:a0:fd:03:11:b0:5e: bb:fa:33:c7:49:0d:bb:c7:58:77:61:5f:e6:a9:f3: 98:c7:35:54:c1:d5:a9:a4:a5:4f:eb:1d:d3:ff:2d: 53:09:39:e2:6c:e5:64:05:3d:4c:9a:3c:e4:f0:6d: 87:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AC:F5:AD:ED:7B:7E:B6:F4:00:40:56:4A:83:6F:28:01:BF:25:0B X509v3 Authority Key Identifier: keyid:19:B9:56:01:29:3E:4F:A8:27:B7:40:12:32:78:43:B2:62:28:93:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19B95601293E4FA827B74012327843B2622893C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.184.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:93:ec:a0:45:b1:0f:6e:c8:fe:19:2d:06:05:29:1c:16:5f: fa:f4:92:99:7b:43:bd:4f:87:f2:f4:f6:d9:de:37:cc:0f:9d: df:f1:0c:b0:ce:f5:32:79:b7:65:3c:99:32:aa:47:37:8e:94: ff:2b:2c:c4:89:30:18:54:da:0a:42:f4:c6:89:63:9a:54:87: 0a:68:fb:28:16:dc:a7:52:ec:ab:fe:7c:2b:9a:ef:03:98:a3: 65:ae:75:8e:51:64:64:6a:34:17:56:4d:9c:9b:d5:1d:7a:5f: 17:84:a4:92:ca:71:7b:6c:8a:e7:11:f4:0c:5e:31:59:07:55: e8:30:d4:06:51:df:aa:48:66:27:5a:54:2f:a1:24:58:78:59: fd:0b:0b:44:73:76:ba:bf:d4:37:4c:d5:6a:45:ff:fa:ab:02: 63:e2:12:9a:15:79:c2:4a:3f:c0:3d:b1:63:5c:f4:26:ba:f1: f9:b3:c0:83:b6:b2:78:cb:35:f4:78:a1:b0:e6:48:34:4b:b8: 5f:ef:94:dd:74:31:39:0e:28:62:ab:77:44:a1:46:59:9c:cc: f2:87:c5:d8:8f:35:0f:22:3d:bc:10:32:d0:6e:d8:4a:fe:09: 41:82:25:f4:8e:d6:6a:18:26:b2:57:1f:77:99:ca:71:77:e8: 73:bd:4d:b7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKh7mBA4u6+/89CdWxCL/VwaZSW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCOTU2MDEyOTNFNEZBODI3Qjc0MDEyMzI3ODQzQjI2 MjI4OTNDMDAeFw0yNjA1MDMwMjM5MjNaFw0yNzA1MDIwMjQ0MjNaMDMxMTAvBgNV BAMTKDNDQUNGNUFERUQ3QjdFQjZGNDAwNDA1NjRBODM2RjI4MDFCRjI1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxmA/rqfHVz45ikxZmkQXVgk4 un7X6PhAI5c2VYqp0han8DtmTLZZ0WvJKZdmjMUxCCtTJXoBvlVLJ9ezXXYvRMbY /EhgplzGUJXx1i3Vnkt3/546rdjp9VFJVAQ2lvxAbO8cAIHbfWG1GFNG19SZ0L8j EdP42jZ4J+GI92Nm3KKuuFOwBrZvf1h9RU1zfFzbRC0ZZhYQ910edAg0BnWFUh3F khE48lHwG2faJaPc04B7ASjZaoP5e8HnevPU6NqBoy+DVxkFhN7EwqD9AxGwXrv6 M8dJDbvHWHdhX+ap85jHNVTB1amkpU/rHdP/LVMJOeJs5WQFPUyaPOTwbYfxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUPKz1re17frb0AEBWSoNvKAG/JQswHwYDVR0j BBgwFoAUGblWASk+T6gnt0ASMnhDsmIok8AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzhlNzhlZTAtMDAwMi00YTY3LWE3MzktMzAzM2Q1YjViYTYxLzAvMTlCOTU2MDEy OTNFNEZBODI3Qjc0MDEyMzI3ODQzQjI2MjI4OTNDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOUI5NTYwMTI5M0U0RkE4MjdCNzQwMTIzMjc4NDNCMjYyMjg5 M0MwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc4ZTc4ZWUwLTAwMDItNGE2Ny1h NzM5LTMwMzNkNWI1YmE2MS8wLzMxMzAzMzJlMzEzNjM4MmUzMTM4MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzIzMzMyMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqLgwDQYJ KoZIhvcNAQELBQADggEBAIuT7KBFsQ9uyP4ZLQYFKRwWX/r0kpl7Q71Ph/L09tne N8wPnd/xDLDO9TJ5t2U8mTKqRzeOlP8rLMSJMBhU2gpC9MaJY5pUhwpo+ygW3KdS 7Kv+fCua7wOYo2WudY5RZGRqNBdWTZyb1R16XxeEpJLKcXtsiucR9AxeMVkHVegw 1AZR36pIZidaVC+hJFh4Wf0LC0Rzdrq/1DdM1WpF//qrAmPiEpoVecJKP8A9sWNc 9Ca68fmzwIO2snjLNfR4obDmSDRLuF/vlN10MTkOKGKrd0ShRlmczPKHxdiPNQ8i PbwQMtBu2Er+CUGCJfSO1moYJrJXH3eZynF36HO9Tbc= -----END CERTIFICATE-----Generated at Tue May 5 19:02:55 2026 by rpki-client