$ rpki-client -vvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa File: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (raw, json) Hash identifier: Iyyka7bnzQVTV7GIy6yjeq/WyDhwkqHPxzE+mk7VzKA= Subject key identifier: EE:42:06:13:23:E3:A4:3C:4E:75:17:DE:A1:70:8D:41:EB:E8:DA:49 Certificate issuer: /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Certificate serial: 4AD2939C50312C8F106CDD8B74B0EAD673D3D04E Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa Signing time: Sun 03 May 2026 02:46:59 +0000 ROA not before: Sun 03 May 2026 02:41:59 +0000 ROA not after: Sun 02 May 2027 02:46:59 +0000 asID: 150465 IP address blocks: 103.161.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d2:93:9c:50:31:2c:8f:10:6c:dd:8b:74:b0:ea:d6:73:d3:d0:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Validity Not Before: May 3 02:41:59 2026 GMT Not After : May 2 02:46:59 2027 GMT Subject: CN=EE42061323E3A43C4E7517DEA1708D41EBE8DA49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:9e:56:06:b9:d1:e7:6c:fa:d2:e7:5b:03: 77:ba:cd:f3:ed:09:5c:fa:f5:97:46:66:e0:6d:da: de:1b:85:0a:a9:4e:da:5b:72:a6:55:60:ca:0c:5f: 78:16:79:ff:a3:fc:7e:7c:ee:a4:cd:f6:c5:11:8f: 68:ea:07:31:56:28:a8:f3:6a:f1:e6:49:6c:32:b3: 1d:85:82:67:6c:fb:11:d9:ce:0e:72:85:f9:b0:99: 41:a7:02:c8:26:de:4f:e2:da:74:d5:c1:91:d1:c4: e1:11:1b:35:fa:1a:79:5c:3b:b8:74:46:6d:fa:99: a6:4c:1b:9b:25:d1:d3:09:eb:77:e3:b8:d0:ee:29: 0d:60:bd:aa:82:4c:32:01:ba:e3:e3:b1:6f:14:b5: 41:7d:c1:d8:cb:58:9b:31:cb:70:f3:45:03:1f:92: f1:59:80:be:c7:b0:df:28:44:83:c9:0d:a3:49:ca: fc:e1:5c:c7:68:c9:02:85:d8:f4:26:e3:da:93:7b: 54:54:f5:7e:97:10:91:82:bd:6e:89:7d:46:f6:85: 3c:38:86:4f:4f:ec:29:71:5d:fb:25:5b:ec:8d:52: 8a:e9:7c:39:66:88:6e:2d:f0:1d:33:84:30:19:d6: 7f:78:70:53:72:8c:e9:66:4e:fd:7e:15:30:1a:fb: ac:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:42:06:13:23:E3:A4:3C:4E:75:17:DE:A1:70:8D:41:EB:E8:DA:49 X509v3 Authority Key Identifier: keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.134.0/23 Signature Algorithm: sha256WithRSAEncryption 19:0a:74:3b:d8:e8:61:5d:b6:22:9d:85:de:06:89:43:30:72: 12:f4:d6:df:02:cf:99:c5:71:7a:23:57:a9:92:1e:ff:cb:8e: 2b:b0:cb:68:71:40:77:4e:8e:0b:56:4b:88:f9:36:dc:17:d4: 91:14:bf:35:60:16:c6:f8:31:58:2e:35:5b:66:d4:f4:af:cd: fe:7a:fd:60:67:c1:af:4b:8e:4a:ae:53:fe:da:3b:dc:38:38: 8c:9d:6d:05:f5:6b:2b:4b:90:37:c4:47:35:1e:c6:64:57:a3: b6:63:5c:a0:ca:13:eb:e2:a3:45:01:a3:f6:84:8f:58:03:dd: f5:f1:66:3f:0a:71:92:88:ee:f5:61:73:31:b9:47:79:85:1f: b9:03:e3:b0:7d:81:78:e7:56:42:e3:85:15:95:b3:2e:12:55: 9a:6b:22:db:dc:15:c0:de:2e:79:6b:12:e6:aa:ca:3d:3e:1d: 6c:59:42:d5:9b:37:a1:3b:01:7d:66:e1:95:f5:9f:3e:ef:eb: 7f:ae:fc:87:42:34:1c:db:3c:d3:c0:26:3f:9e:dc:19:07:10: 12:1e:b7:57:af:7c:9e:68:dc:05:e1:2f:21:61:bb:d3:dd:11: 0d:2d:ba:9f:48:46:2c:8d:24:f1:07:06:4f:7a:d4:66:81:8a: 79:b9:75:60 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUStKTnFAxLI8QbN2LdLDq1nPT0E4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5 NzlFRTdDRjAeFw0yNjA1MDMwMjQxNTlaFw0yNzA1MDIwMjQ2NTlaMDMxMTAvBgNV BAMTKEVFNDIwNjEzMjNFM0E0M0M0RTc1MTdERUExNzA4RDQxRUJFOERBNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+p5WBrnR52z60udbA3e6zfPt CVz69ZdGZuBt2t4bhQqpTtpbcqZVYMoMX3gWef+j/H587qTN9sURj2jqBzFWKKjz avHmSWwysx2Fgmds+xHZzg5yhfmwmUGnAsgm3k/i2nTVwZHRxOERGzX6GnlcO7h0 Rm36maZMG5sl0dMJ63fjuNDuKQ1gvaqCTDIBuuPjsW8UtUF9wdjLWJsxy3DzRQMf kvFZgL7HsN8oRIPJDaNJyvzhXMdoyQKF2PQm49qTe1RU9X6XEJGCvW6JfUb2hTw4 hk9P7ClxXfslW+yNUorpfDlmiG4t8B0zhDAZ1n94cFNyjOlmTv1+FTAa+6zlAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU7kIGEyPjpDxOdRfeoXCNQevo2kkwHwYDVR0j BBgwFoAU1udoaRHozuJM/A2klkfx9pee588wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE1NjgwMWYtYTY3Yi00M2RkLThmNjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4Njkx MUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5NzlFRTdDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkU3Njg2OTExRThDRUUyNENGQzBEQTQ5NjQ3RjFGNjk3OUVF N0NGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgxNTY4MDFmLWE2N2ItNDNkZC04 ZjYyLWI3YjBkNjAzMTdhZi8wLzMxMzAzMzJlMzEzNjMxMmUzMTMzMzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzAzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoYYwDQYJ KoZIhvcNAQELBQADggEBABkKdDvY6GFdtiKdhd4GiUMwchL01t8Cz5nFcXojV6mS Hv/Ljiuwy2hxQHdOjgtWS4j5NtwX1JEUvzVgFsb4MVguNVtm1PSvzf56/WBnwa9L jkquU/7aO9w4OIydbQX1aytLkDfERzUexmRXo7ZjXKDKE+vio0UBo/aEj1gD3fXx Zj8KcZKI7vVhczG5R3mFH7kD47B9gXjnVkLjhRWVsy4SVZprItvcFcDeLnlrEuaq yj0+HWxZQtWbN6E7AX1m4ZX1nz7v63+u/IdCNBzbPNPAJj+e3BkHEBIet1evfJ5o 3AXhLyFhu9PdEQ0tup9IRiyNJPEHBk961GaBinm5dWA= -----END CERTIFICATE-----Generated at Tue May 5 18:54:57 2026 by rpki-client