$ rpki-client -vvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa File: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (raw, json) Hash identifier: CeNdfOrQu4OqN7GWY23FwJ5ZvRzilpDPwGeBlsotfAc= Subject key identifier: FB:C3:8B:0D:41:AE:92:F6:87:F3:A1:AF:A7:32:A4:1F:BC:E1:0F:22 Certificate issuer: /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Certificate serial: 50F38C52AB1EE656E202AD9B6E3FE614F1A9BA35 Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa Signing time: Sun 03 May 2026 02:47:00 +0000 ROA not before: Sun 03 May 2026 02:42:00 +0000 ROA not after: Sun 02 May 2027 02:47:00 +0000 asID: 48465 IP address blocks: 103.161.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f3:8c:52:ab:1e:e6:56:e2:02:ad:9b:6e:3f:e6:14:f1:a9:ba:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Validity Not Before: May 3 02:42:00 2026 GMT Not After : May 2 02:47:00 2027 GMT Subject: CN=FBC38B0D41AE92F687F3A1AFA732A41FBCE10F22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c9:46:ff:20:4d:05:15:71:0d:5c:45:64:97: 91:92:d8:15:96:77:d9:d8:b2:30:52:4f:18:de:87: 4b:be:11:a2:87:b3:3b:c0:4e:ef:46:ce:5a:57:77: b8:69:73:4c:be:4c:71:6c:37:5b:cf:07:1a:f1:4b: 42:0d:68:6d:aa:eb:a2:e4:76:a1:3c:fe:0a:a9:0b: d1:ba:ae:49:d7:f6:8d:7e:fb:22:fc:3b:49:2f:f8: 78:40:e1:3f:01:63:97:d0:86:e8:30:53:a8:7d:4d: 51:44:98:b0:3a:9a:60:c3:5f:a4:3f:77:39:6d:05: b8:c3:d7:01:4f:86:59:1a:9f:b0:75:dc:4a:07:a4: 2a:0d:0b:13:f5:ff:ee:3c:d6:a9:65:3c:7f:0f:a0: ac:ba:4d:46:aa:57:19:28:80:d4:c1:49:1a:e0:38: 00:c3:9c:48:0b:bf:01:22:5c:6a:2a:be:2e:35:af: 47:cc:74:05:c7:72:4d:5a:fe:1c:66:a6:da:ff:73: 9f:2c:cb:77:8e:5d:22:96:60:97:b7:e2:81:ea:5d: 38:41:d5:31:ec:0d:0d:a3:37:bb:c0:83:d6:78:cd: b1:50:20:4c:6f:e5:0f:e0:f3:42:41:03:fc:c7:48: c5:2d:d6:3a:2b:b2:0e:76:a4:cc:c2:a1:f7:62:72: 72:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C3:8B:0D:41:AE:92:F6:87:F3:A1:AF:A7:32:A4:1F:BC:E1:0F:22 X509v3 Authority Key Identifier: keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.134.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:a1:84:78:65:a3:c3:eb:73:73:e1:e4:34:7f:2c:d5:36:ec: 2c:f1:95:f8:cc:19:9e:89:c0:bf:4d:94:d9:6d:d5:33:0c:97: 94:78:07:20:84:94:6e:62:8f:dc:30:59:2e:aa:06:df:b2:65: 7e:15:2f:15:6a:81:5c:0f:bc:8f:2a:4c:8c:d8:eb:1b:17:7f: 6c:03:c4:c1:06:d9:1e:9f:34:a2:af:71:78:c1:7b:85:e4:85: de:6e:0f:ee:e1:76:6e:05:b9:32:a6:22:84:a0:b0:dc:aa:3c: cb:87:13:e9:91:cf:17:22:ee:34:49:de:d9:26:c6:a5:67:35: df:a7:b4:f9:4d:92:26:d2:d4:8b:ff:4a:4a:4b:3e:62:90:d4: a9:85:eb:4c:39:60:23:58:d3:10:a3:3d:7b:41:1d:99:99:f7: a1:2d:e1:81:ee:20:d6:79:fd:81:9d:34:cd:ed:2e:70:95:42: 7e:dc:39:a0:c4:23:23:9b:1b:f3:8a:38:79:c7:ab:53:d5:c5: 70:5c:a4:8d:05:14:0d:dc:c7:33:23:3e:bd:59:0d:99:40:e3: ca:1c:c8:56:be:c7:14:28:bc:76:13:cb:4e:fa:c6:1c:90:c3: 1c:75:fe:00:e5:7e:cb:53:e8:b6:2d:8c:c6:a8:8c:72:b2:70: 8d:3d:2e:4a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUPOMUqse5lbiAq2bbj/mFPGpujUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5 NzlFRTdDRjAeFw0yNjA1MDMwMjQyMDBaFw0yNzA1MDIwMjQ3MDBaMDMxMTAvBgNV BAMTKEZCQzM4QjBENDFBRTkyRjY4N0YzQTFBRkE3MzJBNDFGQkNFMTBGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDryUb/IE0FFXENXEVkl5GS2BWW d9nYsjBSTxjeh0u+EaKHszvATu9GzlpXd7hpc0y+THFsN1vPBxrxS0INaG2q66Lk dqE8/gqpC9G6rknX9o1++yL8O0kv+HhA4T8BY5fQhugwU6h9TVFEmLA6mmDDX6Q/ dzltBbjD1wFPhlkan7B13EoHpCoNCxP1/+481qllPH8PoKy6TUaqVxkogNTBSRrg OADDnEgLvwEiXGoqvi41r0fMdAXHck1a/hxmptr/c58sy3eOXSKWYJe34oHqXThB 1THsDQ2jN7vAg9Z4zbFQIExv5Q/g80JBA/zHSMUt1jorsg52pMzCofdicnL9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+8OLDUGukvaH86GvpzKkH7zhDyIwHwYDVR0j BBgwFoAU1udoaRHozuJM/A2klkfx9pee588wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE1NjgwMWYtYTY3Yi00M2RkLThmNjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4Njkx MUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5NzlFRTdDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkU3Njg2OTExRThDRUUyNENGQzBEQTQ5NjQ3RjFGNjk3OUVF N0NGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgxNTY4MDFmLWE2N2ItNDNkZC04 ZjYyLWI3YjBkNjAzMTdhZi8wLzMxMzAzMzJlMzEzNjMxMmUzMTMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6GGMA0GCSqG SIb3DQEBCwUAA4IBAQBuoYR4ZaPD63Nz4eQ0fyzVNuws8ZX4zBmeicC/TZTZbdUz DJeUeAcghJRuYo/cMFkuqgbfsmV+FS8VaoFcD7yPKkyM2OsbF39sA8TBBtkenzSi r3F4wXuF5IXebg/u4XZuBbkypiKEoLDcqjzLhxPpkc8XIu40Sd7ZJsalZzXfp7T5 TZIm0tSL/0pKSz5ikNSphetMOWAjWNMQoz17QR2ZmfehLeGB7iDWef2BnTTN7S5w lUJ+3DmgxCMjmxvzijh5x6tT1cVwXKSNBRQN3MczIz69WQ2ZQOPKHMhWvscUKLx2 E8tO+sYckMMcdf4A5X7LU+i2LYzGqIxysnCNPS5K -----END CERTIFICATE-----Generated at Tue May 5 16:54:28 2026 by rpki-client