$ rpki-client -vvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa File: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (raw, json) Hash identifier: l3If5656x9/abmXUsw+HuDRH9mZ/0aH7VY6poIdvnX0= Subject key identifier: 0A:85:3A:CB:7A:AA:E3:97:72:10:FE:E0:4D:F7:C3:38:F0:78:1F:EA Certificate issuer: /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Certificate serial: 42C9D1C338E997B6B34607D227841A77E4510E5A Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa Signing time: Sun 03 May 2026 02:46:57 +0000 ROA not before: Sun 03 May 2026 02:41:57 +0000 ROA not after: Sun 02 May 2027 02:46:57 +0000 asID: 59282 IP address blocks: 103.161.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c9:d1:c3:38:e9:97:b6:b3:46:07:d2:27:84:1a:77:e4:51:0e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Validity Not Before: May 3 02:41:57 2026 GMT Not After : May 2 02:46:57 2027 GMT Subject: CN=0A853ACB7AAAE3977210FEE04DF7C338F0781FEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:50:5c:b8:27:79:76:fc:55:5b:24:3d:4f:0c: ba:26:c2:7c:60:3e:37:ab:f7:ce:02:77:6d:5b:3a: 4a:12:d3:6a:9a:fd:f6:5d:eb:bd:ee:25:4e:f4:9a: 88:5c:f1:66:09:31:fe:6a:af:ab:8e:05:83:ba:3b: 5a:59:bf:b2:31:ea:f0:d1:85:ee:af:8f:ea:51:73: 66:30:a3:7f:a6:06:23:9a:85:a6:1c:98:d0:c1:10: 83:b6:05:87:3e:48:99:a2:58:6e:eb:d4:76:d8:01: d3:8a:55:7b:47:b2:0b:27:0a:37:4a:b4:06:4e:9a: 42:be:a0:f0:17:c6:ef:59:f0:bc:4e:10:08:af:23: 0a:a0:e5:0d:d5:10:9a:9e:fc:d2:b9:ca:39:d0:b7: 14:2d:53:c0:3b:cf:b5:3f:94:0b:ba:2f:dd:3f:cf: a0:b9:41:0b:cf:e5:06:85:46:bf:67:26:82:ed:99: 54:23:ae:4d:53:e8:21:da:b3:6c:b7:ad:10:4f:45: 44:52:43:ad:fc:7e:c3:4f:8b:d5:8a:48:b6:5a:41: 65:b1:8c:14:56:da:89:26:4e:50:e8:44:ee:ac:b9: cb:11:e0:9e:e9:af:fc:34:32:50:d2:99:65:64:87: d1:87:5d:b8:ee:25:76:0a:f6:45:ea:fe:3a:76:c9: 1f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:85:3A:CB:7A:AA:E3:97:72:10:FE:E0:4D:F7:C3:38:F0:78:1F:EA X509v3 Authority Key Identifier: keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.134.0/24 Signature Algorithm: sha256WithRSAEncryption 11:e2:8e:1f:94:ba:2d:24:9c:84:4c:d9:40:52:3a:85:67:82: 08:1b:0c:c0:d4:5d:23:06:d7:f7:8a:77:08:c6:00:aa:75:95: dd:13:4d:df:9c:f2:50:ea:c8:0f:87:8d:e6:ff:ee:af:b1:dd: 45:72:bf:91:9f:56:f0:ad:95:50:60:24:d9:0d:82:ce:00:a2: d7:d2:36:e8:17:55:51:74:03:e1:8f:26:4d:12:c9:68:9b:8c: 18:96:1c:fd:ba:de:a7:42:d8:6a:26:92:04:d2:2e:85:f9:fd: 72:31:f1:8a:99:f8:e4:41:ec:9f:0b:39:a2:43:86:8a:54:35: c1:4c:59:90:8b:8c:8f:d2:c3:78:65:bc:86:ab:59:38:ca:df: 60:a4:75:aa:b3:fc:82:c9:fc:5a:f9:60:41:b9:70:71:7f:e2: 8d:bd:51:ce:b9:be:6b:71:91:33:64:56:84:95:88:5d:31:62: 6a:20:06:39:ae:27:c6:87:94:cc:79:b4:78:ff:59:8c:3b:70: 37:d9:ad:c2:44:af:b4:b1:f0:11:d7:b3:5a:fe:c0:80:75:c9: 2d:61:9d:ea:7e:57:1d:53:a5:45:7e:98:94:c1:15:07:39:81: a1:d9:fd:bf:88:b5:85:4c:5a:2e:41:c5:f2:a0:b1:ce:4b:e3: 7d:8c:98:e9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQsnRwzjpl7azRgfSJ4Qad+RRDlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5 NzlFRTdDRjAeFw0yNjA1MDMwMjQxNTdaFw0yNzA1MDIwMjQ2NTdaMDMxMTAvBgNV BAMTKDBBODUzQUNCN0FBQUUzOTc3MjEwRkVFMDRERjdDMzM4RjA3ODFGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeUFy4J3l2/FVbJD1PDLomwnxg Pjer984Cd21bOkoS02qa/fZd673uJU70mohc8WYJMf5qr6uOBYO6O1pZv7Ix6vDR he6vj+pRc2Ywo3+mBiOahaYcmNDBEIO2BYc+SJmiWG7r1HbYAdOKVXtHsgsnCjdK tAZOmkK+oPAXxu9Z8LxOEAivIwqg5Q3VEJqe/NK5yjnQtxQtU8A7z7U/lAu6L90/ z6C5QQvP5QaFRr9nJoLtmVQjrk1T6CHas2y3rRBPRURSQ638fsNPi9WKSLZaQWWx jBRW2okmTlDoRO6sucsR4J7pr/w0MlDSmWVkh9GHXbjuJXYK9kXq/jp2yR9tAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUCoU6y3qq45dyEP7gTffDOPB4H+owHwYDVR0j BBgwFoAU1udoaRHozuJM/A2klkfx9pee588wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE1NjgwMWYtYTY3Yi00M2RkLThmNjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4Njkx MUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5NzlFRTdDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkU3Njg2OTExRThDRUUyNENGQzBEQTQ5NjQ3RjFGNjk3OUVF N0NGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgxNTY4MDFmLWE2N2ItNDNkZC04 ZjYyLWI3YjBkNjAzMTdhZi8wLzMxMzAzMzJlMzEzNjMxMmUzMTMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6GGMA0GCSqG SIb3DQEBCwUAA4IBAQAR4o4flLotJJyETNlAUjqFZ4IIGwzA1F0jBtf3incIxgCq dZXdE03fnPJQ6sgPh43m/+6vsd1Fcr+Rn1bwrZVQYCTZDYLOAKLX0jboF1VRdAPh jyZNEslom4wYlhz9ut6nQthqJpIE0i6F+f1yMfGKmfjkQeyfCzmiQ4aKVDXBTFmQ i4yP0sN4ZbyGq1k4yt9gpHWqs/yCyfxa+WBBuXBxf+KNvVHOub5rcZEzZFaElYhd MWJqIAY5rifGh5TMebR4/1mMO3A32a3CRK+0sfAR17Na/sCAdcktYZ3qflcdU6VF fpiUwRUHOYGh2f2/iLWFTFouQcXyoLHOS+N9jJjp -----END CERTIFICATE-----Generated at Tue May 5 18:55:27 2026 by rpki-client