$ rpki-client -vvf rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa File: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (raw, json) Hash identifier: P0CKv28xTKde1GyGqA+PJu1GXD9kH++KhnXlGfNoMqo= Subject key identifier: 47:B6:8F:F3:9A:F8:C7:F4:B5:C4:CC:9A:D3:DF:D0:08:BA:FB:11:48 Certificate issuer: /CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Certificate serial: 2565AB602784B90B7486FFFF4AFB75BED1AF2C35 Authority key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa Signing time: Sun 03 May 2026 02:56:31 +0000 ROA not before: Sun 03 May 2026 02:51:31 +0000 ROA not after: Sun 02 May 2027 02:56:31 +0000 asID: 141583 IP address blocks: 103.158.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 05:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:65:ab:60:27:84:b9:0b:74:86:ff:ff:4a:fb:75:be:d1:af:2c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Validity Not Before: May 3 02:51:31 2026 GMT Not After : May 2 02:56:31 2027 GMT Subject: CN=47B68FF39AF8C7F4B5C4CC9AD3DFD008BAFB1148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:06:53:dd:97:84:80:5d:d4:d4:31:0c:65: bb:97:d4:1b:df:26:21:36:2d:43:7b:66:1f:17:0d: 5f:ab:e3:79:65:e0:79:70:3f:5c:ff:5f:1c:61:71: 93:d9:e9:c0:bf:cb:1a:45:64:17:36:09:a3:ec:da: e6:e1:c5:3b:53:87:b6:ae:c0:85:3d:42:10:d1:a9: d7:6f:b4:7d:2f:ec:97:99:b6:0a:47:55:a4:42:6b: cb:f6:4f:2a:d7:c7:87:f3:a9:fc:96:49:14:1b:c9: 87:41:99:8e:04:95:d4:01:6c:c6:74:2a:aa:f8:1b: d0:f2:f8:cc:6e:0e:63:d3:3f:b2:8e:dc:5c:3c:3f: e9:d5:19:2c:6e:2f:e1:d5:7e:3c:ef:79:7b:de:d8: a6:9e:2b:ab:80:ff:d9:2d:0f:26:fb:6c:e1:19:44: 7f:5c:67:62:4d:61:a0:9f:86:05:be:42:da:06:76: 55:0c:51:50:ef:2a:6a:55:67:85:bd:a0:ff:f0:47: c3:a7:31:86:17:a5:63:eb:07:68:31:ed:9a:68:0d: 0a:6f:bf:42:51:0b:c9:80:fe:2c:b2:c7:c0:dc:e0: b8:44:62:d4:43:91:09:ee:05:f6:fd:8c:c6:0b:cb: e7:4e:31:7a:67:49:92:02:05:60:9a:28:99:63:8c: 4c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B6:8F:F3:9A:F8:C7:F4:B5:C4:CC:9A:D3:DF:D0:08:BA:FB:11:48 X509v3 Authority Key Identifier: keyid:F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.20.0/23 Signature Algorithm: sha256WithRSAEncryption 80:d3:84:b4:99:ad:36:4e:42:6e:05:36:93:4c:8e:42:db:29: 0f:9e:7e:01:a9:f5:c1:84:df:55:62:0c:ef:14:85:a6:f0:85: 2b:2e:b5:92:d3:81:73:a0:52:11:6c:2d:7c:97:d8:55:47:8b: 63:6e:11:40:49:f5:c8:dc:d9:f9:be:4b:a3:55:53:35:2e:1c: f3:70:7d:d3:40:44:fd:c1:1d:9c:f1:1a:db:c9:f2:0a:ca:6b: f9:61:f6:24:15:ac:2a:ce:1d:4b:c9:47:a4:f9:78:c7:b4:af: 30:a1:10:66:a8:32:f2:16:2c:a8:2b:ab:e4:b7:9d:71:f3:23: b7:76:0e:d9:53:5c:53:41:77:7e:0d:46:27:3f:a2:9a:89:6a: b8:7b:58:23:6e:7c:57:49:25:a9:31:6d:9a:be:1c:87:67:30: b4:49:1f:1a:54:23:8f:c8:33:39:78:86:4a:10:2c:43:4a:94: 95:72:d5:89:17:6f:6c:45:72:a9:04:27:d2:39:20:bf:75:f5: 9f:94:73:c7:b4:d8:b7:e8:95:79:0b:17:f5:02:ec:a0:43:46: 00:22:f5:8d:14:b0:db:01:0c:79:7a:ba:31:ee:81:b2:cb:ef: 4a:74:24:35:75:d3:84:2f:50:d1:45:2c:db:04:06:60:3c:b2: 1c:c2:02:47 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJWWrYCeEuQt0hv//Svt1vtGvLDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0 NUNGQTlFMDAeFw0yNjA1MDMwMjUxMzFaFw0yNzA1MDIwMjU2MzFaMDMxMTAvBgNV BAMTKDQ3QjY4RkYzOUFGOEM3RjRCNUM0Q0M5QUQzREZEMDA4QkFGQjExNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81AZT3ZeEgF3U1DEMZbuX1Bvf JiE2LUN7Zh8XDV+r43ll4HlwP1z/XxxhcZPZ6cC/yxpFZBc2CaPs2ubhxTtTh7au wIU9QhDRqddvtH0v7JeZtgpHVaRCa8v2TyrXx4fzqfyWSRQbyYdBmY4EldQBbMZ0 Kqr4G9Dy+MxuDmPTP7KO3Fw8P+nVGSxuL+HVfjzveXve2KaeK6uA/9ktDyb7bOEZ RH9cZ2JNYaCfhgW+QtoGdlUMUVDvKmpVZ4W9oP/wR8OnMYYXpWPrB2gx7ZpoDQpv v0JRC8mA/iyyx8Dc4LhEYtRDkQnuBfb9jMYLy+dOMXpnSZICBWCaKJljjExNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUR7aP85r4x/S1xMya09/QCLr7EUgwHwYDVR0j BBgwFoAU8GOVVs1NS61p/uDX8imz90XPqeAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQ4MWFjMDEtZjMwMi00NmVkLTllMWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZD RDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0NUNGQTlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDYzOTU1NkNENEQ0QkFENjlGRUUwRDdGMjI5QjNGNzQ1Q0ZB OUUwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E0ODFhYzAxLWYzMDItNDZlZC05 ZTFiLTY1OTM0NTZmMmQ1OS8wLzMxMzAzMzJlMzEzNTM4MmUzMjMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzUzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ54UMA0GCSqG SIb3DQEBCwUAA4IBAQCA04S0ma02TkJuBTaTTI5C2ykPnn4BqfXBhN9VYgzvFIWm 8IUrLrWS04FzoFIRbC18l9hVR4tjbhFASfXI3Nn5vkujVVM1LhzzcH3TQET9wR2c 8RrbyfIKymv5YfYkFawqzh1LyUek+XjHtK8woRBmqDLyFiyoK6vkt51x8yO3dg7Z U1xTQXd+DUYnP6KaiWq4e1gjbnxXSSWpMW2avhyHZzC0SR8aVCOPyDM5eIZKECxD SpSVctWJF29sRXKpBCfSOSC/dfWflHPHtNi36JV5Cxf1AuygQ0YAIvWNFLDbAQx5 erox7oGyy+9KdCQ1ddOEL1DRRSzbBAZgPLIcwgJH -----END CERTIFICATE-----Generated at Tue May 5 18:57:44 2026 by rpki-client