$ rpki-client -vvf rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32302e302f32332d3234203d3e203236353631.roa File: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (raw, json) Hash identifier: OiF+lqNfnntYlUTcLuL6XkD0ILHuGuhCZq5QG/i1DxA= Subject key identifier: EF:11:DB:50:78:60:32:8D:EF:7D:20:A6:69:8E:9F:C4:35:5F:42:27 Certificate issuer: /CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Certificate serial: 3A24D3B5296B5F10C236ED60AEB3373A6F2ED3D7 Authority key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32302e302f32332d3234203d3e203236353631.roa Signing time: Sun 03 May 2026 02:56:31 +0000 ROA not before: Sun 03 May 2026 02:51:31 +0000 ROA not after: Sun 02 May 2027 02:56:31 +0000 asID: 26561 IP address blocks: 103.158.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 05:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:24:d3:b5:29:6b:5f:10:c2:36:ed:60:ae:b3:37:3a:6f:2e:d3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Validity Not Before: May 3 02:51:31 2026 GMT Not After : May 2 02:56:31 2027 GMT Subject: CN=EF11DB507860328DEF7D20A6698E9FC4355F4227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:62:fe:51:44:cd:71:c3:78:e7:0c:35:8b: 71:f8:32:c4:7c:86:74:5d:5e:8d:84:b6:25:8e:b5: d2:e2:8a:a8:c9:19:91:ad:b9:e7:8d:61:38:1e:c7: 56:54:f3:c5:07:ad:cc:76:51:cc:b1:74:83:ef:1f: d6:ed:ba:ed:0c:96:62:1f:f5:55:30:1d:f8:ac:c4: f1:61:44:26:49:c6:02:33:2b:79:25:14:40:9b:97: 09:f6:85:d8:16:6a:70:15:0b:81:3a:6b:db:1f:ad: bf:11:1d:59:84:52:b0:1d:0c:96:6f:91:f1:94:e6: 43:5a:73:61:c6:32:a7:42:d3:76:a9:50:85:32:c3: 00:8f:c0:07:c5:b1:e8:ce:87:5e:f6:2a:a9:4e:72: cc:dc:3f:e1:21:4c:bc:43:97:1b:08:59:a7:cb:62: d2:f2:4e:f9:a8:83:eb:81:6d:22:74:74:92:05:68: 92:7d:07:5f:71:43:9b:a5:67:c8:a1:63:87:71:b3: 11:25:8f:76:7e:ca:c5:e1:1e:21:ac:f7:33:62:78: 8f:81:4c:d6:87:49:b9:ab:88:29:3c:50:31:76:69: c7:24:05:ee:b9:13:da:89:35:38:4f:64:f3:10:e3: d8:e1:53:4e:9e:c8:23:34:65:6c:c2:ab:6c:12:71: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:11:DB:50:78:60:32:8D:EF:7D:20:A6:69:8E:9F:C4:35:5F:42:27 X509v3 Authority Key Identifier: keyid:F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32302e302f32332d3234203d3e203236353631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.20.0/23 Signature Algorithm: sha256WithRSAEncryption 41:e6:f3:8c:d6:30:4b:74:c7:0c:0a:a9:fb:d6:68:5b:ff:af: ed:c2:cb:e9:70:7e:78:3d:0c:5c:68:04:bb:df:af:26:4a:45: 11:98:8e:af:f8:28:a7:6a:42:da:83:03:30:9e:45:90:04:ec: 87:9b:d1:05:bb:39:62:2c:25:df:d3:a7:9d:43:cb:70:88:c6: 88:f1:27:10:1d:41:03:69:ab:2f:bb:2c:7a:67:98:05:31:df: e3:60:86:66:fa:f0:d9:6d:92:09:9b:fb:23:95:5a:6a:e1:31: 1b:e7:11:21:df:87:91:b0:fd:29:93:6f:3f:f7:23:c4:d7:33: c2:94:20:b7:56:b3:20:9a:b7:84:5b:38:b1:d4:ca:60:a2:92: 82:3e:52:e1:79:47:81:f9:aa:dd:d4:be:14:01:57:86:f3:0a: 0a:5c:aa:cd:25:18:c7:5f:82:87:72:d5:be:4a:46:af:ef:15: 7d:d1:b3:5d:86:be:5b:24:07:0c:60:43:57:1e:e6:59:f0:02: f1:e3:09:61:8c:09:77:93:e4:3f:74:bc:f4:f8:ba:22:5d:50: ca:18:f7:c0:af:05:af:f4:1f:34:e9:21:00:cf:00:02:52:a4: 77:df:14:73:b4:f3:4b:4c:1e:43:4e:d1:51:a7:fe:89:a1:9b: 9a:e9:18:7d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOiTTtSlrXxDCNu1grrM3Om8u09cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0 NUNGQTlFMDAeFw0yNjA1MDMwMjUxMzFaFw0yNzA1MDIwMjU2MzFaMDMxMTAvBgNV BAMTKEVGMTFEQjUwNzg2MDMyOERFRjdEMjBBNjY5OEU5RkM0MzU1RjQyMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgaWL+UUTNccN45ww1i3H4MsR8 hnRdXo2EtiWOtdLiiqjJGZGtueeNYTgex1ZU88UHrcx2UcyxdIPvH9btuu0MlmIf 9VUwHfisxPFhRCZJxgIzK3klFECblwn2hdgWanAVC4E6a9sfrb8RHVmEUrAdDJZv kfGU5kNac2HGMqdC03apUIUywwCPwAfFsejOh172KqlOcszcP+EhTLxDlxsIWafL YtLyTvmog+uBbSJ0dJIFaJJ9B19xQ5ulZ8ihY4dxsxElj3Z+ysXhHiGs9zNieI+B TNaHSbmriCk8UDF2acckBe65E9qJNThPZPMQ49jhU06eyCM0ZWzCq2wScSFDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7xHbUHhgMo3vfSCmaY6fxDVfQicwHwYDVR0j BBgwFoAU8GOVVs1NS61p/uDX8imz90XPqeAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQ4MWFjMDEtZjMwMi00NmVkLTllMWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZD RDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0NUNGQTlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDYzOTU1NkNENEQ0QkFENjlGRUUwRDdGMjI5QjNGNzQ1Q0ZB OUUwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E0ODFhYzAxLWYzMDItNDZlZC05 ZTFiLTY1OTM0NTZmMmQ1OS8wLzMxMzAzMzJlMzEzNTM4MmUzMjMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeeFDANBgkqhkiG 9w0BAQsFAAOCAQEAQebzjNYwS3THDAqp+9ZoW/+v7cLL6XB+eD0MXGgEu9+vJkpF EZiOr/gop2pC2oMDMJ5FkATsh5vRBbs5Yiwl39OnnUPLcIjGiPEnEB1BA2mrL7ss emeYBTHf42CGZvrw2W2SCZv7I5VaauExG+cRId+HkbD9KZNvP/cjxNczwpQgt1az IJq3hFs4sdTKYKKSgj5S4XlHgfmq3dS+FAFXhvMKClyqzSUYx1+Ch3LVvkpGr+8V fdGzXYa+WyQHDGBDVx7mWfAC8eMJYYwJd5PkP3S89Pi6Il1Qyhj3wK8Fr/QfNOkh AM8AAlKkd98Uc7TzS0weQ07RUaf+iaGbmukYfQ== -----END CERTIFICATE-----Generated at Tue May 5 18:58:01 2026 by rpki-client