$ rpki-client -vvf rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32302e302f32342d3234203d3e203438343635.roa File: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (raw, json) Hash identifier: qjiY24pQYGnpcIAUBz/9B2SI7lYJZJWbcLgxcQ8Bo/w= Subject key identifier: 2B:C9:6B:D0:9B:3C:86:AE:11:08:A3:D1:91:E2:F5:D4:5F:64:7C:14 Certificate issuer: /CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Certificate serial: 7BF252359BC129426C524D9B0EABA42BFC53A151 Authority key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32302e302f32342d3234203d3e203438343635.roa Signing time: Sun 03 May 2026 02:56:32 +0000 ROA not before: Sun 03 May 2026 02:51:32 +0000 ROA not after: Sun 02 May 2027 02:56:32 +0000 asID: 48465 IP address blocks: 103.158.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 05:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f2:52:35:9b:c1:29:42:6c:52:4d:9b:0e:ab:a4:2b:fc:53:a1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Validity Not Before: May 3 02:51:32 2026 GMT Not After : May 2 02:56:32 2027 GMT Subject: CN=2BC96BD09B3C86AE1108A3D191E2F5D45F647C14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:e9:dc:8d:c7:4a:7e:cf:1d:46:80:1e:7e: ba:00:bd:32:26:55:0f:f6:86:c0:8b:7c:4c:de:be: a9:59:0b:e0:1d:26:19:33:b7:ae:42:22:11:e9:e4: 30:7b:90:ee:94:50:51:63:2b:95:e6:67:65:01:be: 11:47:c8:7b:99:95:16:f8:75:b0:2a:89:f3:1e:ac: 74:01:c6:be:e5:82:eb:45:35:00:b4:57:0b:a1:b8: c3:e3:09:4f:80:2f:1d:6b:d2:1c:26:b1:15:8d:78: 0f:1b:aa:42:13:0d:c2:c2:e2:72:8c:bc:73:73:71: 21:3b:a7:d6:e6:0f:3d:c5:5a:b7:53:ef:2f:40:79: 39:b2:08:01:2b:d4:9f:ed:31:b8:5a:65:37:18:27: f4:5f:82:37:75:78:93:f5:53:24:2f:5e:90:95:81: 98:72:98:8d:4a:f5:13:1c:f4:68:ac:2a:08:0b:19: fe:70:01:66:6d:e9:f7:81:d0:3a:a7:3d:8b:c2:18: 84:0a:14:9f:4e:a3:09:42:00:b7:c8:c5:30:8b:91: ad:ed:a5:e8:a5:44:13:8f:0a:f9:16:5d:ac:e0:2d: af:6b:d5:3a:73:b8:69:c9:72:33:92:29:f7:08:b0: ce:17:27:8a:7c:50:12:ea:16:b6:9c:73:e3:38:d3: 4f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C9:6B:D0:9B:3C:86:AE:11:08:A3:D1:91:E2:F5:D4:5F:64:7C:14 X509v3 Authority Key Identifier: keyid:F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32302e302f32342d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.20.0/24 Signature Algorithm: sha256WithRSAEncryption 40:07:b9:c4:1e:0f:4a:e3:fa:a5:59:4b:e5:d9:65:5c:7c:55: e0:71:d1:40:d6:f6:6b:2c:3f:02:9b:ce:86:f6:c1:34:29:1e: 7c:97:67:3c:1c:4c:a4:66:bf:36:0d:9f:6b:e5:2b:af:ab:cf: 7a:d1:d4:b0:f4:97:7a:8a:3e:90:d9:d3:aa:7c:0f:0d:00:24: b2:3a:b4:f1:49:0b:59:90:16:65:f4:52:2d:fc:24:58:52:7d: 8c:24:b3:14:f6:40:84:54:f5:6a:f6:1c:ca:e1:db:9f:a9:ac: 93:05:10:50:99:14:a9:a8:7d:1a:4a:e1:6c:ce:66:df:b1:97: c6:8a:ee:69:8d:01:b5:ac:74:16:a8:6b:ae:af:be:76:05:39: 66:17:7d:6c:70:10:93:23:0a:db:36:c3:88:df:20:7b:8c:08: 1d:49:89:a5:b2:fc:8d:96:71:ac:29:75:26:49:55:be:51:ff: 7a:8a:8c:a6:d6:fc:0f:26:54:92:53:ab:03:0b:15:97:7b:3c: 2e:8d:53:72:76:c0:da:10:09:e2:0d:65:f7:17:85:4f:19:a1: b6:76:f5:59:d5:4d:79:5c:d1:93:63:b2:54:7e:4b:a2:2c:7c: 6e:de:b3:1d:80:c2:ec:d7:72:46:c7:b9:e8:c0:12:fe:c5:d1: 49:7b:40:4e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUe/JSNZvBKUJsUk2bDqukK/xToVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0 NUNGQTlFMDAeFw0yNjA1MDMwMjUxMzJaFw0yNzA1MDIwMjU2MzJaMDMxMTAvBgNV BAMTKDJCQzk2QkQwOUIzQzg2QUUxMTA4QTNEMTkxRTJGNUQ0NUY2NDdDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NuncjcdKfs8dRoAefroAvTIm VQ/2hsCLfEzevqlZC+AdJhkzt65CIhHp5DB7kO6UUFFjK5XmZ2UBvhFHyHuZlRb4 dbAqifMerHQBxr7lgutFNQC0VwuhuMPjCU+ALx1r0hwmsRWNeA8bqkITDcLC4nKM vHNzcSE7p9bmDz3FWrdT7y9AeTmyCAEr1J/tMbhaZTcYJ/Rfgjd1eJP1UyQvXpCV gZhymI1K9RMc9GisKggLGf5wAWZt6feB0DqnPYvCGIQKFJ9OowlCALfIxTCLka3t peilRBOPCvkWXazgLa9r1TpzuGnJcjOSKfcIsM4XJ4p8UBLqFracc+M400/bAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUK8lr0Js8hq4RCKPRkeL11F9kfBQwHwYDVR0j BBgwFoAU8GOVVs1NS61p/uDX8imz90XPqeAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQ4MWFjMDEtZjMwMi00NmVkLTllMWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZD RDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0NUNGQTlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDYzOTU1NkNENEQ0QkFENjlGRUUwRDdGMjI5QjNGNzQ1Q0ZB OUUwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E0ODFhYzAxLWYzMDItNDZlZC05 ZTFiLTY1OTM0NTZmMmQ1OS8wLzMxMzAzMzJlMzEzNTM4MmUzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeeFDANBgkqhkiG 9w0BAQsFAAOCAQEAQAe5xB4PSuP6pVlL5dllXHxV4HHRQNb2ayw/ApvOhvbBNCke fJdnPBxMpGa/Ng2fa+Urr6vPetHUsPSXeoo+kNnTqnwPDQAksjq08UkLWZAWZfRS LfwkWFJ9jCSzFPZAhFT1avYcyuHbn6mskwUQUJkUqah9GkrhbM5m37GXxoruaY0B tax0Fqhrrq++dgU5Zhd9bHAQkyMK2zbDiN8ge4wIHUmJpbL8jZZxrCl1JklVvlH/ eoqMptb8DyZUklOrAwsVl3s8Lo1TcnbA2hAJ4g1l9xeFTxmhtnb1WdVNeVzRk2Oy VH5Loix8bt6zHYDC7NdyRse56MAS/sXRSXtATg== -----END CERTIFICATE-----Generated at Tue May 5 16:57:22 2026 by rpki-client