$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa File: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (raw, json) Hash identifier: 9VWfd5KMgyw5xyqB55UR/HJrZNws4qzcvTj6ecqQ/Qk= Subject key identifier: DB:2E:C7:6B:9F:70:D7:89:2A:7E:8C:16:5E:0C:58:CB:A3:E0:C4:0D Certificate issuer: /CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Certificate serial: 44D2DF6F6E6D5E1BA706F8E5FB749A3A8C3B6C5B Authority key identifier: B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa Signing time: Sun 03 May 2026 03:11:01 +0000 ROA not before: Sun 03 May 2026 03:06:01 +0000 ROA not after: Sun 02 May 2027 03:11:01 +0000 asID: 141607 IP address blocks: 103.160.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d2:df:6f:6e:6d:5e:1b:a7:06:f8:e5:fb:74:9a:3a:8c:3b:6c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Validity Not Before: May 3 03:06:01 2026 GMT Not After : May 2 03:11:01 2027 GMT Subject: CN=DB2EC76B9F70D7892A7E8C165E0C58CBA3E0C40D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e6:e8:85:6a:c5:6c:bf:94:30:55:c8:00:b3: 7c:1d:28:de:e1:76:7f:f7:a9:05:88:99:7a:11:97: 93:5f:ae:db:c9:9b:03:2b:ae:f0:62:90:83:e9:57: c8:d8:de:3f:64:75:67:e9:6e:d1:b3:ee:4e:09:54: 42:28:e3:e5:91:fa:46:0e:07:75:cc:ce:39:0b:04: d6:b9:ab:bc:6b:28:d0:56:9b:28:14:d7:13:57:3c: d7:90:23:bd:cb:24:94:8e:49:6f:af:31:de:53:f8: e6:48:83:f7:01:68:63:ae:3b:af:8e:01:55:ff:14: 1e:70:f9:fc:07:7c:f0:6e:be:00:c4:35:57:d5:fc: 87:f5:ab:8d:6f:c4:88:74:62:97:65:65:12:4c:0e: 55:a0:58:5f:1b:62:d8:b0:ed:4e:8a:44:ca:5c:18: 32:cd:0a:de:be:8b:51:e5:08:0f:02:13:a6:98:13: e0:e2:c3:23:d1:44:2c:5d:0e:79:16:0b:b6:2b:71: 30:b7:5d:9b:cb:7a:0d:95:33:e0:7f:6a:fb:18:1b: ef:d0:35:63:48:bb:91:7b:7d:87:20:f5:7c:45:92: 8b:53:d6:f4:ea:de:d3:7b:c9:26:d0:91:38:04:c7: 4a:82:fd:dd:cc:66:a4:2b:1a:88:a5:fa:46:97:4c: 11:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2E:C7:6B:9F:70:D7:89:2A:7E:8C:16:5E:0C:58:CB:A3:E0:C4:0D X509v3 Authority Key Identifier: keyid:B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.69.0/24 Signature Algorithm: sha256WithRSAEncryption 72:f9:6a:0f:6e:61:e4:35:eb:ee:ad:12:9b:77:65:54:dd:c4: d4:12:45:03:00:a3:84:f7:00:bc:86:25:f0:64:21:a5:51:88: 12:36:b4:bd:92:5a:cf:e9:f6:c3:80:78:3e:59:0e:38:4c:33: 68:c4:42:2f:4c:c3:cd:5b:9c:81:f0:0b:c1:58:68:89:b8:57: 15:f4:cd:8b:7b:ef:be:2c:89:cf:2f:51:a1:14:26:91:70:30: 62:93:e3:c0:ad:68:c2:9b:c7:67:c7:e9:df:23:2e:04:ce:c6: 68:6e:c6:bc:32:4c:25:bc:6f:ee:5c:a2:bc:5d:8a:8c:d5:49: 9b:bc:75:7a:7e:10:4c:9b:94:57:e4:38:36:5d:57:49:62:30: 04:ca:5e:2a:cd:44:cb:2b:a0:e5:d1:07:f8:f0:6f:62:9d:23: f1:b0:eb:33:c4:bb:ac:d6:77:bd:59:4d:45:56:cc:85:be:d3: 5d:c8:99:30:84:87:d2:eb:b0:47:72:63:8f:1b:e0:6b:c3:6b: ad:ee:ee:e3:c1:af:b4:f3:58:1a:c2:24:0d:68:4e:89:7a:5e: ce:01:3c:ee:1d:b4:1d:8b:05:cd:42:ef:ac:56:e3:bc:cf:1c: 62:e7:bf:fb:98:c3:94:d5:c3:c5:7d:68:a1:92:d7:26:94:de: b1:68:ce:26 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURNLfb25tXhunBvjl+3SaOow7bFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzExMUJB QjcwOTQwNjAeFw0yNjA1MDMwMzA2MDFaFw0yNzA1MDIwMzExMDFaMDMxMTAvBgNV BAMTKERCMkVDNzZCOUY3MEQ3ODkyQTdFOEMxNjVFMEM1OENCQTNFMEM0MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS5uiFasVsv5QwVcgAs3wdKN7h dn/3qQWImXoRl5NfrtvJmwMrrvBikIPpV8jY3j9kdWfpbtGz7k4JVEIo4+WR+kYO B3XMzjkLBNa5q7xrKNBWmygU1xNXPNeQI73LJJSOSW+vMd5T+OZIg/cBaGOuO6+O AVX/FB5w+fwHfPBuvgDENVfV/If1q41vxIh0YpdlZRJMDlWgWF8bYtiw7U6KRMpc GDLNCt6+i1HlCA8CE6aYE+DiwyPRRCxdDnkWC7YrcTC3XZvLeg2VM+B/avsYG+/Q NWNIu5F7fYcg9XxFkotT1vTq3tN7ySbQkTgEx0qC/d3MZqQrGoil+kaXTBHJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2y7Ha59w14kqfowWXgxYy6PgxA0wHwYDVR0j BBgwFoAUuBCMf76kK1mksA20otwRG6twlAYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjNzlmYmUtNDc5MC00NmJlLWI5YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZC RUE0MkI1OUE0QjAwREI0QTJEQzExMUJBQjcwOTQwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODEwOEM3RkJFQTQyQjU5QTRCMDBEQjRBMkRDMTExQkFCNzA5 NDA2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RhYzc5ZmJlLTQ3OTAtNDZiZS1i OWIyLTAzNTliMWExOGUzMy8wLzMxMzAzMzJlMzEzNjMwMmUzNjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6BFMA0GCSqG SIb3DQEBCwUAA4IBAQBy+WoPbmHkNevurRKbd2VU3cTUEkUDAKOE9wC8hiXwZCGl UYgSNrS9klrP6fbDgHg+WQ44TDNoxEIvTMPNW5yB8AvBWGiJuFcV9M2Le+++LInP L1GhFCaRcDBik+PArWjCm8dnx+nfIy4EzsZobsa8MkwlvG/uXKK8XYqM1UmbvHV6 fhBMm5RX5Dg2XVdJYjAEyl4qzUTLK6Dl0Qf48G9inSPxsOszxLus1ne9WU1FVsyF vtNdyJkwhIfS67BHcmOPG+Brw2ut7u7jwa+081gawiQNaE6Jel7OATzuHbQdiwXN Qu+sVuO8zxxi57/7mMOU1cPFfWihktcmlN6xaM4m -----END CERTIFICATE-----Generated at Tue May 5 13:30:33 2026 by rpki-client