$ rpki-client -vvf rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e312e302f32342d3234203d3e203338333230.roa File: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (raw, json) Hash identifier: EBg9PPFqElHOEwsrpdD6H1NGjPABOYmUx9oKSNOCgD8= Subject key identifier: 96:36:B8:65:BC:13:BE:35:F7:40:F9:A1:92:31:35:F3:BD:4F:65:83 Certificate issuer: /CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Certificate serial: 6098D2D5EE15D985C9947B43032FC54FA8DF3C8D Authority key identifier: BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e312e302f32342d3234203d3e203338333230.roa Signing time: Sun 03 May 2026 02:10:26 +0000 ROA not before: Sun 03 May 2026 02:05:26 +0000 ROA not after: Sun 02 May 2027 02:10:26 +0000 asID: 38320 IP address blocks: 103.135.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:98:d2:d5:ee:15:d9:85:c9:94:7b:43:03:2f:c5:4f:a8:df:3c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Validity Not Before: May 3 02:05:26 2026 GMT Not After : May 2 02:10:26 2027 GMT Subject: CN=9636B865BC13BE35F740F9A1923135F3BD4F6583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dc:f8:2c:a2:10:c6:35:e9:27:0a:0b:b0:95: 76:d7:85:b1:56:31:18:f3:e7:b4:97:5a:ef:58:58: d8:a7:7a:da:93:dd:b0:85:86:59:4e:54:eb:3a:dc: f4:89:f1:7f:1e:f5:22:08:cc:3f:b5:83:92:0a:22: 83:6d:ae:eb:bf:6b:49:47:76:a5:f2:d0:58:f3:34: a1:d3:74:3a:5d:c2:01:d1:54:cd:d4:c7:f0:6a:e9: d7:a1:6e:bb:5f:74:9a:3e:81:a1:e9:0d:e1:e9:3e: 8f:e0:58:dd:55:f3:72:00:b9:31:c1:a0:0e:7d:41: 49:7d:c8:01:b7:d1:62:29:36:ba:8c:01:5b:20:4c: da:76:d7:0a:70:6c:ae:98:fb:86:29:1f:2a:70:0a: 96:f8:29:05:04:81:86:82:b2:d1:d8:68:09:2f:f1: 00:dc:26:b4:e1:82:4b:a0:af:25:92:7f:30:9b:35: 57:72:e0:2b:cf:b3:f8:9d:79:0f:f2:24:1c:6d:58: 5f:22:4a:d6:e2:74:05:e5:ea:c6:62:de:e4:7f:f1: 93:ec:3a:3d:c2:c7:1b:03:55:ba:61:b0:4e:f4:dd: 59:f6:48:d5:43:b9:e0:65:6c:5b:da:4a:32:ae:2a: d5:98:b2:51:da:8f:a4:07:e2:7b:85:6a:b0:9d:fb: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:36:B8:65:BC:13:BE:35:F7:40:F9:A1:92:31:35:F3:BD:4F:65:83 X509v3 Authority Key Identifier: keyid:BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e312e302f32342d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.1.0/24 Signature Algorithm: sha256WithRSAEncryption bd:cc:ef:02:1c:57:41:ea:e1:d7:8b:11:88:32:49:d9:f6:1c: 37:e9:36:9f:a0:9f:53:e3:92:65:50:bb:b9:91:54:c2:8e:d9: 03:d9:c2:bc:e1:19:60:c8:06:b0:e8:35:0e:0f:f4:26:80:0a: 21:ff:bf:ae:35:17:b2:ec:21:3c:ff:69:6e:7b:ee:33:2c:63: 51:41:39:8c:a6:b9:ee:f1:9c:77:13:39:5a:04:24:76:ea:33: 4e:40:8a:d0:b7:08:cf:f8:f2:82:24:58:c1:79:03:de:4a:92: 92:7f:e3:3c:55:9e:b1:6d:aa:e0:23:c9:a8:52:b4:09:02:d5: dc:25:9a:42:2b:dd:7c:c6:59:4e:4b:f9:63:9e:2f:ca:c3:4b: e2:35:69:e3:f3:ea:8b:dd:97:63:42:3e:b9:43:88:3f:2b:0e: 6e:3c:ba:ec:62:66:3f:af:74:39:90:9f:d3:fe:b5:7d:2e:67: e4:f9:58:4f:8f:8b:44:49:f1:98:41:9b:8e:18:1a:3b:c6:f3: d5:26:52:3a:db:d6:15:97:c0:f7:59:1b:bd:90:3c:4f:ca:4c: 65:ec:05:15:68:df:18:c7:a8:e2:11:82:4d:d5:d0:7c:31:f9: c4:e8:cd:57:69:2e:44:2e:57:bc:b9:78:87:c2:1e:11:d4:9d: 53:16:5c:06 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUYJjS1e4V2YXJlHtDAy/FT6jfPI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMy ODUzRTk5NjAeFw0yNjA1MDMwMjA1MjZaFw0yNzA1MDIwMjEwMjZaMDMxMTAvBgNV BAMTKDk2MzZCODY1QkMxM0JFMzVGNzQwRjlBMTkyMzEzNUYzQkQ0RjY1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ3PgsohDGNeknCguwlXbXhbFW MRjz57SXWu9YWNinetqT3bCFhllOVOs63PSJ8X8e9SIIzD+1g5IKIoNtruu/a0lH dqXy0FjzNKHTdDpdwgHRVM3Ux/Bq6dehbrtfdJo+gaHpDeHpPo/gWN1V83IAuTHB oA59QUl9yAG30WIpNrqMAVsgTNp21wpwbK6Y+4YpHypwCpb4KQUEgYaCstHYaAkv 8QDcJrThgkugryWSfzCbNVdy4CvPs/ideQ/yJBxtWF8iStbidAXl6sZi3uR/8ZPs Oj3CxxsDVbphsE703Vn2SNVDueBlbFvaSjKuKtWYslHaj6QH4nuFarCd+0grAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUlja4ZbwTvjX3QPmhkjE1871PZYMwHwYDVR0j BBgwFoAUvhx5YJ24asAFOVbtom+h0yhT6ZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI5OWU2ZjAtZjIzYy00MWZmLWI2N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5 REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMyODUzRTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTFDNzk2MDlEQjg2QUMwMDUzOTU2RURBMjZGQTFEMzI4NTNF OTk2LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzAyOTllNmYwLWYyM2MtNDFmZi1i NjdjLTQxYWYwNTEzMzlkMS8wLzMxMzAzMzJlMzEzMzM1MmUzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzMzMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnhwEwDQYJKoZIhvcN AQELBQADggEBAL3M7wIcV0Hq4deLEYgySdn2HDfpNp+gn1PjkmVQu7mRVMKO2QPZ wrzhGWDIBrDoNQ4P9CaACiH/v641F7LsITz/aW577jMsY1FBOYymue7xnHcTOVoE JHbqM05AitC3CM/48oIkWMF5A95KkpJ/4zxVnrFtquAjyahStAkC1dwlmkIr3XzG WU5L+WOeL8rDS+I1aePz6ovdl2NCPrlDiD8rDm48uuxiZj+vdDmQn9P+tX0uZ+T5 WE+Pi0RJ8ZhBm44YGjvG89UmUjrb1hWXwPdZG72QPE/KTGXsBRVo3xjHqOIRgk3V 0Hwx+cTozVdpLkQuV7y5eIfCHhHUnVMWXAY= -----END CERTIFICATE-----Generated at Wed May 13 13:43:05 2026 by rpki-client