$ rpki-client -vvf rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa File: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (raw, json) Hash identifier: q99UPT0teezCe/Wtc8EBt8wiQOUmurJEflzD8Gd4ong= Subject key identifier: 61:BA:D5:5B:56:A1:14:22:A6:47:78:AD:BF:5C:67:3F:EC:9C:9C:CF Certificate issuer: /CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Certificate serial: 7BE81DE0DE1D3EF9C7322535812F0F8A8FB302E2 Authority key identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa Signing time: Sun 03 May 2026 02:10:33 +0000 ROA not before: Sun 03 May 2026 02:05:33 +0000 ROA not after: Sun 02 May 2027 02:10:33 +0000 asID: 142327 IP address blocks: 103.168.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e8:1d:e0:de:1d:3e:f9:c7:32:25:35:81:2f:0f:8a:8f:b3:02:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Validity Not Before: May 3 02:05:33 2026 GMT Not After : May 2 02:10:33 2027 GMT Subject: CN=61BAD55B56A11422A64778ADBF5C673FEC9C9CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:db:54:a6:b0:3b:fb:35:ab:6b:e3:ba:f3:fc: 56:1b:35:85:1b:5a:8f:3a:4f:35:a1:bf:29:d9:2e: 07:86:c8:1f:fe:8e:73:6e:dc:22:49:a4:ce:f2:48: 4c:71:3e:1f:ab:19:3e:1d:83:55:f8:ea:6e:f6:2b: 74:fa:09:13:75:56:bc:48:e6:c6:58:75:c6:d8:84: 2b:98:f2:e5:e5:08:10:f7:5c:e6:d0:04:9d:db:f6: e1:96:25:e5:dc:ae:7c:12:01:55:c6:c9:47:c7:60: 0d:27:87:da:61:a5:f2:e0:09:99:47:9d:54:8d:fa: 2e:55:61:3b:32:62:4f:04:ee:5d:86:fe:18:7d:88: 7d:f5:5e:34:e7:fb:4e:84:35:57:a9:b8:71:f1:d1: d4:0e:b6:b1:c0:12:d9:be:1e:34:2c:5a:fb:20:52: fc:4c:6f:58:71:0e:9b:05:c5:db:1c:ea:a7:28:eb: 3f:04:14:bd:23:15:ce:aa:ba:3f:c9:ed:7e:9e:ac: d1:e9:13:2d:9b:0b:b7:f1:7b:68:60:5a:93:f5:42: cf:e3:84:77:91:3c:8f:d8:ea:13:7a:f7:9a:87:e3: 5a:06:59:e1:0c:6f:40:8c:e9:78:12:26:79:c1:78: e0:a2:e8:ec:68:f6:e8:a1:a9:cb:1c:ad:c7:82:1e: 1f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BA:D5:5B:56:A1:14:22:A6:47:78:AD:BF:5C:67:3F:EC:9C:9C:CF X509v3 Authority Key Identifier: keyid:43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.250.0/23 Signature Algorithm: sha256WithRSAEncryption 45:28:b7:49:92:17:7e:2f:5c:e3:14:f0:29:73:41:bf:10:b4: da:a1:62:c9:29:69:4b:e4:3a:d5:2a:68:fc:d0:10:64:fc:04: 89:0d:81:8f:92:80:ac:ec:fc:ea:30:31:5c:8d:43:59:8e:3d: 35:22:b2:56:a5:e4:ef:12:a1:af:63:d5:6e:74:b1:85:87:ef: 06:41:01:1f:f8:1f:6b:03:5f:a0:35:75:44:64:13:68:79:2a: 62:06:80:77:cd:75:41:91:bb:dc:76:5b:b2:5d:25:04:71:e7: 0c:47:8a:b3:50:16:a9:3a:56:b7:8a:0c:b2:ee:7a:40:4e:f3: fb:22:a0:fd:83:4b:ea:7e:1d:07:f3:ae:c0:f1:05:0c:fe:c1: da:1e:22:cb:99:f5:4d:1e:4a:62:8e:ad:c0:86:c0:74:09:82: e0:2e:95:7a:4c:3b:49:a4:ee:02:f4:73:40:02:10:d1:4a:8e: 28:a5:80:b9:ae:8c:87:63:27:80:6b:69:39:cf:9b:b6:e7:72: 31:8b:72:44:c6:6c:ac:4c:0d:12:d4:46:46:81:58:bb:99:2f: 11:71:86:7d:ce:13:b6:ce:96:05:97:6e:e4:9c:1a:ca:aa:fc: 66:08:ce:a1:58:78:f7:b7:69:d5:77:02:23:93:a1:ad:82:d2: 89:54:af:04 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUe+gd4N4dPvnHMiU1gS8Pio+zAuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2 OUY0ODI5RTAeFw0yNjA1MDMwMjA1MzNaFw0yNzA1MDIwMjEwMzNaMDMxMTAvBgNV BAMTKDYxQkFENTVCNTZBMTE0MjJBNjQ3NzhBREJGNUM2NzNGRUM5QzlDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb21SmsDv7Natr47rz/FYbNYUb Wo86TzWhvynZLgeGyB/+jnNu3CJJpM7ySExxPh+rGT4dg1X46m72K3T6CRN1VrxI 5sZYdcbYhCuY8uXlCBD3XObQBJ3b9uGWJeXcrnwSAVXGyUfHYA0nh9phpfLgCZlH nVSN+i5VYTsyYk8E7l2G/hh9iH31XjTn+06ENVepuHHx0dQOtrHAEtm+HjQsWvsg UvxMb1hxDpsFxdsc6qco6z8EFL0jFc6quj/J7X6erNHpEy2bC7fxe2hgWpP1Qs/j hHeRPI/Y6hN695qH41oGWeEMb0CM6XgSJnnBeOCi6Oxo9uihqcscrceCHh+JAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUYbrVW1ahFCKmR3itv1xnP+ycnM8wHwYDVR0j BBgwFoAUQ+ejCll7sylzyythedmtiWn0gp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM4ZDU4MGItNDUyZS00MmQ3LWIwNDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1 OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2OUY0ODI5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0U3QTMwQTU5N0JCMzI5NzNDQjJCNjE3OUQ5QUQ4OTY5RjQ4 MjlFLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzAzOGQ1ODBiLTQ1MmUtNDJkNy1i MDQxLTkwMWRjMzNkNjg1Ny8wLzMxMzAzMzJlMzEzNjM4MmUzMjM1MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzIzMzMyMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqPowDQYJ KoZIhvcNAQELBQADggEBAEUot0mSF34vXOMU8ClzQb8QtNqhYskpaUvkOtUqaPzQ EGT8BIkNgY+SgKzs/OowMVyNQ1mOPTUislal5O8Soa9j1W50sYWH7wZBAR/4H2sD X6A1dURkE2h5KmIGgHfNdUGRu9x2W7JdJQRx5wxHirNQFqk6VreKDLLuekBO8/si oP2DS+p+HQfzrsDxBQz+wdoeIsuZ9U0eSmKOrcCGwHQJguAulXpMO0mk7gL0c0AC ENFKjiilgLmujIdjJ4BraTnPm7bncjGLckTGbKxMDRLURkaBWLuZLxFxhn3OE7bO lgWXbuScGsqq/GYIzqFYePe3adV3AiOToa2C0olUrwQ= -----END CERTIFICATE-----Generated at Wed May 13 10:16:57 2026 by rpki-client