$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa File: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (raw, json) Hash identifier: NXMKeEFbtGD5jl2gs5Op2j9jmwYVlgv0YYaBKtfr4gA= Subject key identifier: A9:42:07:FD:0D:B8:81:77:BA:A4:63:8D:25:02:A3:54:E1:FF:E6:60 Certificate issuer: /CN=AAB4671D9735066964F008C9DDFC52C3A710E040 Certificate serial: 7DFEABC56E6E3A20D8C6EFDCA4C663B2955DA00C Authority key identifier: AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa Signing time: Sun 03 May 2026 02:13:19 +0000 ROA not before: Sun 03 May 2026 02:08:19 +0000 ROA not after: Sun 02 May 2027 02:13:19 +0000 asID: 132649 IP address blocks: 103.24.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fe:ab:c5:6e:6e:3a:20:d8:c6:ef:dc:a4:c6:63:b2:95:5d:a0:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAB4671D9735066964F008C9DDFC52C3A710E040 Validity Not Before: May 3 02:08:19 2026 GMT Not After : May 2 02:13:19 2027 GMT Subject: CN=A94207FD0DB88177BAA4638D2502A354E1FFE660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ba:e8:39:7b:53:87:be:94:cf:fb:df:8b:88: d9:ca:a9:80:42:d1:2b:54:ce:1e:a6:4a:fd:b8:52: 5e:ed:8d:c9:b6:a9:7e:1b:f9:45:ab:4c:44:31:94: 16:19:6d:95:d5:80:5c:75:77:6e:d0:e3:11:15:23: 51:7d:99:c4:a0:60:6a:34:80:58:0c:e0:c1:6d:e0: e1:2f:6d:e3:1b:09:42:d9:30:a1:46:4e:dd:ed:3d: c4:37:ca:20:a0:08:e8:1d:13:eb:de:09:cd:f6:9e: a4:a2:b4:bc:c0:47:14:51:1a:3d:db:0a:1d:2a:54: 8e:55:36:bc:a5:ca:27:55:e4:cd:23:f3:8b:03:6b: f6:18:58:c2:be:31:5f:ef:81:57:06:ca:9c:f3:4e: 1b:5b:0b:8d:e8:88:fa:f8:0d:cd:42:d0:0d:1d:bf: a6:a9:eb:51:77:c9:5d:b2:4b:1e:d4:f0:2b:02:dd: 81:33:90:1d:0a:03:97:3f:d3:85:f0:f7:2c:b5:1d: c7:60:4e:9d:97:13:4a:5a:da:b5:79:d3:15:b3:7e: fc:a8:86:2d:ea:31:ce:2d:f0:ac:9e:3a:fc:60:de: d2:39:8b:9f:ac:69:7b:9d:22:99:de:15:8b:57:c2: a6:a6:f9:98:8f:98:30:4c:71:26:3b:0f:99:24:eb: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:42:07:FD:0D:B8:81:77:BA:A4:63:8D:25:02:A3:54:E1:FF:E6:60 X509v3 Authority Key Identifier: keyid:AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.214.0/24 Signature Algorithm: sha256WithRSAEncryption 54:1b:88:f5:1b:98:7c:26:ad:ec:8d:25:bb:3c:2a:85:f0:36: 81:95:59:5a:27:58:f7:02:14:33:79:be:fc:fd:05:74:52:d2: 53:bc:eb:3a:00:40:b8:7c:ff:30:f9:32:13:bc:5d:b7:87:c3: cd:a4:6d:94:f9:01:85:df:b2:46:ac:9d:f5:ca:1c:e7:e9:d7: f6:51:c5:e1:76:0c:54:32:7d:05:9e:18:28:52:5e:f3:ef:ac: 96:16:24:d3:d4:da:0f:fe:d5:14:e1:5b:c1:ef:b3:7e:b2:42: 46:9e:0d:27:49:0d:cc:c2:08:e4:07:d4:a0:37:f0:e7:ec:4c: 61:f1:f9:97:90:50:cc:f0:82:25:93:b4:f1:de:74:92:ca:61: e6:fb:85:4e:2f:d0:b2:1e:03:1b:4c:ae:bd:d7:8d:2b:60:d9: 6e:bb:09:63:a9:d8:6c:fc:b7:55:6f:ad:63:d3:67:c7:b8:60: c8:5a:a5:f9:cf:01:bb:8e:8e:02:88:6e:57:63:5a:de:ba:55: 92:b4:2d:47:0e:51:20:27:c2:62:95:5f:59:ec:a1:51:41:e3: 12:44:fc:e4:5e:c1:c1:17:1a:44:4b:fc:17:9d:92:5a:fd:16: 93:02:97:ec:83:0c:ee:3a:9d:07:9f:5d:71:7e:6a:55:66:c6: c8:5f:70:19 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUff6rxW5uOiDYxu/cpMZjspVdoAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFCNDY3MUQ5NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNB NzEwRTA0MDAeFw0yNjA1MDMwMjA4MTlaFw0yNzA1MDIwMjEzMTlaMDMxMTAvBgNV BAMTKEE5NDIwN0ZEMERCODgxNzdCQUE0NjM4RDI1MDJBMzU0RTFGRkU2NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLuug5e1OHvpTP+9+LiNnKqYBC 0StUzh6mSv24Ul7tjcm2qX4b+UWrTEQxlBYZbZXVgFx1d27Q4xEVI1F9mcSgYGo0 gFgM4MFt4OEvbeMbCULZMKFGTt3tPcQ3yiCgCOgdE+veCc32nqSitLzARxRRGj3b Ch0qVI5VNrylyidV5M0j84sDa/YYWMK+MV/vgVcGypzzThtbC43oiPr4Dc1C0A0d v6ap61F3yV2ySx7U8CsC3YEzkB0KA5c/04Xw9yy1HcdgTp2XE0pa2rV50xWzfvyo hi3qMc4t8KyeOvxg3tI5i5+saXudIpneFYtXwqam+ZiPmDBMcSY7D5kk68g1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqUIH/Q24gXe6pGONJQKjVOH/5mAwHwYDVR0j BBgwFoAUqrRnHZc1Bmlk8AjJ3fxSw6cQ4EAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU0NmEzMDUtZGY3Ny00NTg3LTg3MDMtYTkwNWM1Mzc3OWFjLzAvQUFCNDY3MUQ5 NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNBNzEwRTA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQUI0NjcxRDk3MzUwNjY5NjRGMDA4QzlEREZDNTJDM0E3MTBF MDQwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBlNDZhMzA1LWRmNzctNDU4Ny04 NzAzLWE5MDVjNTM3NzlhYy8wLzMxMzAzMzJlMzIzNDJlMzIzMTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxjWMA0GCSqG SIb3DQEBCwUAA4IBAQBUG4j1G5h8Jq3sjSW7PCqF8DaBlVlaJ1j3AhQzeb78/QV0 UtJTvOs6AEC4fP8w+TITvF23h8PNpG2U+QGF37JGrJ31yhzn6df2UcXhdgxUMn0F nhgoUl7z76yWFiTT1NoP/tUU4VvB77N+skJGng0nSQ3MwgjkB9SgN/Dn7Exh8fmX kFDM8IIlk7Tx3nSSymHm+4VOL9CyHgMbTK69140rYNluuwljqdhs/LdVb61j02fH uGDIWqX5zwG7jo4CiG5XY1reulWStC1HDlEgJ8JilV9Z7KFRQeMSRPzkXsHBFxpE S/wXnZJa/RaTApfsgwzuOp0Hn11xfmpVZsbIX3AZ -----END CERTIFICATE-----Generated at Wed May 13 04:55:04 2026 by rpki-client