$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa File: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (raw, json) Hash identifier: xDMl4fVPq1KOh6yEyAaFX1Ne1uCSqYoqoG2DK9eXVJc= Subject key identifier: E9:B6:AB:EC:70:3E:A4:F7:C3:7E:B3:3B:6C:1D:88:BC:F6:D7:86:B7 Certificate issuer: /CN=D59D3CB80F39720CC6378798AF38E978ACC61169 Certificate serial: 105FCCA583DFBFFA41FC1C3CABCF9E891765A2C7 Authority key identifier: D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa Signing time: Sun 03 May 2026 02:13:25 +0000 ROA not before: Sun 03 May 2026 02:08:25 +0000 ROA not after: Sun 02 May 2027 02:13:25 +0000 asID: 141146 IP address blocks: 103.158.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5f:cc:a5:83:df:bf:fa:41:fc:1c:3c:ab:cf:9e:89:17:65:a2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D59D3CB80F39720CC6378798AF38E978ACC61169 Validity Not Before: May 3 02:08:25 2026 GMT Not After : May 2 02:13:25 2027 GMT Subject: CN=E9B6ABEC703EA4F7C37EB33B6C1D88BCF6D786B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3e:84:41:32:70:d4:04:2f:eb:87:88:68:bb: 12:23:ed:f4:43:e4:f2:51:c8:57:4e:d3:de:a7:6f: a7:df:fd:3e:c9:99:df:15:8a:75:0b:8c:3b:d2:b6: 4f:be:b3:f8:4b:b9:8b:a6:d1:10:06:c5:71:fe:d4: 3d:e8:fe:40:1f:d4:84:7c:e2:52:1b:a8:95:ba:74: 78:68:fa:c4:d1:37:57:0c:2b:00:df:6c:26:cd:61: 44:04:cf:46:eb:5d:5b:bc:be:6b:56:5a:d8:59:8f: df:c1:18:b7:8f:47:95:77:a6:77:5b:b0:06:e8:d1: 7d:33:50:34:48:c4:cc:d8:c7:4e:3a:5e:e6:4b:23: 7f:f7:ce:9e:36:18:24:21:60:40:c9:78:c5:b9:aa: a5:f4:f3:14:7e:93:ea:47:a4:17:0c:44:aa:87:7b: cc:f9:d2:6a:00:85:33:e9:78:76:90:e9:46:c1:59: 2f:c0:02:07:ff:c2:d1:70:f5:e5:06:0d:6c:3b:9e: d2:f7:6c:80:96:9d:e5:e3:65:6c:c9:6f:7e:ad:0a: f1:93:98:3f:35:b6:6f:fb:5f:4a:fa:68:1c:1d:a6: 7f:6e:a4:2b:d8:7a:98:4d:50:10:09:3a:1d:1a:b3: 72:4f:f1:a7:a9:7a:25:10:7f:41:a5:71:da:d1:8d: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B6:AB:EC:70:3E:A4:F7:C3:7E:B3:3B:6C:1D:88:BC:F6:D7:86:B7 X509v3 Authority Key Identifier: keyid:D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.208.0/24 Signature Algorithm: sha256WithRSAEncryption 44:68:37:9d:ab:89:e3:57:40:7b:98:ae:e0:03:8f:c4:df:a5: ef:1f:7d:33:67:93:3c:48:e8:10:1d:9d:c7:af:a6:76:40:c0: 4c:e1:a2:a6:52:40:76:cd:1e:f4:af:84:21:d3:4b:0a:0c:f6: 24:16:5d:f8:22:b1:bb:f8:9d:48:05:8f:62:45:ff:0c:6e:4a: ec:e2:2e:f5:a9:72:18:04:68:1b:f1:99:54:0e:12:a7:a3:4c: 04:78:0a:1b:46:48:e5:7e:73:16:4c:79:4f:1c:c4:58:7f:03: ff:4d:b2:22:f3:73:81:e0:f1:35:de:64:53:fe:50:74:94:d5: 08:f6:f0:0c:a3:ea:d4:e9:97:1e:7d:0a:87:be:b3:94:aa:8c: db:ab:b8:ec:e1:59:ac:c9:8d:87:3c:c8:97:3c:e2:27:04:c8: a5:d6:aa:05:94:9f:1a:7d:f8:d4:d8:41:19:67:96:39:0f:2e: da:09:5e:01:e5:f2:17:b3:a6:21:aa:7b:5a:a4:4b:a8:2f:d8: 5e:60:4d:44:f1:6a:7d:4c:bd:df:9e:b3:68:99:2e:20:fa:ef: a8:34:d1:b5:c2:7d:42:bc:1b:1e:e6:ad:b2:49:e4:fd:58:59: 7a:84:c6:c6:4d:d3:75:d4:31:10:6c:a6:6f:60:29:32:0c:8c: af:4d:2b:82 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEF/MpYPfv/pB/Bw8q8+eiRdloscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU5RDNDQjgwRjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5NzhB Q0M2MTE2OTAeFw0yNjA1MDMwMjA4MjVaFw0yNzA1MDIwMjEzMjVaMDMxMTAvBgNV BAMTKEU5QjZBQkVDNzAzRUE0RjdDMzdFQjMzQjZDMUQ4OEJDRjZENzg2QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRPoRBMnDUBC/rh4houxIj7fRD 5PJRyFdO096nb6ff/T7Jmd8VinULjDvStk++s/hLuYum0RAGxXH+1D3o/kAf1IR8 4lIbqJW6dHho+sTRN1cMKwDfbCbNYUQEz0brXVu8vmtWWthZj9/BGLePR5V3pndb sAbo0X0zUDRIxMzYx046XuZLI3/3zp42GCQhYEDJeMW5qqX08xR+k+pHpBcMRKqH e8z50moAhTPpeHaQ6UbBWS/AAgf/wtFw9eUGDWw7ntL3bICWneXjZWzJb36tCvGT mD81tm/7X0r6aBwdpn9upCvYephNUBAJOh0as3JP8aepeiUQf0GlcdrRjb+7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU6bar7HA+pPfDfrM7bB2IvPbXhrcwHwYDVR0j BBgwFoAU1Z08uA85cgzGN4eYrzjpeKzGEWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU3MDU5MjctZWM2NC00NGY1LTljOWUtYzlhNTVhNTIzYjY0LzAvRDU5RDNDQjgw RjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5NzhBQ0M2MTE2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTlEM0NCODBGMzk3MjBDQzYzNzg3OThBRjM4RTk3OEFDQzYx MTY5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBlNzA1OTI3LWVjNjQtNDRmNS05 YzllLWM5YTU1YTUyM2I2NC8wLzMxMzAzMzJlMzEzNTM4MmUzMjMwMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTM0MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnntAwDQYJ KoZIhvcNAQELBQADggEBAERoN52rieNXQHuYruADj8Tfpe8ffTNnkzxI6BAdncev pnZAwEzhoqZSQHbNHvSvhCHTSwoM9iQWXfgisbv4nUgFj2JF/wxuSuziLvWpchgE aBvxmVQOEqejTAR4ChtGSOV+cxZMeU8cxFh/A/9NsiLzc4Hg8TXeZFP+UHSU1Qj2 8Ayj6tTplx59Coe+s5SqjNuruOzhWazJjYc8yJc84icEyKXWqgWUnxp9+NTYQRln ljkPLtoJXgHl8hezpiGqe1qkS6gv2F5gTUTxan1Mvd+es2iZLiD676g00bXCfUK8 Gx7mrbJJ5P1YWXqExsZN03XUMRBspm9gKTIMjK9NK4I= -----END CERTIFICATE-----Generated at Wed May 13 11:35:45 2026 by rpki-client