$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa File: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (raw, json) Hash identifier: NXjXH8bagUMJQqwbA86uVF5uVlgJU27CgQDeHpB6ITQ= Subject key identifier: 47:BB:25:7D:AA:04:7F:40:F5:7E:CC:DB:C5:2D:23:AB:BB:15:9A:8D Certificate issuer: /CN=D59D3CB80F39720CC6378798AF38E978ACC61169 Certificate serial: 300FC3A85AC79437EAEB4F71F7880F0F40F97CC9 Authority key identifier: D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa Signing time: Sun 03 May 2026 02:13:24 +0000 ROA not before: Sun 03 May 2026 02:08:24 +0000 ROA not after: Sun 02 May 2027 02:13:24 +0000 asID: 141146 IP address blocks: 103.158.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:0f:c3:a8:5a:c7:94:37:ea:eb:4f:71:f7:88:0f:0f:40:f9:7c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D59D3CB80F39720CC6378798AF38E978ACC61169 Validity Not Before: May 3 02:08:24 2026 GMT Not After : May 2 02:13:24 2027 GMT Subject: CN=47BB257DAA047F40F57ECCDBC52D23ABBB159A8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:cd:f8:6f:62:86:90:2e:96:96:07:e5:f6: 00:c5:16:93:1e:77:db:ce:e7:4c:82:d8:11:e8:ec: 7f:ba:bf:17:f3:69:0e:5b:47:04:5a:f7:73:5d:c0: 6c:80:c7:62:6a:26:fb:95:dd:df:4e:f2:f9:6a:eb: 97:e7:68:16:9c:c3:31:1d:99:a7:ca:57:d9:a9:77: ba:c7:31:7d:46:27:02:27:4b:da:00:9e:5e:c8:3d: c3:40:3a:f8:96:24:b8:58:a7:2c:e6:5b:ca:65:ad: 22:30:a3:eb:e2:00:a0:5c:fc:10:51:2a:0f:6b:6d: f1:9b:fd:f0:f5:4f:96:39:90:69:35:97:ce:f8:6c: a9:1e:f3:0e:50:12:e6:a2:f1:dc:2c:fa:ab:2f:c9: 90:07:da:bd:35:72:14:a3:75:cd:72:72:74:b0:a5: a4:b7:43:ef:cf:f5:e8:f4:7a:f3:b5:f5:d0:c7:f4: 5d:a8:3b:49:3a:c2:a9:ca:c1:ee:61:6f:96:72:80: 2d:a9:37:02:09:ca:ac:9d:f0:9c:dc:62:2b:a5:58: 44:69:81:78:46:15:93:97:09:cf:f1:28:e0:0e:93: b1:ee:31:6e:4b:62:96:ec:23:77:01:f2:89:41:ab: 92:ad:25:c7:a5:7d:e6:34:d1:ae:68:04:c3:3e:8d: 24:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BB:25:7D:AA:04:7F:40:F5:7E:CC:DB:C5:2D:23:AB:BB:15:9A:8D X509v3 Authority Key Identifier: keyid:D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.209.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:2e:b8:5a:6a:27:8a:dc:33:a9:8e:8a:17:4e:02:6d:08:49: 78:09:14:eb:90:2b:b7:96:5c:ad:a5:94:e2:21:d4:d1:6f:44: 11:46:4b:1e:b8:38:76:f4:88:ca:07:44:b5:2a:57:f4:12:c1: 71:77:a0:29:4e:53:c7:8e:1f:3c:22:90:69:4d:86:40:60:e6: a6:53:3d:be:8d:1f:ee:6e:69:5b:d3:1f:7b:77:b8:d7:fa:bf: 20:d4:df:67:a2:ea:6b:e4:dc:7e:d3:92:30:16:9d:7b:d0:e5: c2:a4:ce:de:f7:4e:63:e0:94:83:5a:88:dc:08:67:32:54:d5: 55:55:53:2c:13:e9:d3:15:e5:bb:64:20:aa:14:f5:58:1e:2a: fd:50:f7:ae:6e:86:e8:ac:b0:96:69:c5:4c:8c:e0:ce:10:7a: 5e:41:f7:bd:5b:1b:d7:1c:5a:6b:2b:53:9a:17:f4:fd:65:e1: 09:f6:23:f3:3e:0b:65:3e:0f:ed:e1:ea:af:13:22:e3:84:7c: 13:dc:46:45:c7:5a:38:bb:b9:45:86:0a:e4:da:b7:6d:d2:c6: 0f:78:ba:54:d2:37:45:f8:4f:cb:10:19:50:b9:00:6f:dc:89: aa:35:ee:b4:a1:77:fe:b7:bc:68:0a:a7:40:e8:ec:99:8a:69: 8e:3e:74:70 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMA/DqFrHlDfq609x94gPD0D5fMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU5RDNDQjgwRjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5NzhB Q0M2MTE2OTAeFw0yNjA1MDMwMjA4MjRaFw0yNzA1MDIwMjEzMjRaMDMxMTAvBgNV BAMTKDQ3QkIyNTdEQUEwNDdGNDBGNTdFQ0NEQkM1MkQyM0FCQkIxNTlBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YM34b2KGkC6Wlgfl9gDFFpMe d9vO50yC2BHo7H+6vxfzaQ5bRwRa93NdwGyAx2JqJvuV3d9O8vlq65fnaBacwzEd mafKV9mpd7rHMX1GJwInS9oAnl7IPcNAOviWJLhYpyzmW8plrSIwo+viAKBc/BBR Kg9rbfGb/fD1T5Y5kGk1l874bKke8w5QEuai8dws+qsvyZAH2r01chSjdc1ycnSw paS3Q+/P9ej0evO19dDH9F2oO0k6wqnKwe5hb5ZygC2pNwIJyqyd8JzcYiulWERp gXhGFZOXCc/xKOAOk7HuMW5LYpbsI3cB8olBq5KtJcelfeY00a5oBMM+jSSXAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUR7slfaoEf0D1fszbxS0jq7sVmo0wHwYDVR0j BBgwFoAU1Z08uA85cgzGN4eYrzjpeKzGEWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU3MDU5MjctZWM2NC00NGY1LTljOWUtYzlhNTVhNTIzYjY0LzAvRDU5RDNDQjgw RjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5NzhBQ0M2MTE2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTlEM0NCODBGMzk3MjBDQzYzNzg3OThBRjM4RTk3OEFDQzYx MTY5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBlNzA1OTI3LWVjNjQtNDRmNS05 YzllLWM5YTU1YTUyM2I2NC8wLzMxMzAzMzJlMzEzNTM4MmUzMjMwMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTM0MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnntEwDQYJ KoZIhvcNAQELBQADggEBAG4uuFpqJ4rcM6mOihdOAm0ISXgJFOuQK7eWXK2llOIh 1NFvRBFGSx64OHb0iMoHRLUqV/QSwXF3oClOU8eOHzwikGlNhkBg5qZTPb6NH+5u aVvTH3t3uNf6vyDU32ei6mvk3H7TkjAWnXvQ5cKkzt73TmPglINaiNwIZzJU1VVV UywT6dMV5btkIKoU9VgeKv1Q965uhuissJZpxUyM4M4Qel5B971bG9ccWmsrU5oX 9P1l4Qn2I/M+C2U+D+3h6q8TIuOEfBPcRkXHWji7uUWGCuTat23Sxg94ulTSN0X4 T8sQGVC5AG/ciao17rShd/63vGgKp0Do7JmKaY4+dHA= -----END CERTIFICATE-----Generated at Wed May 13 11:18:31 2026 by rpki-client