$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa File: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (raw, json) Hash identifier: ZcQGtptLynLQhbsDejD5BqWtMIiUWg5vn//LHtPV2PU= Subject key identifier: 9A:A0:6F:50:D4:39:F0:8A:F0:CD:DA:95:43:5B:B7:E2:6F:2F:98:95 Certificate issuer: /CN=E98212FB2801E9D8F979B478187B22C73E005B8C Certificate serial: 2C5E052F42A03DC7ACDAF662AB705777EBD8842D Authority key identifier: E9:82:12:FB:28:01:E9:D8:F9:79:B4:78:18:7B:22:C7:3E:00:5B:8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98212FB2801E9D8F979B478187B22C73E005B8C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa Signing time: Sun 03 May 2026 02:13:44 +0000 ROA not before: Sun 03 May 2026 02:08:44 +0000 ROA not after: Sun 02 May 2027 02:13:44 +0000 asID: 58404 IP address blocks: 103.102.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.crl rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98212FB2801E9D8F979B478187B22C73E005B8C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5e:05:2f:42:a0:3d:c7:ac:da:f6:62:ab:70:57:77:eb:d8:84:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98212FB2801E9D8F979B478187B22C73E005B8C Validity Not Before: May 3 02:08:44 2026 GMT Not After : May 2 02:13:44 2027 GMT Subject: CN=9AA06F50D439F08AF0CDDA95435BB7E26F2F9895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:d9:fc:89:4b:4b:3c:22:ca:46:51:da:89: 66:9f:ff:fa:d5:88:2f:23:e7:f1:34:a4:de:26:c4: 39:30:87:a1:2a:5c:64:38:a4:6e:fb:87:2c:2f:d5: 00:95:09:01:2e:a1:93:86:7e:e4:58:52:8a:16:0b: cd:18:7d:f4:97:2d:c9:ed:59:5c:b4:00:6a:36:a3: a4:a4:9a:ea:bc:50:48:a2:c8:a5:74:fa:7d:be:80: af:ad:89:19:8d:43:a7:ad:41:d9:9b:b7:7e:86:08: ee:dc:50:df:54:e3:8c:3a:1d:f1:6c:35:fc:e0:42: 8b:f6:88:f7:9e:e3:de:f6:4a:a1:34:9d:e1:7a:81: a0:c1:b4:f6:48:ba:28:cc:6d:66:2c:5b:6f:09:6d: 5e:6c:92:bb:3a:25:2e:86:81:a4:a6:90:ac:d4:2f: 73:a8:f3:76:81:2d:05:a5:fc:15:a6:76:d5:3d:18: e7:38:8d:6a:f6:c3:e3:fc:24:d6:2f:21:5c:c0:b4: 33:5d:03:1f:44:9e:18:ae:e8:da:12:aa:63:77:67: ee:3a:84:dc:2e:66:10:92:aa:af:f9:26:56:b6:76: b0:d5:f3:61:d6:95:b1:24:a6:b6:c0:8b:02:30:80: 52:83:f0:e5:c6:db:3a:61:37:ee:c5:a8:c1:94:42: 6c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A0:6F:50:D4:39:F0:8A:F0:CD:DA:95:43:5B:B7:E2:6F:2F:98:95 X509v3 Authority Key Identifier: keyid:E9:82:12:FB:28:01:E9:D8:F9:79:B4:78:18:7B:22:C7:3E:00:5B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98212FB2801E9D8F979B478187B22C73E005B8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.152.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:12:61:f1:f2:2b:c0:e6:f9:62:d1:de:48:b7:f3:cb:09:fa: 8b:ed:87:30:ad:1a:c6:6d:35:fc:ff:05:e7:73:8d:a8:c2:87: 4e:a2:9d:6b:2a:cf:8a:c2:74:b8:07:9f:da:7f:83:59:c1:8e: 88:73:ba:df:f9:40:de:ea:ed:a8:54:2e:f7:a5:ae:5a:3e:09: 6a:f0:16:a7:20:e3:35:d3:3f:7d:c2:53:1d:1a:36:9c:6b:c3: d2:23:b9:f7:3c:ab:ea:30:cf:6c:23:4b:de:64:8b:b8:a8:84: fb:ac:eb:87:07:da:66:e8:e9:03:0d:4f:8d:0a:f2:02:6a:ad: bd:61:ed:15:13:c5:4f:01:96:8a:b4:29:5b:ae:a9:30:3b:0b: 9f:65:d7:47:fd:34:bc:05:95:7a:db:33:37:44:14:01:78:cd: 8f:2e:e1:67:6d:48:95:91:e8:64:c4:2f:25:b7:87:25:4b:6e: 72:75:36:4f:a2:08:75:d5:1a:e5:1e:d1:6b:7b:d3:e3:97:e0: 48:8a:96:86:08:c8:b5:0f:a8:c0:8a:b0:77:71:c2:53:6c:d6: 2d:11:56:a3:94:b6:92:23:03:ff:c3:bf:22:c3:02:f5:2b:4e: 89:39:d8:1c:6f:f8:1e:ff:1b:59:b5:b8:f5:fa:91:6d:04:2d: 82:25:a1:88 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULF4FL0KgPces2vZiq3BXd+vYhC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4MjEyRkIyODAxRTlEOEY5NzlCNDc4MTg3QjIyQzcz RTAwNUI4QzAeFw0yNjA1MDMwMjA4NDRaFw0yNzA1MDIwMjEzNDRaMDMxMTAvBgNV BAMTKDlBQTA2RjUwRDQzOUYwOEFGMENEREE5NTQzNUJCN0UyNkYyRjk4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzY9n8iUtLPCLKRlHaiWaf//rV iC8j5/E0pN4mxDkwh6EqXGQ4pG77hywv1QCVCQEuoZOGfuRYUooWC80YffSXLcnt WVy0AGo2o6Skmuq8UEiiyKV0+n2+gK+tiRmNQ6etQdmbt36GCO7cUN9U44w6HfFs NfzgQov2iPee4972SqE0neF6gaDBtPZIuijMbWYsW28JbV5skrs6JS6GgaSmkKzU L3Oo83aBLQWl/BWmdtU9GOc4jWr2w+P8JNYvIVzAtDNdAx9Enhiu6NoSqmN3Z+46 hNwuZhCSqq/5Jla2drDV82HWlbEkprbAiwIwgFKD8OXG2zphN+7FqMGUQmz5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmqBvUNQ58IrwzdqVQ1u34m8vmJUwHwYDVR0j BBgwFoAU6YIS+ygB6dj5ebR4GHsixz4AW4wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYyYjZlZDItY2M1OC00NWM1LWJkODgtY2I5NTUwNzE2YTA0LzAvRTk4MjEyRkIy ODAxRTlEOEY5NzlCNDc4MTg3QjIyQzczRTAwNUI4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTgyMTJGQjI4MDFFOUQ4Rjk3OUI0NzgxODdCMjJDNzNFMDA1 QjhDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBmMmI2ZWQyLWNjNTgtNDVjNS1i ZDg4LWNiOTU1MDcxNmEwNC8wLzMxMzAzMzJlMzEzMDMyMmUzMTM1MzIyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNTM4MzQzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2aYMA0GCSqG SIb3DQEBCwUAA4IBAQAqEmHx8ivA5vli0d5It/PLCfqL7YcwrRrGbTX8/wXnc42o wodOop1rKs+KwnS4B5/af4NZwY6Ic7rf+UDe6u2oVC73pa5aPglq8BanIOM10z99 wlMdGjaca8PSI7n3PKvqMM9sI0veZIu4qIT7rOuHB9pm6OkDDU+NCvICaq29Ye0V E8VPAZaKtClbrqkwOwufZddH/TS8BZV62zM3RBQBeM2PLuFnbUiVkehkxC8lt4cl S25ydTZPogh11RrlHtFre9Pjl+BIipaGCMi1D6jAirB3ccJTbNYtEVajlLaSIwP/ w78iwwL1K06JOdgcb/ge/xtZtbj1+pFtBC2CJaGI -----END CERTIFICATE-----Generated at Wed May 13 08:28:11 2026 by rpki-client