$ rpki-client -vvf rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa File: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (raw, json) Hash identifier: AcnbfkvX1w/c7v0ssG/zc+baC3z+ryz2Lyxv+skns7o= Subject key identifier: 88:9B:8F:83:E8:5F:BA:AF:E3:82:49:5D:4E:92:71:3D:A5:25:CB:75 Certificate issuer: /CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Certificate serial: 1037096786218C1EDEE9C36E0E96413909AF2506 Authority key identifier: D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa Signing time: Sun 03 May 2026 02:14:46 +0000 ROA not before: Sun 03 May 2026 02:09:46 +0000 ROA not after: Sun 02 May 2027 02:14:46 +0000 asID: 139431 IP address blocks: 103.143.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:37:09:67:86:21:8c:1e:de:e9:c3:6e:0e:96:41:39:09:af:25:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Validity Not Before: May 3 02:09:46 2026 GMT Not After : May 2 02:14:46 2027 GMT Subject: CN=889B8F83E85FBAAFE382495D4E92713DA525CB75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:b6:99:fd:b6:e1:1f:b8:ee:97:c0:4d:79: c0:b9:b4:46:e7:a6:14:20:86:08:9c:0b:80:93:7c: 48:0c:3a:61:5d:07:07:d7:36:b4:3b:6b:e4:d4:54: 9d:87:2b:ce:a4:13:20:67:4e:13:a1:34:da:8f:37: b8:60:5e:82:d8:4e:2d:55:ab:a4:6c:e9:e8:d6:4d: 11:8c:91:a8:b4:95:76:fa:80:fc:6e:f0:3d:31:b8: a3:4a:a1:73:50:e5:62:71:71:ca:79:24:ae:e9:32: 0a:20:7e:7b:ef:a1:f1:46:93:f9:70:44:4e:3e:41: ef:41:75:88:66:fe:fe:c9:d6:98:2e:07:94:9d:02: 3e:4d:3e:22:8d:80:51:6e:65:87:b1:f8:b7:c8:97: d1:3e:76:dc:fc:ec:f7:10:7d:22:4b:ed:7e:83:d5: 92:81:47:00:3b:5e:76:2d:2b:a8:7c:ea:7e:38:38: 86:c3:0d:9f:b3:45:02:86:5c:07:41:ed:ec:b4:de: 46:ee:f5:ef:02:97:09:d6:4b:07:e3:c1:8e:5e:ac: f3:83:08:18:cd:2c:c6:b8:7a:6b:df:9f:6b:03:38: ae:7f:ee:8a:55:05:0b:36:8b:58:fc:af:d0:df:ae: 57:c7:28:03:d1:57:75:41:e9:da:3e:d4:45:50:9d: f3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9B:8F:83:E8:5F:BA:AF:E3:82:49:5D:4E:92:71:3D:A5:25:CB:75 X509v3 Authority Key Identifier: keyid:D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.23.0/24 Signature Algorithm: sha256WithRSAEncryption 39:8b:c1:7b:4a:63:3f:24:0f:28:8c:2d:4d:3f:cd:8f:e8:39: 83:e1:b3:ce:47:a2:1a:10:07:36:c3:03:9f:45:80:0e:9b:40: 47:97:d2:5b:7d:8a:17:a4:14:ae:b0:f8:3a:02:40:35:dd:62: 79:9e:ba:f0:ef:3f:ca:dd:3d:8b:d1:0b:52:09:d2:db:1e:c1: 18:f4:42:84:53:dd:f6:88:df:35:13:f0:66:cf:03:4d:d7:89: 1b:47:0b:68:81:a1:bd:6a:6e:e2:67:42:fc:cb:d3:4e:b2:84: a1:0d:c2:84:97:9c:9f:b7:af:be:38:75:59:02:97:16:2e:be: bc:67:d3:11:64:31:de:ca:54:65:7b:86:b4:90:87:07:d8:ac: 4c:d7:f0:42:0f:19:98:bd:0b:d2:c1:41:8d:77:af:46:ef:80: 5d:9a:d0:dd:94:b5:db:31:bb:a7:df:c5:da:9c:68:5a:ab:41: e7:12:8a:4b:96:4c:2b:ed:28:79:b0:0b:3a:07:b3:d2:26:ea: 91:7c:8d:30:4c:12:78:e1:49:5d:35:e3:ba:18:b6:a0:f4:27: 41:41:76:ec:a1:34:32:e9:02:b4:70:49:21:ff:ff:79:60:9a: 7f:54:e3:f1:b0:b1:09:13:9d:ce:20:13:9a:8d:14:d0:2c:ac: d5:7c:3f:d7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEDcJZ4YhjB7e6cNuDpZBOQmvJQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJEQzMx N0JDRTY4NjAeFw0yNjA1MDMwMjA5NDZaFw0yNzA1MDIwMjE0NDZaMDMxMTAvBgNV BAMTKDg4OUI4RjgzRTg1RkJBQUZFMzgyNDk1RDRFOTI3MTNEQTUyNUNCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAsraZ/bbhH7jul8BNecC5tEbn phQghgicC4CTfEgMOmFdBwfXNrQ7a+TUVJ2HK86kEyBnThOhNNqPN7hgXoLYTi1V q6Rs6ejWTRGMkai0lXb6gPxu8D0xuKNKoXNQ5WJxccp5JK7pMgogfnvvofFGk/lw RE4+Qe9BdYhm/v7J1pguB5SdAj5NPiKNgFFuZYex+LfIl9E+dtz87PcQfSJL7X6D 1ZKBRwA7XnYtK6h86n44OIbDDZ+zRQKGXAdB7ey03kbu9e8ClwnWSwfjwY5erPOD CBjNLMa4emvfn2sDOK5/7opVBQs2i1j8r9DfrlfHKAPRV3VB6do+1EVQnfMFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUiJuPg+hfuq/jgkldTpJxPaUly3UwHwYDVR0j BBgwFoAU1bOS6RaIU5SqHCsx/ggtwxe85oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ2ZjMzZjItZjA2ZS00ZWI2LWFlNjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkx Njg4NTM5NEFBMUMyQjMxRkUwODJEQzMxN0JDRTY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUIzOTJFOTE2ODg1Mzk0QUExQzJCMzFGRTA4MkRDMzE3QkNF Njg2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE0NmYzM2YyLWYwNmUtNGViNi1h ZTYxLTU1MjliY2ExY2RjZC8wLzMxMzAzMzJlMzEzNDMzMmUzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ48XMA0GCSqG SIb3DQEBCwUAA4IBAQA5i8F7SmM/JA8ojC1NP82P6DmD4bPOR6IaEAc2wwOfRYAO m0BHl9JbfYoXpBSusPg6AkA13WJ5nrrw7z/K3T2L0QtSCdLbHsEY9EKEU932iN81 E/BmzwNN14kbRwtogaG9am7iZ0L8y9NOsoShDcKEl5yft6++OHVZApcWLr68Z9MR ZDHeylRle4a0kIcH2KxM1/BCDxmYvQvSwUGNd69G74BdmtDdlLXbMbun38XanGha q0HnEopLlkwr7Sh5sAs6B7PSJuqRfI0wTBJ44UldNeO6GLag9CdBQXbsoTQy6QK0 cEkh//95YJp/VOPxsLEJE53OIBOajRTQLKzVfD/X -----END CERTIFICATE-----Generated at Wed May 13 05:43:54 2026 by rpki-client