$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa File: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (raw, json) Hash identifier: oeu8Yxj+v1wvdi72zoiErwEhlqXcs2n8V9EKs/WYb/M= Subject key identifier: FD:A2:89:F7:8B:E2:28:86:C3:8D:C1:C1:42:BB:89:A7:99:9E:C0:D4 Certificate issuer: /CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Certificate serial: 7AC2D85A0AA521801367EE68D412B3E539156B01 Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa Signing time: Sun 03 May 2026 02:17:00 +0000 ROA not before: Sun 03 May 2026 02:12:00 +0000 ROA not after: Sun 02 May 2027 02:17:00 +0000 asID: 142309 IP address blocks: 103.152.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c2:d8:5a:0a:a5:21:80:13:67:ee:68:d4:12:b3:e5:39:15:6b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Validity Not Before: May 3 02:12:00 2026 GMT Not After : May 2 02:17:00 2027 GMT Subject: CN=FDA289F78BE22886C38DC1C142BB89A7999EC0D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:90:59:65:d6:5c:70:a2:fd:16:af:9d:1a: 68:51:4e:4a:7e:d8:3f:f9:68:56:cc:0c:4c:d1:e7: 47:8f:e7:c5:86:a0:ad:fc:cc:d2:e5:30:b6:59:06: d1:0e:b0:c0:4a:23:69:93:eb:76:7e:5f:f9:38:8c: ba:a1:30:ea:b5:7e:d4:62:b0:a4:df:ec:e0:6f:95: 6e:89:43:08:f4:e6:61:9e:91:6b:d7:0b:64:3b:16: de:67:51:32:ee:0e:d9:ac:bb:75:68:55:be:78:8e: 8c:4e:3a:dd:c0:49:fb:c5:2b:7e:10:4e:34:a2:cb: d1:4a:3e:ef:53:9a:8c:6d:db:38:66:c5:0d:8e:6b: 2c:98:6d:99:56:fd:1f:64:d0:dd:9f:ca:6d:f0:20: 18:57:9b:64:5e:e2:db:2f:af:ea:81:87:71:6d:e6: 0c:71:16:e6:67:04:3e:2f:a4:54:92:9b:21:0b:46: 88:75:31:e8:17:7a:4a:0b:0d:b6:cd:dc:df:d0:64: f8:32:ff:38:2c:82:c1:e8:af:51:d7:4e:40:2d:09: 41:a8:4f:42:e5:c3:eb:0e:c6:bd:72:5b:cf:81:9f: 8d:3b:12:1d:cc:e2:32:b1:23:2b:4e:a2:b2:cd:d9: 6d:df:af:46:29:f8:88:51:a3:61:e6:b2:0b:24:40: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A2:89:F7:8B:E2:28:86:C3:8D:C1:C1:42:BB:89:A7:99:9E:C0:D4 X509v3 Authority Key Identifier: keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.94.0/24 Signature Algorithm: sha256WithRSAEncryption 81:15:88:13:71:d6:e3:5f:a5:82:17:f3:94:fe:8e:4a:f9:6d: 24:4d:2f:4d:33:a5:c8:41:4d:58:73:97:3d:8a:1c:f8:eb:ca: 81:bd:da:33:66:9d:6b:83:8f:12:4a:f2:f9:f8:b0:7d:64:69: 19:a8:4c:ca:45:3e:64:ca:33:84:ed:78:e0:f1:f4:61:b5:8f: 00:a2:99:b5:31:14:7f:b7:3a:73:aa:fc:ff:cd:62:6d:f0:a8: 85:11:40:fc:f9:73:21:0d:e1:3f:07:46:30:df:3b:27:91:f4: ae:37:1b:a3:9c:6a:3a:20:26:12:56:ed:61:91:03:7e:b2:a0: 19:76:53:7b:04:1f:2b:0e:4f:e8:b5:58:11:2a:ed:c6:fd:73: 9c:4e:3b:82:4c:09:e6:62:67:a7:94:79:67:33:58:88:c7:66: 22:25:a5:ab:64:44:a3:f6:2f:3f:bd:04:b4:0d:8d:c5:7e:95: 99:22:03:ae:44:4c:21:6c:a7:1a:22:48:16:8f:44:0f:92:29: be:64:17:e8:d9:2f:85:44:68:ce:67:c5:eb:9b:2b:c4:5d:95: 73:63:82:2d:67:66:3b:b1:89:3d:f6:75:2d:5d:64:dd:54:5e: c4:41:48:65:31:06:b4:8e:2b:06:d4:d5:cd:17:a5:24:f3:5d: a2:55:a0:f5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUesLYWgqlIYATZ+5o1BKz5TkVawEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4 MTdGRkNCNjAeFw0yNjA1MDMwMjEyMDBaFw0yNzA1MDIwMjE3MDBaMDMxMTAvBgNV BAMTKEZEQTI4OUY3OEJFMjI4ODZDMzhEQzFDMTQyQkI4OUE3OTk5RUMwRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCetZBZZdZccKL9Fq+dGmhRTkp+ 2D/5aFbMDEzR50eP58WGoK38zNLlMLZZBtEOsMBKI2mT63Z+X/k4jLqhMOq1ftRi sKTf7OBvlW6JQwj05mGekWvXC2Q7Ft5nUTLuDtmsu3VoVb54joxOOt3ASfvFK34Q TjSiy9FKPu9Tmoxt2zhmxQ2OayyYbZlW/R9k0N2fym3wIBhXm2Re4tsvr+qBh3Ft 5gxxFuZnBD4vpFSSmyELRoh1MegXekoLDbbN3N/QZPgy/zgsgsHor1HXTkAtCUGo T0Llw+sOxr1yW8+Bn407Eh3M4jKxIytOorLN2W3fr0Yp+IhRo2HmsgskQPRdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/aKJ94viKIbDjcHBQruJp5mewNQwHwYDVR0j BBgwFoAUuoDpVzMrRQsWQQYvbALFfIF//LYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIzZDE0Y2ItY2NjMi00NmQyLThlMzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTcz MzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4MTdGRkNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTgwRTk1NzMzMkI0NTBCMTY0MTA2MkY2QzAyQzU3QzgxN0ZG Q0I2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFiM2QxNGNiLWNjYzItNDZkMi04 ZTMxLTE2ZjViZWMwYWNkOC8wLzMxMzAzMzJlMzEzNTMyMmUzOTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5heMA0GCSqG SIb3DQEBCwUAA4IBAQCBFYgTcdbjX6WCF/OU/o5K+W0kTS9NM6XIQU1Yc5c9ihz4 68qBvdozZp1rg48SSvL5+LB9ZGkZqEzKRT5kyjOE7Xjg8fRhtY8Aopm1MRR/tzpz qvz/zWJt8KiFEUD8+XMhDeE/B0Yw3zsnkfSuNxujnGo6ICYSVu1hkQN+sqAZdlN7 BB8rDk/otVgRKu3G/XOcTjuCTAnmYmenlHlnM1iIx2YiJaWrZESj9i8/vQS0DY3F fpWZIgOuREwhbKcaIkgWj0QPkim+ZBfo2S+FRGjOZ8XrmyvEXZVzY4ItZ2Y7sYk9 9nUtXWTdVF7EQUhlMQa0jisG1NXNF6Uk812iVaD1 -----END CERTIFICATE-----Generated at Wed May 13 03:58:58 2026 by rpki-client