$ rpki-client -vvf rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa File: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (raw, json) Hash identifier: 5VrmWDNZS7if5g//ZdEtWvioHlEWvzJs1bPHJcalJoE= Subject key identifier: 63:02:90:51:91:C2:09:76:05:36:0E:65:F8:30:86:4D:AD:89:06:5C Certificate issuer: /CN=B68CA352FD19570302F874C669E957D75A73CB1A Certificate serial: 2E9608C8A8D2A0A5447C48F46632C0798C813FDA Authority key identifier: B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa Signing time: Sun 03 May 2026 02:18:40 +0000 ROA not before: Sun 03 May 2026 02:13:40 +0000 ROA not after: Sun 02 May 2027 02:18:40 +0000 asID: 139438 IP address blocks: 103.145.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:96:08:c8:a8:d2:a0:a5:44:7c:48:f4:66:32:c0:79:8c:81:3f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B68CA352FD19570302F874C669E957D75A73CB1A Validity Not Before: May 3 02:13:40 2026 GMT Not After : May 2 02:18:40 2027 GMT Subject: CN=6302905191C2097605360E65F830864DAD89065C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:a2:ba:99:80:14:06:4b:3d:60:62:33:b0: c6:51:59:f8:bf:79:f2:d8:7a:d0:3e:bb:17:05:0f: 7a:e0:c1:9f:97:61:96:e4:bc:b7:40:94:21:ee:3b: aa:b3:fe:09:31:f3:b2:37:ff:73:03:6b:59:d7:03: 05:c7:25:25:cf:85:01:3d:f9:d2:18:35:eb:f5:db: e1:38:83:43:3b:54:55:a0:11:5e:f4:65:07:69:ec: 2a:e6:af:70:16:c7:d7:50:32:58:82:7d:57:58:2d: 7c:13:17:52:0f:ff:9f:77:2d:83:7f:ee:5d:21:f2: 4f:01:ef:29:2d:42:0e:63:0f:fb:12:c1:bb:c9:ee: 19:f8:7b:ed:05:6b:08:73:17:87:b5:74:09:2b:ad: 42:1e:ad:a3:e0:3d:27:d6:48:4a:3b:05:7a:4e:a9: bf:37:c7:b2:5d:a5:53:b9:e0:d5:2a:ac:f2:6c:e8: a1:b0:bc:02:d4:a2:f2:e7:7a:d5:5a:ad:c6:83:aa: 2f:64:f7:87:21:13:b3:41:fc:e6:45:a7:70:62:81: 28:25:4b:16:e9:10:2e:b2:b5:95:dd:6f:31:db:fb: e0:7f:e3:b8:45:16:03:59:4c:75:7b:69:fc:66:76: 9c:c1:68:cb:a7:ea:2d:e2:14:cd:38:e6:c7:fd:31: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:02:90:51:91:C2:09:76:05:36:0E:65:F8:30:86:4D:AD:89:06:5C X509v3 Authority Key Identifier: keyid:B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.14.0/23 Signature Algorithm: sha256WithRSAEncryption 40:8b:e1:bd:72:92:0e:73:bd:c2:35:d3:15:29:02:60:d0:9b: b5:be:d7:58:7c:85:58:b1:eb:98:a4:26:d1:d8:26:16:58:99: 95:5e:38:56:62:31:83:2d:f6:3e:c8:ae:66:9d:66:9b:14:70: 43:7b:c3:12:91:a5:8c:81:f7:47:71:e9:db:92:1b:11:1f:4f: f7:91:e4:a3:24:3b:fc:cc:2b:78:d1:d9:75:f8:05:65:26:dc: 21:07:01:7d:d0:fc:6e:8d:1b:3d:2e:45:b5:0d:74:d2:44:1c: 67:9e:66:19:1c:74:ea:c0:f3:23:4b:2d:0b:89:59:23:87:b8: 15:c9:be:0e:36:85:ac:6a:87:aa:a5:0c:6c:f5:6e:72:73:a5: ee:fc:eb:fa:4b:09:ec:f1:94:1b:59:b7:95:03:e7:3f:19:97: 11:78:3c:9e:cc:9d:6e:3c:42:9d:53:68:b3:5c:99:5e:89:3b: 99:4e:ef:6c:57:4f:8e:ca:6a:04:d3:9e:d5:9b:57:de:2c:de: 8a:1c:00:fb:f6:27:2a:31:eb:31:72:92:ff:b5:0d:18:fa:b4: de:2c:e7:a7:2c:38:00:91:65:c9:bf:17:3b:c2:d0:bd:57:84: 3c:e5:de:db:a0:2f:1e:2a:60:62:40:d5:91:2e:b6:19:fa:cf: d7:f4:cf:ac -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULpYIyKjSoKVEfEj0ZjLAeYyBP9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4Q0EzNTJGRDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1 QTczQ0IxQTAeFw0yNjA1MDMwMjEzNDBaFw0yNzA1MDIwMjE4NDBaMDMxMTAvBgNV BAMTKDYzMDI5MDUxOTFDMjA5NzYwNTM2MEU2NUY4MzA4NjREQUQ4OTA2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjs6K6mYAUBks9YGIzsMZRWfi/ efLYetA+uxcFD3rgwZ+XYZbkvLdAlCHuO6qz/gkx87I3/3MDa1nXAwXHJSXPhQE9 +dIYNev12+E4g0M7VFWgEV70ZQdp7Crmr3AWx9dQMliCfVdYLXwTF1IP/593LYN/ 7l0h8k8B7yktQg5jD/sSwbvJ7hn4e+0FawhzF4e1dAkrrUIeraPgPSfWSEo7BXpO qb83x7JdpVO54NUqrPJs6KGwvALUovLnetVarcaDqi9k94chE7NB/OZFp3BigSgl SxbpEC6ytZXdbzHb++B/47hFFgNZTHV7afxmdpzBaMun6i3iFM045sf9MSB/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYwKQUZHCCXYFNg5l+DCGTa2JBlwwHwYDVR0j BBgwFoAUtoyjUv0ZVwMC+HTGaelX11pzyxowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAwNDIzM2YtYmIyYy00N2Q3LTkwMWMtZTNjODJmOGQ0MjNjLzAvQjY4Q0EzNTJG RDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1QTczQ0IxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjhDQTM1MkZEMTk1NzAzMDJGODc0QzY2OUU5NTdENzVBNzND QjFBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMDQyMzNmLWJiMmMtNDdkNy05 MDFjLWUzYzgyZjhkNDIzYy8wLzMxMzAzMzJlMzEzNDM1MmUzMTM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5EOMA0GCSqG SIb3DQEBCwUAA4IBAQBAi+G9cpIOc73CNdMVKQJg0Ju1vtdYfIVYseuYpCbR2CYW WJmVXjhWYjGDLfY+yK5mnWabFHBDe8MSkaWMgfdHcenbkhsRH0/3keSjJDv8zCt4 0dl1+AVlJtwhBwF90PxujRs9LkW1DXTSRBxnnmYZHHTqwPMjSy0LiVkjh7gVyb4O NoWsaoeqpQxs9W5yc6Xu/Ov6Swns8ZQbWbeVA+c/GZcReDyezJ1uPEKdU2izXJle iTuZTu9sV0+OymoE057Vm1feLN6KHAD79icqMesxcpL/tQ0Y+rTeLOenLDgAkWXJ vxc7wtC9V4Q85d7boC8eKmBiQNWRLrYZ+s/X9M+s -----END CERTIFICATE-----Generated at Wed May 13 00:21:40 2026 by rpki-client