$ rpki-client -vvf rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa File: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (raw, json) Hash identifier: HyudSDnKB8bCiy0S2RrKH+D8dZ2RY7de+E6PViymOWI= Subject key identifier: 38:86:C6:9B:8B:78:72:8A:12:0C:42:4C:DC:A3:DF:BD:46:E9:EE:D2 Certificate issuer: /CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Certificate serial: 34D98EB5E3DD95D2435A1F066D94AE54D2D0744F Authority key identifier: 2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa Signing time: Sun 03 May 2026 02:19:26 +0000 ROA not before: Sun 03 May 2026 02:14:26 +0000 ROA not after: Sun 02 May 2027 02:19:26 +0000 asID: 149897 IP address blocks: 103.187.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d9:8e:b5:e3:dd:95:d2:43:5a:1f:06:6d:94:ae:54:d2:d0:74:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Validity Not Before: May 3 02:14:26 2026 GMT Not After : May 2 02:19:26 2027 GMT Subject: CN=3886C69B8B78728A120C424CDCA3DFBD46E9EED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:79:23:84:11:9e:76:96:7f:7f:cc:d7:2b: b3:3c:0c:32:4b:ba:41:71:91:9b:77:44:62:76:07: 59:8a:81:fa:e6:6b:22:a2:b5:6a:df:22:9a:e1:4d: 7d:53:59:f9:b0:7a:b7:ec:a2:7c:e2:0f:3e:a8:d6: 33:ed:2a:37:1a:7f:0d:ff:19:65:31:d7:44:bc:df: 7b:5f:0f:11:d2:12:b2:da:68:fd:e6:13:68:26:5e: a7:fb:0e:db:df:bd:59:64:57:9e:02:d2:8d:7d:6a: a3:16:36:08:70:f6:17:ff:22:1e:a9:fe:fd:ef:97: f0:13:d1:8b:ec:26:40:76:27:d5:e8:d2:a4:16:9b: c8:ed:15:a7:31:99:ee:40:f5:98:3d:9a:20:6d:23: 27:9b:e6:d5:93:48:22:5b:31:b2:92:28:b1:22:3f: 9d:e7:5c:f1:69:4a:dc:06:fc:92:d6:dc:7b:80:30: 8a:de:2e:a3:e0:03:25:a6:be:0a:3c:3a:21:b4:75: fa:c7:8c:cf:76:d9:da:1e:30:98:48:4c:c2:9c:81: e0:4f:25:48:ab:64:65:e6:59:ca:79:30:1b:56:ff: 79:af:97:c5:85:22:fd:8a:b5:c3:8f:13:a0:9d:09: eb:4c:f9:3d:e3:50:2d:a0:d9:33:98:76:7e:31:3d: e5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:86:C6:9B:8B:78:72:8A:12:0C:42:4C:DC:A3:DF:BD:46:E9:EE:D2 X509v3 Authority Key Identifier: keyid:2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.165.0/24 Signature Algorithm: sha256WithRSAEncryption 59:55:41:e2:03:ea:42:a5:4b:e0:e9:0b:e7:b1:08:c2:3c:f7: ea:e4:73:f6:dd:7e:c5:4b:77:c9:c4:d9:17:8d:7a:ea:31:ba: 90:61:ca:61:a0:39:02:ea:88:31:f5:7a:95:b5:d2:00:fe:57: 31:ed:7c:93:82:43:5b:b4:fa:e2:8b:3a:5e:f4:ce:9f:15:8a: 0c:07:2e:3a:11:75:3d:ea:cf:1f:68:a3:e7:24:d9:3d:47:80: 4f:e8:d5:d2:cd:cc:9d:af:aa:d4:29:0f:2a:64:66:a6:a6:cf: 7f:b8:9c:f9:ad:3a:a0:1f:e6:cf:7b:a5:8e:d1:77:5a:b1:6b: e9:9c:96:57:5e:00:0b:87:56:0e:59:00:46:7e:80:73:cc:ca: 9b:05:72:3f:b9:6c:a4:da:e9:9d:fa:43:8b:16:0f:36:91:15: 17:29:f8:c4:c1:73:da:3d:fe:cf:36:f9:b8:d4:d9:c1:1c:2b: 9b:c1:aa:2e:62:1a:c2:ca:b8:8b:55:8b:ab:88:f6:c9:73:12: 0c:b2:72:67:94:c8:3f:14:cd:5b:c1:35:31:e8:fa:5f:89:02: ad:c5:d1:98:74:5a:00:89:f7:57:d6:1c:2a:e5:14:fb:58:d2: 9d:d5:4a:fb:12:89:15:af:ad:6c:72:93:59:b4:17:9c:d9:d7: 2b:40:61:56 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNNmOtePdldJDWh8GbZSuVNLQdE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3 QTE4NjcxNDAeFw0yNjA1MDMwMjE0MjZaFw0yNzA1MDIwMjE5MjZaMDMxMTAvBgNV BAMTKDM4ODZDNjlCOEI3ODcyOEExMjBDNDI0Q0RDQTNERkJENDZFOUVFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR+XkjhBGedpZ/f8zXK7M8DDJL ukFxkZt3RGJ2B1mKgfrmayKitWrfIprhTX1TWfmwerfsonziDz6o1jPtKjcafw3/ GWUx10S833tfDxHSErLaaP3mE2gmXqf7DtvfvVlkV54C0o19aqMWNghw9hf/Ih6p /v3vl/AT0YvsJkB2J9Xo0qQWm8jtFacxme5A9Zg9miBtIyeb5tWTSCJbMbKSKLEi P53nXPFpStwG/JLW3HuAMIreLqPgAyWmvgo8OiG0dfrHjM922doeMJhITMKcgeBP JUirZGXmWcp5MBtW/3mvl8WFIv2KtcOPE6CdCetM+T3jUC2g2TOYdn4xPeWBAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUOIbGm4t4cooSDEJM3KPfvUbp7tIwHwYDVR0j BBgwFoAULa/CUDBQmtcSa72Tq8y5XnoYZxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0YmI0YzgtNmZjZi00ZmZmLWJkY2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAz MDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3QTE4NjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREFGQzI1MDMwNTA5QUQ3MTI2QkJEOTNBQkNDQjk1RTdBMTg2 NzE0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIxNGJiNGM4LTZmY2YtNGZmZi1i ZGNjLWZlMWZjY2VlMTA0NS8wLzMxMzAzMzJlMzEzODM3MmUzMTM2MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzODM5Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnu6UwDQYJ KoZIhvcNAQELBQADggEBAFlVQeID6kKlS+DpC+exCMI89+rkc/bdfsVLd8nE2ReN euoxupBhymGgOQLqiDH1epW10gD+VzHtfJOCQ1u0+uKLOl70zp8VigwHLjoRdT3q zx9oo+ck2T1HgE/o1dLNzJ2vqtQpDypkZqamz3+4nPmtOqAf5s97pY7Rd1qxa+mc lldeAAuHVg5ZAEZ+gHPMypsFcj+5bKTa6Z36Q4sWDzaRFRcp+MTBc9o9/s82+bjU 2cEcK5vBqi5iGsLKuItVi6uI9slzEgyycmeUyD8UzVvBNTHo+l+JAq3F0Zh0WgCJ 91fWHCrlFPtY0p3VSvsSiRWvrWxyk1m0F5zZ1ytAYVY= -----END CERTIFICATE-----Generated at Wed May 13 02:37:05 2026 by rpki-client