$ rpki-client -vvf rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa File: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (raw, json) Hash identifier: bgJcO1kAlUNDdjIqyEDrjwkCdWK+MIfy7MXbYHWX1YE= Subject key identifier: 28:DB:81:B6:C8:95:3A:6D:76:23:B1:6B:A5:61:C2:CD:25:8A:B2:DC Certificate issuer: /CN=19101281C951DCE434F1B713AE570F59EE413A09 Certificate serial: 140C37CB34A69492E76C54EEB2FD969FFD708497 Authority key identifier: 19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa Signing time: Sun 03 May 2026 02:19:57 +0000 ROA not before: Sun 03 May 2026 02:14:57 +0000 ROA not after: Sun 02 May 2027 02:19:57 +0000 asID: 134648 IP address blocks: 103.208.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:0c:37:cb:34:a6:94:92:e7:6c:54:ee:b2:fd:96:9f:fd:70:84:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19101281C951DCE434F1B713AE570F59EE413A09 Validity Not Before: May 3 02:14:57 2026 GMT Not After : May 2 02:19:57 2027 GMT Subject: CN=28DB81B6C8953A6D7623B16BA561C2CD258AB2DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6a:63:1e:81:7d:b6:ad:31:9c:3c:5f:cc:13: 87:03:41:5d:41:77:16:03:b7:55:29:56:74:e6:76: c2:f8:5e:3e:85:0f:34:eb:11:c7:a9:95:5c:18:1a: a4:35:13:d2:22:f3:d3:05:6e:47:44:07:ed:19:a5: 26:76:0a:6d:90:91:58:67:df:30:57:8b:5c:7f:01: 22:0c:27:c6:5d:d2:d9:87:d4:0e:a7:71:85:33:cf: 48:28:b9:a1:f8:29:ae:29:fa:29:c6:76:a9:b3:aa: c3:57:64:c9:4f:04:93:95:85:51:30:1a:0b:61:45: 86:e6:c1:bd:bb:be:c8:d8:9c:cb:1d:07:0d:54:52: 58:81:11:00:d4:6b:48:9b:4c:8e:02:62:a4:65:b6: 5a:65:ac:8d:b9:90:ac:00:02:c2:b5:c4:84:09:6d: 0d:74:f2:61:d6:4e:f4:72:46:bf:95:61:df:df:f0: cd:99:f5:5f:79:3a:4b:2e:53:7d:2a:17:c6:3d:59: e3:0d:c4:ed:ef:f1:a9:60:06:73:6a:1e:07:f6:54: 59:68:88:9f:63:13:2f:1a:b0:b5:9d:e5:5e:c5:29: e3:ad:94:35:8e:50:c9:3f:1b:02:12:c5:d5:51:4d: 6e:81:39:a3:53:e1:d3:ff:55:14:4c:63:cb:cb:25: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DB:81:B6:C8:95:3A:6D:76:23:B1:6B:A5:61:C2:CD:25:8A:B2:DC X509v3 Authority Key Identifier: keyid:19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.208.102.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:68:ab:61:84:49:5d:64:88:e3:d5:ac:66:ea:19:54:d2:45: 9d:83:43:a7:cd:f3:b4:a5:87:53:9e:17:a4:3d:9f:f8:50:f5: 0d:8e:b9:72:05:fb:c2:eb:fe:02:48:d0:88:3e:81:a7:88:3a: 04:f0:02:9b:3d:7b:b3:9d:f9:a4:07:53:3b:61:36:08:d7:80: eb:5a:bd:b0:8d:67:8b:f5:7b:e0:1d:e6:a3:f2:0a:ff:8b:26: 87:4f:8a:c3:d7:ef:f7:c8:5c:1f:d2:d0:71:39:2b:f9:bb:45: 7b:7a:8d:81:1e:fb:f0:9d:d0:6e:a1:fc:c0:2b:d6:05:eb:b7: a4:9a:98:5c:34:f0:50:65:7f:1d:3a:70:39:ba:e8:cc:dc:be: e8:9f:2c:48:ef:4e:3e:1f:aa:15:57:6d:02:73:fb:a5:78:c3: 97:cb:21:bc:18:35:69:86:2b:50:26:0c:1e:8d:e2:da:0e:56: 97:20:08:e4:40:7c:be:ea:0a:97:4f:10:ce:e5:65:b1:6b:a0: 34:1c:8d:97:4f:61:86:70:ce:36:63:e5:92:c0:fc:bc:5e:a9: e0:74:7e:ff:0f:24:37:c4:8c:df:ca:eb:28:85:c9:f8:54:a0: b5:c6:0f:5c:51:ec:86:43:93:45:e9:52:dd:63:10:09:d6:be: 1c:8c:e1:b1 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUFAw3yzSmlJLnbFTusv2Wn/1whJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMDEyODFDOTUxRENFNDM0RjFCNzEzQUU1NzBGNTlF RTQxM0EwOTAeFw0yNjA1MDMwMjE0NTdaFw0yNzA1MDIwMjE5NTdaMDMxMTAvBgNV BAMTKDI4REI4MUI2Qzg5NTNBNkQ3NjIzQjE2QkE1NjFDMkNEMjU4QUIyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOamMegX22rTGcPF/ME4cDQV1B dxYDt1UpVnTmdsL4Xj6FDzTrEceplVwYGqQ1E9Ii89MFbkdEB+0ZpSZ2Cm2QkVhn 3zBXi1x/ASIMJ8Zd0tmH1A6ncYUzz0gouaH4Ka4p+inGdqmzqsNXZMlPBJOVhVEw GgthRYbmwb27vsjYnMsdBw1UUliBEQDUa0ibTI4CYqRltlplrI25kKwAAsK1xIQJ bQ108mHWTvRyRr+VYd/f8M2Z9V95OksuU30qF8Y9WeMNxO3v8algBnNqHgf2VFlo iJ9jEy8asLWd5V7FKeOtlDWOUMk/GwISxdVRTW6BOaNT4dP/VRRMY8vLJY5lAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUKNuBtsiVOm12I7FrpWHCzSWKstwwHwYDVR0j BBgwFoAUGRASgclR3OQ08bcTrlcPWe5BOgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJjNjk0NDAtOGIxNy00YTY4LWEwZmEtNjYxNTllMjE2MmUwLzAvMTkxMDEyODFD OTUxRENFNDM0RjFCNzEzQUU1NzBGNTlFRTQxM0EwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTEwMTI4MUM5NTFEQ0U0MzRGMUI3MTNBRTU3MEY1OUVFNDEz QTA5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIyYzY5NDQwLThiMTctNGE2OC1h MGZhLTY2MTU5ZTIxNjJlMC8wLzMxMzAzMzJlMzIzMDM4MmUzMTMwMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzQzNjM0Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn0GYwDQYJ KoZIhvcNAQELBQADggEBABtoq2GESV1kiOPVrGbqGVTSRZ2DQ6fN87Slh1OeF6Q9 n/hQ9Q2OuXIF+8Lr/gJI0Ig+gaeIOgTwAps9e7Od+aQHUzthNgjXgOtavbCNZ4v1 e+Ad5qPyCv+LJodPisPX7/fIXB/S0HE5K/m7RXt6jYEe+/Cd0G6h/MAr1gXrt6Sa mFw08FBlfx06cDm66MzcvuifLEjvTj4fqhVXbQJz+6V4w5fLIbwYNWmGK1AmDB6N 4toOVpcgCORAfL7qCpdPEM7lZbFroDQcjZdPYYZwzjZj5ZLA/LxeqeB0fv8PJDfE jN/K6yiFyfhUoLXGD1xR7IZDk0XpUt1jEAnWvhyM4bE= -----END CERTIFICATE-----Generated at Wed May 13 11:58:53 2026 by rpki-client