$ rpki-client -vvf rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa File: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (raw, json) Hash identifier: Xmd83MiBctBMTDyBOlcvMaPuJRo+/rA5uhcdgvtSuzk= Subject key identifier: 85:CE:8F:13:6A:33:9A:B3:71:6B:9D:82:37:78:E4:86:C5:31:39:11 Certificate issuer: /CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Certificate serial: 209B18DDF409D414F30A69F04D97C2FA7FC43D4E Authority key identifier: 62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa Signing time: Sun 03 May 2026 02:19:59 +0000 ROA not before: Sun 03 May 2026 02:14:59 +0000 ROA not after: Sun 02 May 2027 02:19:59 +0000 asID: 142400 IP address blocks: 103.172.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9b:18:dd:f4:09:d4:14:f3:0a:69:f0:4d:97:c2:fa:7f:c4:3d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Validity Not Before: May 3 02:14:59 2026 GMT Not After : May 2 02:19:59 2027 GMT Subject: CN=85CE8F136A339AB3716B9D823778E486C5313911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:26:c8:94:bc:60:43:2b:9d:da:c4:32:f4: 07:7b:cd:1c:c4:e7:bf:8c:0b:a0:5a:22:3a:86:24: ce:ea:c3:4d:0e:e3:3e:6c:21:97:be:37:7f:d5:51: bc:d7:4c:3d:0c:1b:14:69:af:9a:e3:46:ba:16:9a: 8a:a9:e8:6c:ab:d0:ac:61:f4:e7:2e:99:58:fc:ac: 68:ca:3e:0c:cf:6f:75:95:7c:03:15:9e:d4:5f:96: 23:c6:d2:08:80:ca:aa:77:bb:c4:09:29:3d:6c:e9: a5:8b:52:63:96:fb:6b:a6:8d:47:19:65:1a:cc:74: 40:31:3c:65:e0:45:0d:59:08:ce:df:2c:7a:41:8c: 13:1b:42:19:5a:d5:22:cf:f8:6f:7f:82:54:59:8e: 2f:7a:8e:24:34:3f:b8:28:be:9d:f6:18:88:02:0a: 02:c3:03:7c:7b:17:e2:1c:b9:7a:5c:c1:39:99:73: 47:02:14:af:16:93:63:95:47:d6:1b:6a:40:2d:e4: ae:47:80:99:53:e5:88:55:ae:b2:7d:5c:82:86:9e: cb:e0:e5:38:6b:c2:30:c3:3c:8c:8d:7b:63:73:ea: 64:fe:83:b1:53:6d:ab:6c:40:45:85:90:07:f0:98: f2:3a:78:51:22:0a:cc:dd:a3:0b:34:d8:3e:cf:fe: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CE:8F:13:6A:33:9A:B3:71:6B:9D:82:37:78:E4:86:C5:31:39:11 X509v3 Authority Key Identifier: keyid:62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.187.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:70:36:b8:ce:89:d6:8a:d5:6e:04:37:a1:65:b2:ee:5c:27: cf:f0:55:dd:65:91:01:54:ba:eb:bf:51:d1:45:86:3e:45:61: 2a:3e:ca:11:3c:47:95:6e:87:fa:40:f4:03:98:c3:f9:09:c4: 44:fc:9b:fd:8c:ff:d7:13:d0:28:b2:96:50:4e:e9:94:19:f2: d0:b9:f7:ca:3e:5c:0c:b9:f9:ec:7c:3d:33:34:bf:3f:db:ec: bb:01:75:18:c1:8e:33:1a:03:e2:86:54:aa:7d:5a:e7:cf:ce: 2b:ca:59:1e:eb:ff:a0:43:17:9f:0a:c7:6f:b4:75:ad:e0:33: 33:3f:c7:1d:6a:b3:c5:98:76:18:5b:7e:00:ef:92:d3:af:74: 15:d8:b9:6b:49:51:79:6d:b7:d2:21:87:1f:df:e9:26:9b:cf: c2:e3:46:72:45:8e:67:08:49:a5:c4:56:0a:86:47:be:94:03: 88:86:02:a6:26:b1:35:81:6b:fb:60:52:89:d9:f8:93:8c:c7: 7d:0c:d2:51:a0:8c:7c:2e:5c:10:c8:55:81:eb:a9:f3:d4:71: 3e:c6:8a:66:18:2a:55:7c:a9:01:a9:56:52:d9:d9:50:8b:12: 3f:14:4e:29:00:78:59:47:35:5b:d2:3a:d0:4b:eb:59:9b:ec: ff:02:9c:ef -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIJsY3fQJ1BTzCmnwTZfC+n/EPU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBC NEUyMDgxOTAeFw0yNjA1MDMwMjE0NTlaFw0yNzA1MDIwMjE5NTlaMDMxMTAvBgNV BAMTKDg1Q0U4RjEzNkEzMzlBQjM3MTZCOUQ4MjM3NzhFNDg2QzUzMTM5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfybIlLxgQyud2sQy9Ad7zRzE 57+MC6BaIjqGJM7qw00O4z5sIZe+N3/VUbzXTD0MGxRpr5rjRroWmoqp6Gyr0Kxh 9OcumVj8rGjKPgzPb3WVfAMVntRfliPG0giAyqp3u8QJKT1s6aWLUmOW+2umjUcZ ZRrMdEAxPGXgRQ1ZCM7fLHpBjBMbQhla1SLP+G9/glRZji96jiQ0P7govp32GIgC CgLDA3x7F+IcuXpcwTmZc0cCFK8Wk2OVR9YbakAt5K5HgJlT5YhVrrJ9XIKGnsvg 5ThrwjDDPIyNe2Nz6mT+g7FTbatsQEWFkAfwmPI6eFEiCszdows02D7P/iW3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUhc6PE2ozmrNxa52CN3jkhsUxOREwHwYDVR0j BBgwFoAUYg5g8vsYnK8Sf/KWZhuLALTiCBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJmNWYwN2MtZjA3Yi00YWFhLWEwYzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJG QjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBCNEUyMDgxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjBFNjBGMkZCMTg5Q0FGMTI3RkYyOTY2NjFCOEIwMEI0RTIw ODE5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIyZjVmMDdjLWYwN2ItNGFhYS1h MGMyLWRmMTdjOTEwYzU4Ni8wLzMxMzAzMzJlMzEzNzMyMmUzMTM4MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzNDMwMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrLswDQYJ KoZIhvcNAQELBQADggEBAFxwNrjOidaK1W4EN6Flsu5cJ8/wVd1lkQFUuuu/UdFF hj5FYSo+yhE8R5Vuh/pA9AOYw/kJxET8m/2M/9cT0CiyllBO6ZQZ8tC598o+XAy5 +ex8PTM0vz/b7LsBdRjBjjMaA+KGVKp9WufPzivKWR7r/6BDF58Kx2+0da3gMzM/ xx1qs8WYdhhbfgDvktOvdBXYuWtJUXltt9Ihhx/f6Sabz8LjRnJFjmcISaXEVgqG R76UA4iGAqYmsTWBa/tgUonZ+JOMx30M0lGgjHwuXBDIVYHrqfPUcT7GimYYKlV8 qQGpVlLZ2VCLEj8UTikAeFlHNVvSOtBL61mb7P8CnO8= -----END CERTIFICATE-----Generated at Wed May 13 12:02:31 2026 by rpki-client