$ rpki-client -vvf rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa File: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (raw, json) Hash identifier: kp5yEvA04MPtCYbrno7JgwGY6J9dneDRmDS5pzuyNcQ= Subject key identifier: 40:9B:6F:C5:09:FE:BB:C4:94:10:B5:50:6E:57:28:2F:6F:A1:65:EC Certificate issuer: /CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Certificate serial: 14D5AFD1FAB2C2B871CEF1D3B14A5D5D13702C20 Authority key identifier: CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa Signing time: Sun 03 May 2026 02:23:46 +0000 ROA not before: Sun 03 May 2026 02:18:46 +0000 ROA not after: Sun 02 May 2027 02:23:46 +0000 asID: 139410 IP address blocks: 103.167.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d5:af:d1:fa:b2:c2:b8:71:ce:f1:d3:b1:4a:5d:5d:13:70:2c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Validity Not Before: May 3 02:18:46 2026 GMT Not After : May 2 02:23:46 2027 GMT Subject: CN=409B6FC509FEBBC49410B5506E57282F6FA165EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:50:f6:16:d2:b3:00:e4:d0:1d:35:78:38:a7: 5c:ea:5b:fc:00:31:de:6d:a4:68:8a:cc:ec:57:08: c8:b2:7f:76:d9:f9:4e:9d:1d:57:12:04:4b:60:6e: 1c:9b:c2:53:73:77:09:88:98:75:77:25:25:e9:85: d5:92:a5:83:de:63:f9:aa:9f:26:3d:0c:85:71:e2: 66:bc:48:ec:50:10:3c:df:c4:f0:52:f8:cc:92:ff: 10:79:02:ca:38:39:ad:e9:8d:78:a4:be:23:86:2b: e7:7a:8a:d0:13:87:fa:d5:05:24:23:fe:96:07:9f: 42:d8:f3:9e:70:8a:c9:b6:6e:a5:8b:e6:a3:be:b8: f1:23:a1:b1:e1:9e:51:f4:14:e9:46:bf:01:d0:22: 52:f5:02:25:c4:bf:2e:35:79:d0:8a:16:01:2c:87: 6e:36:12:e2:ae:11:9d:22:4d:b6:b1:e6:b7:c6:56: 95:55:8a:e9:ca:4d:50:5a:31:a1:0e:a3:2a:b1:56: f5:e4:98:bc:57:a1:49:d7:89:a4:45:91:6d:64:25: 77:8f:3c:9d:fa:c4:e1:be:a0:72:46:de:06:58:cf: bf:7d:d0:99:b1:86:1e:95:7f:96:0f:46:9a:1d:4e: 24:a0:7b:09:e5:18:b4:c2:c8:7e:c8:4d:4a:1e:49: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9B:6F:C5:09:FE:BB:C4:94:10:B5:50:6E:57:28:2F:6F:A1:65:EC X509v3 Authority Key Identifier: keyid:CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.104.0/24 Signature Algorithm: sha256WithRSAEncryption 45:ac:b2:17:26:56:4c:51:80:91:07:ad:7f:af:d3:6d:11:e9: d3:ab:6b:f4:e7:4f:dc:ca:8f:dc:c6:fc:53:4d:91:8a:32:50: 97:2b:08:f0:ce:3c:95:b0:e8:ba:99:a8:31:33:8a:c5:cd:c8: 86:84:e0:a8:c2:76:56:63:31:a3:72:b3:df:d7:e5:42:1a:2d: 1e:09:48:dc:80:24:b2:93:d0:22:cb:40:fc:f8:36:19:78:d9: 14:cf:46:e5:66:75:4b:10:6e:82:af:fd:52:f1:fb:56:60:f1: 98:b4:08:50:55:ab:d0:ef:ca:c7:f4:7b:91:a8:15:31:ee:25: 53:66:73:db:b4:2b:9e:83:19:24:b3:78:92:0f:ba:4b:b1:f0: 3d:55:01:1a:02:16:7e:73:b0:f2:3c:d1:33:5f:77:eb:c9:7f: 12:7f:d8:6c:97:31:36:a9:7c:16:e7:6a:8f:5c:72:a8:64:16: e3:c5:6e:d2:23:7e:72:aa:2d:94:b0:fb:ad:8e:1e:55:3a:30: af:08:1b:1a:0f:b9:fd:22:c3:b3:9e:81:85:4d:56:0e:01:85: e6:13:1e:d8:22:ff:0c:c6:fd:58:b8:de:4d:ea:9c:da:74:d9: 05:ce:da:55:33:a7:bf:70:df:cf:94:09:6a:ef:42:18:cd:c8: 3a:1b:86:38 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUFNWv0fqywrhxzvHTsUpdXRNwLCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCOURFNDI3RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1 RTJCQ0Q4MTAeFw0yNjA1MDMwMjE4NDZaFw0yNzA1MDIwMjIzNDZaMDMxMTAvBgNV BAMTKDQwOUI2RkM1MDlGRUJCQzQ5NDEwQjU1MDZFNTcyODJGNkZBMTY1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjUPYW0rMA5NAdNXg4p1zqW/wA Md5tpGiKzOxXCMiyf3bZ+U6dHVcSBEtgbhybwlNzdwmImHV3JSXphdWSpYPeY/mq nyY9DIVx4ma8SOxQEDzfxPBS+MyS/xB5Aso4Oa3pjXikviOGK+d6itATh/rVBSQj /pYHn0LY855wism2bqWL5qO+uPEjobHhnlH0FOlGvwHQIlL1AiXEvy41edCKFgEs h242EuKuEZ0iTbax5rfGVpVViunKTVBaMaEOoyqxVvXkmLxXoUnXiaRFkW1kJXeP PJ36xOG+oHJG3gZYz7990Jmxhh6Vf5YPRpodTiSgewnlGLTCyH7ITUoeScVFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUQJtvxQn+u8SUELVQblcoL2+hZewwHwYDVR0j BBgwFoAUy7neQn5xJrNiTm/48KwdrF4rzYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzZWJhYmItOTk5Zi00ZjNlLTg0YzEtYmYyNzliZmUxNzg3LzAvQ0JCOURFNDI3 RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1RTJCQ0Q4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkI5REU0MjdFNzEyNkIzNjI0RTZGRjhGMEFDMURBQzVFMkJD RDgxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMwM2ViYWJiLTk5OWYtNGYzZS04 NGMxLWJmMjc5YmZlMTc4Ny8wLzMxMzAzMzJlMzEzNjM3MmUzMTMwMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzNDMxMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnp2gwDQYJ KoZIhvcNAQELBQADggEBAEWsshcmVkxRgJEHrX+v020R6dOra/TnT9zKj9zG/FNN kYoyUJcrCPDOPJWw6LqZqDEzisXNyIaE4KjCdlZjMaNys9/X5UIaLR4JSNyAJLKT 0CLLQPz4Nhl42RTPRuVmdUsQboKv/VLx+1Zg8Zi0CFBVq9Dvysf0e5GoFTHuJVNm c9u0K56DGSSzeJIPukux8D1VARoCFn5zsPI80TNfd+vJfxJ/2GyXMTapfBbnao9c cqhkFuPFbtIjfnKqLZSw+62OHlU6MK8IGxoPuf0iw7OegYVNVg4BheYTHtgi/wzG /Vi43k3qnNp02QXO2lUzp79w38+UCWrvQhjNyDobhjg= -----END CERTIFICATE-----Generated at Wed May 13 09:27:20 2026 by rpki-client