$ rpki-client -vvf rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa File: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (raw, json) Hash identifier: KRDZJxi0FxgUIEi2fP8SirXZmXhHmW7JJ3jDoLiPW4M= Subject key identifier: 65:7B:FB:A4:65:2D:B5:35:07:10:01:C3:CC:2B:49:22:A4:21:85:FC Certificate issuer: /CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Certificate serial: 49138049DEBFD2D66E69FB0B0EAC68034F7841B3 Authority key identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa Signing time: Sun 03 May 2026 02:26:09 +0000 ROA not before: Sun 03 May 2026 02:21:09 +0000 ROA not after: Sun 02 May 2027 02:26:09 +0000 asID: 131745 IP address blocks: 103.139.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:13:80:49:de:bf:d2:d6:6e:69:fb:0b:0e:ac:68:03:4f:78:41:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Validity Not Before: May 3 02:21:09 2026 GMT Not After : May 2 02:26:09 2027 GMT Subject: CN=657BFBA4652DB535071001C3CC2B4922A42185FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:f5:8f:43:3e:c2:81:cc:b3:9e:f2:fd:57: 56:36:06:a8:7c:3e:41:5b:8a:2b:93:4e:70:46:3a: 48:59:9a:09:ce:1f:cf:28:4d:02:80:c5:0a:44:6f: 9a:50:28:a8:32:8b:af:c7:f6:09:21:86:eb:71:07: 29:57:e1:a3:b7:aa:04:cd:0f:be:15:ae:ba:6b:a5: 19:49:d8:0d:c4:de:00:46:cf:59:2d:37:49:04:44: 2d:80:2b:51:1c:5c:ed:1e:72:77:5b:cf:09:25:42: 22:12:9a:ed:e6:97:1e:bb:95:db:e1:9e:40:21:a5: 66:03:7e:f8:5c:8c:29:98:b2:89:92:35:85:01:3b: a3:ea:18:1f:a0:7e:b6:ef:ad:8a:a1:8b:6f:64:d4: ea:54:33:2c:51:0c:5a:b4:5b:bf:8c:10:5e:84:d4: 7e:19:05:f8:8b:cd:a1:4f:83:55:50:c5:6c:58:e5: 7a:25:a9:e4:e4:41:ef:1d:26:11:fa:5e:ec:e6:a2: 25:c4:cc:81:1a:d8:d6:1f:36:49:ae:a0:01:d9:8d: ba:61:99:bc:29:b9:c2:dd:11:62:ee:ef:6f:16:93: 74:01:9e:10:8e:b9:19:9e:c0:62:11:d4:45:2a:8b: 22:b6:9f:5c:5e:70:0a:5d:28:29:47:55:30:74:9d: de:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7B:FB:A4:65:2D:B5:35:07:10:01:C3:CC:2B:49:22:A4:21:85:FC X509v3 Authority Key Identifier: keyid:D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.175.0/24 Signature Algorithm: sha256WithRSAEncryption 68:85:f6:f8:f5:b6:c2:ff:05:8f:ac:28:06:2f:db:ce:aa:ca: fc:7c:77:9b:f4:0e:d8:76:75:c6:ce:15:1e:6b:33:4f:d9:50: ca:77:e5:e3:88:be:43:dc:27:a5:7f:f7:ae:4a:19:59:19:19: 40:8f:15:3d:95:05:a0:d0:5d:30:6a:1f:bd:3d:57:79:2c:62: bd:6f:ab:7e:9b:35:1a:ba:22:5f:b2:6d:c4:0e:ac:9b:87:87: 2a:1a:6f:b3:2a:9e:9f:ca:3e:a8:41:4d:94:bb:79:cd:7f:97: 55:02:02:d2:09:af:fd:2e:b5:18:80:d9:74:1d:38:d7:16:f6: a1:e1:14:c5:90:1b:22:ac:a8:6b:33:ac:5d:54:ad:f3:73:34: 68:fa:e1:b4:55:d7:4d:8e:00:45:95:6d:55:0f:04:01:d0:2f: ec:6a:9c:7a:d9:8d:4d:a8:14:b4:a0:2c:b2:de:ba:0e:ae:ba: 7a:ab:80:12:e8:b5:ee:5a:8d:fd:c4:c0:ac:87:db:12:be:7b: 13:04:c8:9a:18:41:1a:1a:01:ce:07:53:3b:bb:82:c4:e5:2b: 4a:02:3f:03:06:ee:22:21:2b:7e:2d:90:53:b8:26:63:3e:62: 80:b2:e6:a6:cc:2f:d4:fb:21:18:9b:ed:d6:34:ed:35:ec:0f: af:97:c8:b4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSROASd6/0tZuafsLDqxoA094QbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VFNDcx MzVDMEYwNjAeFw0yNjA1MDMwMjIxMDlaFw0yNzA1MDIwMjI2MDlaMDMxMTAvBgNV BAMTKDY1N0JGQkE0NjUyREI1MzUwNzEwMDFDM0NDMkI0OTIyQTQyMTg1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj7/WPQz7CgcyznvL9V1Y2Bqh8 PkFbiiuTTnBGOkhZmgnOH88oTQKAxQpEb5pQKKgyi6/H9gkhhutxBylX4aO3qgTN D74VrrprpRlJ2A3E3gBGz1ktN0kERC2AK1EcXO0ecndbzwklQiISmu3mlx67ldvh nkAhpWYDfvhcjCmYsomSNYUBO6PqGB+gfrbvrYqhi29k1OpUMyxRDFq0W7+MEF6E 1H4ZBfiLzaFPg1VQxWxY5XolqeTkQe8dJhH6XuzmoiXEzIEa2NYfNkmuoAHZjbph mbwpucLdEWLu728Wk3QBnhCOuRmewGIR1EUqiyK2n1xecApdKClHVTB0nd7xAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUZXv7pGUttTUHEAHDzCtJIqQhhfwwHwYDVR0j BBgwFoAU0fm+5s8JAL5hDS2srfPuRxNcDwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzkwMDIwOGItMzJhYy00YTI2LTlkOTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZD RjA5MDBCRTYxMEQyREFDQURGM0VFNDcxMzVDMEYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMUY5QkVFNkNGMDkwMEJFNjEwRDJEQUNBREYzRUU0NzEzNUMw RjA2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM5MDAyMDhiLTMyYWMtNGEyNi05 ZDkyLTYwOWFkNzYxODNjMS8wLzMxMzAzMzJlMzEzMzM5MmUzMTM3MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM0MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABni68wDQYJ KoZIhvcNAQELBQADggEBAGiF9vj1tsL/BY+sKAYv286qyvx8d5v0Dth2dcbOFR5r M0/ZUMp35eOIvkPcJ6V/965KGVkZGUCPFT2VBaDQXTBqH709V3ksYr1vq36bNRq6 Il+ybcQOrJuHhyoab7Mqnp/KPqhBTZS7ec1/l1UCAtIJr/0utRiA2XQdONcW9qHh FMWQGyKsqGszrF1UrfNzNGj64bRV102OAEWVbVUPBAHQL+xqnHrZjU2oFLSgLLLe ug6uunqrgBLote5ajf3EwKyH2xK+exMEyJoYQRoaAc4HUzu7gsTlK0oCPwMG7iIh K34tkFO4JmM+YoCy5qbML9T7IRib7dY07TXsD6+XyLQ= -----END CERTIFICATE-----Generated at Wed May 13 12:28:52 2026 by rpki-client