$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa File: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (raw, json) Hash identifier: qvAhwO/EjrHouy1t9oPOe/Yp+kgXSnzORPmVIxEb76o= Subject key identifier: 0D:35:FC:51:F6:4A:DB:A1:6D:97:79:DC:1A:40:46:F2:B5:C7:8E:86 Certificate issuer: /CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Certificate serial: 7AC59263A32EC5FBE8695665234D8D31A620528B Authority key identifier: D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa Signing time: Sun 03 May 2026 02:27:02 +0000 ROA not before: Sun 03 May 2026 02:22:02 +0000 ROA not after: Sun 02 May 2027 02:27:02 +0000 asID: 150196 IP address blocks: 103.229.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c5:92:63:a3:2e:c5:fb:e8:69:56:65:23:4d:8d:31:a6:20:52:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Validity Not Before: May 3 02:22:02 2026 GMT Not After : May 2 02:27:02 2027 GMT Subject: CN=0D35FC51F64ADBA16D9779DC1A4046F2B5C78E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:44:8d:62:dd:c3:ce:fe:c2:96:b0:53:d9:fc: 86:b1:4e:53:55:a4:d0:39:a6:ee:8a:d6:39:88:7e: 8b:a3:de:25:9d:ab:3c:d8:dc:b5:bb:e3:7a:48:87: 08:4b:0c:46:ac:c4:c4:a7:59:82:85:ec:8b:4d:be: c7:81:02:8a:d3:4e:92:cd:7b:e7:a1:15:82:32:d9: cc:1a:cf:27:c4:5b:23:48:8c:00:f9:17:cc:c6:95: ce:a9:1b:20:ab:38:44:5d:40:01:26:ec:1d:e5:e9: 1c:6d:3c:a7:b5:08:24:a2:64:43:66:d3:70:8a:21: 6c:e5:0a:b5:c4:d4:8b:2e:4d:e3:36:fe:fc:67:e8: 50:55:63:e7:c5:ec:62:1b:0f:7d:94:af:39:5b:cf: 52:4d:b7:fd:bb:40:3d:6e:fe:61:68:46:3b:d3:f1: a8:a1:36:c3:64:18:e8:85:14:97:4b:0e:6c:7d:b3: fc:3d:b4:43:8c:fc:be:62:52:ef:b8:11:b9:ae:de: bb:13:6c:70:1f:75:3e:2a:1c:39:a7:e9:fd:c0:81: bf:eb:cd:32:af:73:dd:3e:4b:2f:4f:7c:b1:b7:6d: f9:fa:74:c5:a6:b1:fb:50:fd:b6:41:dc:4f:ed:b5: c9:4d:d8:bd:8e:c6:85:18:3c:2b:29:39:c2:35:96: 2a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:35:FC:51:F6:4A:DB:A1:6D:97:79:DC:1A:40:46:F2:B5:C7:8E:86 X509v3 Authority Key Identifier: keyid:D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.14.0/23 Signature Algorithm: sha256WithRSAEncryption 46:e8:6d:2c:94:6e:b6:09:08:74:63:b1:12:d6:20:35:af:e7: 89:62:b6:27:f0:00:59:31:97:08:40:9d:0e:68:c9:aa:b6:aa: 77:28:1c:b8:f9:19:2e:a9:95:4d:cf:d7:53:7e:b0:ab:fd:c0: f8:f6:7e:bf:d5:75:32:1a:9c:e4:75:e9:5f:f7:7f:c9:16:74: 0b:87:07:31:41:91:34:49:24:1e:67:24:b3:fa:d3:a2:85:d2: ca:20:13:77:de:ec:ce:77:8c:af:41:5e:13:b2:5b:40:dd:b3: fa:48:27:eb:38:d6:24:cb:a4:75:91:22:e9:02:43:92:66:02: a0:4a:62:1f:cc:76:06:f2:56:24:2d:dd:9d:66:e6:d8:da:0c: 08:f3:49:98:5f:be:99:5e:57:45:2a:18:bf:74:c8:87:cc:f8: a3:45:95:59:b6:d5:6a:8f:01:2b:6b:23:46:38:1a:dc:ac:c3: 9f:73:b8:46:3c:a6:1a:28:9d:3f:4c:73:8a:3d:8c:7f:97:8e: 61:26:4b:4a:d3:d4:79:8a:3e:a3:f1:a0:75:62:ca:e8:3a:d0: e7:2b:1c:1d:17:49:05:ae:cf:c5:c4:4a:fd:6a:c8:14:e6:6d: 4f:23:5c:42:11:f7:58:0b:cd:3d:ee:83:be:01:54:6f:96:11: e2:ec:64:33 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUesWSY6MuxfvoaVZlI02NMaYgUoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUx NTMyODE3QjAeFw0yNjA1MDMwMjIyMDJaFw0yNzA1MDIwMjI3MDJaMDMxMTAvBgNV BAMTKDBEMzVGQzUxRjY0QURCQTE2RDk3NzlEQzFBNDA0NkYyQjVDNzhFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZRI1i3cPO/sKWsFPZ/IaxTlNV pNA5pu6K1jmIfouj3iWdqzzY3LW743pIhwhLDEasxMSnWYKF7ItNvseBAorTTpLN e+ehFYIy2cwazyfEWyNIjAD5F8zGlc6pGyCrOERdQAEm7B3l6RxtPKe1CCSiZENm 03CKIWzlCrXE1IsuTeM2/vxn6FBVY+fF7GIbD32Urzlbz1JNt/27QD1u/mFoRjvT 8aihNsNkGOiFFJdLDmx9s/w9tEOM/L5iUu+4Ebmu3rsTbHAfdT4qHDmn6f3Agb/r zTKvc90+Sy9PfLG3bfn6dMWmsftQ/bZB3E/ttclN2L2OxoUYPCspOcI1lirNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUDTX8UfZK26Ftl3ncGkBG8rXHjoYwHwYDVR0j BBgwFoAU2EsCCSzZ+vSHt//oo84kXhUygXswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I3NWJmZDAtYTg2Yy00YmViLTlmOTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDky Q0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUxNTMyODE3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODRCMDIwOTJDRDlGQUY0ODdCN0ZGRThBM0NFMjQ1RTE1MzI4 MTdCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiNzViZmQwLWE4NmMtNGJlYi05 Zjk5LWFhYzMzZmI1ZTQ5Zi8wLzMxMzAzMzJlMzIzMjM5MmUzMTM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzEzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+UOMA0GCSqG SIb3DQEBCwUAA4IBAQBG6G0slG62CQh0Y7ES1iA1r+eJYrYn8ABZMZcIQJ0OaMmq tqp3KBy4+RkuqZVNz9dTfrCr/cD49n6/1XUyGpzkdelf93/JFnQLhwcxQZE0SSQe ZySz+tOihdLKIBN33uzOd4yvQV4TsltA3bP6SCfrONYky6R1kSLpAkOSZgKgSmIf zHYG8lYkLd2dZubY2gwI80mYX76ZXldFKhi/dMiHzPijRZVZttVqjwErayNGOBrc rMOfc7hGPKYaKJ0/THOKPYx/l45hJktK09R5ij6j8aB1YsroOtDnKxwdF0kFrs/F xEr9asgU5m1PI1xCEfdYC8097oO+AVRvlhHi7GQz -----END CERTIFICATE-----Generated at Wed May 13 01:41:35 2026 by rpki-client