$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa File: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (raw, json) Hash identifier: IW57GOIpsV3XMacGHlka+0CSQgtIywURoK2nG7nWa7w= Subject key identifier: EE:D0:1E:06:04:42:99:3F:3D:39:F1:13:B7:53:79:E6:50:B5:D1:8C Certificate issuer: /CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Certificate serial: 46CCE13AD41A9CDB4FEDAA73E9C7B87260EB8DC8 Authority key identifier: 28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa Signing time: Sun 03 May 2026 02:27:46 +0000 ROA not before: Sun 03 May 2026 02:22:46 +0000 ROA not after: Sun 02 May 2027 02:27:46 +0000 asID: 141909 IP address blocks: 103.164.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:cc:e1:3a:d4:1a:9c:db:4f:ed:aa:73:e9:c7:b8:72:60:eb:8d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Validity Not Before: May 3 02:22:46 2026 GMT Not After : May 2 02:27:46 2027 GMT Subject: CN=EED01E060442993F3D39F113B75379E650B5D18C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:57:cd:61:e1:97:14:4a:25:0b:a8:95:71: df:b9:1a:38:d6:83:c3:3c:ae:b0:7e:3d:55:52:1e: 07:50:e1:c3:8b:b4:dd:92:3d:92:b9:66:5b:48:e9: 37:07:95:1a:af:09:d4:c7:b1:67:57:37:52:fd:6d: 0f:79:75:41:13:67:47:9f:c6:90:79:14:7d:7e:9c: b3:d1:20:8f:ea:4a:01:45:19:58:29:0e:11:17:2e: af:01:b3:c9:d0:d8:e1:43:b0:2c:32:38:df:ad:e3: 9d:30:d6:4e:06:5f:40:09:af:4d:13:cf:4f:a4:26: dd:ec:44:cd:ca:f9:fa:c3:ab:0c:0c:a6:4c:e8:03: 9d:84:fa:37:d7:a9:25:72:64:92:b2:8c:93:95:65: 2e:c0:cf:b1:ea:73:00:74:96:c9:8c:a7:6e:04:8f: 61:83:29:ce:8d:7c:84:37:44:a6:f2:7f:8e:0f:84: 91:ee:03:4e:28:dd:65:41:3d:63:8c:11:ce:3f:9d: 59:7f:aa:84:be:97:c3:cf:f3:34:e3:a0:7a:b3:73: 52:41:ae:f7:eb:cb:3e:04:37:9f:76:89:62:dc:ac: a5:03:51:c2:ad:31:b0:4c:8e:67:96:52:14:de:7f: 58:e4:27:a0:1d:4e:6b:56:22:84:70:ad:aa:10:a2: 3c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D0:1E:06:04:42:99:3F:3D:39:F1:13:B7:53:79:E6:50:B5:D1:8C X509v3 Authority Key Identifier: keyid:28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.150.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:58:a3:64:35:9a:91:b1:af:1f:c6:6a:33:01:bb:28:78:14: 6f:a5:03:89:2a:5a:74:b5:5e:0a:43:2b:14:33:ae:53:d5:57: 92:6c:46:0b:6e:85:4a:03:1f:47:7c:0a:d9:38:7b:42:32:36: 41:2e:ee:de:77:07:5e:f6:e3:33:cd:2b:57:aa:11:e2:d4:a7: 4b:c1:ac:b3:82:5d:20:b9:87:06:cd:88:e2:c8:13:70:ff:65: e0:7d:56:4e:00:ea:3e:da:96:3f:49:a2:44:12:b7:42:d5:fb: 25:8b:c3:ab:dd:a1:fd:bd:61:92:79:a1:67:44:3d:d5:65:3a: 58:d9:38:3d:24:21:1c:e6:24:91:90:cf:3e:d6:1c:87:b7:3e: f8:10:95:06:eb:69:67:2b:45:a7:10:e9:d5:80:86:e2:eb:40: 92:1c:f7:1e:4c:86:92:7a:21:90:7e:e1:d8:20:18:cd:d1:c2: e2:fb:86:69:76:e7:c3:e6:50:7a:29:d4:89:59:e8:c1:23:03: 38:a7:3a:67:e1:ac:87:be:1f:e4:c7:c4:b2:92:8a:ef:7e:5f: 16:8f:9e:28:36:7f:e5:13:60:d5:89:9a:55:aa:26:c1:6e:b5: e6:8a:7b:ca:d7:41:0b:38:70:8d:48:5f:2b:f9:54:47:87:2b: d1:4f:75:91 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIURszhOtQanNtP7apz6ce4cmDrjcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg4ODBFNkEzNUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2 MTlGRTBCQTAeFw0yNjA1MDMwMjIyNDZaFw0yNzA1MDIwMjI3NDZaMDMxMTAvBgNV BAMTKEVFRDAxRTA2MDQ0Mjk5M0YzRDM5RjExM0I3NTM3OUU2NTBCNUQxOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RFfNYeGXFEolC6iVcd+5GjjW g8M8rrB+PVVSHgdQ4cOLtN2SPZK5ZltI6TcHlRqvCdTHsWdXN1L9bQ95dUETZ0ef xpB5FH1+nLPRII/qSgFFGVgpDhEXLq8Bs8nQ2OFDsCwyON+t450w1k4GX0AJr00T z0+kJt3sRM3K+frDqwwMpkzoA52E+jfXqSVyZJKyjJOVZS7Az7HqcwB0lsmMp24E j2GDKc6NfIQ3RKbyf44PhJHuA04o3WVBPWOMEc4/nVl/qoS+l8PP8zTjoHqzc1JB rvfryz4EN592iWLcrKUDUcKtMbBMjmeWUhTef1jkJ6AdTmtWIoRwraoQojwJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU7tAeBgRCmT89OfETt1N55lC10YwwHwYDVR0j BBgwFoAUKIgOajW2yK7LwIMo4ML2OWGf4LowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4ODQ0MmItYzQ4ZS00YmEwLThhZDctNThlMTI2M2M2ZGM3LzAvMjg4ODBFNkEz NUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2MTlGRTBCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODg4MEU2QTM1QjZDOEFFQ0JDMDgzMjhFMEMyRjYzOTYxOUZF MEJBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNjODg0NDJiLWM0OGUtNGJhMC04 YWQ3LTU4ZTEyNjNjNmRjNy8wLzMxMzAzMzJlMzEzNjM0MmUzMTM1MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnpJYwDQYJ KoZIhvcNAQELBQADggEBADpYo2Q1mpGxrx/GajMBuyh4FG+lA4kqWnS1XgpDKxQz rlPVV5JsRgtuhUoDH0d8Ctk4e0IyNkEu7t53B1724zPNK1eqEeLUp0vBrLOCXSC5 hwbNiOLIE3D/ZeB9Vk4A6j7alj9JokQSt0LV+yWLw6vdof29YZJ5oWdEPdVlOljZ OD0kIRzmJJGQzz7WHIe3PvgQlQbraWcrRacQ6dWAhuLrQJIc9x5MhpJ6IZB+4dgg GM3RwuL7hml258PmUHop1IlZ6MEjAzinOmfhrIe+H+THxLKSiu9+XxaPnig2f+UT YNWJmlWqJsFuteaKe8rXQQs4cI1IXyv5VEeHK9FPdZE= -----END CERTIFICATE-----Generated at Wed May 13 09:54:29 2026 by rpki-client