$ rpki-client -vvf rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa File: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (raw, json) Hash identifier: 2XC3UsHd4KwKUJ2Uidn6/QSZk29AP2xoMLuxzT2QDYQ= Subject key identifier: C6:37:6C:72:5F:54:E0:4E:26:F9:7A:0C:E3:97:8A:98:76:E1:02:75 Certificate issuer: /CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Certificate serial: 43474955D4B19C2928D7DF7DC8705ADE92E1058A Authority key identifier: AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa Signing time: Sun 03 May 2026 02:29:29 +0000 ROA not before: Sun 03 May 2026 02:24:29 +0000 ROA not after: Sun 02 May 2027 02:29:29 +0000 asID: 149883 IP address blocks: 103.189.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:47:49:55:d4:b1:9c:29:28:d7:df:7d:c8:70:5a:de:92:e1:05:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Validity Not Before: May 3 02:24:29 2026 GMT Not After : May 2 02:29:29 2027 GMT Subject: CN=C6376C725F54E04E26F97A0CE3978A9876E10275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:1d:49:5f:8b:6a:b3:12:03:82:66:94:cd: 9e:10:dc:16:dc:10:f7:01:ba:ea:68:71:32:04:92: 98:80:39:9f:39:81:b0:83:f5:4e:28:78:20:56:65: af:80:1d:97:d2:b4:b6:37:ea:da:5a:93:84:b0:23: fa:4c:20:d9:0c:43:f5:03:6f:50:f4:0c:4e:15:6b: 82:a9:e3:aa:69:fa:cb:be:95:17:dd:91:ad:3f:63: ca:7a:a2:6d:fe:09:66:02:91:ed:11:79:43:dc:43: b7:36:98:41:f3:fd:5d:e6:08:3d:36:0c:2e:70:12: 29:80:e2:bc:df:ce:5a:70:fc:3f:58:e0:f5:6c:20: 3d:c8:3e:c1:34:f3:54:97:69:cb:0a:c2:d6:81:dc: 6e:29:65:7a:f4:b2:fe:04:12:e1:d1:7b:36:56:e3: 4b:ce:fe:0f:8d:1d:46:cd:62:06:b2:c8:f8:6f:ec: ef:59:c8:68:1d:95:93:ae:29:25:25:ee:77:7d:e4: da:f3:11:44:5a:d5:8f:f4:56:c2:44:ea:cd:9d:4f: fd:5d:14:be:13:c2:e7:b1:ff:1c:ad:31:88:30:7f: ac:fb:4f:f9:b3:98:fe:22:89:2d:c1:93:69:e5:34: 15:9a:40:eb:86:eb:26:2a:22:ed:18:57:a5:26:7d: f7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:37:6C:72:5F:54:E0:4E:26:F9:7A:0C:E3:97:8A:98:76:E1:02:75 X509v3 Authority Key Identifier: keyid:AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.119.0/24 Signature Algorithm: sha256WithRSAEncryption 67:24:ba:18:c8:d2:cf:90:39:85:5a:f7:86:2d:95:7e:42:7f: 41:01:d9:7b:c0:50:29:8e:43:f5:b1:be:78:e2:d9:6e:d3:12: 5c:27:3d:28:d3:70:f3:ee:a5:2f:d4:85:ce:81:cf:8d:2d:92: ee:59:10:37:07:c4:b0:e7:e3:b7:a0:ba:53:6e:be:0a:29:fa: 57:32:d6:3f:e6:b3:7f:61:e1:dc:14:dd:03:d7:f0:83:33:0b: 07:cc:7e:36:ec:a4:d6:44:b8:82:12:94:22:c8:6e:e5:5a:84: ff:74:5d:5c:c9:32:da:0d:37:a7:e3:7a:49:28:ec:73:80:00: a9:c9:cd:11:b4:18:1e:01:21:8f:74:ce:bb:60:86:4e:76:cf: 4d:5d:6e:fb:33:69:aa:5d:ba:b1:ac:0e:ff:48:f1:f3:33:f9: 0e:3d:c0:b5:79:00:2e:e1:49:14:76:e1:b1:1c:d6:77:6e:50: f3:31:6b:37:61:88:aa:25:e7:c7:21:c1:09:44:70:6b:78:87: 6a:02:99:b6:73:ed:8f:79:12:b7:27:17:10:ed:fe:64:31:9c: f5:78:18:c1:8a:64:fd:22:09:96:d1:43:fc:92:d8:e3:23:87: fa:36:a4:41:8c:2e:e4:b8:85:a9:c4:6f:3e:61:b1:ba:8b:6e: d0:3a:f1:4a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQ0dJVdSxnCko1999yHBa3pLhBYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJB QTc0RjVEMDAeFw0yNjA1MDMwMjI0MjlaFw0yNzA1MDIwMjI5MjlaMDMxMTAvBgNV BAMTKEM2Mzc2QzcyNUY1NEUwNEUyNkY5N0EwQ0UzOTc4QTk4NzZFMTAyNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zB1JX4tqsxIDgmaUzZ4Q3Bbc EPcBuupocTIEkpiAOZ85gbCD9U4oeCBWZa+AHZfStLY36tpak4SwI/pMINkMQ/UD b1D0DE4Va4Kp46pp+su+lRfdka0/Y8p6om3+CWYCke0ReUPcQ7c2mEHz/V3mCD02 DC5wEimA4rzfzlpw/D9Y4PVsID3IPsE081SXacsKwtaB3G4pZXr0sv4EEuHRezZW 40vO/g+NHUbNYgayyPhv7O9ZyGgdlZOuKSUl7nd95NrzEURa1Y/0VsJE6s2dT/1d FL4Twuex/xytMYgwf6z7T/mzmP4iiS3Bk2nlNBWaQOuG6yYqIu0YV6UmffeDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUxjdscl9U4E4m+XoM45eKmHbhAnUwHwYDVR0j BBgwFoAUr6MpTlWAtoIDvA3wT9AHIqp09dAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNhZDUyMjYtNjU2ZC00NjFkLTljZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1 NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJBQTc0RjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkEzMjk0RTU1ODBCNjgyMDNCQzBERjA0RkQwMDcyMkFBNzRG NUQwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQzYWQ1MjI2LTY1NmQtNDYxZC05 Y2ZmLWM4M2FjMDc0MmYyMC8wLzMxMzAzMzJlMzEzODM5MmUzMTMxMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzODM4MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvXcwDQYJ KoZIhvcNAQELBQADggEBAGckuhjI0s+QOYVa94YtlX5Cf0EB2XvAUCmOQ/Wxvnji 2W7TElwnPSjTcPPupS/Uhc6Bz40tku5ZEDcHxLDn47egulNuvgop+lcy1j/ms39h 4dwU3QPX8IMzCwfMfjbspNZEuIISlCLIbuVahP90XVzJMtoNN6fjekko7HOAAKnJ zRG0GB4BIY90zrtghk52z01dbvszaapdurGsDv9I8fMz+Q49wLV5AC7hSRR24bEc 1nduUPMxazdhiKol58chwQlEcGt4h2oCmbZz7Y95ErcnFxDt/mQxnPV4GMGKZP0i CZbRQ/yS2OMjh/o2pEGMLuS4hanEbz5hsbqLbtA68Uo= -----END CERTIFICATE-----Generated at Wed May 13 06:58:18 2026 by rpki-client