$ rpki-client -vvf rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa File: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (raw, json) Hash identifier: d37ZeGgHjVZzYq6CUddv0o+w23L0QGAKsBmc8dpggDQ= Subject key identifier: 02:6F:E8:97:84:C0:0D:AB:DC:8E:22:69:41:E4:07:1A:81:B1:3A:AB Certificate issuer: /CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Certificate serial: 6C239A4D0B5987A2A3D0407C5B42BFF216623373 Authority key identifier: AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa Signing time: Sun 03 May 2026 02:29:59 +0000 ROA not before: Sun 03 May 2026 02:24:59 +0000 ROA not after: Sun 02 May 2027 02:29:59 +0000 asID: 138862 IP address blocks: 103.139.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:23:9a:4d:0b:59:87:a2:a3:d0:40:7c:5b:42:bf:f2:16:62:33:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Validity Not Before: May 3 02:24:59 2026 GMT Not After : May 2 02:29:59 2027 GMT Subject: CN=026FE89784C00DABDC8E226941E4071A81B13AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:51:05:d2:72:a9:e2:fb:98:19:74:4d:49:81: 86:7d:63:a4:f4:a8:38:86:ce:c0:7b:3b:2b:72:16: 0f:c6:db:06:10:8e:c6:81:a6:c7:21:27:dc:f4:47: be:3f:9e:d2:00:88:58:87:26:87:af:bb:a0:9c:b4: 69:19:34:1e:86:90:9e:92:71:7f:9b:bc:d0:bd:43: f3:87:f2:58:bd:01:3c:1d:0e:c0:1a:09:cf:27:8a: 71:66:7e:c1:2e:68:ec:62:ca:6d:65:12:27:78:eb: e4:10:fe:96:69:f2:ab:03:b6:88:c7:c8:82:07:01: d7:1d:89:37:27:70:bf:61:0d:3e:6b:01:e4:c2:b1: 85:46:39:11:7e:aa:57:f7:da:3e:01:e6:90:cd:b3: 5d:ff:f5:4f:4e:f6:93:41:7c:4d:11:ec:0a:8e:99: 6a:3b:8e:3e:80:2f:12:73:e0:4f:99:a2:31:d6:72: eb:45:61:e2:26:34:d5:5e:3a:ec:78:d4:ab:c9:9a: db:29:28:ec:a7:f8:66:42:e0:0e:b8:83:60:84:de: 5c:29:64:f7:7c:d4:13:03:22:20:1c:25:fc:8a:0d: 02:a2:ac:34:33:6a:80:6f:a2:8d:4b:fa:ce:72:cd: ba:67:0e:ea:45:e1:32:1f:74:ab:31:c9:1e:1a:48: ea:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6F:E8:97:84:C0:0D:AB:DC:8E:22:69:41:E4:07:1A:81:B1:3A:AB X509v3 Authority Key Identifier: keyid:AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.98.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:a0:32:9c:cf:af:f0:5a:ba:b7:de:f6:4a:79:bf:12:37:c8: 58:42:3a:3f:73:b5:21:a7:d8:14:af:b8:01:a8:74:b5:a8:5d: d2:d6:36:49:aa:96:40:c2:83:fe:5e:05:a4:c3:95:92:60:a6: a5:52:1e:42:ea:88:ae:c2:a6:70:f0:0e:dd:63:32:86:a2:ad: 46:13:d9:d6:87:7c:ee:dd:9e:af:22:7c:8c:36:3a:c6:61:a4: 0a:4b:d0:7d:74:97:da:35:69:ec:0d:b3:3f:37:08:99:b7:be: 24:3d:81:29:d4:6a:14:a4:24:62:91:b2:63:2e:06:87:61:98: c1:e1:6c:0f:ec:ac:32:2a:b6:64:f4:19:10:86:80:41:23:36: 4f:6c:47:90:99:89:eb:09:05:5e:26:ce:72:9d:ee:d9:70:fc: 25:3c:1f:ff:9e:0b:4b:ee:ce:46:8f:00:61:7d:e0:d8:03:be: 2c:fb:33:fb:5a:c2:0d:e0:54:3f:36:27:86:f8:ba:9b:e0:df: 0e:91:89:a4:ca:b0:a2:c9:da:3b:8d:94:33:2a:b1:34:63:98: e8:8d:cf:58:f1:9a:a7:a0:d0:35:13:7e:ef:32:b2:b4:47:8f: 7f:55:d8:bc:88:72:83:f6:5f:4b:3c:60:f8:d9:27:f1:7f:a7: ee:09:50:54 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbCOaTQtZh6Kj0EB8W0K/8hZiM3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1N0Ux MjA5RDc3QTAeFw0yNjA1MDMwMjI0NTlaFw0yNzA1MDIwMjI5NTlaMDMxMTAvBgNV BAMTKDAyNkZFODk3ODRDMDBEQUJEQzhFMjI2OTQxRTQwNzFBODFCMTNBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrUQXScqni+5gZdE1JgYZ9Y6T0 qDiGzsB7OytyFg/G2wYQjsaBpschJ9z0R74/ntIAiFiHJoevu6CctGkZNB6GkJ6S cX+bvNC9Q/OH8li9ATwdDsAaCc8ninFmfsEuaOxiym1lEid46+QQ/pZp8qsDtojH yIIHAdcdiTcncL9hDT5rAeTCsYVGORF+qlf32j4B5pDNs13/9U9O9pNBfE0R7AqO mWo7jj6ALxJz4E+ZojHWcutFYeImNNVeOux41KvJmtspKOyn+GZC4A64g2CE3lwp ZPd81BMDIiAcJfyKDQKirDQzaoBvoo1L+s5yzbpnDupF4TIfdKsxyR4aSOq5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAm/ol4TADavcjiJpQeQHGoGxOqswHwYDVR0j BBgwFoAUrxDC6QQK2x9BxavJ//3lfhIJ13owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUwNjMzZmMtZmUyMy00ZDgyLWJhNjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkw NDBBREIxRjQxQzVBQkM5RkZGREU1N0UxMjA5RDc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjEwQzJFOTA0MEFEQjFGNDFDNUFCQzlGRkZERTU3RTEyMDlE NzdBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ1MDYzM2ZjLWZlMjMtNGQ4Mi1i YTY0LWJiN2VlNmRkNmUwNi8wLzMxMzAzMzJlMzEzMzM5MmUzOTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4tiMA0GCSqG SIb3DQEBCwUAA4IBAQCMoDKcz6/wWrq33vZKeb8SN8hYQjo/c7Uhp9gUr7gBqHS1 qF3S1jZJqpZAwoP+XgWkw5WSYKalUh5C6oiuwqZw8A7dYzKGoq1GE9nWh3zu3Z6v InyMNjrGYaQKS9B9dJfaNWnsDbM/NwiZt74kPYEp1GoUpCRikbJjLgaHYZjB4WwP 7KwyKrZk9BkQhoBBIzZPbEeQmYnrCQVeJs5yne7ZcPwlPB//ngtL7s5GjwBhfeDY A74s+zP7WsIN4FQ/NieG+Lqb4N8OkYmkyrCiydo7jZQzKrE0Y5jojc9Y8ZqnoNA1 E37vMrK0R49/Vdi8iHKD9l9LPGD42Sfxf6fuCVBU -----END CERTIFICATE-----Generated at Wed May 13 04:26:38 2026 by rpki-client