$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa File: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (raw, json) Hash identifier: RoLrz7G1R33kfqGbX8nuSO6gHFL4kaqL21h4DNDlHHo= Subject key identifier: 36:B7:01:4B:57:67:8F:C7:84:CD:92:5E:6F:CB:A2:09:AD:AE:82:6F Certificate issuer: /CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Certificate serial: 39B163A64A802D468EC7881597B95770A1E2100F Authority key identifier: 29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa Signing time: Sun 03 May 2026 02:31:13 +0000 ROA not before: Sun 03 May 2026 02:26:13 +0000 ROA not after: Sun 02 May 2027 02:31:13 +0000 asID: 141147 IP address blocks: 103.159.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b1:63:a6:4a:80:2d:46:8e:c7:88:15:97:b9:57:70:a1:e2:10:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Validity Not Before: May 3 02:26:13 2026 GMT Not After : May 2 02:31:13 2027 GMT Subject: CN=36B7014B57678FC784CD925E6FCBA209ADAE826F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:38:35:d6:bb:20:b5:d3:76:ab:7c:f7:c0:37: 2f:da:36:d0:27:da:d2:32:e2:ec:73:86:fd:06:91: 75:eb:b4:57:d6:98:91:cf:26:eb:ff:d8:5a:d3:16: 57:6a:81:40:d8:d7:e6:21:02:ac:74:e0:d7:84:c5: eb:2f:8c:94:e9:9f:3c:21:04:b3:d1:6e:19:84:e2: cc:67:ef:88:2a:7e:7c:94:cf:32:70:f4:28:96:36: 75:ce:e4:4c:1b:a8:e9:19:40:67:cf:b1:84:6c:76: d9:b2:5d:3b:f2:de:77:e5:5d:2f:bd:0f:00:6e:c8: ec:d1:e5:0b:d0:d4:82:94:a0:84:af:42:57:a7:7b: 04:23:b7:89:d6:f0:b2:22:35:52:9d:c4:f6:40:aa: 66:77:a5:81:2d:63:75:96:79:cc:05:17:d8:af:27: 22:6a:c6:b1:7f:f0:81:bb:ea:df:3b:fa:ec:43:12: d1:8a:04:22:f4:e5:7d:f4:b5:a8:76:2e:df:3a:7c: 1e:f6:66:94:b7:84:b9:0d:68:a9:d8:ab:09:ba:25: 04:a6:69:09:50:78:8d:59:c3:b8:ed:6a:cd:2b:b3: 7e:1e:20:5c:f7:8e:ad:1f:f0:d1:40:c7:fe:c2:b3: 74:64:33:eb:24:1a:0b:2b:d9:ed:e2:d3:c6:c8:cd: cf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B7:01:4B:57:67:8F:C7:84:CD:92:5E:6F:CB:A2:09:AD:AE:82:6F X509v3 Authority Key Identifier: keyid:29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.224.0/23 Signature Algorithm: sha256WithRSAEncryption 51:75:27:81:42:47:0a:91:32:10:64:3d:5d:9d:71:4e:e0:5f: 41:46:03:3e:22:ae:59:e3:74:b4:87:00:bb:86:3a:a8:0e:57: 15:a3:6c:4a:5a:0e:44:3a:75:da:8b:f9:90:cd:b0:a3:14:78: 9b:80:45:9e:29:07:6d:63:ec:0c:26:dc:10:a6:fb:8c:a5:24: 87:47:0c:31:5d:cb:e5:8b:e7:26:d1:48:ef:63:82:25:3b:2e: f4:f8:ec:d0:3f:2a:d5:1e:ea:cd:2a:a7:94:78:1b:75:19:63: 64:89:3d:04:60:a4:5f:2f:41:86:96:f7:a6:b8:9a:ad:8e:ef: 0c:a5:35:a0:f9:24:68:57:2d:10:a4:b9:6c:73:85:ac:60:a5: 71:4c:eb:eb:00:34:0a:f2:21:ed:a5:47:1f:39:68:c0:58:cd: 06:bc:ed:bb:e7:95:fa:c0:93:fc:a6:48:27:84:71:d1:93:db: 7d:2c:59:48:51:0e:6a:b0:79:bd:7b:6a:00:03:29:d4:b3:ae: 8a:4b:ef:f4:25:20:e3:47:fb:8d:3b:35:be:a2:8f:69:8f:20: 5f:06:3b:22:2b:d1:82:03:67:ac:01:1c:27:42:55:63:58:0f: 66:70:4e:f2:b3:9a:9c:f4:46:31:2d:c9:4c:aa:47:0c:4e:c7: 34:95:0d:67 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUObFjpkqALUaOx4gVl7lXcKHiEA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGQTgwRjYxNzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJD RkQ2NkU2RDAeFw0yNjA1MDMwMjI2MTNaFw0yNzA1MDIwMjMxMTNaMDMxMTAvBgNV BAMTKDM2QjcwMTRCNTc2NzhGQzc4NENEOTI1RTZGQ0JBMjA5QURBRTgyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuODXWuyC103arfPfANy/aNtAn 2tIy4uxzhv0GkXXrtFfWmJHPJuv/2FrTFldqgUDY1+YhAqx04NeExesvjJTpnzwh BLPRbhmE4sxn74gqfnyUzzJw9CiWNnXO5EwbqOkZQGfPsYRsdtmyXTvy3nflXS+9 DwBuyOzR5QvQ1IKUoISvQlenewQjt4nW8LIiNVKdxPZAqmZ3pYEtY3WWecwFF9iv JyJqxrF/8IG76t87+uxDEtGKBCL05X30tah2Lt86fB72ZpS3hLkNaKnYqwm6JQSm aQlQeI1Zw7jtas0rs34eIFz3jq0f8NFAx/7Cs3RkM+skGgsr2e3i08bIzc/BAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUNrcBS1dnj8eEzZJeb8uiCa2ugm8wHwYDVR0j BBgwFoAUKfqA9hdsJcaRCRwQudkGcs/Wbm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE0OGIyMjItNmRlZC00MjhhLTg4OGYtMTA0NTRiMDg4MGMyLzAvMjlGQTgwRjYx NzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJDRkQ2NkU2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZBODBGNjE3NkMyNUM2OTEwOTFDMTBCOUQ5MDY3MkNGRDY2 RTZELmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRhNDhiMjIyLTZkZWQtNDI4YS04 ODhmLTEwNDU0YjA4ODBjMi8wLzMxMzAzMzJlMzEzNTM5MmUzMjMyMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMTM0Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnn+AwDQYJ KoZIhvcNAQELBQADggEBAFF1J4FCRwqRMhBkPV2dcU7gX0FGAz4irlnjdLSHALuG OqgOVxWjbEpaDkQ6ddqL+ZDNsKMUeJuARZ4pB21j7Awm3BCm+4ylJIdHDDFdy+WL 5ybRSO9jgiU7LvT47NA/KtUe6s0qp5R4G3UZY2SJPQRgpF8vQYaW96a4mq2O7wyl NaD5JGhXLRCkuWxzhaxgpXFM6+sANAryIe2lRx85aMBYzQa87bvnlfrAk/ymSCeE cdGT230sWUhRDmqweb17agADKdSzropL7/QlIONH+407Nb6ij2mPIF8GOyIr0YID Z6wBHCdCVWNYD2ZwTvKzmpz0RjEtyUyqRwxOxzSVDWc= -----END CERTIFICATE-----Generated at Wed May 13 08:49:01 2026 by rpki-client