$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa File: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (raw, json) Hash identifier: O5MLHMcohhvApO1/L1RvpM2jYbsZVQ8eLBzNQkddTHQ= Subject key identifier: 54:74:9C:0C:88:C2:A4:38:FA:F8:75:CF:AC:9C:34:65:72:CC:3F:13 Certificate issuer: /CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Certificate serial: 18B1201BB1903D19F82EC68AAA20764B8796F969 Authority key identifier: 14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa Signing time: Sun 03 May 2026 02:31:57 +0000 ROA not before: Sun 03 May 2026 02:26:57 +0000 ROA not after: Sun 02 May 2027 02:31:57 +0000 asID: 133800 IP address blocks: 103.89.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b1:20:1b:b1:90:3d:19:f8:2e:c6:8a:aa:20:76:4b:87:96:f9:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Validity Not Before: May 3 02:26:57 2026 GMT Not After : May 2 02:31:57 2027 GMT Subject: CN=54749C0C88C2A438FAF875CFAC9C346572CC3F13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b1:f1:99:f2:da:57:ca:7e:79:f0:1a:72:3a: 98:c6:15:81:37:16:8d:12:0f:b9:a8:31:7d:8b:ff: d6:de:4f:ba:48:80:5c:e9:a9:23:b2:2c:de:8b:9d: 5b:30:53:61:73:51:fb:d1:ef:d1:46:5e:ae:62:b1: a6:0d:73:74:6c:86:c0:d5:6b:fa:d9:d1:fd:fd:ea: 99:b3:31:b1:22:3b:d7:23:96:f8:a1:de:bc:43:41: 4a:92:85:7a:4f:66:e0:eb:7a:cb:0a:20:95:89:18: 04:5f:41:e4:3f:17:02:90:16:93:36:34:74:3c:ba: 6f:5a:af:1d:a9:50:d3:50:00:30:49:25:45:bb:4c: 18:bc:4d:0c:2d:d6:56:10:10:19:76:c1:64:1a:98: 6d:df:a8:f5:4e:38:ea:67:dc:a3:59:7a:09:5a:b4: 6d:0c:b8:88:fb:f5:10:50:a4:84:2f:93:03:f3:56: 94:5e:14:5b:6a:3c:ca:25:0c:b4:b5:db:4a:32:5e: 4e:be:1a:1e:20:78:6d:5e:b6:0a:71:01:f5:be:2b: 6a:09:18:d7:80:cb:b4:42:69:d5:95:c9:32:6f:0a: 9d:6e:74:19:73:2a:db:9e:93:61:4f:af:16:f7:69: a9:93:e5:9a:c5:cb:a6:4a:84:44:ef:5b:57:b6:e5: 95:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:74:9C:0C:88:C2:A4:38:FA:F8:75:CF:AC:9C:34:65:72:CC:3F:13 X509v3 Authority Key Identifier: keyid:14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.154.0/24 Signature Algorithm: sha256WithRSAEncryption 39:29:90:6c:42:a0:86:cd:e8:1f:47:6c:6b:46:95:de:2c:cc: d9:bf:8c:76:79:6f:25:e3:f6:4a:4e:7c:c4:c0:6f:92:da:fa: 9d:17:ee:86:bb:7c:ad:1a:57:58:05:a5:90:03:67:b0:62:44: cf:59:e9:3e:e1:3e:0e:5c:d2:61:74:b0:91:cf:61:ad:fd:c9: 67:bf:7d:14:59:4f:e3:36:79:1e:21:8b:a6:de:7a:ab:c9:a9: 88:9a:bc:04:a0:84:ba:96:40:0b:3d:71:eb:5e:2b:41:d6:72: 96:cf:00:7a:4f:0c:75:df:2e:40:7e:52:11:b3:3e:c4:90:14: 27:3c:59:8d:a6:f8:6a:7c:0e:c1:e2:89:21:f5:34:18:e9:4b: 47:3a:e5:ad:9a:dd:fa:63:71:91:54:84:c4:c9:b0:ac:1d:b5: 0f:84:53:ee:32:6a:c8:69:be:60:94:99:18:83:37:8a:0f:00: 6d:30:20:6a:0e:ae:0b:57:4f:35:15:82:87:4d:77:a8:b4:56: 84:01:fd:0e:6b:28:37:6b:66:06:d1:fe:41:a2:30:37:30:1f: ac:4f:7c:97:16:4f:54:5d:33:6c:50:a2:29:25:c0:db:d5:77: 1d:5e:08:c3:37:f6:61:76:b1:dc:6f:5b:df:bc:69:6c:83:e6: 5e:15:54:8b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGLEgG7GQPRn4LsaKqiB2S4eW+WkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2 RThBODQ1NDAeFw0yNjA1MDMwMjI2NTdaFw0yNzA1MDIwMjMxNTdaMDMxMTAvBgNV BAMTKDU0NzQ5QzBDODhDMkE0MzhGQUY4NzVDRkFDOUMzNDY1NzJDQzNGMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClsfGZ8tpXyn558BpyOpjGFYE3 Fo0SD7moMX2L/9beT7pIgFzpqSOyLN6LnVswU2FzUfvR79FGXq5isaYNc3RshsDV a/rZ0f396pmzMbEiO9cjlvih3rxDQUqShXpPZuDressKIJWJGARfQeQ/FwKQFpM2 NHQ8um9arx2pUNNQADBJJUW7TBi8TQwt1lYQEBl2wWQamG3fqPVOOOpn3KNZegla tG0MuIj79RBQpIQvkwPzVpReFFtqPMolDLS120oyXk6+Gh4geG1etgpxAfW+K2oJ GNeAy7RCadWVyTJvCp1udBlzKtuek2FPrxb3aamT5ZrFy6ZKhETvW1e25ZXTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUVHScDIjCpDj6+HXPrJw0ZXLMPxMwHwYDVR0j BBgwFoAUFGSbEG+gxBHX/Nc6SwFHIm6KhFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQxNzZkZGQtYTk4MC00M2Q2LTk0YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2 RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2RThBODQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDY0OUIxMDZGQTBDNDExRDdGQ0Q3M0E0QjAxNDcyMjZFOEE4 NDU0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRkMTc2ZGRkLWE5ODAtNDNkNi05 NGE3LTk1ZWVkYTUzOTY2NS8wLzMxMzAzMzJlMzgzOTJlMzEzNTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1maMA0GCSqG SIb3DQEBCwUAA4IBAQA5KZBsQqCGzegfR2xrRpXeLMzZv4x2eW8l4/ZKTnzEwG+S 2vqdF+6Gu3ytGldYBaWQA2ewYkTPWek+4T4OXNJhdLCRz2Gt/clnv30UWU/jNnke IYum3nqryamImrwEoIS6lkALPXHrXitB1nKWzwB6Twx13y5AflIRsz7EkBQnPFmN pvhqfA7B4okh9TQY6UtHOuWtmt36Y3GRVITEybCsHbUPhFPuMmrIab5glJkYgzeK DwBtMCBqDq4LV081FYKHTXeotFaEAf0Oayg3a2YG0f5BojA3MB+sT3yXFk9UXTNs UKIpJcDb1XcdXgjDN/ZhdrHcb1vfvGlsg+ZeFVSL -----END CERTIFICATE-----Generated at Wed May 13 11:55:26 2026 by rpki-client