$ rpki-client -vvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa File: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (raw, json) Hash identifier: xGj0e4XQ4vJ8oWerZ4jXagNlyhy1gxpkEDp9VKKcLHc= Subject key identifier: CC:B6:89:7D:60:0A:CB:64:ED:93:C4:3E:BD:49:4E:2F:7A:42:BC:77 Certificate issuer: /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Certificate serial: 47E29F40399C5DF4A343A38CBD65064753DC7B82 Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa Signing time: Sun 03 May 2026 02:35:39 +0000 ROA not before: Sun 03 May 2026 02:30:39 +0000 ROA not after: Sun 02 May 2027 02:35:39 +0000 asID: 138089 IP address blocks: 103.124.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e2:9f:40:39:9c:5d:f4:a3:43:a3:8c:bd:65:06:47:53:dc:7b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Validity Not Before: May 3 02:30:39 2026 GMT Not After : May 2 02:35:39 2027 GMT Subject: CN=CCB6897D600ACB64ED93C43EBD494E2F7A42BC77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b0:de:59:a9:bc:b6:d5:b2:6e:9f:29:3c:f9: ba:75:01:ec:19:62:f5:d1:1e:18:34:7a:cd:f6:04: 78:cd:99:f3:a7:08:b6:22:9d:dc:dc:13:ca:db:b6: f3:3f:c4:45:8f:fd:5b:2f:1b:34:98:1a:0e:eb:42: f3:ec:27:cb:22:8f:be:28:de:01:09:78:bd:5a:d1: 0f:98:f2:be:d8:32:0d:ad:cd:27:fa:23:b4:a7:72: fe:8a:47:6e:2a:38:8a:ee:bc:25:21:9b:01:82:ce: 2f:20:98:fb:6c:e0:cf:69:c6:26:83:b0:94:49:3f: ce:84:9a:69:47:20:47:f0:ef:7e:56:64:3b:0f:69: 9b:45:8c:f2:6b:cc:53:a2:1c:ad:db:3d:4a:fb:46: b5:2f:18:6a:48:fc:39:ff:a0:58:5d:04:f7:98:16: 5b:bb:6c:cb:72:9b:6e:38:f1:e0:c4:27:f0:73:12: b5:57:98:99:3b:4b:be:a9:ca:54:0b:46:91:73:c7: 9d:44:a9:6a:e9:c2:4e:a9:09:77:0f:78:a8:6c:eb: 2e:14:42:ae:d2:97:da:2e:a5:dd:90:dd:e3:13:a7: d9:57:14:53:4a:7d:87:a3:de:a4:ab:15:89:71:a1: 4d:a1:38:94:12:88:e4:98:42:d1:f5:db:ba:0d:04: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B6:89:7D:60:0A:CB:64:ED:93:C4:3E:BD:49:4E:2F:7A:42:BC:77 X509v3 Authority Key Identifier: keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.136.0/23 Signature Algorithm: sha256WithRSAEncryption 33:6c:d5:78:7a:8f:35:58:20:1b:ea:f2:80:91:4a:ba:65:77: 81:00:8f:fb:3d:74:53:09:e3:ea:fc:5a:db:1f:a6:90:cd:40: 29:a6:d6:05:71:89:41:63:e4:54:d5:42:7f:aa:00:f1:1e:58: c7:13:2a:8a:c9:50:c1:cf:c8:b9:65:3a:ff:ae:64:52:4d:a5: f1:8b:c6:4c:e0:e0:89:04:b7:75:4a:de:e5:15:dd:7a:1c:09: 3a:86:75:b3:33:32:c5:d1:86:43:01:f1:68:e5:f3:40:4b:59: 1f:71:b9:79:bf:45:04:67:f6:65:54:bb:2d:61:16:2f:7f:5d: dd:bc:54:d5:b5:fc:80:4b:74:53:bd:4e:2b:ab:c1:4d:d8:5c: b2:4c:eb:02:d5:53:f1:20:32:39:d6:9c:da:50:3d:25:4c:8b: 18:9c:70:68:70:b0:2c:c0:09:12:90:0c:13:b7:86:f0:50:ca: 4b:f2:67:59:79:e3:36:49:27:50:2c:00:41:fb:95:e2:9d:b2: 8a:d1:bd:43:58:45:52:41:15:21:1e:0a:33:20:c5:9a:ed:2f: 22:27:71:9e:0b:5d:fc:63:75:1d:3d:3d:98:27:fc:f0:23:fc: 2d:4d:a9:8c:b8:7b:50:65:93:43:c4:7a:2e:97:de:69:89:d6: 98:68:6c:bc -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUR+KfQDmcXfSjQ6OMvWUGR1Pce4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdC NDQ4NkU2NzAeFw0yNjA1MDMwMjMwMzlaFw0yNzA1MDIwMjM1MzlaMDMxMTAvBgNV BAMTKENDQjY4OTdENjAwQUNCNjRFRDkzQzQzRUJENDk0RTJGN0E0MkJDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjsN5Zqby21bJunyk8+bp1AewZ YvXRHhg0es32BHjNmfOnCLYindzcE8rbtvM/xEWP/VsvGzSYGg7rQvPsJ8sij74o 3gEJeL1a0Q+Y8r7YMg2tzSf6I7Sncv6KR24qOIruvCUhmwGCzi8gmPts4M9pxiaD sJRJP86EmmlHIEfw735WZDsPaZtFjPJrzFOiHK3bPUr7RrUvGGpI/Dn/oFhdBPeY Flu7bMtym2448eDEJ/BzErVXmJk7S76pylQLRpFzx51EqWrpwk6pCXcPeKhs6y4U Qq7Sl9oupd2Q3eMTp9lXFFNKfYej3qSrFYlxoU2hOJQSiOSYQtH127oNBFelAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUzLaJfWAKy2Ttk8Q+vUlOL3pCvHcwHwYDVR0j BBgwFoAUu5M7+ysMijq9TlVIW8zZ57RIbmcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiYTRlNTktZmIzMS00MWI1LTg4ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIy QjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdCNDQ4NkU2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjkzM0JGQjJCMEM4QTNBQkQ0RTU1NDg1QkNDRDlFN0I0NDg2 RTY3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04 OGU3LTBiMmNlZDFmMjAxYy8wLzMxMzAzMzJlMzEzMjM0MmUzMTMzMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnfIgwDQYJ KoZIhvcNAQELBQADggEBADNs1Xh6jzVYIBvq8oCRSrpld4EAj/s9dFMJ4+r8Wtsf ppDNQCmm1gVxiUFj5FTVQn+qAPEeWMcTKorJUMHPyLllOv+uZFJNpfGLxkzg4IkE t3VK3uUV3XocCTqGdbMzMsXRhkMB8Wjl80BLWR9xuXm/RQRn9mVUuy1hFi9/Xd28 VNW1/IBLdFO9TiurwU3YXLJM6wLVU/EgMjnWnNpQPSVMixiccGhwsCzACRKQDBO3 hvBQykvyZ1l54zZJJ1AsAEH7leKdsorRvUNYRVJBFSEeCjMgxZrtLyIncZ4LXfxj dR09PZgn/PAj/C1NqYy4e1Blk0PEei6X3mmJ1phobLw= -----END CERTIFICATE-----Generated at Wed May 13 00:45:15 2026 by rpki-client