$ rpki-client -vvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa File: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (raw, json) Hash identifier: m7aYtnxqmO5yLH8RFKNeSd1PMgjIrrVpH7VORkZBuSQ= Subject key identifier: 1B:4A:09:0F:F4:0E:67:8B:92:9E:54:6C:60:88:5B:09:FC:8D:D1:F1 Certificate issuer: /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Certificate serial: 4177A7AA8425A63E3BA937350561C3F3A52C59BE Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa Signing time: Sun 03 May 2026 02:35:39 +0000 ROA not before: Sun 03 May 2026 02:30:39 +0000 ROA not after: Sun 02 May 2027 02:35:39 +0000 asID: 138089 IP address blocks: 103.124.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:77:a7:aa:84:25:a6:3e:3b:a9:37:35:05:61:c3:f3:a5:2c:59:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Validity Not Before: May 3 02:30:39 2026 GMT Not After : May 2 02:35:39 2027 GMT Subject: CN=1B4A090FF40E678B929E546C60885B09FC8DD1F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6d:69:20:e9:14:9f:33:24:69:e1:06:78:9b: df:74:07:5c:4e:e7:60:99:1a:ee:e0:25:d2:15:d7: 0f:d1:17:13:c8:71:20:4b:a7:81:48:34:04:5c:b1: bd:33:23:76:4f:ff:be:5d:8a:f5:22:2b:1a:53:a7: 37:d3:97:87:82:d3:9a:54:7f:6d:56:b0:ce:7f:54: 65:9a:91:d5:75:66:30:6d:06:79:ae:93:8f:ba:4d: 68:8a:14:ea:ee:26:62:12:9f:a9:aa:86:ec:24:f0: 6e:25:da:b3:bd:07:2d:71:c1:b3:c9:42:23:71:05: 6b:f8:95:02:8b:d9:14:66:10:51:d6:f2:59:7b:51: 81:e5:b9:d0:18:b5:bf:c3:48:82:b2:7c:7b:93:8f: 9d:cd:7f:b7:0d:79:3d:1c:59:23:42:85:b9:f2:7d: 50:7d:a3:e2:0a:63:7c:09:23:7f:e0:a6:d6:17:8a: 2f:95:d1:eb:96:1e:29:67:0a:fb:f1:c9:8b:16:7b: c4:6d:f2:69:34:cc:13:52:e1:08:b5:6d:c1:d5:9e: 4d:f6:c3:9f:b9:da:1c:59:11:4e:73:7e:c1:f4:10: a1:72:c1:ac:db:ed:d2:03:5c:1a:c5:d9:62:9e:ba: f9:91:6b:ae:f7:f6:3f:c0:ba:4c:9e:ba:f4:6e:61: 7b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4A:09:0F:F4:0E:67:8B:92:9E:54:6C:60:88:5B:09:FC:8D:D1:F1 X509v3 Authority Key Identifier: keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.137.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:a0:18:ec:25:5d:a3:6b:3f:fd:27:76:dc:4e:7b:ab:78:9e: 90:51:2c:7a:87:fd:5b:0d:23:eb:1d:eb:6d:f5:ce:97:9a:87: 1c:0d:74:d1:0b:6f:97:d7:5b:48:f6:dd:65:d0:cd:bb:41:d3: 14:e5:ae:e0:07:43:e7:b1:3b:d2:3a:0b:4c:b0:3e:1e:d9:3d: e6:dc:09:10:49:2d:e1:5f:31:80:4b:4f:b4:86:ae:b8:e1:ae: 1f:04:51:b2:d6:a8:32:1e:c6:07:a0:b7:98:ad:4e:a4:8d:ab: a6:fc:fa:13:d8:a9:c7:60:28:b7:1c:f4:51:e1:66:f6:d1:31: 42:9e:2c:50:23:9b:84:6b:95:6a:d0:d2:08:cd:49:64:6b:56: ad:27:d5:e9:7e:6a:77:aa:85:c6:19:a3:cf:43:2b:81:77:e6: 31:ab:de:fe:42:a5:a3:84:a2:c3:b2:69:17:d4:fc:b0:60:b2: ba:a9:39:a1:1a:87:5b:dd:d0:b8:a1:1a:06:d8:88:0b:2c:2b: e7:7f:e8:17:af:5a:a1:e1:70:54:39:a2:dc:74:2d:eb:4c:e7: b0:7a:64:cc:6b:18:6e:b9:cb:31:02:66:8e:a5:89:b3:87:81: f4:bc:e7:47:e9:ab:96:1a:bf:0b:e3:a3:63:02:33:ba:b9:95: 26:8c:98:df -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQXenqoQlpj47qTc1BWHD86UsWb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdC NDQ4NkU2NzAeFw0yNjA1MDMwMjMwMzlaFw0yNzA1MDIwMjM1MzlaMDMxMTAvBgNV BAMTKDFCNEEwOTBGRjQwRTY3OEI5MjlFNTQ2QzYwODg1QjA5RkM4REQxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpbWkg6RSfMyRp4QZ4m990B1xO 52CZGu7gJdIV1w/RFxPIcSBLp4FINARcsb0zI3ZP/75divUiKxpTpzfTl4eC05pU f21WsM5/VGWakdV1ZjBtBnmuk4+6TWiKFOruJmISn6mqhuwk8G4l2rO9By1xwbPJ QiNxBWv4lQKL2RRmEFHW8ll7UYHludAYtb/DSIKyfHuTj53Nf7cNeT0cWSNChbny fVB9o+IKY3wJI3/gptYXii+V0euWHilnCvvxyYsWe8Rt8mk0zBNS4Qi1bcHVnk32 w5+52hxZEU5zfsH0EKFywazb7dIDXBrF2WKeuvmRa6739j/AukyeuvRuYXu3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUG0oJD/QOZ4uSnlRsYIhbCfyN0fEwHwYDVR0j BBgwFoAUu5M7+ysMijq9TlVIW8zZ57RIbmcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiYTRlNTktZmIzMS00MWI1LTg4ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIy QjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdCNDQ4NkU2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjkzM0JGQjJCMEM4QTNBQkQ0RTU1NDg1QkNDRDlFN0I0NDg2 RTY3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04 OGU3LTBiMmNlZDFmMjAxYy8wLzMxMzAzMzJlMzEzMjM0MmUzMTMzMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfIkwDQYJ KoZIhvcNAQELBQADggEBAFygGOwlXaNrP/0ndtxOe6t4npBRLHqH/VsNI+sd6231 zpeahxwNdNELb5fXW0j23WXQzbtB0xTlruAHQ+exO9I6C0ywPh7ZPebcCRBJLeFf MYBLT7SGrrjhrh8EUbLWqDIexgegt5itTqSNq6b8+hPYqcdgKLcc9FHhZvbRMUKe LFAjm4RrlWrQ0gjNSWRrVq0n1el+aneqhcYZo89DK4F35jGr3v5CpaOEosOyaRfU /LBgsrqpOaEah1vd0LihGgbYiAssK+d/6BevWqHhcFQ5otx0LetM57B6ZMxrGG65 yzECZo6libOHgfS850fpq5Yavwvjo2MCM7q5lSaMmN8= -----END CERTIFICATE-----Generated at Wed May 13 01:14:22 2026 by rpki-client