$ rpki-client -vvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa File: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (raw, json) Hash identifier: nUugKOdExMFJnvFh04jHSO3wCeesIumGtVFPqxZ7JUo= Subject key identifier: D6:49:99:13:54:7F:42:8F:CC:A8:1B:0F:77:A9:6A:32:DE:5A:FB:86 Certificate issuer: /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Certificate serial: 3017850247B3B0DBD41B409588B3FD71F5BB2528 Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa Signing time: Sun 03 May 2026 02:35:37 +0000 ROA not before: Sun 03 May 2026 02:30:37 +0000 ROA not after: Sun 02 May 2027 02:35:37 +0000 asID: 138089 IP address blocks: 103.124.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:17:85:02:47:b3:b0:db:d4:1b:40:95:88:b3:fd:71:f5:bb:25:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Validity Not Before: May 3 02:30:37 2026 GMT Not After : May 2 02:35:37 2027 GMT Subject: CN=D6499913547F428FCCA81B0F77A96A32DE5AFB86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9b:80:15:8f:a4:3a:7d:2e:bd:bd:54:ae:46: bc:af:e3:0a:9f:96:a1:97:b4:2c:fd:10:94:18:3d: 26:bc:f4:fd:ce:4f:9b:ca:0b:12:fa:b5:a5:6d:04: eb:0a:4e:46:36:86:5f:e1:42:11:ed:b9:5a:0f:5f: 44:d5:ae:59:17:ad:d8:a6:4a:21:3b:be:74:7c:14: 51:01:dc:86:95:0f:29:d8:d8:79:bc:4f:c5:b4:03: 81:5f:24:97:cc:b0:2b:78:ac:12:db:ee:fd:23:2d: 6a:34:0f:cf:ea:84:87:20:4d:d9:b0:1e:69:b2:96: 68:ba:07:79:29:df:09:09:94:0d:c7:fa:f4:f0:de: 2e:c0:89:3d:bd:7e:4b:c9:e3:86:91:5d:3c:69:89: 9a:a1:06:23:29:1c:18:58:9c:44:ec:69:cb:fb:bc: 06:ab:33:4f:8c:1a:06:57:13:e7:c8:8f:ff:72:48: 3d:a1:1b:2a:e0:5f:13:5c:8f:32:68:a2:5b:35:7e: 05:04:5d:48:40:a6:ed:3b:7a:0f:55:58:aa:bc:a0: 3a:bf:1c:6b:ef:14:73:05:8b:4f:e4:c8:c1:b2:e7: 5d:64:e5:1b:d9:b4:42:90:e6:0f:9c:82:e5:a9:28: a5:ca:a9:f2:9e:ae:85:90:d0:32:ed:e4:91:1f:38: 39:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:49:99:13:54:7F:42:8F:CC:A8:1B:0F:77:A9:6A:32:DE:5A:FB:86 X509v3 Authority Key Identifier: keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.138.0/23 Signature Algorithm: sha256WithRSAEncryption bd:65:11:df:8a:5e:bf:58:cd:fa:45:2d:dc:f1:d7:ee:b2:6b: d4:e1:e3:50:27:91:68:b4:12:b7:e3:41:37:f6:d0:cb:9f:07: 67:0f:a4:70:09:c7:f4:e1:8c:78:20:ea:5e:33:f5:dd:4e:20: 4e:82:4e:01:5d:c4:d2:66:54:d9:b6:0b:38:8b:f1:6b:b8:da: da:7f:04:09:62:1e:58:e3:ff:13:cc:b9:48:6c:1b:0e:7e:6f: 01:2e:5d:d3:9e:76:1c:e0:68:f0:f2:dc:36:c0:fa:01:c2:8f: 6f:0b:7a:14:ef:56:f9:a3:95:fe:3a:86:14:9c:f0:29:42:08: d0:5c:d6:bf:32:15:f7:fe:5b:38:a1:c5:58:c0:a1:ca:c4:91: 16:c8:7d:a2:7f:79:de:88:eb:95:4f:1f:ca:2e:cd:5b:9f:0a: 7b:c1:15:de:97:89:fc:d3:3d:f6:73:41:e0:a0:83:0c:f9:95: 76:1e:d8:c5:05:5c:4d:23:2e:9f:3d:58:39:67:21:03:9f:ed: d4:c4:8e:7a:c0:7f:43:77:79:21:a4:33:88:d1:19:aa:d1:8d: 72:7d:44:19:ef:c6:a0:91:a7:ef:02:18:07:16:8c:25:85:d5: 2b:8a:05:ab:0a:18:14:74:67:98:28:3a:c2:dd:a2:e7:da:bc: e3:ca:9a:7c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMBeFAkezsNvUG0CViLP9cfW7JSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdC NDQ4NkU2NzAeFw0yNjA1MDMwMjMwMzdaFw0yNzA1MDIwMjM1MzdaMDMxMTAvBgNV BAMTKEQ2NDk5OTEzNTQ3RjQyOEZDQ0E4MUIwRjc3QTk2QTMyREU1QUZCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfm4AVj6Q6fS69vVSuRryv4wqf lqGXtCz9EJQYPSa89P3OT5vKCxL6taVtBOsKTkY2hl/hQhHtuVoPX0TVrlkXrdim SiE7vnR8FFEB3IaVDynY2Hm8T8W0A4FfJJfMsCt4rBLb7v0jLWo0D8/qhIcgTdmw Hmmylmi6B3kp3wkJlA3H+vTw3i7AiT29fkvJ44aRXTxpiZqhBiMpHBhYnETsacv7 vAarM0+MGgZXE+fIj/9ySD2hGyrgXxNcjzJools1fgUEXUhApu07eg9VWKq8oDq/ HGvvFHMFi0/kyMGy511k5RvZtEKQ5g+cguWpKKXKqfKeroWQ0DLt5JEfODntAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU1kmZE1R/Qo/MqBsPd6lqMt5a+4YwHwYDVR0j BBgwFoAUu5M7+ysMijq9TlVIW8zZ57RIbmcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiYTRlNTktZmIzMS00MWI1LTg4ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIy QjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdCNDQ4NkU2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjkzM0JGQjJCMEM4QTNBQkQ0RTU1NDg1QkNDRDlFN0I0NDg2 RTY3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04 OGU3LTBiMmNlZDFmMjAxYy8wLzMxMzAzMzJlMzEzMjM0MmUzMTMzMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnfIowDQYJ KoZIhvcNAQELBQADggEBAL1lEd+KXr9YzfpFLdzx1+6ya9Th41AnkWi0ErfjQTf2 0MufB2cPpHAJx/ThjHgg6l4z9d1OIE6CTgFdxNJmVNm2CziL8Wu42tp/BAliHljj /xPMuUhsGw5+bwEuXdOedhzgaPDy3DbA+gHCj28LehTvVvmjlf46hhSc8ClCCNBc 1r8yFff+WzihxVjAocrEkRbIfaJ/ed6I65VPH8ouzVufCnvBFd6XifzTPfZzQeCg gwz5lXYe2MUFXE0jLp89WDlnIQOf7dTEjnrAf0N3eSGkM4jRGarRjXJ9RBnvxqCR p+8CGAcWjCWF1SuKBasKGBR0Z5goOsLdoufavOPKmnw= -----END CERTIFICATE-----Generated at Wed May 13 01:14:42 2026 by rpki-client