$ rpki-client -vvf rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa File: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (raw, json) Hash identifier: d1/YZ4nLn+eOZOqPz/6uDnp+bGReiCL4D5xWg3VSU5w= Subject key identifier: 31:64:75:FE:C1:EF:26:81:C5:64:BA:62:2A:A0:01:FC:9E:1A:34:59 Certificate issuer: /CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Certificate serial: 25FD6C9E39E8C2EA34F8F0627B0C58569C1454B7 Authority key identifier: DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa Signing time: Sun 03 May 2026 02:42:25 +0000 ROA not before: Sun 03 May 2026 02:37:25 +0000 ROA not after: Sun 02 May 2027 02:42:25 +0000 asID: 138128 IP address blocks: 103.148.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fd:6c:9e:39:e8:c2:ea:34:f8:f0:62:7b:0c:58:56:9c:14:54:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Validity Not Before: May 3 02:37:25 2026 GMT Not After : May 2 02:42:25 2027 GMT Subject: CN=316475FEC1EF2681C564BA622AA001FC9E1A3459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:4a:fb:a6:63:d7:3f:9d:74:f7:4d:15:1b: 85:69:a3:4e:ff:04:37:e2:34:d9:3b:6e:06:a4:57: 7e:bf:cf:1c:2c:26:8b:3f:c4:41:ae:6c:5c:2d:c6: b0:d3:b2:82:9a:a0:fe:b4:68:12:ea:f3:26:5e:e2: ad:26:e6:95:0d:71:3d:93:aa:d1:7f:1c:c0:75:87: ac:70:d7:9b:40:11:2d:f0:c4:e1:23:cf:32:d4:7f: c2:69:a3:72:61:80:1c:8a:dc:12:ed:5e:f2:e5:a9: 63:ab:9a:0c:1c:c9:61:85:3b:af:c9:27:4f:99:4f: ad:34:ef:c7:bd:4a:8b:1c:e7:72:9c:03:e5:36:0b: 94:5e:7e:8d:19:d0:90:bd:0f:f7:21:d5:33:30:71: d8:6e:85:57:f7:b7:5a:66:d0:22:43:c4:2f:de:05: bb:57:25:73:b1:b1:9f:fc:4f:09:5f:83:a0:3f:a4: b3:32:2b:8c:96:05:6b:0f:0a:2f:02:e9:41:da:96: c3:d0:e2:17:02:bb:d7:78:29:2d:c9:87:27:c9:47: 95:e6:3d:c0:ee:18:9e:6a:b9:00:c9:3f:55:a0:a0: 64:01:f5:2f:58:85:61:9d:e4:da:4d:fd:49:3d:d2: c8:a1:d5:49:e3:3b:7b:34:4a:bf:d0:c4:9c:52:d2: 0e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:64:75:FE:C1:EF:26:81:C5:64:BA:62:2A:A0:01:FC:9E:1A:34:59 X509v3 Authority Key Identifier: keyid:DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.198.0/23 Signature Algorithm: sha256WithRSAEncryption 77:d5:ba:c3:f3:fb:99:5a:6d:a0:5a:3d:49:9e:d5:c6:d3:e2: c4:25:83:72:52:5b:27:f6:78:25:b4:df:4a:e2:9a:2d:bb:82: 57:3c:7a:c2:da:bc:d1:76:7d:1c:f6:ac:c6:dc:30:63:f5:13: 0e:02:47:fa:07:f5:97:db:c7:af:0e:7c:89:6d:95:b1:19:41: 54:99:00:50:70:c2:56:f1:46:99:30:24:f0:4f:67:16:8e:67: 1b:a0:98:80:ac:04:30:7b:b7:56:b5:6f:ed:2b:26:70:58:38: e8:f3:fc:62:da:b1:4d:a0:32:c3:50:7b:54:02:2a:f6:f5:8f: 9c:31:41:6d:cd:3b:1b:5b:63:fe:4c:f2:79:e7:fb:02:42:22: 2c:93:76:77:1b:62:7a:5f:bd:1f:6a:ba:1b:38:58:67:a8:cd: 92:f8:ca:81:b4:7f:6b:f7:59:07:93:23:75:de:61:6b:46:96: b1:12:65:23:c4:18:1e:b2:37:5a:ab:e9:dc:52:ed:1f:93:1d: 61:02:8e:24:9f:f3:d2:fa:f1:9f:fd:81:5d:0d:31:d9:29:f2: c5:bc:63:5e:db:b5:58:ac:9a:c2:cc:e2:10:ff:69:73:f8:5e: 8e:c3:8e:18:47:9d:fe:5e:0f:ed:8d:22:08:06:46:b4:63:60: f3:a7:d3:84 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJf1snjnowuo0+PBiewxYVpwUVLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNGNEM1 MUM1QTc0RDAeFw0yNjA1MDMwMjM3MjVaFw0yNzA1MDIwMjQyMjVaMDMxMTAvBgNV BAMTKDMxNjQ3NUZFQzFFRjI2ODFDNTY0QkE2MjJBQTAwMUZDOUUxQTM0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3bEr7pmPXP510900VG4Vpo07/ BDfiNNk7bgakV36/zxwsJos/xEGubFwtxrDTsoKaoP60aBLq8yZe4q0m5pUNcT2T qtF/HMB1h6xw15tAES3wxOEjzzLUf8Jpo3JhgByK3BLtXvLlqWOrmgwcyWGFO6/J J0+ZT60078e9Sosc53KcA+U2C5Refo0Z0JC9D/ch1TMwcdhuhVf3t1pm0CJDxC/e BbtXJXOxsZ/8Twlfg6A/pLMyK4yWBWsPCi8C6UHalsPQ4hcCu9d4KS3JhyfJR5Xm PcDuGJ5quQDJP1WgoGQB9S9YhWGd5NpN/Uk90sih1UnjO3s0Sr/QxJxS0g6xAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUMWR1/sHvJoHFZLpiKqAB/J4aNFkwHwYDVR0j BBgwFoAU32qYfi+b8QS5k4kR6Pg/TFHFp00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBjMmExM2ItMWY0MC00YzAzLWJjMzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0Uy RjlCRjEwNEI5OTM4OTExRThGODNGNEM1MUM1QTc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjZBOTg3RTJGOUJGMTA0Qjk5Mzg5MTFFOEY4M0Y0QzUxQzVB NzRELmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzcwYzJhMTNiLTFmNDAtNGMwMy1i YzM1LWY2OTYxNTE2ZDRkOS8wLzMxMzAzMzJlMzEzNDM4MmUzMTM5MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMyMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlMYwDQYJ KoZIhvcNAQELBQADggEBAHfVusPz+5labaBaPUme1cbT4sQlg3JSWyf2eCW030ri mi27glc8esLavNF2fRz2rMbcMGP1Ew4CR/oH9Zfbx68OfIltlbEZQVSZAFBwwlbx RpkwJPBPZxaOZxugmICsBDB7t1a1b+0rJnBYOOjz/GLasU2gMsNQe1QCKvb1j5wx QW3NOxtbY/5M8nnn+wJCIiyTdncbYnpfvR9quhs4WGeozZL4yoG0f2v3WQeTI3Xe YWtGlrESZSPEGB6yN1qr6dxS7R+THWECjiSf89L68Z/9gV0NMdkp8sW8Y17btVis msLM4hD/aXP4Xo7DjhhHnf5eD+2NIggGRrRjYPOn04Q= -----END CERTIFICATE-----Generated at Wed May 13 15:24:40 2026 by rpki-client