$ rpki-client -vvf rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa File: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (raw, json) Hash identifier: TkbyXPHwp6Kb69rQYjb4QN3MOoOzWNnMDZFwGXZxRRA= Subject key identifier: D9:89:7A:8F:53:62:17:B9:3D:CD:55:9B:D7:05:1A:CF:7C:46:09:35 Certificate issuer: /CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Certificate serial: 66220BA499AC2E7EF8E71C0DA92374EF121D2AD3 Authority key identifier: DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa Signing time: Sun 03 May 2026 02:42:24 +0000 ROA not before: Sun 03 May 2026 02:37:24 +0000 ROA not after: Sun 02 May 2027 02:42:24 +0000 asID: 4800 IP address blocks: 103.148.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:22:0b:a4:99:ac:2e:7e:f8:e7:1c:0d:a9:23:74:ef:12:1d:2a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Validity Not Before: May 3 02:37:24 2026 GMT Not After : May 2 02:42:24 2027 GMT Subject: CN=D9897A8F536217B93DCD559BD7051ACF7C460935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:4a:f5:66:06:53:e9:bf:d0:b9:d1:c2:33: 68:00:d6:99:d0:9f:02:43:df:ad:02:99:47:cf:d0: 64:b3:78:e4:1e:18:7b:94:3a:75:a8:79:47:87:53: ba:44:4a:78:55:84:42:a4:0b:56:e1:d0:07:fd:d2: 8d:e9:f6:5e:79:f4:12:1a:e7:50:5d:3f:2c:9b:f8: 35:4e:9f:64:21:58:bb:37:b8:a7:d5:cc:1a:e0:d8: da:f8:c0:b0:f4:dd:1a:b0:77:19:4a:1e:68:f4:64: ea:43:6d:75:4f:7f:c7:17:76:80:b2:81:06:e8:de: 02:49:a7:97:30:dc:bd:c0:4f:5d:cb:f8:cc:46:10: 6a:d2:1a:0e:30:21:20:46:d7:1a:e3:3b:1e:c9:e5: a9:c3:b0:94:1f:9f:12:77:8c:40:5f:e2:d8:4e:63: 25:b4:db:64:4a:e1:0c:f5:96:59:90:15:ab:8c:bc: e2:a4:2b:e0:da:4c:f3:d0:05:01:20:39:83:c3:46: cf:c0:9b:61:28:8e:6c:85:4c:5e:5b:4c:59:f5:f9: 14:30:b6:51:76:3d:e3:51:3d:b9:6e:3e:78:93:3e: 0b:87:7c:ce:14:27:d5:b8:af:bf:c2:d2:b1:e5:d9: b5:cb:df:85:24:ab:aa:f5:86:0e:d9:4f:39:36:ec: a8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:89:7A:8F:53:62:17:B9:3D:CD:55:9B:D7:05:1A:CF:7C:46:09:35 X509v3 Authority Key Identifier: keyid:DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.198.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:4f:24:d4:ad:71:16:c9:9a:26:ca:db:b5:e5:45:27:c2:a5: bd:41:28:b3:be:a2:38:80:5e:9d:bf:41:09:e3:21:83:c5:f4: 75:3f:e4:aa:21:8c:97:05:b6:85:d2:f1:24:3a:cb:80:59:67: f5:37:56:f1:8d:79:dc:82:67:4e:10:2e:19:fc:4a:73:ad:95: a5:78:1b:96:11:08:31:0d:18:29:53:be:5f:7c:24:2f:d4:60: 72:ca:d2:eb:62:3a:df:9a:23:e3:8a:81:cf:f9:80:09:3e:eb: a2:7c:14:81:8e:d9:79:47:8c:3e:f5:8d:a7:63:2c:3b:4e:c0: 06:9c:6c:50:f0:35:0f:36:a2:e8:6d:04:aa:cf:46:44:bd:3c: e3:89:32:63:a8:c4:c9:5e:d2:1a:d5:4d:da:86:b9:7e:1b:6c: 60:05:74:15:76:ee:70:c2:7e:a5:db:d4:d5:9e:5f:9b:08:96: 54:f0:e5:ab:7b:5c:56:fc:3c:77:35:da:7a:f9:22:de:ef:df: 71:ab:26:1c:b3:1c:14:de:e5:3f:12:35:85:69:05:6b:1c:08: 31:9e:6d:fc:e1:d7:24:78:e6:d6:ca:68:3e:68:75:20:dc:af: 37:56:53:a3:3e:cb:b6:7a:22:13:3a:6d:30:9e:74:c3:7f:39: 06:fc:b8:a0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZiILpJmsLn745xwNqSN07xIdKtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNGNEM1 MUM1QTc0RDAeFw0yNjA1MDMwMjM3MjRaFw0yNzA1MDIwMjQyMjRaMDMxMTAvBgNV BAMTKEQ5ODk3QThGNTM2MjE3QjkzRENENTU5QkQ3MDUxQUNGN0M0NjA5MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI/kr1ZgZT6b/QudHCM2gA1pnQ nwJD360CmUfP0GSzeOQeGHuUOnWoeUeHU7pESnhVhEKkC1bh0Af90o3p9l559BIa 51BdPyyb+DVOn2QhWLs3uKfVzBrg2Nr4wLD03RqwdxlKHmj0ZOpDbXVPf8cXdoCy gQbo3gJJp5cw3L3AT13L+MxGEGrSGg4wISBG1xrjOx7J5anDsJQfnxJ3jEBf4thO YyW022RK4Qz1llmQFauMvOKkK+DaTPPQBQEgOYPDRs/Am2EojmyFTF5bTFn1+RQw tlF2PeNRPbluPniTPguHfM4UJ9W4r7/C0rHl2bXL34Ukq6r1hg7ZTzk27KhnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU2Yl6j1NiF7k9zVWb1wUaz3xGCTUwHwYDVR0j BBgwFoAU32qYfi+b8QS5k4kR6Pg/TFHFp00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBjMmExM2ItMWY0MC00YzAzLWJjMzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0Uy RjlCRjEwNEI5OTM4OTExRThGODNGNEM1MUM1QTc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjZBOTg3RTJGOUJGMTA0Qjk5Mzg5MTFFOEY4M0Y0QzUxQzVB NzRELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzcwYzJhMTNiLTFmNDAtNGMwMy1i YzM1LWY2OTYxNTE2ZDRkOS8wLzMxMzAzMzJlMzEzNDM4MmUzMTM5MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeUxjANBgkqhkiG 9w0BAQsFAAOCAQEAGk8k1K1xFsmaJsrbteVFJ8KlvUEos76iOIBenb9BCeMhg8X0 dT/kqiGMlwW2hdLxJDrLgFln9TdW8Y153IJnThAuGfxKc62VpXgblhEIMQ0YKVO+ X3wkL9RgcsrS62I635oj44qBz/mACT7ronwUgY7ZeUeMPvWNp2MsO07ABpxsUPA1 Dzai6G0Eqs9GRL0844kyY6jEyV7SGtVN2oa5fhtsYAV0FXbucMJ+pdvU1Z5fmwiW VPDlq3tcVvw8dzXaevki3u/fcasmHLMcFN7lPxI1hWkFaxwIMZ5t/OHXJHjm1spo Pmh1INyvN1ZToz7LtnoiEzptMJ50w385Bvy4oA== -----END CERTIFICATE-----Generated at Wed May 13 14:25:05 2026 by rpki-client