$ rpki-client -vvf rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa File: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (raw, json) Hash identifier: OvRyOsYLEGBYlmYssyFcgvhpHbvbSdqAPtYyX5hS8EY= Subject key identifier: A7:0B:47:91:4E:F8:E5:CA:13:71:21:28:D4:3A:EB:13:12:E2:8E:B1 Certificate issuer: /CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Certificate serial: 3CD0A37C61A72683B7C81AA3129790B9C6BA1EC0 Authority key identifier: 87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa Signing time: Sun 03 May 2026 02:42:48 +0000 ROA not before: Sun 03 May 2026 02:37:48 +0000 ROA not after: Sun 02 May 2027 02:42:48 +0000 asID: 149878 IP address blocks: 103.189.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d0:a3:7c:61:a7:26:83:b7:c8:1a:a3:12:97:90:b9:c6:ba:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Validity Not Before: May 3 02:37:48 2026 GMT Not After : May 2 02:42:48 2027 GMT Subject: CN=A70B47914EF8E5CA13712128D43AEB1312E28EB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:17:1c:54:9e:73:e1:4a:74:17:6e:3d:92: 83:db:ba:ef:dd:71:bb:bd:fb:9d:80:16:9e:87:e7: 55:f1:44:6a:fe:d5:93:41:d4:5d:55:82:66:66:17: f2:11:8f:dd:b0:46:f3:26:16:3c:99:9f:69:a8:00: 36:76:23:05:5e:8a:2d:bf:40:2a:0f:4c:f5:bf:1b: 05:8d:ea:f8:2d:65:18:19:27:0e:17:ae:cd:5a:7e: 76:9b:b1:b9:9e:8c:ca:e0:4f:3d:3f:5b:ea:f0:ec: 23:80:13:67:5a:bd:84:40:b6:3f:70:66:9f:f2:01: 5b:99:62:5c:be:1f:bf:26:c7:ce:91:01:7a:d2:66: 10:c4:d5:ce:84:c6:20:2a:36:20:32:26:e5:8f:9c: 5b:c8:37:53:e0:83:3f:56:63:2c:aa:04:9f:66:6c: f1:14:96:75:2b:ed:3c:f9:14:8e:7f:05:2a:db:02: f4:f6:b2:19:e7:84:51:bd:c8:69:6d:9c:8d:ff:2f: d9:fb:6c:ad:2d:89:bd:03:00:e6:d6:ed:82:f0:2d: 96:9b:50:a8:71:8c:61:9f:f4:6e:aa:b5:e7:90:81: ea:a8:3b:4b:cb:20:02:64:50:0f:8c:40:4c:78:72: 50:02:cd:2c:2d:2e:d1:c1:de:ad:df:8b:c0:44:a2: 30:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0B:47:91:4E:F8:E5:CA:13:71:21:28:D4:3A:EB:13:12:E2:8E:B1 X509v3 Authority Key Identifier: keyid:87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.117.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:3d:b4:a6:2c:89:09:3c:21:a2:0f:6d:3d:e8:3e:af:cf:0a: a6:58:48:7d:17:ac:8e:68:3a:cf:97:ed:22:8a:d0:f1:64:13: 37:6f:84:ba:1a:da:f7:e1:2f:97:e5:3e:6d:a6:de:3c:9e:da: 8d:b6:ab:6a:f5:31:e7:94:64:f9:61:84:6e:b4:28:fe:9d:a8: 60:07:cb:dd:11:8c:4d:e5:48:0c:2f:5a:25:a2:ab:8c:bb:26: 6a:c5:fe:56:3c:56:d8:05:a0:6c:5e:48:2f:5a:5f:5a:e0:95: a2:aa:ca:90:c5:63:75:f3:07:6c:2f:37:12:37:d1:ab:39:89: 56:0f:d8:1c:ba:ee:87:52:4f:4b:68:5f:9f:d0:52:4d:b1:55: 93:bc:38:c8:f2:28:ee:cb:be:60:97:93:6d:9e:d8:fe:e5:00: e7:f8:0d:3f:4a:8f:51:1e:d6:25:99:df:cd:50:d8:9e:22:01: 10:5e:4f:65:6b:53:00:59:41:20:87:d8:57:c8:5e:15:33:17: 56:8b:c6:ab:d3:56:59:d9:9d:d8:29:f3:59:25:ab:4f:f6:c6: cf:fa:de:f8:33:82:65:aa:fe:1c:49:cd:61:08:8b:74:17:95: 4d:7c:71:36:02:e4:ae:f2:97:9e:76:65:ee:6d:b9:3a:b5:21: 54:4d:08:1b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPNCjfGGnJoO3yBqjEpeQuca6HsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhB MjE5Nzk2RjAeFw0yNjA1MDMwMjM3NDhaFw0yNzA1MDIwMjQyNDhaMDMxMTAvBgNV BAMTKEE3MEI0NzkxNEVGOEU1Q0ExMzcxMjEyOEQ0M0FFQjEzMTJFMjhFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMThccVJ5z4Up0F249koPbuu/d cbu9+52AFp6H51XxRGr+1ZNB1F1VgmZmF/IRj92wRvMmFjyZn2moADZ2IwVeii2/ QCoPTPW/GwWN6vgtZRgZJw4Xrs1afnabsbmejMrgTz0/W+rw7COAE2davYRAtj9w Zp/yAVuZYly+H78mx86RAXrSZhDE1c6ExiAqNiAyJuWPnFvIN1Pggz9WYyyqBJ9m bPEUlnUr7Tz5FI5/BSrbAvT2shnnhFG9yGltnI3/L9n7bK0tib0DAObW7YLwLZab UKhxjGGf9G6qteeQgeqoO0vLIAJkUA+MQEx4clACzSwtLtHB3q3fi8BEojDNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUpwtHkU745coTcSEo1DrrExLijrEwHwYDVR0j BBgwFoAUhy4xn4ALosa07znmfAL6eKIZeW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMwNWFiMzAtNTY1My00MmJjLTljM2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4 MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhBMjE5Nzk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzJFMzE5RjgwMEJBMkM2QjRFRjM5RTY3QzAyRkE3OEEyMTk3 OTZGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzczMDVhYjMwLTU2NTMtNDJiYy05 YzNmLWFhZjU2N2VhZTcwMS8wLzMxMzAzMzJlMzEzODM5MmUzMTMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzODM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvXUwDQYJ KoZIhvcNAQELBQADggEBAF09tKYsiQk8IaIPbT3oPq/PCqZYSH0XrI5oOs+X7SKK 0PFkEzdvhLoa2vfhL5flPm2m3jye2o22q2r1MeeUZPlhhG60KP6dqGAHy90RjE3l SAwvWiWiq4y7JmrF/lY8VtgFoGxeSC9aX1rglaKqypDFY3XzB2wvNxI30as5iVYP 2By67odST0toX5/QUk2xVZO8OMjyKO7LvmCXk22e2P7lAOf4DT9Kj1Ee1iWZ381Q 2J4iARBeT2VrUwBZQSCH2FfIXhUzF1aLxqvTVlnZndgp81klq0/2xs/63vgzgmWq /hxJzWEIi3QXlU18cTYC5K7yl552Ze5tuTq1IVRNCBs= -----END CERTIFICATE-----Generated at Wed May 13 12:28:18 2026 by rpki-client