$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa File: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (raw, json) Hash identifier: GVZGNEwcVR+6b1iz+Mf+WaWQxD3aIC0LXDFgR27cdp0= Subject key identifier: 65:21:16:D1:C7:D2:29:62:C8:8B:DE:0E:AC:80:79:14:8A:06:4E:91 Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 71065BD6EDE1D3285AFD3C6A5E4A0E4F691B340E Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa Signing time: Sun 03 May 2026 02:43:12 +0000 ROA not before: Sun 03 May 2026 02:38:12 +0000 ROA not after: Sun 02 May 2027 02:43:12 +0000 asID: 136088 IP address blocks: 103.87.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:06:5b:d6:ed:e1:d3:28:5a:fd:3c:6a:5e:4a:0e:4f:69:1b:34:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: May 3 02:38:12 2026 GMT Not After : May 2 02:43:12 2027 GMT Subject: CN=652116D1C7D22962C88BDE0EAC8079148A064E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:16:07:7f:04:91:a7:97:5c:5d:95:92:3a:b1: f3:d3:36:58:5a:42:65:ed:59:21:63:6c:34:31:22: bc:42:85:d1:1f:3a:8b:27:02:19:a8:01:95:97:a5: a1:af:ad:6b:02:f5:d2:25:49:12:b0:62:c7:5d:8e: 1d:0e:b1:41:cf:cb:60:ba:33:a9:64:01:99:be:36: 7a:42:e3:29:cf:d9:28:f2:6d:e3:40:5d:93:e9:e8: 05:37:58:c5:d7:e2:81:f3:f1:f6:af:93:b6:fe:26: ec:6e:73:1e:48:20:99:58:aa:ea:8d:96:ef:23:73: 8f:fe:cc:8e:47:fd:1e:63:32:3b:9d:9c:53:7a:56: 1e:bd:d8:69:50:3d:3b:77:d1:2b:c7:38:fe:bf:ac: 7f:b0:fc:35:52:b7:29:7d:c4:af:7f:6d:6d:f9:ca: c0:95:85:52:fb:9d:fe:fe:6e:4b:30:6b:73:dd:47: e7:63:94:9d:e9:91:af:6a:2a:9e:06:73:81:4c:39: ca:4f:b2:b0:36:e3:57:d7:e5:ba:89:b8:4a:fc:d5: d3:2a:f3:24:b7:62:d2:4d:ba:cb:cc:9a:9d:bb:f2: 5d:b7:49:25:d2:13:44:56:12:54:83:7b:1f:0d:fd: f6:49:af:8b:ca:6a:d3:b5:f3:0d:0b:bd:15:a2:6c: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:21:16:D1:C7:D2:29:62:C8:8B:DE:0E:AC:80:79:14:8A:06:4E:91 X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.230.0/24 Signature Algorithm: sha256WithRSAEncryption b4:74:07:14:a3:76:e5:ed:dc:06:9b:1c:50:0a:09:84:a6:2b: 2c:c4:dd:84:d5:32:71:40:31:bc:46:1c:f1:88:66:9f:a7:b0: 63:45:9d:5d:c9:d4:fc:63:7c:ab:f9:8b:c8:16:71:d2:ed:01: 28:ef:45:8a:cb:ed:8c:41:4e:86:89:70:2b:38:8f:4b:9e:65: 80:6e:ee:7f:3a:1d:46:8a:df:85:ea:4a:d6:8f:1a:11:1a:d4: a2:82:20:90:7b:d8:97:b0:10:22:75:5f:45:c4:20:e1:65:c4: 5b:91:d0:8d:5c:6d:b0:05:96:bc:0c:23:d3:fe:7a:94:20:d5: 2d:b0:0f:96:2a:9b:5c:6c:bd:f2:86:c9:b6:fb:6f:84:19:38: b9:4f:4a:38:32:74:0e:48:d9:ca:d0:03:e3:5a:5f:ba:4c:a3: b4:97:1f:88:39:d2:6a:f3:93:7a:8c:61:e6:db:7a:f4:ff:57: f1:e1:18:6b:4a:fb:63:97:76:06:b9:8e:94:bc:e0:5d:0a:69: 07:96:77:91:ef:29:97:22:7d:c0:d0:c0:5e:52:9e:f5:50:e8: 9e:d3:82:b8:7e:94:70:bc:7d:4a:70:f3:d6:fa:41:46:43:1c: 40:fe:c4:b2:16:76:5c:e1:d3:a1:59:a0:8d:44:f1:c6:79:16: 70:f6:0b:4b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcQZb1u3h0yha/TxqXkoOT2kbNA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA1MDMwMjM4MTJaFw0yNzA1MDIwMjQzMTJaMDMxMTAvBgNV BAMTKDY1MjExNkQxQzdEMjI5NjJDODhCREUwRUFDODA3OTE0OEEwNjRFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTFgd/BJGnl1xdlZI6sfPTNlha QmXtWSFjbDQxIrxChdEfOosnAhmoAZWXpaGvrWsC9dIlSRKwYsddjh0OsUHPy2C6 M6lkAZm+NnpC4ynP2SjybeNAXZPp6AU3WMXX4oHz8favk7b+Juxucx5IIJlYquqN lu8jc4/+zI5H/R5jMjudnFN6Vh692GlQPTt30SvHOP6/rH+w/DVStyl9xK9/bW35 ysCVhVL7nf7+bkswa3PdR+djlJ3pka9qKp4Gc4FMOcpPsrA241fX5bqJuEr81dMq 8yS3YtJNusvMmp278l23SSXSE0RWElSDex8N/fZJr4vKatO18w0LvRWibPndAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZSEW0cfSKWLIi94OrIB5FIoGTpEwHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMxMzAzMzJlMzgzNzJlMzIzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1fmMA0GCSqG SIb3DQEBCwUAA4IBAQC0dAcUo3bl7dwGmxxQCgmEpissxN2E1TJxQDG8RhzxiGaf p7BjRZ1dydT8Y3yr+YvIFnHS7QEo70WKy+2MQU6GiXArOI9LnmWAbu5/Oh1Git+F 6krWjxoRGtSigiCQe9iXsBAidV9FxCDhZcRbkdCNXG2wBZa8DCPT/nqUINUtsA+W KptcbL3yhsm2+2+EGTi5T0o4MnQOSNnK0APjWl+6TKO0lx+IOdJq85N6jGHm23r0 /1fx4RhrSvtjl3YGuY6UvOBdCmkHlneR7ymXIn3A0MBeUp71UOie04K4fpRwvH1K cPPW+kFGQxxA/sSyFnZc4dOhWaCNRPHGeRZw9gtL -----END CERTIFICATE-----Generated at Wed May 13 03:48:03 2026 by rpki-client