$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa File: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (raw, json) Hash identifier: 1173I/3m7XkzbM38lD89z6ZiTiudGSDgnrOXK0sI2OM= Subject key identifier: B3:A6:E7:C4:50:4C:2B:D5:65:F9:EE:B0:FF:35:BB:A6:52:8B:8F:16 Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 282A3A9F3F8A8AEF5389F9EE4CD512E604FA3898 Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa Signing time: Sun 03 May 2026 02:43:09 +0000 ROA not before: Sun 03 May 2026 02:38:09 +0000 ROA not after: Sun 02 May 2027 02:43:09 +0000 asID: 136088 IP address blocks: 103.87.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2a:3a:9f:3f:8a:8a:ef:53:89:f9:ee:4c:d5:12:e6:04:fa:38:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: May 3 02:38:09 2026 GMT Not After : May 2 02:43:09 2027 GMT Subject: CN=B3A6E7C4504C2BD565F9EEB0FF35BBA6528B8F16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d2:fb:82:1c:11:d5:48:a4:0e:42:d3:1e:a5: 01:df:87:2c:db:00:fa:b9:4b:f7:b7:a4:28:47:6b: 23:c9:06:b6:db:59:ce:7a:74:e0:29:e1:75:33:a1: f3:f0:89:0a:2b:9a:f2:28:de:27:9a:1e:51:e3:56: d9:79:b3:a3:5d:50:26:6e:e7:af:24:95:b0:0f:bd: 45:37:cc:59:cf:19:72:6d:6a:1e:4c:71:ff:a7:55: d5:42:3b:b0:50:b6:7e:9c:ad:59:4a:89:5f:21:b4: 27:cf:47:21:b7:39:dd:41:95:41:eb:8e:44:ba:b6: 01:0d:0c:58:ed:b4:72:54:d9:83:bc:d6:f6:19:b6: 0e:0b:87:a9:0d:38:92:ea:a0:80:1d:98:9d:aa:57: 40:4b:e5:f7:ca:c7:05:57:9a:70:45:a4:0d:dc:44: 69:49:0d:cf:c1:f2:ee:85:6d:d2:cf:6b:52:33:b4: 46:e2:32:16:e6:b2:b4:b0:92:df:08:6b:ca:1b:64: ed:c2:38:b7:1e:2c:4f:e4:81:13:42:01:e2:41:42: 05:dc:5d:67:81:c8:6e:55:29:f7:2b:01:d7:5a:26: 87:d6:45:c9:0b:48:ec:92:79:bb:40:4b:48:f4:20: a6:b6:59:6f:00:db:8d:cb:1a:a0:dd:80:75:ed:1c: be:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A6:E7:C4:50:4C:2B:D5:65:F9:EE:B0:FF:35:BB:A6:52:8B:8F:16 X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.231.0/24 Signature Algorithm: sha256WithRSAEncryption 51:8a:2d:92:a7:63:b7:a8:91:b1:13:9f:de:3f:b0:bd:5d:6a: e3:a1:9b:b4:7a:88:b0:ab:1f:34:ed:24:81:d5:03:b8:43:3d: 2e:1d:ce:a0:d8:30:e6:85:b4:ac:3f:e7:19:85:70:28:75:87: 6c:63:4e:31:ad:9c:bb:5f:82:4e:1b:b1:a2:df:cf:83:39:7a: d7:f9:21:c0:76:36:17:65:9d:48:3c:bb:18:a0:ad:87:9d:b3: ef:86:eb:a4:59:1d:20:00:8a:f5:0c:d6:cd:03:5e:5e:de:2d: ee:56:c9:e5:34:c7:16:f3:e0:d4:f2:71:fa:f3:f8:de:2d:dd: 0c:4d:3a:df:0d:5b:b6:45:1c:4b:55:a5:9d:5e:61:21:98:72: 4e:c8:84:9e:cc:55:f4:11:2d:82:00:f3:7b:cc:7d:10:d5:ea: db:ef:4c:bd:7f:43:1c:78:2a:8c:d0:09:08:1e:cd:b0:28:ab: 2e:e0:77:09:25:44:36:de:db:86:4c:64:3c:ef:f3:1e:12:06: be:f9:41:0f:bf:6b:b3:09:45:2c:2f:06:ad:cc:8f:a1:38:cc: 2c:8f:a8:d2:98:b7:5f:f1:78:1e:14:e8:b4:22:f4:b6:20:a3: c1:37:38:92:13:09:fe:26:00:63:90:ce:6e:87:4e:85:da:9f: f6:77:e6:cf -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKCo6nz+Kiu9TifnuTNUS5gT6OJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA1MDMwMjM4MDlaFw0yNzA1MDIwMjQzMDlaMDMxMTAvBgNV BAMTKEIzQTZFN0M0NTA0QzJCRDU2NUY5RUVCMEZGMzVCQkE2NTI4QjhGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU0vuCHBHVSKQOQtMepQHfhyzb APq5S/e3pChHayPJBrbbWc56dOAp4XUzofPwiQormvIo3ieaHlHjVtl5s6NdUCZu 568klbAPvUU3zFnPGXJtah5Mcf+nVdVCO7BQtn6crVlKiV8htCfPRyG3Od1BlUHr jkS6tgENDFjttHJU2YO81vYZtg4Lh6kNOJLqoIAdmJ2qV0BL5ffKxwVXmnBFpA3c RGlJDc/B8u6FbdLPa1IztEbiMhbmsrSwkt8Ia8obZO3COLceLE/kgRNCAeJBQgXc XWeByG5VKfcrAddaJofWRckLSOySebtAS0j0IKa2WW8A243LGqDdgHXtHL6BAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUs6bnxFBMK9Vl+e6w/zW7plKLjxYwHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMxMzAzMzJlMzgzNzJlMzIzMzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1fnMA0GCSqG SIb3DQEBCwUAA4IBAQBRii2Sp2O3qJGxE5/eP7C9XWrjoZu0eoiwqx807SSB1QO4 Qz0uHc6g2DDmhbSsP+cZhXAodYdsY04xrZy7X4JOG7Gi38+DOXrX+SHAdjYXZZ1I PLsYoK2HnbPvhuukWR0gAIr1DNbNA15e3i3uVsnlNMcW8+DU8nH68/jeLd0MTTrf DVu2RRxLVaWdXmEhmHJOyISezFX0ES2CAPN7zH0Q1erb70y9f0MceCqM0AkIHs2w KKsu4HcJJUQ23tuGTGQ87/MeEga++UEPv2uzCUUsLwatzI+hOMwsj6jSmLdf8Xge FOi0IvS2IKPBNziSEwn+JgBjkM5uh06F2p/2d+bP -----END CERTIFICATE-----Generated at Wed May 13 02:48:55 2026 by rpki-client