$ rpki-client -vvf rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa File: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (raw, json) Hash identifier: yk1O5C1BOxz+IbSF0vGTgF2z9BWG6BcqwgclHoMMF8k= Subject key identifier: 5F:A3:93:BC:59:4D:2D:06:61:0E:45:FF:2E:B7:CD:16:D7:C8:B2:76 Certificate issuer: /CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92 Certificate serial: 292FF59A778E42AF2AB33B6BC6120C6A3E1C5E24 Authority key identifier: 91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa Signing time: Sun 03 May 2026 02:44:02 +0000 ROA not before: Sun 03 May 2026 02:39:02 +0000 ROA not after: Sun 02 May 2027 02:44:02 +0000 asID: 139979 IP address blocks: 103.147.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2f:f5:9a:77:8e:42:af:2a:b3:3b:6b:c6:12:0c:6a:3e:1c:5e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92 Validity Not Before: May 3 02:39:02 2026 GMT Not After : May 2 02:44:02 2027 GMT Subject: CN=5FA393BC594D2D06610E45FF2EB7CD16D7C8B276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:9d:6a:ba:d4:db:fb:a7:31:39:4e:21:6f: 12:c3:d4:ae:43:9b:66:f5:1c:3c:2e:82:df:c0:09: eb:87:f6:95:0e:0e:10:dc:ad:7e:1d:46:80:c0:6f: 7f:d9:53:3f:4c:c8:f5:88:d2:64:a7:48:30:b3:b8: a1:96:1d:0e:3b:9a:56:bf:84:ee:c8:ab:29:9c:2d: 8d:8b:21:69:7e:a9:7c:f0:dd:f7:01:71:f8:87:8a: c9:9b:cc:c5:9b:f2:e2:69:36:26:8f:7b:62:40:f0: 64:cd:9e:f3:fb:49:ac:49:43:03:84:ad:c0:84:d0: b7:b6:93:ca:fa:70:17:5d:b5:96:2e:11:8a:62:76: b8:d7:8e:c7:cd:3e:4b:0c:ac:5d:12:0c:ad:ff:30: bf:fd:c5:f4:f0:10:e2:d0:7c:db:2f:4e:08:41:c0: 30:cf:76:58:15:68:19:73:15:51:22:a8:71:bd:8c: 6d:00:b7:21:b0:1f:7e:ff:be:41:e4:c1:f9:53:d4: 8c:7a:68:02:e8:99:cd:b2:bd:82:54:1d:51:a9:07: 64:1e:23:f0:c7:e5:00:70:b9:b3:6a:dd:0c:f5:58: e0:25:4c:39:f9:c8:71:f6:d6:ba:d0:e6:0e:c1:e1: 1e:54:9c:6c:13:e4:61:88:c2:99:4c:6b:7f:62:23: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A3:93:BC:59:4D:2D:06:61:0E:45:FF:2E:B7:CD:16:D7:C8:B2:76 X509v3 Authority Key Identifier: keyid:91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.219.0/24 Signature Algorithm: sha256WithRSAEncryption 86:f6:1c:10:d4:88:f6:29:ce:ff:bc:08:d0:03:76:a2:c2:18: c2:c6:64:f8:24:53:4b:4d:a8:00:ea:dd:38:ea:f7:db:e1:df: eb:22:58:0f:c1:81:0b:ff:0e:33:d8:44:a7:4f:7d:55:74:7d: f1:3f:cc:59:e2:92:df:f5:3e:1c:1e:97:17:41:ad:73:aa:67: 38:b4:8b:a6:af:26:bb:6c:e4:05:4d:ad:2d:d9:aa:a9:44:66: 5d:7b:04:f7:34:54:40:6e:c9:9b:8c:26:3a:2a:8d:d0:31:e6: 16:3d:4a:a2:60:d6:10:75:f9:c1:75:42:76:fe:e0:93:32:47: d4:70:ec:3e:81:22:31:5d:cd:a1:f5:b2:8e:c7:02:e5:68:57: c5:ce:e3:28:79:7e:84:1f:3a:24:5c:41:04:e4:1b:ff:29:dc: e7:c8:c9:e6:c8:e9:91:9c:2f:53:41:a6:3a:82:28:a5:9a:db: 87:24:82:81:09:14:f6:ad:f6:92:f8:d5:77:95:1b:51:6a:98: f7:8c:fc:b7:7f:d3:2c:9c:bf:da:af:e0:42:76:26:ee:14:f7: e7:8a:39:d1:7e:1b:6e:42:60:c0:e5:0e:06:dd:b6:c7:14:d0: f5:de:95:86:2f:ca:92:35:9d:75:84:68:94:42:e5:c0:c9:9d: ea:25:8a:4f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKS/1mneOQq8qsztrxhIMaj4cXiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFBNjlCQjI3RkJBRUNBOEVBNDZCQzVEOEE0MkQyMDk5 NzhFMUY5MjAeFw0yNjA1MDMwMjM5MDJaFw0yNzA1MDIwMjQ0MDJaMDMxMTAvBgNV BAMTKDVGQTM5M0JDNTk0RDJEMDY2MTBFNDVGRjJFQjdDRDE2RDdDOEIyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7wJ1qutTb+6cxOU4hbxLD1K5D m2b1HDwugt/ACeuH9pUODhDcrX4dRoDAb3/ZUz9MyPWI0mSnSDCzuKGWHQ47mla/ hO7IqymcLY2LIWl+qXzw3fcBcfiHismbzMWb8uJpNiaPe2JA8GTNnvP7SaxJQwOE rcCE0Le2k8r6cBddtZYuEYpidrjXjsfNPksMrF0SDK3/ML/9xfTwEOLQfNsvTghB wDDPdlgVaBlzFVEiqHG9jG0AtyGwH37/vkHkwflT1Ix6aALomc2yvYJUHVGpB2Qe I/DH5QBwubNq3Qz1WOAlTDn5yHH21rrQ5g7B4R5UnGwT5GGIwplMa39iI9+bAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUX6OTvFlNLQZhDkX/LrfNFtfIsnYwHwYDVR0j BBgwFoAUkaabsn+67KjqRrxdikLSCZeOH5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc3NmYyZTUtZGZiZC00ZjdmLThiM2QtN2I5NzBkNTQxYjhmLzAvOTFBNjlCQjI3 RkJBRUNBOEVBNDZCQzVEOEE0MkQyMDk5NzhFMUY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUE2OUJCMjdGQkFFQ0E4RUE0NkJDNUQ4QTQyRDIwOTk3OEUx RjkyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc3NzZmMmU1LWRmYmQtNGY3Zi04 YjNkLTdiOTcwZDU0MWI4Zi8wLzMxMzAzMzJlMzEzNDM3MmUzMjMxMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM3Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk9swDQYJ KoZIhvcNAQELBQADggEBAIb2HBDUiPYpzv+8CNADdqLCGMLGZPgkU0tNqADq3Tjq 99vh3+siWA/BgQv/DjPYRKdPfVV0ffE/zFnikt/1PhwelxdBrXOqZzi0i6avJrts 5AVNrS3ZqqlEZl17BPc0VEBuyZuMJjoqjdAx5hY9SqJg1hB1+cF1Qnb+4JMyR9Rw 7D6BIjFdzaH1so7HAuVoV8XO4yh5foQfOiRcQQTkG/8p3OfIyebI6ZGcL1NBpjqC KKWa24ckgoEJFPat9pL41XeVG1FqmPeM/Ld/0yycv9qv4EJ2Ju4U9+eKOdF+G25C YMDlDgbdtscU0PXelYYvypI1nXWEaJRC5cDJneolik8= -----END CERTIFICATE-----Generated at Wed May 13 02:51:20 2026 by rpki-client