$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa File: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (raw, json) Hash identifier: j3wy4rBOt9KLpaD5LH0BwgRkujp7xgPfgUer0oRRcO4= Subject key identifier: B5:8C:68:30:B4:82:E0:20:A2:E4:B6:88:2C:BA:FF:8B:43:A6:B3:E1 Certificate issuer: /CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Certificate serial: 7D51FDA2D553780E67D00F95AD0200304896391A Authority key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa Signing time: Sun 03 May 2026 02:45:20 +0000 ROA not before: Sun 03 May 2026 02:40:20 +0000 ROA not after: Sun 02 May 2027 02:45:20 +0000 asID: 17440 IP address blocks: 103.209.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:51:fd:a2:d5:53:78:0e:67:d0:0f:95:ad:02:00:30:48:96:39:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Validity Not Before: May 3 02:40:20 2026 GMT Not After : May 2 02:45:20 2027 GMT Subject: CN=B58C6830B482E020A2E4B6882CBAFF8B43A6B3E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:cc:e0:e0:46:6d:9b:9b:de:ff:12:2d:9b: 31:df:19:ca:b0:a1:a7:c4:8f:82:bd:47:73:b8:7e: 32:0e:a2:17:ce:ad:77:8f:79:d2:c9:33:f9:0d:77: 16:1b:fb:e9:09:19:a8:4a:52:b0:82:c7:7f:a0:f3: 74:e8:66:9b:af:6d:c4:dd:ee:c9:57:cf:77:df:30: 1e:63:5f:cf:38:b1:22:f0:53:14:00:20:df:52:80: f4:54:51:1b:c6:67:e4:72:32:db:da:b6:4d:06:8f: 09:88:c4:01:76:a1:24:e9:70:48:df:fc:6e:cb:90: 4c:24:7d:f1:9b:4c:7a:d6:5d:7a:e4:34:07:e2:95: dc:ad:d4:60:2a:35:55:f1:2b:df:30:00:f9:63:4d: a7:9d:76:84:18:1e:23:4b:63:97:8d:9f:37:9b:2b: 0a:87:1a:f6:dd:30:1b:de:fc:41:64:c6:86:3a:4a: ae:d6:ae:07:e1:91:aa:4c:91:25:33:b9:e9:9f:26: b2:43:c8:ea:be:12:4a:de:64:92:07:84:2a:fe:8e: 57:6a:a6:4e:ff:46:86:02:bf:17:8e:81:37:83:e3: a8:94:12:9f:2a:0a:28:cc:b9:f4:db:3f:85:03:14: 5f:3d:2e:74:20:62:0c:3a:3a:a3:f6:42:d3:b2:35: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8C:68:30:B4:82:E0:20:A2:E4:B6:88:2C:BA:FF:8B:43:A6:B3:E1 X509v3 Authority Key Identifier: keyid:FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.248.0/22 Signature Algorithm: sha256WithRSAEncryption 33:b1:b5:17:9b:b0:d8:71:9e:10:98:2d:37:16:bf:4b:0a:d7: 93:49:ba:12:92:ee:8d:b3:40:69:8f:a3:74:88:86:4f:c7:53: 13:03:2b:80:aa:66:31:14:e9:9a:b1:ca:54:71:a9:ce:bd:5b: 86:80:f0:52:75:9b:f7:db:5e:e9:c2:3e:17:37:96:95:56:70: d6:4f:cc:bb:44:34:2e:ce:df:a7:7d:2f:b2:2e:9d:5e:34:65: 43:95:31:63:0b:99:6d:37:3d:03:01:17:c7:b3:b4:b7:60:2e: 4d:e2:ea:0f:a5:e0:85:89:bd:08:06:1a:b2:5c:7e:3d:03:ab: 7e:68:d4:7a:7c:11:dc:03:24:87:c5:45:80:d2:1a:9c:e1:a6: 3f:8e:22:64:13:b4:a5:32:c0:90:7d:9b:8a:13:0d:ef:5d:a3: bd:5e:ab:f2:fe:a0:5c:db:20:40:79:0c:d5:76:6e:a3:4d:2e: bc:52:a2:3c:7d:5b:d5:01:9e:52:e8:1b:73:f8:6b:41:de:1d: 1e:22:1b:34:20:74:5a:b4:0f:50:8f:d5:84:83:42:91:4e:04: 42:8c:7c:79:9d:0e:33:52:52:31:05:c9:e3:f9:c4:17:e7:5d: 62:aa:16:d7:f1:29:b5:07:54:f2:d8:83:47:6b:6e:ba:ba:eb: e6:21:cc:82 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfVH9otVTeA5n0A+VrQIAMEiWORowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4RDIw MkE1NTFCNzAeFw0yNjA1MDMwMjQwMjBaFw0yNzA1MDIwMjQ1MjBaMDMxMTAvBgNV BAMTKEI1OEM2ODMwQjQ4MkUwMjBBMkU0QjY4ODJDQkFGRjhCNDNBNkIzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr5Mzg4EZtm5ve/xItmzHfGcqw oafEj4K9R3O4fjIOohfOrXePedLJM/kNdxYb++kJGahKUrCCx3+g83ToZpuvbcTd 7slXz3ffMB5jX884sSLwUxQAIN9SgPRUURvGZ+RyMtvatk0GjwmIxAF2oSTpcEjf /G7LkEwkffGbTHrWXXrkNAfildyt1GAqNVXxK98wAPljTaeddoQYHiNLY5eNnzeb KwqHGvbdMBve/EFkxoY6Sq7WrgfhkapMkSUzuemfJrJDyOq+EkreZJIHhCr+jldq pk7/RoYCvxeOgTeD46iUEp8qCijMufTbP4UDFF89LnQgYgw6OqP2QtOyNa3LAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtYxoMLSC4CCi5LaILLr/i0Oms+EwHwYDVR0j BBgwFoAU/1+IHcB8xKmphdWUNgZY0gKlUbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2MwNzRjZDgtMjgzMC00ZWFiLWJkZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURD MDdDQzRBOUE5ODVENTk0MzYwNjU4RDIwMkE1NTFCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjVGODgxREMwN0NDNEE5QTk4NUQ1OTQzNjA2NThEMjAyQTU1 MUI3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdjMDc0Y2Q4LTI4MzAtNGVhYi1i ZGQ0LWE4MDdlYzUxMTVkYS8wLzMxMzAzMzJlMzIzMDM5MmUzMjM0MzgyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMTM3MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ9H4MA0GCSqG SIb3DQEBCwUAA4IBAQAzsbUXm7DYcZ4QmC03Fr9LCteTSboSku6Ns0Bpj6N0iIZP x1MTAyuAqmYxFOmascpUcanOvVuGgPBSdZv3217pwj4XN5aVVnDWT8y7RDQuzt+n fS+yLp1eNGVDlTFjC5ltNz0DARfHs7S3YC5N4uoPpeCFib0IBhqyXH49A6t+aNR6 fBHcAySHxUWA0hqc4aY/jiJkE7SlMsCQfZuKEw3vXaO9Xqvy/qBc2yBAeQzVdm6j TS68UqI8fVvVAZ5S6Btz+GtB3h0eIhs0IHRatA9Qj9WEg0KRTgRCjHx5nQ4zUlIx Bcnj+cQX511iqhbX8Sm1B1Ty2INHa266uuvmIcyC -----END CERTIFICATE-----Generated at Wed May 13 02:50:43 2026 by rpki-client