$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa File: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (raw, json) Hash identifier: zXGSnPmEp4F0jfkLMTMvDaGHFb1hgkrGA8TNoljlC2g= Subject key identifier: 2D:2A:B1:CF:24:31:11:BD:20:35:15:15:5C:D8:99:07:7B:F8:44:E2 Certificate issuer: /CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Certificate serial: 57976688C2E1611AC1D3F4E23F241A1E48835C11 Authority key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa Signing time: Sun 03 May 2026 02:45:21 +0000 ROA not before: Sun 03 May 2026 02:40:21 +0000 ROA not after: Sun 02 May 2027 02:45:21 +0000 asID: 17440 IP address blocks: 103.209.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:97:66:88:c2:e1:61:1a:c1:d3:f4:e2:3f:24:1a:1e:48:83:5c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Validity Not Before: May 3 02:40:21 2026 GMT Not After : May 2 02:45:21 2027 GMT Subject: CN=2D2AB1CF243111BD203515155CD899077BF844E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:28:51:b5:14:99:70:e1:67:a9:56:9b:e1: b4:2a:3f:6b:dc:c4:c6:b2:b2:25:8b:77:07:19:d3: 2e:c1:89:53:d4:92:3f:51:4a:80:f5:33:b5:cb:35: 16:ae:46:14:ae:4f:b0:8c:7a:d1:c1:1c:a9:8c:bf: 86:97:76:a1:b2:38:a4:8c:24:80:6e:0b:7f:25:61: 48:20:db:24:97:75:3a:8e:e1:97:25:e8:46:57:b6: a9:fa:3c:07:02:05:04:0b:be:a3:f5:19:a2:75:c5: 55:0f:d8:3b:a9:89:3e:6b:7d:76:8e:03:07:0b:16: 9e:9f:c2:d3:96:02:08:4f:29:19:8b:29:bb:c6:a4: c3:53:b0:8b:b3:2d:28:92:bc:19:7f:99:9f:02:52: c6:ad:bd:72:21:de:f8:b0:4a:95:49:4c:0a:aa:bd: 57:b3:bd:42:e2:40:45:96:31:0d:95:32:e0:71:52: 40:5c:2e:d7:36:1d:46:9c:85:6c:fa:d8:7f:b8:eb: fa:d7:71:ef:4b:77:67:2b:22:37:2d:80:6f:e4:96: 3d:e4:90:5f:6b:96:4e:13:83:e7:42:17:ea:63:4c: 88:24:9a:db:c6:4f:5d:99:4a:77:79:84:8c:b1:f1: 4f:e8:7a:a0:ae:53:12:25:4d:a8:b1:cd:05:56:fa: 63:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2A:B1:CF:24:31:11:BD:20:35:15:15:5C:D8:99:07:7B:F8:44:E2 X509v3 Authority Key Identifier: keyid:FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.250.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:31:98:65:1b:fb:36:b2:9b:8f:ee:83:b5:20:2d:70:1d:06: 8f:d1:60:b4:b6:3e:cd:2e:90:d3:44:0f:d1:c6:26:a4:32:e5: 01:a9:97:e8:95:ac:4d:15:43:a2:2d:20:cc:d7:c4:9c:a9:b4: 69:8d:16:78:9e:8f:a4:95:84:a8:a2:ab:53:92:ac:0b:5f:29: ee:e5:d6:df:f5:19:c6:58:4d:68:78:d5:24:6d:44:6d:69:ff: 01:db:2c:d6:09:c4:65:3d:8a:0d:fd:d9:e0:31:40:d2:cb:6b: 44:ee:89:54:51:39:95:bd:42:d9:d8:80:03:ac:0e:91:e8:ad: 0a:7a:38:83:fd:63:76:1d:65:6a:f0:67:67:81:eb:10:99:f6: 00:dd:fa:78:c3:a8:2a:f8:c9:89:38:2f:fd:3a:da:c2:dc:39: d4:a9:d1:a0:23:72:90:b0:eb:bc:69:c5:12:21:57:df:00:3e: 78:9d:5f:0e:9b:c3:85:d2:37:a5:ab:c3:60:f9:93:79:e3:99: 95:66:68:86:28:61:f7:91:9e:38:5f:eb:be:d9:95:99:88:92: c9:d3:e5:60:90:65:3c:80:e1:00:e0:84:58:50:0e:f9:bd:c9: ed:db:21:30:c5:f1:73:a4:4f:e2:b5:50:3b:db:c5:73:66:0a: 8a:d8:6f:f7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUV5dmiMLhYRrB0/TiPyQaHkiDXBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4RDIw MkE1NTFCNzAeFw0yNjA1MDMwMjQwMjFaFw0yNzA1MDIwMjQ1MjFaMDMxMTAvBgNV BAMTKDJEMkFCMUNGMjQzMTExQkQyMDM1MTUxNTVDRDg5OTA3N0JGODQ0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NihRtRSZcOFnqVab4bQqP2vc xMaysiWLdwcZ0y7BiVPUkj9RSoD1M7XLNRauRhSuT7CMetHBHKmMv4aXdqGyOKSM JIBuC38lYUgg2ySXdTqO4Zcl6EZXtqn6PAcCBQQLvqP1GaJ1xVUP2DupiT5rfXaO AwcLFp6fwtOWAghPKRmLKbvGpMNTsIuzLSiSvBl/mZ8CUsatvXIh3viwSpVJTAqq vVezvULiQEWWMQ2VMuBxUkBcLtc2HUachWz62H+46/rXce9Ld2crIjctgG/klj3k kF9rlk4Tg+dCF+pjTIgkmtvGT12ZSnd5hIyx8U/oeqCuUxIlTaixzQVW+mO9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULSqxzyQxEb0gNRUVXNiZB3v4ROIwHwYDVR0j BBgwFoAU/1+IHcB8xKmphdWUNgZY0gKlUbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2MwNzRjZDgtMjgzMC00ZWFiLWJkZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURD MDdDQzRBOUE5ODVENTk0MzYwNjU4RDIwMkE1NTFCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjVGODgxREMwN0NDNEE5QTk4NUQ1OTQzNjA2NThEMjAyQTU1 MUI3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdjMDc0Y2Q4LTI4MzAtNGVhYi1i ZGQ0LWE4MDdlYzUxMTVkYS8wLzMxMzAzMzJlMzIzMDM5MmUzMjM1MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM3MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ9H6MA0GCSqG SIb3DQEBCwUAA4IBAQA6MZhlG/s2spuP7oO1IC1wHQaP0WC0tj7NLpDTRA/Rxiak MuUBqZfolaxNFUOiLSDM18ScqbRpjRZ4no+klYSooqtTkqwLXynu5dbf9RnGWE1o eNUkbURtaf8B2yzWCcRlPYoN/dngMUDSy2tE7olUUTmVvULZ2IADrA6R6K0KejiD /WN2HWVq8GdngesQmfYA3fp4w6gq+MmJOC/9OtrC3DnUqdGgI3KQsOu8acUSIVff AD54nV8Om8OF0jelq8Ng+ZN545mVZmiGKGH3kZ44X+u+2ZWZiJLJ0+VgkGU8gOEA 4IRYUA75vcnt2yEwxfFzpE/itVA728VzZgqK2G/3 -----END CERTIFICATE-----Generated at Wed May 13 02:18:50 2026 by rpki-client