$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa File: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (raw, json) Hash identifier: oD9IDDMfDt326HwXRIsMWXvISYJSKNyW+NeKDvpDxLY= Subject key identifier: 2D:62:87:AD:44:45:6D:85:98:26:B6:3E:45:F7:8B:C2:7F:FB:D2:41 Certificate issuer: /CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Certificate serial: 5BF50DB2DA37C060DCBEBD65F1DD92EA04A84F47 Authority key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa Signing time: Sun 03 May 2026 02:45:20 +0000 ROA not before: Sun 03 May 2026 02:40:20 +0000 ROA not after: Sun 02 May 2027 02:45:20 +0000 asID: 17440 IP address blocks: 103.209.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f5:0d:b2:da:37:c0:60:dc:be:bd:65:f1:dd:92:ea:04:a8:4f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Validity Not Before: May 3 02:40:20 2026 GMT Not After : May 2 02:45:20 2027 GMT Subject: CN=2D6287AD44456D859826B63E45F78BC27FFBD241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a1:4e:6f:21:63:60:62:d6:3d:54:1b:83:7a: 78:8e:9b:c8:e3:90:f9:82:79:a6:97:11:97:0d:d8: 88:c5:bf:ec:a3:b7:b2:06:3a:ae:92:3e:08:e6:a3: 71:d8:f4:f6:6d:ac:cc:fe:50:cd:84:5a:a3:58:3d: 40:85:f1:d5:13:d2:e3:07:6f:26:47:89:39:11:ee: 3b:9c:44:d5:26:4f:03:0e:44:2a:f7:dc:40:0f:70: fd:db:48:df:a3:69:6b:4c:fd:fe:3a:04:13:de:6f: 51:e0:d7:ef:5f:ae:53:71:b2:c8:8b:16:36:ba:89: 9d:48:19:ef:50:c6:7b:c9:36:ec:4b:22:b0:9b:dc: ee:c4:97:99:34:cc:57:db:96:9c:f0:40:f3:a5:ed: 18:0b:2d:45:1c:ab:c9:17:6a:03:09:5c:d0:0c:c2: cc:80:ab:ea:ae:c0:5f:0c:56:cc:2c:28:cc:80:e6: ad:7d:b3:36:75:52:f3:95:d9:93:ec:31:67:76:2d: e6:b8:1d:0c:2d:f7:1e:b7:74:fc:da:6b:df:eb:30: cb:31:54:09:4f:8d:56:d4:aa:e8:d5:22:99:db:2b: 62:46:45:00:c2:00:6a:04:68:76:84:83:fd:dc:ad: 4d:df:51:95:20:a6:52:ff:9b:81:bc:72:65:36:ee: 92:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:62:87:AD:44:45:6D:85:98:26:B6:3E:45:F7:8B:C2:7F:FB:D2:41 X509v3 Authority Key Identifier: keyid:FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.250.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:2e:9c:56:5d:3f:90:e6:92:ae:fa:b8:e7:f4:76:d2:7e:e7: 1b:3c:c1:55:73:52:f7:6c:ca:68:1f:3c:1f:4e:7f:b8:a6:f6: fc:7b:e5:cd:e4:79:f0:22:93:f9:ce:a0:8d:0a:f3:73:43:e5: 33:ce:42:cb:67:13:46:8e:cd:b2:a8:6c:e8:f8:42:39:52:dc: 76:ec:8f:60:3b:80:ff:b9:4c:e0:5e:71:13:cb:34:b2:79:59: a1:a6:42:3f:8f:3a:62:21:25:2d:ef:5f:84:21:af:47:b8:8d: 99:7a:48:c7:e0:8d:26:4b:35:c2:ef:b9:a2:96:f5:1e:34:a9: ef:18:bd:da:e2:fb:0e:77:e9:37:8d:34:13:6a:cb:54:e0:a1: 83:53:f4:dd:8d:de:0c:96:6d:cc:26:01:54:9e:ab:c5:34:27: b1:55:10:b5:da:1d:b6:89:59:5f:f6:48:e8:a7:38:4f:00:ed: 37:47:18:8f:ad:0e:0e:1c:75:eb:e8:96:ac:8c:18:5d:b1:57: 47:7c:00:8c:dc:1d:0d:35:c6:a0:e8:df:98:ab:26:68:63:1c: 33:a5:0b:7e:bf:ab:19:c7:c9:38:d5:94:e4:32:b5:c1:07:6b: e0:1b:47:50:13:6b:24:0c:bc:5c:4c:ff:69:17:68:6e:dc:2f: c4:e5:4e:0e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUW/UNsto3wGDcvr1l8d2S6gSoT0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4RDIw MkE1NTFCNzAeFw0yNjA1MDMwMjQwMjBaFw0yNzA1MDIwMjQ1MjBaMDMxMTAvBgNV BAMTKDJENjI4N0FENDQ0NTZEODU5ODI2QjYzRTQ1Rjc4QkMyN0ZGQkQyNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9oU5vIWNgYtY9VBuDeniOm8jj kPmCeaaXEZcN2IjFv+yjt7IGOq6SPgjmo3HY9PZtrMz+UM2EWqNYPUCF8dUT0uMH byZHiTkR7jucRNUmTwMORCr33EAPcP3bSN+jaWtM/f46BBPeb1Hg1+9frlNxssiL Fja6iZ1IGe9QxnvJNuxLIrCb3O7El5k0zFfblpzwQPOl7RgLLUUcq8kXagMJXNAM wsyAq+quwF8MVswsKMyA5q19szZ1UvOV2ZPsMWd2Lea4HQwt9x63dPzaa9/rMMsx VAlPjVbUqujVIpnbK2JGRQDCAGoEaHaEg/3crU3fUZUgplL/m4G8cmU27pKTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULWKHrURFbYWYJrY+RfeLwn/70kEwHwYDVR0j BBgwFoAU/1+IHcB8xKmphdWUNgZY0gKlUbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2MwNzRjZDgtMjgzMC00ZWFiLWJkZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURD MDdDQzRBOUE5ODVENTk0MzYwNjU4RDIwMkE1NTFCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjVGODgxREMwN0NDNEE5QTk4NUQ1OTQzNjA2NThEMjAyQTU1 MUI3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdjMDc0Y2Q4LTI4MzAtNGVhYi1i ZGQ0LWE4MDdlYzUxMTVkYS8wLzMxMzAzMzJlMzIzMDM5MmUzMjM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9H6MA0GCSqG SIb3DQEBCwUAA4IBAQAKLpxWXT+Q5pKu+rjn9HbSfucbPMFVc1L3bMpoHzwfTn+4 pvb8e+XN5HnwIpP5zqCNCvNzQ+UzzkLLZxNGjs2yqGzo+EI5Utx27I9gO4D/uUzg XnETyzSyeVmhpkI/jzpiISUt71+EIa9HuI2ZekjH4I0mSzXC77milvUeNKnvGL3a 4vsOd+k3jTQTastU4KGDU/Tdjd4Mlm3MJgFUnqvFNCexVRC12h22iVlf9kjopzhP AO03RxiPrQ4OHHXr6JasjBhdsVdHfACM3B0NNcag6N+YqyZoYxwzpQt+v6sZx8k4 1ZTkMrXBB2vgG0dQE2skDLxcTP9pF2hu3C/E5U4O -----END CERTIFICATE-----Generated at Wed May 13 02:49:27 2026 by rpki-client