$ rpki-client -vvf rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa File: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (raw, json) Hash identifier: cw9vNPqzj+nbF/8UED+AX3JWM0AiWyBHrefZED5PbbE= Subject key identifier: 78:89:90:D6:EB:7E:B4:C4:F3:D9:96:81:1D:5C:B2:B5:13:2D:DE:60 Certificate issuer: /CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Certificate serial: 7ED866CC8EB59166038FF62E7712CA62290DFBB7 Authority key identifier: A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa Signing time: Sun 03 May 2026 02:56:56 +0000 ROA not before: Sun 03 May 2026 02:51:56 +0000 ROA not after: Sun 02 May 2027 02:56:56 +0000 asID: 150211 IP address blocks: 103.196.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d8:66:cc:8e:b5:91:66:03:8f:f6:2e:77:12:ca:62:29:0d:fb:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Validity Not Before: May 3 02:51:56 2026 GMT Not After : May 2 02:56:56 2027 GMT Subject: CN=788990D6EB7EB4C4F3D996811D5CB2B5132DDE60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:7d:b0:39:e2:40:e5:91:8e:34:7b:10:80: 7e:7c:d5:5e:a2:f7:ca:62:92:a8:33:b2:38:ea:2b: d7:8a:16:bc:d2:41:6d:4c:47:88:27:73:ac:25:ab: 2f:ec:6a:0e:5a:70:b3:a3:5a:2e:0f:e1:6b:12:ed: 78:12:9b:1b:f2:9b:0f:6f:fe:de:63:aa:dd:fc:e8: 67:76:4e:e6:c6:2c:c5:19:3a:ff:1e:92:2e:3d:6f: 0b:4e:3e:dd:33:fe:b0:59:79:2a:ad:c3:85:9e:bd: f5:e5:fe:9e:14:d6:ab:8f:4e:16:3d:31:0d:d3:c9: 2c:be:69:cd:78:4d:34:89:e6:d7:a2:0a:e1:c8:41: 4a:30:9c:00:e9:98:9b:50:dd:39:a9:ad:e9:89:6e: 69:a8:c4:1e:44:89:65:1a:3a:c6:96:2a:e1:84:e3: d6:dd:77:13:fd:e9:d0:03:cd:67:a1:d6:28:4c:4e: e4:78:4e:1c:41:30:5e:95:20:5b:2c:ac:50:df:c1: b6:54:f0:89:13:47:88:29:42:c6:79:5b:20:f0:15: 3e:cd:c8:f7:55:de:98:bb:31:1c:4f:b5:ed:2b:a3: 4a:70:55:80:fa:68:26:f4:b9:9a:66:a7:2d:23:09: 6a:54:ee:e1:60:33:1c:c5:1a:81:07:98:e9:f4:5a: 3c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:89:90:D6:EB:7E:B4:C4:F3:D9:96:81:1D:5C:B2:B5:13:2D:DE:60 X509v3 Authority Key Identifier: keyid:A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.196.118.0/23 Signature Algorithm: sha256WithRSAEncryption 65:29:dc:5c:3c:22:62:ac:bd:91:b9:28:bb:b4:ce:8c:0d:e9: 41:c2:63:9f:04:b2:50:98:5b:2d:62:66:8a:89:11:1e:16:ba: 6d:66:19:09:1a:06:f0:4f:41:25:40:a0:79:06:47:e2:11:8e: 25:18:6a:d7:fb:17:de:ab:a7:04:74:2f:af:9a:b6:1e:ba:ad: 47:5f:20:71:19:a0:a1:bc:a4:2a:f5:ef:cc:7b:62:bb:b2:a4: 5a:cf:92:42:22:82:5c:7d:0a:5e:1f:4b:48:31:1a:14:47:e1: 44:d5:e9:2b:c6:2b:58:73:d1:2d:8f:9b:a0:51:48:df:87:68: 52:5d:65:05:78:81:0a:b5:e6:8f:60:82:17:40:2b:f7:90:f5: a5:c3:54:26:0e:56:4f:ba:83:1e:02:c3:68:18:fb:61:dc:1b: cc:2f:51:d6:85:e0:81:e1:38:25:85:38:22:5f:eb:7d:28:cc: 70:93:43:a6:4e:b2:cd:06:45:75:81:10:26:d3:00:1c:be:26: bb:8a:09:a4:4e:59:9b:2f:d5:4c:a2:aa:c5:15:7a:0e:4b:08: d1:f5:1e:64:ee:79:8b:65:87:0f:b1:a9:31:6a:11:18:3f:e9: 71:58:71:98:97:d0:2f:ec:32:21:a0:05:dc:9e:1a:8b:18:57: 39:0a:7a:f7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUfthmzI61kWYDj/YudxLKYikN+7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMw RTZDMUFFRjAeFw0yNjA1MDMwMjUxNTZaFw0yNzA1MDIwMjU2NTZaMDMxMTAvBgNV BAMTKDc4ODk5MEQ2RUI3RUI0QzRGM0Q5OTY4MTFENUNCMkI1MTMyRERFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Xn2wOeJA5ZGONHsQgH581V6i 98pikqgzsjjqK9eKFrzSQW1MR4gnc6wlqy/sag5acLOjWi4P4WsS7XgSmxvymw9v /t5jqt386Gd2TubGLMUZOv8eki49bwtOPt0z/rBZeSqtw4WevfXl/p4U1quPThY9 MQ3TySy+ac14TTSJ5teiCuHIQUownADpmJtQ3TmpremJbmmoxB5EiWUaOsaWKuGE 49bddxP96dADzWeh1ihMTuR4ThxBMF6VIFssrFDfwbZU8IkTR4gpQsZ5WyDwFT7N yPdV3pi7MRxPte0ro0pwVYD6aCb0uZpmpy0jCWpU7uFgMxzFGoEHmOn0WjzBAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUeImQ1ut+tMTz2ZaBHVyytRMt3mAwHwYDVR0j BBgwFoAUqJ4oAI9DtwTC/cPq0/rwgw5sGu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY0MGFiZTYtOGRlZS00YmQxLTgxNGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4 RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMwRTZDMUFFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODlFMjgwMDhGNDNCNzA0QzJGREMzRUFEM0ZBRjA4MzBFNkMx QUVGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2NDBhYmU2LThkZWUtNGJkMS04 MTRjLTJhZjMxYTNkOWNkZi8wLzMxMzAzMzJlMzEzOTM2MmUzMTMxMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzAzMjMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnxHYwDQYJ KoZIhvcNAQELBQADggEBAGUp3Fw8ImKsvZG5KLu0zowN6UHCY58EslCYWy1iZoqJ ER4Wum1mGQkaBvBPQSVAoHkGR+IRjiUYatf7F96rpwR0L6+ath66rUdfIHEZoKG8 pCr178x7YruypFrPkkIiglx9Cl4fS0gxGhRH4UTV6SvGK1hz0S2Pm6BRSN+HaFJd ZQV4gQq15o9gghdAK/eQ9aXDVCYOVk+6gx4Cw2gY+2HcG8wvUdaF4IHhOCWFOCJf 630ozHCTQ6ZOss0GRXWBECbTABy+JruKCaROWZsv1UyiqsUVeg5LCNH1HmTueYtl hw+xqTFqERg/6XFYcZiX0C/sMiGgBdyeGosYVzkKevc= -----END CERTIFICATE-----Generated at Wed May 13 07:01:22 2026 by rpki-client