$ rpki-client -vvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa File: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (raw, json) Hash identifier: uojxwHiaMR8PO5h26JWS2B444u+QQh72ookAa5uFqSs= Subject key identifier: 46:B3:1B:98:59:43:61:00:EB:20:C3:E4:B5:48:FA:28:1B:06:CA:E2 Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Certificate serial: 020286FA378B5BEDBDCF879884D70747C020949E Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa Signing time: Sun 03 May 2026 02:57:21 +0000 ROA not before: Sun 03 May 2026 02:52:21 +0000 ROA not after: Sun 02 May 2027 02:57:21 +0000 asID: 142366 IP address blocks: 103.170.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:02:86:fa:37:8b:5b:ed:bd:cf:87:98:84:d7:07:47:c0:20:94:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Validity Not Before: May 3 02:52:21 2026 GMT Not After : May 2 02:57:21 2027 GMT Subject: CN=46B31B9859436100EB20C3E4B548FA281B06CAE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:6e:56:81:cb:a4:16:da:06:6a:8a:38:83: fc:a3:95:d5:85:d2:c6:7a:ee:b6:89:6a:38:26:d9: 22:4c:f7:37:43:b6:90:b4:cb:ad:42:11:d3:7e:7a: 0d:15:24:9a:d6:5d:2d:11:f9:41:92:9d:1a:73:7c: c5:30:36:a2:e3:65:a4:c6:fa:1e:7d:d7:99:b5:cd: 81:60:91:c5:10:e4:97:0a:5c:22:13:6c:b2:c7:3b: cf:2b:b1:c7:1e:dc:c0:5c:bc:e6:fc:22:e6:79:66: 13:a2:7c:29:82:ea:4a:fe:b0:c9:73:5c:65:75:61: b3:6b:11:b1:40:f5:93:b9:5b:4a:7d:29:b7:c5:83: ea:81:d2:48:2d:bb:13:7f:92:80:58:da:a3:df:3f: ae:e6:2c:05:0a:60:3d:bd:c5:cd:27:21:d1:d0:9a: e1:8c:c1:a3:1a:c5:a3:e9:9f:8a:d5:69:11:48:5b: d2:ba:1e:01:31:43:a0:74:77:69:f6:c7:a1:2a:6f: b8:4d:c3:81:cf:50:a5:30:87:80:40:79:5d:ca:26: e6:02:3b:ea:2e:86:23:66:2e:a4:d8:8a:5e:64:e0: a3:10:a8:00:e3:47:77:18:39:fb:f9:9b:01:e7:98: 1a:f3:1e:a7:ec:74:6f:44:1d:eb:17:7c:af:40:8a: c9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B3:1B:98:59:43:61:00:EB:20:C3:E4:B5:48:FA:28:1B:06:CA:E2 X509v3 Authority Key Identifier: keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.30.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:98:cd:d4:78:02:8c:ea:b5:04:0e:aa:9e:24:f8:bc:81:47: c1:7a:90:7e:4d:0e:12:cf:3e:a1:78:0f:59:f9:c4:f5:ea:6c: f1:f9:40:4b:9a:30:12:e3:05:66:bf:90:85:c3:ec:05:71:3c: 53:47:c3:14:7b:6b:a9:52:3c:b0:f9:4d:13:be:22:1a:36:6b: 8c:3c:ca:e7:fe:87:68:93:ea:7f:80:7c:4e:28:1a:89:bc:b3: 03:c6:d3:db:d9:05:84:0d:4d:03:83:12:fa:86:b5:64:a3:ce: 28:b9:92:77:bd:79:2a:01:6f:f4:bb:c4:bf:a9:90:d4:0d:90: b6:6c:cb:4b:15:22:8e:3d:62:27:19:60:6c:34:52:ac:a2:3c: 2f:93:ec:3d:fe:6a:e4:32:f5:80:e8:2d:c6:f6:8c:57:61:2c: 70:a6:42:9d:0b:2b:18:10:6a:ba:94:ca:e6:a6:18:1a:23:92: aa:75:55:b0:dd:df:5c:56:e1:55:a4:45:47:c7:65:37:90:3a: 50:1e:51:80:a6:2a:cf:95:0d:19:09:f9:e3:01:a0:1f:83:32: 82:a5:6b:85:f1:95:0d:4a:35:3d:ef:66:14:9a:b4:aa:af:1f: 00:67:9b:e9:8d:f3:c7:1f:8a:44:26:7d:5b:66:63:86:62:00: ad:78:54:c3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAgKG+jeLW+29z4eYhNcHR8AglJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNF Mzk0QkI0NTAeFw0yNjA1MDMwMjUyMjFaFw0yNzA1MDIwMjU3MjFaMDMxMTAvBgNV BAMTKDQ2QjMxQjk4NTk0MzYxMDBFQjIwQzNFNEI1NDhGQTI4MUIwNkNBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gm5WgcukFtoGaoo4g/yjldWF 0sZ67raJajgm2SJM9zdDtpC0y61CEdN+eg0VJJrWXS0R+UGSnRpzfMUwNqLjZaTG +h5915m1zYFgkcUQ5JcKXCITbLLHO88rscce3MBcvOb8IuZ5ZhOifCmC6kr+sMlz XGV1YbNrEbFA9ZO5W0p9KbfFg+qB0kgtuxN/koBY2qPfP67mLAUKYD29xc0nIdHQ muGMwaMaxaPpn4rVaRFIW9K6HgExQ6B0d2n2x6Eqb7hNw4HPUKUwh4BAeV3KJuYC O+ouhiNmLqTYil5k4KMQqADjR3cYOfv5mwHnmBrzHqfsdG9EHesXfK9AisnlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURrMbmFlDYQDrIMPktUj6KBsGyuIwHwYDVR0j BBgwFoAUOZ++Vc/ZV8HjhJx1/jeEA+OUu0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwZGZiNWEtODQ1ZS00ZGRmLWFjYTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVD RkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNFMzk0QkI0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOTlGQkU1NUNGRDk1N0MxRTM4NDlDNzVGRTM3ODQwM0UzOTRC QjQ1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E3MGRmYjVhLTg0NWUtNGRkZi1h Y2E3LWE5YjMxYzMxZGZmNC8wLzMxMzAzMzJlMzEzNzMwMmUzMzMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMyMzMzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6oeMA0GCSqG SIb3DQEBCwUAA4IBAQAqmM3UeAKM6rUEDqqeJPi8gUfBepB+TQ4Szz6heA9Z+cT1 6mzx+UBLmjAS4wVmv5CFw+wFcTxTR8MUe2upUjyw+U0TviIaNmuMPMrn/odok+p/ gHxOKBqJvLMDxtPb2QWEDU0DgxL6hrVko84ouZJ3vXkqAW/0u8S/qZDUDZC2bMtL FSKOPWInGWBsNFKsojwvk+w9/mrkMvWA6C3G9oxXYSxwpkKdCysYEGq6lMrmphga I5KqdVWw3d9cVuFVpEVHx2U3kDpQHlGApirPlQ0ZCfnjAaAfgzKCpWuF8ZUNSjU9 72YUmrSqrx8AZ5vpjfPHH4pEJn1bZmOGYgCteFTD -----END CERTIFICATE-----Generated at Wed May 13 03:48:50 2026 by rpki-client