$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa File: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (raw, json) Hash identifier: thKA0k3SKd9ZuPgdjH+VF43W5Rz/i9a2JTXNPTXM6a0= Subject key identifier: B3:79:EF:45:35:8E:71:B8:DE:5A:38:CC:0F:C5:9E:C5:8F:87:C7:97 Certificate issuer: /CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Certificate serial: 0AFE84B7798FC70136B0DC590640105B295162D8 Authority key identifier: 25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa Signing time: Sun 03 May 2026 02:57:54 +0000 ROA not before: Sun 03 May 2026 02:52:54 +0000 ROA not after: Sun 02 May 2027 02:57:54 +0000 asID: 139446 IP address blocks: 103.145.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fe:84:b7:79:8f:c7:01:36:b0:dc:59:06:40:10:5b:29:51:62:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Validity Not Before: May 3 02:52:54 2026 GMT Not After : May 2 02:57:54 2027 GMT Subject: CN=B379EF45358E71B8DE5A38CC0FC59EC58F87C797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:00:ce:47:82:a4:15:af:59:cb:a6:64:6a:10: 7d:7b:c3:3f:30:d7:15:f3:d2:64:c4:4f:36:65:72: 01:ae:dc:1a:73:22:98:d9:3c:94:92:c6:17:43:fc: 74:79:11:c1:66:91:0c:ca:96:9d:15:55:8b:2b:6d: 6b:99:9d:57:4a:e2:e0:2f:e5:73:56:cf:17:37:86: 53:f7:1a:ad:96:4d:c1:41:0b:22:74:9a:50:b2:08: b1:1b:40:25:66:20:25:7a:88:24:a9:d6:4d:e2:4f: d1:68:ed:67:41:22:f6:45:82:ac:1d:48:38:bc:74: e3:d6:e5:f2:21:1c:5d:68:36:3d:46:ed:15:06:d9: 8b:a3:c4:14:e7:b4:d9:86:6c:35:33:b8:02:bc:ab: 3a:de:ba:95:85:24:6d:b8:d0:6b:4b:af:c2:9a:db: b9:b2:1c:d3:da:1f:2e:ff:4d:6f:92:17:4f:ac:9c: e1:b6:95:50:86:c5:95:9b:b5:2b:1f:1e:e3:86:36: 3e:01:fd:6a:52:a9:c4:cd:09:7b:cf:48:0d:68:0d: f5:20:c2:33:02:07:b0:51:de:92:89:78:c6:7d:13: c6:cf:3f:fe:a1:c0:f4:48:ba:0a:2b:95:05:8b:33: 91:f9:f9:14:98:79:e3:83:43:36:b3:b1:ac:8a:f6: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:79:EF:45:35:8E:71:B8:DE:5A:38:CC:0F:C5:9E:C5:8F:87:C7:97 X509v3 Authority Key Identifier: keyid:25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.108.0/23 Signature Algorithm: sha256WithRSAEncryption ca:3f:fa:2f:31:08:8c:95:35:2d:21:a9:f5:6f:4a:e6:d1:94: 7b:f0:ad:bd:bb:06:25:e0:88:48:90:73:05:fb:95:19:1e:6c: 0b:08:7d:8b:f3:34:3b:01:a0:10:0b:64:6f:80:a0:1e:3c:3c: f0:d0:ae:95:30:00:35:b6:5b:42:1b:77:6e:4e:8a:ea:d5:c1: a7:62:5d:81:29:ff:01:d2:0c:ca:03:c1:b5:7a:3c:3a:bc:20: 05:18:86:5d:98:6b:9a:3a:5b:4e:5e:9e:83:6f:87:14:82:51: cd:e4:3f:dd:cc:54:d9:2d:be:c0:1b:10:fa:05:83:62:c9:7f: e8:af:5f:57:9c:4b:63:33:61:a6:55:55:05:2d:b5:c8:16:b0: a9:37:48:a9:c5:6d:72:e0:e4:ce:2c:2c:08:ee:a6:54:8e:37: 89:18:b1:cc:39:13:3f:2d:cb:a9:9c:cc:db:94:f5:42:c6:f3: ec:41:f0:46:0b:69:ef:53:fe:fc:5d:e2:85:61:67:b9:a9:0b: ee:6c:c0:05:62:05:86:2f:1d:99:5c:6c:50:9e:3c:31:de:a1: 85:11:08:5e:64:b8:2e:60:5b:49:8f:d1:7a:64:d5:35:28:7a: 0f:88:13:51:3e:2e:bd:ac:4c:77:99:ed:14:61:39:c1:0c:b6: 5e:79:54:16 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUCv6Et3mPxwE2sNxZBkAQWylRYtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NE MEZGM0Y1QjAeFw0yNjA1MDMwMjUyNTRaFw0yNzA1MDIwMjU3NTRaMDMxMTAvBgNV BAMTKEIzNzlFRjQ1MzU4RTcxQjhERTVBMzhDQzBGQzU5RUM1OEY4N0M3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxAM5HgqQVr1nLpmRqEH17wz8w 1xXz0mTETzZlcgGu3BpzIpjZPJSSxhdD/HR5EcFmkQzKlp0VVYsrbWuZnVdK4uAv 5XNWzxc3hlP3Gq2WTcFBCyJ0mlCyCLEbQCVmICV6iCSp1k3iT9Fo7WdBIvZFgqwd SDi8dOPW5fIhHF1oNj1G7RUG2YujxBTntNmGbDUzuAK8qzreupWFJG240GtLr8Ka 27myHNPaHy7/TW+SF0+snOG2lVCGxZWbtSsfHuOGNj4B/WpSqcTNCXvPSA1oDfUg wjMCB7BR3pKJeMZ9E8bPP/6hwPRIugorlQWLM5H5+RSYeeODQzazsayK9tu9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUs3nvRTWOcbjeWjjMD8WexY+Hx5cwHwYDVR0j BBgwFoAUJd/M6FOTZzBr/pjsvCVLPND/P1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThjMDY4ZGEtZjljNS00MDM2LTg1NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1 MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NEMEZGM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNURGQ0NFODUzOTM2NzMwNkJGRTk4RUNCQzI1NEIzQ0QwRkYz RjVCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E4YzA2OGRhLWY5YzUtNDAzNi04 NTRiLTkyMmNhYTkzZjMyNC8wLzMxMzAzMzJlMzEzNDM1MmUzMTMwMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzkzNDM0MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnkWwwDQYJ KoZIhvcNAQELBQADggEBAMo/+i8xCIyVNS0hqfVvSubRlHvwrb27BiXgiEiQcwX7 lRkebAsIfYvzNDsBoBALZG+AoB48PPDQrpUwADW2W0Ibd25OiurVwadiXYEp/wHS DMoDwbV6PDq8IAUYhl2Ya5o6W05enoNvhxSCUc3kP93MVNktvsAbEPoFg2LJf+iv X1ecS2MzYaZVVQUttcgWsKk3SKnFbXLg5M4sLAjuplSON4kYscw5Ez8ty6mczNuU 9ULG8+xB8EYLae9T/vxd4oVhZ7mpC+5swAViBYYvHZlcbFCePDHeoYURCF5kuC5g W0mP0Xpk1TUoeg+IE1E+Lr2sTHeZ7RRhOcEMtl55VBY= -----END CERTIFICATE-----Generated at Wed May 13 12:06:10 2026 by rpki-client