$ rpki-client -vvf rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa File: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (raw, json) Hash identifier: SnoqKOK1pYK0zjgd+NMH20h/jENOjT9uDC1vLmu5Vt0= Subject key identifier: E4:27:D9:AE:FC:95:97:E0:56:9F:A5:5E:1A:08:0C:01:B6:39:93:6E Certificate issuer: /CN=822159966075595E4F7698AB063AA58F2CE6EFF6 Certificate serial: 7838F203BB0091AEE08DF309DC4A305E417676E5 Authority key identifier: 82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa Signing time: Sun 03 May 2026 02:59:50 +0000 ROA not before: Sun 03 May 2026 02:54:50 +0000 ROA not after: Sun 02 May 2027 02:59:50 +0000 asID: 138077 IP address blocks: 103.130.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:38:f2:03:bb:00:91:ae:e0:8d:f3:09:dc:4a:30:5e:41:76:76:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822159966075595E4F7698AB063AA58F2CE6EFF6 Validity Not Before: May 3 02:54:50 2026 GMT Not After : May 2 02:59:50 2027 GMT Subject: CN=E427D9AEFC9597E0569FA55E1A080C01B639936E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:58:a4:62:95:e0:68:be:27:d1:15:c1:8b: c3:71:72:a0:53:e1:e0:10:5f:7e:aa:e8:c6:46:05: 63:3e:50:01:cf:c9:8f:5d:71:55:f0:a6:8e:da:91: e4:31:e0:17:f0:c7:ec:94:57:87:72:ad:4e:8e:8b: 8d:8e:4d:fe:be:df:ed:94:22:35:ed:84:ff:c2:24: 07:33:f7:8d:79:00:e6:59:86:89:2b:40:e8:be:6c: d1:5f:2f:79:4e:c5:af:38:15:b7:69:75:09:02:2d: ff:f7:58:bc:48:45:7e:9f:9b:f2:69:c6:c8:9f:ad: 55:ff:c1:92:fc:bc:f7:73:60:fb:cc:03:f8:b0:b9: 9d:69:61:14:64:96:21:dc:58:a5:1c:62:f6:69:3f: 1f:18:35:1c:a9:47:70:2d:bf:9d:a3:62:17:ed:d0: 17:f9:db:b0:8b:b8:bc:4b:37:c3:95:e3:35:9f:1f: 92:f0:df:6e:9a:05:bc:81:a3:fc:25:2a:19:5f:c8: ea:9d:3a:6b:3d:e8:9a:90:a7:7e:53:62:31:e9:b9: c4:c2:cd:df:81:a1:ea:d0:52:cf:b4:ad:f7:be:67: 75:90:d6:b7:4e:10:88:9f:72:e0:c3:2b:5a:04:4f: 48:52:41:25:1d:83:39:e0:00:3f:c9:13:cf:33:ab: 51:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:27:D9:AE:FC:95:97:E0:56:9F:A5:5E:1A:08:0C:01:B6:39:93:6E X509v3 Authority Key Identifier: keyid:82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.198.0/23 Signature Algorithm: sha256WithRSAEncryption 89:39:14:91:a8:8e:51:fe:32:e8:9a:65:67:6d:9c:4a:5e:f7: 6f:09:5f:67:f2:83:48:f1:84:fc:32:f6:18:99:c1:77:e6:98: 88:84:9b:85:e7:30:c9:be:95:ad:e3:ed:72:87:fd:d1:cc:96: ce:65:87:ba:9f:d0:2a:a6:ab:2b:2b:84:23:74:3f:11:77:28: bd:f3:db:48:6b:8a:07:80:a7:85:74:f6:9e:6a:fa:c2:97:47: bb:56:bd:83:90:82:0c:db:c2:82:95:b7:39:e1:e7:94:03:ce: 8c:14:24:f2:02:98:f5:6a:eb:ac:e2:f2:06:36:d9:72:7d:d6: 63:18:dc:13:2d:8d:7e:ff:70:6e:02:be:16:ab:12:fd:2b:71: b9:55:81:08:c2:d8:e6:fb:52:89:4c:da:fa:50:3c:e4:19:8f: 97:40:87:dd:e3:11:34:f8:63:7a:8c:0d:8d:9a:10:43:f9:0a: 4d:57:95:ff:da:5e:b4:98:b1:5c:b2:01:cc:c1:e5:ec:30:08: 42:30:a8:54:df:cd:f4:ea:9f:c3:17:fe:3a:72:75:77:6c:cb: e8:c0:31:7b:b4:6c:36:20:04:da:ff:b6:c6:79:68:b0:2b:75: 3e:e1:c8:2c:ab:d2:a9:ed:ee:57:2f:f8:1e:cb:a3:ba:e1:f1: b8:01:f8:9b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUeDjyA7sAka7gjfMJ3EowXkF2duUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIyMTU5OTY2MDc1NTk1RTRGNzY5OEFCMDYzQUE1OEYy Q0U2RUZGNjAeFw0yNjA1MDMwMjU0NTBaFw0yNzA1MDIwMjU5NTBaMDMxMTAvBgNV BAMTKEU0MjdEOUFFRkM5NTk3RTA1NjlGQTU1RTFBMDgwQzAxQjYzOTkzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10likYpXgaL4n0RXBi8NxcqBT 4eAQX36q6MZGBWM+UAHPyY9dcVXwpo7akeQx4Bfwx+yUV4dyrU6Oi42OTf6+3+2U IjXthP/CJAcz9415AOZZhokrQOi+bNFfL3lOxa84FbdpdQkCLf/3WLxIRX6fm/Jp xsifrVX/wZL8vPdzYPvMA/iwuZ1pYRRkliHcWKUcYvZpPx8YNRypR3Atv52jYhft 0Bf527CLuLxLN8OV4zWfH5Lw326aBbyBo/wlKhlfyOqdOms96JqQp35TYjHpucTC zd+BoerQUs+0rfe+Z3WQ1rdOEIifcuDDK1oET0hSQSUdgzngAD/JE88zq1EvAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU5CfZrvyVl+BWn6VeGggMAbY5k24wHwYDVR0j BBgwFoAUgiFZlmB1WV5PdpirBjqljyzm7/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY2ZDE4NWUtZDRmNC00ODIwLWI0YjYtNzk4YzMwN2FkN2U1LzAvODIyMTU5OTY2 MDc1NTk1RTRGNzY5OEFCMDYzQUE1OEYyQ0U2RUZGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjIxNTk5NjYwNzU1OTVFNEY3Njk4QUIwNjNBQTU4RjJDRTZF RkY2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FmNmQxODVlLWQ0ZjQtNDgyMC1i NGI2LTc5OGMzMDdhZDdlNS8wLzMxMzAzMzJlMzEzMzMwMmUzMTM5MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM3Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFngsYwDQYJ KoZIhvcNAQELBQADggEBAIk5FJGojlH+MuiaZWdtnEpe928JX2fyg0jxhPwy9hiZ wXfmmIiEm4XnMMm+la3j7XKH/dHMls5lh7qf0CqmqysrhCN0PxF3KL3z20hrigeA p4V09p5q+sKXR7tWvYOQggzbwoKVtznh55QDzowUJPICmPVq66zi8gY22XJ91mMY 3BMtjX7/cG4CvharEv0rcblVgQjC2Ob7UolM2vpQPOQZj5dAh93jETT4Y3qMDY2a EEP5Ck1Xlf/aXrSYsVyyAczB5ewwCEIwqFTfzfTqn8MX/jpydXdsy+jAMXu0bDYg BNr/tsZ5aLArdT7hyCyr0qnt7lcv+B7Lo7rh8bgB+Js= -----END CERTIFICATE-----Generated at Wed May 13 10:54:50 2026 by rpki-client