$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa File: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (raw, json) Hash identifier: e2uAqZhEI4sthRpgwRvzeAum7dq3RtxpLsp3efzH3Ks= Subject key identifier: 32:28:C9:39:39:57:C7:B8:B2:9A:A0:73:97:4F:11:F9:32:6C:D9:1A Certificate issuer: /CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Certificate serial: 6364E0B0106EBAB7BBF9C27335DA76A96DB9966B Authority key identifier: 1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa Signing time: Sun 03 May 2026 03:01:10 +0000 ROA not before: Sun 03 May 2026 02:56:10 +0000 ROA not after: Sun 02 May 2027 03:01:10 +0000 asID: 136854 IP address blocks: 103.102.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:64:e0:b0:10:6e:ba:b7:bb:f9:c2:73:35:da:76:a9:6d:b9:96:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Validity Not Before: May 3 02:56:10 2026 GMT Not After : May 2 03:01:10 2027 GMT Subject: CN=3228C9393957C7B8B29AA073974F11F9326CD91A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:bd:e7:84:77:75:16:a7:c7:8c:d4:c2:52:da: 06:d2:39:81:57:50:d5:c4:86:ed:5c:dd:e9:9a:4b: 6f:bb:fb:37:c9:8c:f2:f3:99:35:37:2b:4f:ea:fc: d8:2d:1e:39:fb:00:3b:81:0a:03:a6:e7:2a:ca:d5: 9d:a2:11:72:f4:14:04:53:7a:c2:08:af:1c:2a:1d: 85:24:55:13:1e:16:67:c9:75:2c:8c:8d:cb:ac:bd: e1:36:90:3e:6a:c7:98:3e:b0:63:49:d4:9d:e5:7e: d4:e5:28:e8:6b:81:a7:06:1a:5b:dd:39:d0:32:43: 7e:b8:10:3f:ac:ff:f0:47:7f:65:c9:53:1f:d6:e6: 12:f2:0d:51:93:db:5d:73:8d:2d:dc:ad:68:9e:eb: 52:24:32:1c:6c:7a:33:1d:13:f8:c7:8c:3c:b1:a4: bd:1d:85:38:1d:57:49:12:d0:ff:4f:b7:38:09:1e: b8:4a:94:5e:3a:9b:42:89:29:7a:ae:df:28:7a:62: 58:e1:d2:86:11:7a:9a:91:26:13:2d:db:bc:74:04: 7d:12:87:7a:62:24:54:54:0d:7a:be:84:6a:b9:6d: e7:e5:37:93:2a:da:d9:b5:1c:a3:e3:da:34:91:cb: 66:c1:e9:cf:48:b2:6c:fd:70:97:a8:e3:82:d4:1b: fe:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:28:C9:39:39:57:C7:B8:B2:9A:A0:73:97:4F:11:F9:32:6C:D9:1A X509v3 Authority Key Identifier: keyid:1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.140.0/24 Signature Algorithm: sha256WithRSAEncryption 39:10:fd:92:96:eb:93:92:f1:70:fa:bb:97:e1:17:70:93:31: 72:ac:07:fe:76:9a:ac:81:ce:15:2c:f0:67:18:34:e9:4d:5f: 07:8e:43:6b:1c:5e:69:39:ea:10:68:53:dd:a3:fd:c2:72:58: 8d:cb:0c:84:f8:18:1a:4d:94:11:ab:78:e3:73:29:9a:1e:a1: a8:36:75:4c:87:45:d3:b7:a6:b4:11:cc:d1:d0:a7:e0:26:66: 37:15:f8:04:09:aa:b1:2c:f5:68:03:61:88:44:9a:17:29:4d: 16:84:8d:f6:33:f9:47:3a:15:32:75:38:49:01:4d:0f:2a:02: 28:9b:9e:39:39:75:12:b4:df:51:89:80:3e:e3:e8:c6:9e:5c: d8:33:1d:c3:de:c7:d8:ba:cd:8b:cd:ca:1e:ad:84:77:a3:a9: 1e:95:2b:69:5e:8c:53:8d:ed:80:4f:9c:5f:d1:fe:32:17:80: 7a:37:a4:6d:b4:46:8b:b6:b2:c7:fa:b0:92:28:d2:15:27:6d: ee:f7:5e:8a:ac:e2:74:20:56:97:44:68:62:8f:fb:64:dc:88: fc:a3:99:23:cf:0a:a3:a9:34:0d:0e:90:51:df:97:49:31:13: ac:62:4c:e2:cc:97:d5:51:0d:8a:1b:8c:9b:a9:ba:e4:14:2f: 06:4d:e4:69 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUY2TgsBBuure7+cJzNdp2qW25lmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkx RkMxODk4RjAeFw0yNjA1MDMwMjU2MTBaFw0yNzA1MDIwMzAxMTBaMDMxMTAvBgNV BAMTKDMyMjhDOTM5Mzk1N0M3QjhCMjlBQTA3Mzk3NEYxMUY5MzI2Q0Q5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwveeEd3UWp8eM1MJS2gbSOYFX UNXEhu1c3emaS2+7+zfJjPLzmTU3K0/q/NgtHjn7ADuBCgOm5yrK1Z2iEXL0FART esIIrxwqHYUkVRMeFmfJdSyMjcusveE2kD5qx5g+sGNJ1J3lftTlKOhrgacGGlvd OdAyQ364ED+s//BHf2XJUx/W5hLyDVGT211zjS3crWie61IkMhxsejMdE/jHjDyx pL0dhTgdV0kS0P9PtzgJHrhKlF46m0KJKXqu3yh6Yljh0oYRepqRJhMt27x0BH0S h3piJFRUDXq+hGq5beflN5Mq2tm1HKPj2jSRy2bB6c9Ismz9cJeo44LUG/4TAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUMijJOTlXx7iymqBzl08R+TJs2RowHwYDVR0j BBgwFoAUGvAW4XWpDRM8WyHfkfYPqR/BiY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjU2MzJkOTktMzJiMi00NjdiLWI3ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3 NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkxRkMxODk4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUYwMTZFMTc1QTkwRDEzM0M1QjIxREY5MUY2MEZBOTFGQzE4 OThGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I1NjMyZDk5LTMyYjItNDY3Yi1i N2ZlLTBkMjVmODUzYmZhNi8wLzMxMzAzMzJlMzEzMDMyMmUzMTM0MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM1MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZowwDQYJ KoZIhvcNAQELBQADggEBADkQ/ZKW65OS8XD6u5fhF3CTMXKsB/52mqyBzhUs8GcY NOlNXweOQ2scXmk56hBoU92j/cJyWI3LDIT4GBpNlBGreONzKZoeoag2dUyHRdO3 prQRzNHQp+AmZjcV+AQJqrEs9WgDYYhEmhcpTRaEjfYz+Uc6FTJ1OEkBTQ8qAiib njk5dRK031GJgD7j6MaeXNgzHcPex9i6zYvNyh6thHejqR6VK2lejFON7YBPnF/R /jIXgHo3pG20Rou2ssf6sJIo0hUnbe73Xoqs4nQgVpdEaGKP+2TciPyjmSPPCqOp NA0OkFHfl0kxE6xiTOLMl9VRDYobjJupuuQULwZN5Gk= -----END CERTIFICATE-----Generated at Wed May 13 06:18:50 2026 by rpki-client