$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa File: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (raw, json) Hash identifier: ecGK2uv0QOr0Ium9PEGE2jPN+opG6R8n6ZDZWs8qtW8= Subject key identifier: FA:5D:AD:CE:E6:00:38:0F:2F:9C:45:8D:0B:F8:CB:62:B1:83:16:42 Certificate issuer: /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Certificate serial: 7A346046A9700EDBB779BBB3D21BF61AA260769E Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa Signing time: Sun 03 May 2026 03:02:16 +0000 ROA not before: Sun 03 May 2026 02:57:16 +0000 ROA not after: Sun 02 May 2027 03:02:16 +0000 asID: 136853 IP address blocks: 103.102.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:34:60:46:a9:70:0e:db:b7:79:bb:b3:d2:1b:f6:1a:a2:60:76:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Validity Not Before: May 3 02:57:16 2026 GMT Not After : May 2 03:02:16 2027 GMT Subject: CN=FA5DADCEE600380F2F9C458D0BF8CB62B1831642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:89:a9:3d:f1:22:68:5e:4b:54:13:7e:4a: bc:8e:7c:5c:ea:30:b2:34:7d:21:60:12:c4:53:1e: 74:a4:12:8c:09:c1:3c:ac:31:f6:54:7d:19:ea:f9: eb:9d:d5:62:f4:47:55:47:e0:2c:ab:16:e0:04:b5: 8e:fe:72:c6:a4:b8:f1:ff:e7:38:96:6b:a6:3c:42: 72:67:37:8e:ce:9e:42:01:7b:45:c7:9a:a3:4d:6e: 70:52:34:fc:9f:2a:de:2c:b0:4c:35:37:1a:7b:cd: 18:a5:d4:da:69:74:d2:ad:39:9e:47:75:81:a6:ee: 05:56:07:be:57:58:02:c0:6f:97:d5:7f:fd:f6:ab: 0b:82:fd:2d:62:50:82:aa:9a:17:62:f3:cb:f4:d8: 54:3b:31:af:31:2e:c3:71:2d:0b:43:d0:f7:20:60: 75:2e:3a:d7:2f:b8:a7:89:2f:40:cd:7d:97:b3:1c: a7:ec:a0:0d:cb:ca:74:75:5b:55:23:68:ed:9e:7d: 0b:50:6d:9a:2a:0d:09:67:a0:6e:88:87:72:00:b2: 63:fa:05:ff:75:aa:82:44:34:3f:a6:62:72:10:ae: 96:91:6f:ee:70:94:81:4c:d0:5a:1e:1b:fd:fc:58: 55:57:5a:dc:49:a7:24:1c:2d:71:5a:07:c6:14:d5: f1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5D:AD:CE:E6:00:38:0F:2F:9C:45:8D:0B:F8:CB:62:B1:83:16:42 X509v3 Authority Key Identifier: keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.149.0/24 Signature Algorithm: sha256WithRSAEncryption a2:5c:04:91:69:e4:87:70:1d:a0:8e:ad:d4:cc:14:92:b0:c2: 5c:d0:d3:0d:33:2d:b1:4c:0b:94:a2:3b:a4:60:cf:8f:07:39: 7f:29:ce:90:95:ff:46:1a:df:b9:47:76:e0:3c:fe:c5:17:b4: 08:55:6c:4c:e4:fe:0b:8c:08:48:9b:97:29:f3:62:82:f2:1e: 62:14:d2:e9:0b:be:66:60:bf:fc:fa:a9:83:4c:51:bb:7a:7d: 67:0d:f8:c9:bb:7a:a9:55:56:60:3b:96:49:2a:88:e4:77:e9: 27:d5:96:e3:88:01:ee:bc:b9:fe:0c:15:b3:94:7f:96:99:1c: 44:e4:ea:db:dd:23:57:73:78:9c:80:c6:2f:e2:6b:a5:c1:5e: 1c:52:cf:57:d0:a7:72:68:41:c1:f0:de:7c:ee:a2:b8:5b:9d: 58:e3:20:83:c6:be:31:0b:bd:74:51:3c:77:e0:bf:09:3e:66: 2e:02:bb:16:7d:90:3c:0e:ea:27:d0:b3:b7:47:74:5b:88:d7: 20:73:77:5c:6a:c5:8a:2b:78:31:e5:e1:d0:60:1f:3c:52:f7: 7a:3d:f6:36:28:14:8f:2f:4a:ce:a0:4b:ce:86:f1:e4:ec:93: 3b:80:b4:2f:03:e5:43:66:be:09:96:93:c3:3d:00:82:ba:9f: 9b:50:90:7f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUejRgRqlwDtu3ebuz0hv2GqJgdp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEy NDhBMTUxOTAeFw0yNjA1MDMwMjU3MTZaFw0yNzA1MDIwMzAyMTZaMDMxMTAvBgNV BAMTKEZBNURBRENFRTYwMDM4MEYyRjlDNDU4RDBCRjhDQjYyQjE4MzE2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0YmpPfEiaF5LVBN+SryOfFzq MLI0fSFgEsRTHnSkEowJwTysMfZUfRnq+eud1WL0R1VH4CyrFuAEtY7+csakuPH/ 5ziWa6Y8QnJnN47OnkIBe0XHmqNNbnBSNPyfKt4ssEw1Nxp7zRil1NppdNKtOZ5H dYGm7gVWB75XWALAb5fVf/32qwuC/S1iUIKqmhdi88v02FQ7Ma8xLsNxLQtD0Pcg YHUuOtcvuKeJL0DNfZezHKfsoA3LynR1W1UjaO2efQtQbZoqDQlnoG6Ih3IAsmP6 Bf91qoJEND+mYnIQrpaRb+5wlIFM0FoeG/38WFVXWtxJpyQcLXFaB8YU1fEvAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU+l2tzuYAOA8vnEWNC/jLYrGDFkIwHwYDVR0j BBgwFoAUPVfLInHy50cPKsI1jByiKiSKFRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE5ZjgxY2ItNWE1OS00MGYzLTg2YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3 MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEyNDhBMTUxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDU3Q0IyMjcxRjJFNzQ3MEYyQUMyMzU4QzFDQTIyQTI0OEEx NTE5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JhOWY4MWNiLTVhNTktNDBmMy04 NmEwLWNkZTViOTRjZWY4Ni8wLzMxMzAzMzJlMzEzMDMyMmUzMTM0MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM1MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZpUwDQYJ KoZIhvcNAQELBQADggEBAKJcBJFp5IdwHaCOrdTMFJKwwlzQ0w0zLbFMC5SiO6Rg z48HOX8pzpCV/0Ya37lHduA8/sUXtAhVbEzk/guMCEiblynzYoLyHmIU0ukLvmZg v/z6qYNMUbt6fWcN+Mm7eqlVVmA7lkkqiOR36SfVluOIAe68uf4MFbOUf5aZHETk 6tvdI1dzeJyAxi/ia6XBXhxSz1fQp3JoQcHw3nzuorhbnVjjIIPGvjELvXRRPHfg vwk+Zi4CuxZ9kDwO6ifQs7dHdFuI1yBzd1xqxYoreDHl4dBgHzxS93o99jYoFI8v Ss6gS86G8eTskzuAtC8D5UNmvgmWk8M9AIK6n5tQkH8= -----END CERTIFICATE-----Generated at Wed May 13 08:02:43 2026 by rpki-client