$ rpki-client -vvf rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/3130332e3132392e342e302f32332d3234203d3e20313335343738.roa File: 3130332e3132392e342e302f32332d3234203d3e20313335343738.roa (raw, json) Hash identifier: JPVutpb2XwCsO88296+IeYMvqUecuYWuKlBQq43d27Y= Subject key identifier: 3C:D7:0F:8B:CA:A7:F1:C6:B2:74:58:F7:6C:C7:B3:BD:F6:27:05:4F Certificate issuer: /CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC Certificate serial: 3942EC5514142E237047F30E36BFB1B3AB7B8C38 Authority key identifier: 6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/3130332e3132392e342e302f32332d3234203d3e20313335343738.roa Signing time: Sun 03 May 2026 03:05:35 +0000 ROA not before: Sun 03 May 2026 03:00:35 +0000 ROA not after: Sun 02 May 2027 03:05:35 +0000 asID: 135478 IP address blocks: 103.129.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:42:ec:55:14:14:2e:23:70:47:f3:0e:36:bf:b1:b3:ab:7b:8c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC Validity Not Before: May 3 03:00:35 2026 GMT Not After : May 2 03:05:35 2027 GMT Subject: CN=3CD70F8BCAA7F1C6B27458F76CC7B3BDF627054F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:dd:fd:17:b8:01:46:57:74:8c:3f:4a:06: 66:e3:3d:66:1a:a2:cd:02:34:1f:f7:3f:9e:49:25: da:ed:b5:66:d9:f9:16:a6:8f:d6:ca:09:ee:f1:74: ab:66:02:7b:f0:26:2a:de:88:28:59:bf:a9:c7:44: 00:43:30:c8:af:c3:b3:20:cd:2e:ae:8c:42:fc:42: b8:01:64:c7:67:67:00:03:b1:84:ab:1b:af:12:55: c7:11:ca:10:89:e6:75:e2:46:ad:ab:0f:16:0d:20: 5e:1a:6e:25:0b:78:0d:af:fc:ff:87:4a:a4:85:6e: e3:ea:8d:6f:af:be:ea:97:3e:b4:09:3e:6f:2b:4a: 95:45:2b:6d:9e:4c:29:cc:9b:4c:5e:22:77:35:05: 09:74:db:ce:30:59:bb:e8:b1:e0:2c:82:9d:fb:08: 6b:d8:98:90:28:d9:60:ef:cd:8e:ef:fd:36:92:b5: ca:3e:16:90:8c:d4:be:6e:e5:c9:26:ee:d8:f3:a1: d1:98:05:1d:26:60:74:8d:44:41:13:31:00:95:59: 46:3f:57:6d:ad:b3:86:75:9b:f1:dd:5d:04:fc:d2: 29:d5:9c:1d:c5:0c:c2:e1:43:a0:d8:4b:81:fd:3d: 12:67:4e:2f:83:8a:f4:b0:2b:6a:b1:5f:39:c7:e6: a7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:0F:8B:CA:A7:F1:C6:B2:74:58:F7:6C:C7:B3:BD:F6:27:05:4F X509v3 Authority Key Identifier: keyid:6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/3130332e3132392e342e302f32332d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.4.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:c2:38:c4:00:96:13:1b:fc:7c:60:bb:4f:12:9c:40:4c:3a: f3:3c:83:9a:c3:63:60:d1:b8:ca:fa:e1:d4:bd:45:32:40:a0: c6:c6:57:73:b0:1b:fd:b4:96:a7:bb:87:a1:38:74:98:96:36: 1f:9e:d2:50:73:af:26:83:80:58:65:86:f0:5b:9e:6b:48:bb: 6a:55:4c:13:b0:10:a1:ce:fe:a1:60:bc:5c:1a:25:9b:ea:57: 9b:e9:d2:8f:f1:b5:84:d9:ff:a7:b8:96:ef:e5:f8:49:10:5f: 9a:b4:25:95:36:92:7a:fb:fd:61:ac:6b:74:4b:fe:66:fd:73: eb:25:c7:eb:ee:eb:0c:72:d5:18:b0:c8:45:69:18:43:48:64: 80:4d:05:15:0b:47:f1:36:54:10:6a:1f:7e:a7:53:31:52:21: 77:1e:29:12:08:af:0f:a8:cc:29:89:d6:cc:c6:5d:6a:72:70: 71:b7:f4:f6:e6:fa:82:ae:3e:05:af:c3:65:f0:5a:f7:a3:24: c0:66:2a:f2:23:37:d8:dc:67:6b:8e:1c:ca:f3:f3:a8:7f:67: fb:4e:3f:9e:fd:9a:97:b9:f3:5c:94:c8:89:cf:a9:cf:9d:7b: 6f:a9:4a:f0:51:5b:fc:1a:d1:5d:19:a4:f6:9e:d2:6e:45:31: c2:d3:30:ea -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOULsVRQULiNwR/MONr+xs6t7jDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVERDI3NkU1ODBGNDAxMzlFMEFGQTRBMUZBQjI3NTZC N0ZBMTBCQzAeFw0yNjA1MDMwMzAwMzVaFw0yNzA1MDIwMzA1MzVaMDMxMTAvBgNV BAMTKDNDRDcwRjhCQ0FBN0YxQzZCMjc0NThGNzZDQzdCM0JERjYyNzA1NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+S939F7gBRld0jD9KBmbjPWYa os0CNB/3P55JJdrttWbZ+Ramj9bKCe7xdKtmAnvwJireiChZv6nHRABDMMivw7Mg zS6ujEL8QrgBZMdnZwADsYSrG68SVccRyhCJ5nXiRq2rDxYNIF4abiULeA2v/P+H SqSFbuPqjW+vvuqXPrQJPm8rSpVFK22eTCnMm0xeInc1BQl0284wWbvoseAsgp37 CGvYmJAo2WDvzY7v/TaStco+FpCM1L5u5ckm7tjzodGYBR0mYHSNREETMQCVWUY/ V22ts4Z1m/HdXQT80inVnB3FDMLhQ6DYS4H9PRJnTi+DivSwK2qxXznH5qd1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUPNcPi8qn8caydFj3bMezvfYnBU8wHwYDVR0j BBgwFoAUbt0nblgPQBOeCvpKH6snVrf6ELwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0YjIwZDgtNTkxYi00MTUyLTk3NjgtOWM0MmIwNmMyZmUyLzAvNkVERDI3NkU1 ODBGNDAxMzlFMEFGQTRBMUZBQjI3NTZCN0ZBMTBCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RUREMjc2RTU4MEY0MDEzOUUwQUZBNEExRkFCMjc1NkI3RkEx MEJDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M2NGIyMGQ4LTU5MWItNDE1Mi05 NzY4LTljNDJiMDZjMmZlMi8wLzMxMzAzMzJlMzEzMjM5MmUzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeBBDANBgkqhkiG 9w0BAQsFAAOCAQEATMI4xACWExv8fGC7TxKcQEw68zyDmsNjYNG4yvrh1L1FMkCg xsZXc7Ab/bSWp7uHoTh0mJY2H57SUHOvJoOAWGWG8Fuea0i7alVME7AQoc7+oWC8 XBolm+pXm+nSj/G1hNn/p7iW7+X4SRBfmrQllTaSevv9YaxrdEv+Zv1z6yXH6+7r DHLVGLDIRWkYQ0hkgE0FFQtH8TZUEGoffqdTMVIhdx4pEgivD6jMKYnWzMZdanJw cbf09ub6gq4+Ba/DZfBa96MkwGYq8iM32Nxna44cyvPzqH9n+04/nv2al7nzXJTI ic+pz517b6lK8FFb/BrRXRmk9p7SbkUxwtMw6g== -----END CERTIFICATE-----Generated at Wed May 13 03:55:08 2026 by rpki-client