$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130372e302f32342d3234203d3e20313531353939.roa File: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (raw, json) Hash identifier: Uq0zjp96KTXKbxSis8DhaT+OdD/bH8ZzigpO4G+X8Xo= Subject key identifier: 3F:08:CF:1B:9F:2F:FC:52:C6:FF:56:9A:26:03:C8:95:23:B9:0B:4A Certificate issuer: /CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Certificate serial: 220634E5906DBB2E3C7508CA8AF15BC59E420D09 Authority key identifier: 72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130372e302f32342d3234203d3e20313531353939.roa Signing time: Sun 03 May 2026 03:06:42 +0000 ROA not before: Sun 03 May 2026 03:01:42 +0000 ROA not after: Sun 02 May 2027 03:06:42 +0000 asID: 151599 IP address blocks: 103.7.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:06:34:e5:90:6d:bb:2e:3c:75:08:ca:8a:f1:5b:c5:9e:42:0d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Validity Not Before: May 3 03:01:42 2026 GMT Not After : May 2 03:06:42 2027 GMT Subject: CN=3F08CF1B9F2FFC52C6FF569A2603C89523B90B4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e2:3c:ee:51:85:71:db:5a:73:ab:96:db:65: b7:e5:5d:c1:9f:9a:39:a9:e2:9a:58:1d:38:92:d7: c6:88:f8:6e:4e:71:ce:07:d3:7e:a7:64:97:8b:4c: bf:a5:7a:b9:26:3d:c7:85:d2:d4:29:2a:62:cf:5e: 57:2e:f8:96:79:e1:f6:3e:0c:a0:28:2e:f1:65:5c: b7:82:4d:f0:ca:e1:40:46:fd:bf:a9:22:93:04:d0: ea:ff:6c:f2:c4:d9:41:6e:29:0b:6d:18:ed:2f:7f: 02:28:89:5a:91:dc:42:fa:4a:62:6b:10:44:ad:84: 10:8c:6c:e5:fb:59:b5:a7:84:8d:c0:36:c6:1e:92: 01:b4:e3:11:6d:9e:00:4c:1c:2f:b7:21:bd:b3:10: 9c:13:74:ca:ad:c2:36:66:0c:ac:82:4f:7a:93:e9: 0a:98:fd:24:c0:ac:c7:93:99:10:35:0a:9d:f5:a1: af:e1:f3:c6:56:16:d2:4c:86:d1:8f:17:02:58:72: 72:cb:b2:a2:40:06:fe:c1:08:87:47:58:ef:1c:e6: 40:87:43:73:c7:3d:08:6a:40:51:88:7e:ea:6e:9b: ad:d1:38:40:49:49:c5:99:4d:cc:d8:d0:54:5f:38: 07:4d:66:77:e7:c3:e9:da:3c:7e:27:aa:37:3a:33: 8a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:08:CF:1B:9F:2F:FC:52:C6:FF:56:9A:26:03:C8:95:23:B9:0B:4A X509v3 Authority Key Identifier: keyid:72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130372e302f32342d3234203d3e20313531353939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.107.0/24 Signature Algorithm: sha256WithRSAEncryption 22:11:d5:0d:e1:9f:cd:f4:5c:04:9a:83:6c:b3:9d:4f:39:eb: 05:e6:38:31:1a:ef:b3:85:b5:13:d0:82:13:01:1e:07:12:8e: f8:64:e4:6f:af:ab:49:c4:ed:44:7a:05:d8:a5:a6:58:17:7a: 61:d3:56:be:4d:2d:2c:c3:04:77:4e:9c:db:d0:15:48:40:c1: c1:b8:3e:44:fa:7d:54:9e:35:07:a9:04:18:64:d5:56:70:60: b7:e6:54:0b:0d:1b:87:0d:83:da:6d:72:27:04:0d:53:b6:99: bb:ba:9a:0d:78:fc:35:c9:3c:4d:b0:f6:ff:4b:22:3e:c5:62: 19:fe:67:77:fb:ec:84:f1:98:ed:b6:88:ab:a4:e4:2e:2d:42: 09:a0:26:8e:3f:7d:e4:6a:31:e6:12:b7:ab:21:f2:ce:96:17: db:aa:59:11:5f:c5:7f:5b:cb:a3:cf:4a:bf:22:6e:8c:25:b7: 99:d9:00:7d:a8:58:70:14:0a:60:bc:1e:3d:c4:69:ca:a7:ad: 09:0d:e3:f9:06:e8:90:b8:20:03:8c:7b:03:a8:7f:27:27:55: ce:7b:94:cf:5c:d0:db:70:65:5f:d7:bc:1d:64:51:0b:13:50: e2:30:2b:38:ab:44:07:c7:c6:74:5e:45:a0:5c:f4:7f:82:ae: 49:b7:bf:c0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIgY05ZBtuy48dQjKivFbxZ5CDQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUx NTFEMTFBRTAeFw0yNjA1MDMwMzAxNDJaFw0yNzA1MDIwMzA2NDJaMDMxMTAvBgNV BAMTKDNGMDhDRjFCOUYyRkZDNTJDNkZGNTY5QTI2MDNDODk1MjNCOTBCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt4jzuUYVx21pzq5bbZbflXcGf mjmp4ppYHTiS18aI+G5Occ4H036nZJeLTL+lerkmPceF0tQpKmLPXlcu+JZ54fY+ DKAoLvFlXLeCTfDK4UBG/b+pIpME0Or/bPLE2UFuKQttGO0vfwIoiVqR3EL6SmJr EESthBCMbOX7WbWnhI3ANsYekgG04xFtngBMHC+3Ib2zEJwTdMqtwjZmDKyCT3qT 6QqY/STArMeTmRA1Cp31oa/h88ZWFtJMhtGPFwJYcnLLsqJABv7BCIdHWO8c5kCH Q3PHPQhqQFGIfupum63ROEBJScWZTczY0FRfOAdNZnfnw+naPH4nqjc6M4pbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUPwjPG58v/FLG/1aaJgPIlSO5C0owHwYDVR0j BBgwFoAUcocbQvirHZyh9qE9HinNvhUdEa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExMjRlNmEtZjUxYi00NmQwLThlYTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJG OEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUxNTFEMTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Mjg3MUI0MkY4QUIxRDlDQTFGNkExM0QxRTI5Q0RCRTE1MUQx MUFFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NhMTI0ZTZhLWY1MWItNDZkMC04 ZWEzLTc2YjI3NDQ1NThhNi8wLzMxMzAzMzJlMzcyZTMxMzAzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMTM1MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcHazANBgkqhkiG 9w0BAQsFAAOCAQEAIhHVDeGfzfRcBJqDbLOdTznrBeY4MRrvs4W1E9CCEwEeBxKO +GTkb6+rScTtRHoF2KWmWBd6YdNWvk0tLMMEd06c29AVSEDBwbg+RPp9VJ41B6kE GGTVVnBgt+ZUCw0bhw2D2m1yJwQNU7aZu7qaDXj8Nck8TbD2/0siPsViGf5nd/vs hPGY7baIq6TkLi1CCaAmjj995Gox5hK3qyHyzpYX26pZEV/Ff1vLo89KvyJujCW3 mdkAfahYcBQKYLwePcRpyqetCQ3j+QbokLggA4x7A6h/JydVznuUz1zQ23BlX9e8 HWRRCxNQ4jArOKtEB8fGdF5FoFz0f4KuSbe/wA== -----END CERTIFICATE-----Generated at Wed May 13 09:51:35 2026 by rpki-client