$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa File: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (raw, json) Hash identifier: dpe3Ov8SWyP+hfFqwN+/clByjqzDrOMWcPK9yAhNZjU= Subject key identifier: 3B:B0:E2:DC:A6:9E:C3:F2:B4:17:D0:AB:F2:64:66:59:CE:9D:64:0F Certificate issuer: /CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Certificate serial: 6AA9FC2FF805D55DDCC126AFDED5FB1A5ED597EB Authority key identifier: CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa Signing time: Sun 03 May 2026 03:07:48 +0000 ROA not before: Sun 03 May 2026 03:02:48 +0000 ROA not after: Sun 02 May 2027 03:07:48 +0000 asID: 136839 IP address blocks: 103.98.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a9:fc:2f:f8:05:d5:5d:dc:c1:26:af:de:d5:fb:1a:5e:d5:97:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Validity Not Before: May 3 03:02:48 2026 GMT Not After : May 2 03:07:48 2027 GMT Subject: CN=3BB0E2DCA69EC3F2B417D0ABF2646659CE9D640F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:a3:94:ae:07:06:d5:7d:56:77:64:3c:d3: 2f:55:46:28:8c:e5:da:16:b5:a6:52:5a:86:05:3d: 69:1b:74:9f:90:9b:f4:25:2d:1a:b5:6d:8a:8a:37: f5:3f:58:60:cd:d8:4d:52:d3:ca:fb:1f:b6:5b:60: 5e:48:fa:6d:f6:d5:87:ae:a3:4a:f7:ff:d0:f5:1f: f6:3c:11:a4:66:6d:89:e4:17:09:8b:c1:7b:2e:86: c2:c5:cd:9c:f0:b7:77:3b:10:b3:0a:a0:21:74:82: 7b:23:e4:4b:db:8a:f1:21:9f:3d:40:70:d9:ec:5a: ca:bd:4a:de:67:e4:41:28:1b:ac:c6:02:cc:b5:35: a5:58:8a:57:00:d9:ff:dd:6c:87:64:c6:1e:6c:37: 41:67:b9:e7:1b:ed:3c:57:ce:2b:53:cf:6c:91:14: bb:5c:ca:c3:01:60:f4:af:98:bc:bd:3f:0f:87:eb: 0d:d8:64:98:4c:8a:c6:42:12:97:e5:26:90:76:e7: fe:dc:bd:b0:ad:da:45:a0:41:f4:3f:0f:25:16:f2: 2b:97:b6:74:2c:1a:40:ef:a3:7f:43:e6:22:f2:39: 3e:c1:05:ad:07:81:00:ee:e0:4c:8b:76:de:4b:a3: b3:f5:71:d2:6b:a1:8a:4f:7a:af:b2:0d:7c:ef:93: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B0:E2:DC:A6:9E:C3:F2:B4:17:D0:AB:F2:64:66:59:CE:9D:64:0F X509v3 Authority Key Identifier: keyid:CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.239.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:e8:0a:08:54:be:f5:3d:a0:1e:43:2d:de:fd:54:ea:b6:a6: 33:eb:c1:3a:86:66:57:11:92:3b:f0:bb:4c:16:b3:4b:88:5c: 6d:69:cb:bf:3d:14:88:3c:b7:27:e1:d6:94:56:52:8a:e2:07: 32:4c:81:fd:e7:95:18:e6:d0:9c:99:38:0d:c5:fb:37:cd:39: cc:1c:ab:86:9b:99:34:7f:d6:6e:78:be:9c:c5:e8:0c:bc:ab: 17:38:10:49:3a:6b:df:d8:ff:1d:8a:ca:eb:b5:f2:8a:28:b9: f4:8c:96:23:89:de:82:8d:da:dc:b8:f9:15:1b:0b:65:7a:45: af:5a:86:28:14:bb:ad:ae:e4:0d:6d:02:f5:41:b4:5a:68:22: 64:dd:d6:4d:4f:96:40:65:3e:07:46:ec:8d:c6:5b:42:6e:51: ad:5d:78:94:f8:08:fb:c2:30:92:f8:a2:8e:7f:b4:e9:3f:2e: 9f:e4:e3:4b:f9:d4:19:49:e3:46:e5:ce:11:33:96:18:c9:9d: 81:2f:08:2b:5c:74:77:bb:24:29:e8:0e:e6:ab:78:40:bf:ad: 89:2d:f8:1e:b8:fb:41:2e:25:58:85:25:6e:2b:42:80:25:be: 68:d7:c5:c3:47:90:3b:39:7a:be:96:5a:67:1a:f2:0f:d5:ea: 75:ae:c0:e0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaqn8L/gF1V3cwSav3tX7Gl7Vl+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3 MDA2ODgzQTAeFw0yNjA1MDMwMzAyNDhaFw0yNzA1MDIwMzA3NDhaMDMxMTAvBgNV BAMTKDNCQjBFMkRDQTY5RUMzRjJCNDE3RDBBQkYyNjQ2NjU5Q0U5RDY0MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5qOUrgcG1X1Wd2Q80y9VRiiM 5doWtaZSWoYFPWkbdJ+Qm/QlLRq1bYqKN/U/WGDN2E1S08r7H7ZbYF5I+m321Yeu o0r3/9D1H/Y8EaRmbYnkFwmLwXsuhsLFzZzwt3c7ELMKoCF0gnsj5EvbivEhnz1A cNnsWsq9St5n5EEoG6zGAsy1NaVYilcA2f/dbIdkxh5sN0Fnuecb7TxXzitTz2yR FLtcysMBYPSvmLy9Pw+H6w3YZJhMisZCEpflJpB25/7cvbCt2kWgQfQ/DyUW8iuX tnQsGkDvo39D5iLyOT7BBa0HgQDu4EyLdt5Lo7P1cdJroYpPeq+yDXzvk78BAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUO7Di3Kaew/K0F9Cr8mRmWc6dZA8wHwYDVR0j BBgwFoAUzeZ+ulXfHiHQkJuJgX5qxXAGiDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y5YzAyOWEtZGI1MS00YTBlLTkyMDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1 NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3MDA2ODgzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2N0VCQTU1REYxRTIxRDA5MDlCODk4MTdFNkFDNTcwMDY4 ODNBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NmOWMwMjlhLWRiNTEtNGEwZS05 MjAzLTZlZTIzMzJkZjgzZi8wLzMxMzAzMzJlMzkzODJlMzIzMzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2LvMA0GCSqG SIb3DQEBCwUAA4IBAQA+6AoIVL71PaAeQy3e/VTqtqYz68E6hmZXEZI78LtMFrNL iFxtacu/PRSIPLcn4daUVlKK4gcyTIH955UY5tCcmTgNxfs3zTnMHKuGm5k0f9Zu eL6cxegMvKsXOBBJOmvf2P8disrrtfKKKLn0jJYjid6CjdrcuPkVGwtlekWvWoYo FLutruQNbQL1QbRaaCJk3dZNT5ZAZT4HRuyNxltCblGtXXiU+Aj7wjCS+KKOf7Tp Py6f5ONL+dQZSeNG5c4RM5YYyZ2BLwgrXHR3uyQp6A7mq3hAv62JLfgeuPtBLiVY hSVuK0KAJb5o18XDR5A7OXq+llpnGvIP1ep1rsDg -----END CERTIFICATE-----Generated at Wed May 13 08:24:33 2026 by rpki-client