$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa File: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (raw, json) Hash identifier: 1j1MwArF7+GiMoyA2GSO7NK/M/081FoP97bqeWhfFHU= Subject key identifier: E8:1F:13:1F:F2:0C:6A:43:43:2D:CF:80:89:00:92:00:CF:DB:61:64 Certificate issuer: /CN=11FFFA845980AD12347D7297657117A393722635 Certificate serial: 46CF8AE4602E5BF722E0FC43B0EBA87AF6316E1B Authority key identifier: 11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa Signing time: Sun 03 May 2026 03:09:36 +0000 ROA not before: Sun 03 May 2026 03:04:36 +0000 ROA not after: Sun 02 May 2027 03:09:36 +0000 asID: 138109 IP address blocks: 103.126.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:cf:8a:e4:60:2e:5b:f7:22:e0:fc:43:b0:eb:a8:7a:f6:31:6e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11FFFA845980AD12347D7297657117A393722635 Validity Not Before: May 3 03:04:36 2026 GMT Not After : May 2 03:09:36 2027 GMT Subject: CN=E81F131FF20C6A43432DCF8089009200CFDB6164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:9d:db:3c:c9:cc:59:ad:d8:33:60:a8:5e:37: fe:f7:a1:20:5a:60:b1:53:c6:04:37:c0:be:a0:7f: 03:7e:7a:fa:e0:2e:32:44:3f:7e:03:16:2e:49:93: 1c:5a:9e:f7:6c:31:69:96:15:33:7e:93:7d:86:78: 36:73:e6:f9:63:e4:64:7b:bb:f0:b0:ad:38:20:23: 33:4c:d7:de:08:ad:9a:06:e4:45:e3:d3:8b:fc:b7: 1c:98:bc:9b:b8:05:14:b6:36:78:88:c3:3c:d0:de: e6:b4:d5:3e:85:3d:47:12:75:d1:dd:30:78:a4:50: b8:ea:f1:ea:52:20:df:a4:2b:26:44:bb:a0:e0:14: 47:28:2e:31:05:71:33:8e:32:cd:7f:71:eb:08:4e: ed:a0:b8:bd:80:82:33:da:a3:a4:67:10:c3:3b:15: 7b:d9:5f:19:eb:1c:29:d0:44:4d:fe:a9:1e:72:e7: 8e:3b:bb:37:ae:14:48:75:91:83:31:53:a8:d6:cf: 12:7f:5d:0d:10:a4:4d:c9:63:fa:12:6a:ad:59:90: 89:92:76:0a:c1:f3:e9:6d:03:1b:f2:ec:0a:91:b1: 6c:9f:d1:be:4a:f2:23:ca:f4:d4:3e:ac:ea:39:8a: f9:fe:83:8a:49:8e:d4:1d:66:5f:f7:b6:f6:55:68: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1F:13:1F:F2:0C:6A:43:43:2D:CF:80:89:00:92:00:CF:DB:61:64 X509v3 Authority Key Identifier: keyid:11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.84.0/22 Signature Algorithm: sha256WithRSAEncryption 44:31:79:2f:62:4d:ef:4b:6d:50:f8:ee:d7:56:96:02:9a:08: df:77:f8:64:74:d5:eb:7d:56:33:6b:d9:a6:f8:0a:4f:2d:31: 9d:b0:11:ee:78:a3:f5:20:35:bc:13:68:11:09:16:0b:11:e3: 8a:af:53:aa:2e:0d:6f:d7:0b:42:e8:0d:1e:5d:cb:55:9d:df: be:fb:f1:00:cf:8a:38:12:fe:5f:63:7c:ae:38:58:8b:cc:5e: 42:02:81:24:12:bf:7f:61:49:8e:b8:ef:f3:cc:c8:a8:07:61: f2:16:48:92:cc:1e:d0:df:fb:f2:33:6b:cf:78:5d:17:a3:e5: 1d:6f:a0:d8:d4:aa:df:dd:60:66:b5:c6:f1:1f:c3:12:d6:03: 43:48:18:ee:81:22:8e:93:d6:a2:86:9d:12:04:20:0b:eb:98: fa:2b:3d:31:83:39:8b:70:70:7d:f3:90:c4:00:9a:c3:e7:03: 16:ca:12:07:ec:92:75:ca:36:54:28:32:c7:06:91:d1:1c:48: 98:7a:ad:ea:75:23:f3:fe:92:94:cd:26:53:be:6f:90:22:65: a6:8d:81:68:a3:73:ab:4f:f1:b0:66:34:3f:90:8e:01:fb:44: 04:3d:cc:d0:58:70:0b:45:76:6b:1b:d3:23:64:52:c9:b8:7c: 93:e6:8e:23 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURs+K5GAuW/ci4PxDsOuoevYxbhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFGRkZBODQ1OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3QTM5 MzcyMjYzNTAeFw0yNjA1MDMwMzA0MzZaFw0yNzA1MDIwMzA5MzZaMDMxMTAvBgNV BAMTKEU4MUYxMzFGRjIwQzZBNDM0MzJEQ0Y4MDg5MDA5MjAwQ0ZEQjYxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5nds8ycxZrdgzYKheN/73oSBa YLFTxgQ3wL6gfwN+evrgLjJEP34DFi5JkxxanvdsMWmWFTN+k32GeDZz5vlj5GR7 u/CwrTggIzNM194IrZoG5EXj04v8txyYvJu4BRS2NniIwzzQ3ua01T6FPUcSddHd MHikULjq8epSIN+kKyZEu6DgFEcoLjEFcTOOMs1/cesITu2guL2AgjPao6RnEMM7 FXvZXxnrHCnQRE3+qR5y5447uzeuFEh1kYMxU6jWzxJ/XQ0QpE3JY/oSaq1ZkImS dgrB8+ltAxvy7AqRsWyf0b5K8iPK9NQ+rOo5ivn+g4pJjtQdZl/3tvZVaNK7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU6B8TH/IMakNDLc+AiQCSAM/bYWQwHwYDVR0j BBgwFoAUEf/6hFmArRI0fXKXZXEXo5NyJjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRiNGZiODgtOGY0Mi00N2YyLWJlODAtMDllNDM1NjBkZGRmLzAvMTFGRkZBODQ1 OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3QTM5MzcyMjYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMUZGRkE4NDU5ODBBRDEyMzQ3RDcyOTc2NTcxMTdBMzkzNzIy NjM1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q0YjRmYjg4LThmNDItNDdmMi1i ZTgwLTA5ZTQzNTYwZGRkZi8wLzMxMzAzMzJlMzEzMjM2MmUzODM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ35UMA0GCSqG SIb3DQEBCwUAA4IBAQBEMXkvYk3vS21Q+O7XVpYCmgjfd/hkdNXrfVYza9mm+ApP LTGdsBHueKP1IDW8E2gRCRYLEeOKr1OqLg1v1wtC6A0eXctVnd+++/EAz4o4Ev5f Y3yuOFiLzF5CAoEkEr9/YUmOuO/zzMioB2HyFkiSzB7Q3/vyM2vPeF0Xo+Udb6DY 1Krf3WBmtcbxH8MS1gNDSBjugSKOk9aihp0SBCAL65j6Kz0xgzmLcHB985DEAJrD 5wMWyhIH7JJ1yjZUKDLHBpHRHEiYeq3qdSPz/pKUzSZTvm+QImWmjYFoo3OrT/Gw ZjQ/kI4B+0QEPczQWHALRXZrG9MjZFLJuHyT5o4j -----END CERTIFICATE-----Generated at Wed May 13 05:07:39 2026 by rpki-client