$ rpki-client -vvf rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa File: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (raw, json) Hash identifier: cg2vG6vOlvaO0bKi1CGuJ7bUO4QcPh2Dxu7evpmyUN4= Subject key identifier: 39:C9:F4:96:2F:2A:A2:01:A8:67:BB:B7:FB:34:AE:FB:1F:9C:E4:07 Certificate issuer: /CN=BF81EC78CC8A61FCFF71A862321A5204E581203B Certificate serial: 6605261DA2A12A43380871F715A89EA21BDB75D8 Authority key identifier: BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa Signing time: Sun 03 May 2026 03:10:23 +0000 ROA not before: Sun 03 May 2026 03:05:23 +0000 ROA not after: Sun 02 May 2027 03:10:23 +0000 asID: 138835 IP address blocks: 103.138.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:05:26:1d:a2:a1:2a:43:38:08:71:f7:15:a8:9e:a2:1b:db:75:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF81EC78CC8A61FCFF71A862321A5204E581203B Validity Not Before: May 3 03:05:23 2026 GMT Not After : May 2 03:10:23 2027 GMT Subject: CN=39C9F4962F2AA201A867BBB7FB34AEFB1F9CE407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:a1:80:91:a5:07:c3:ac:43:69:b4:96:4a: 6e:e9:b5:f1:ce:66:5b:91:5e:80:c4:a6:c9:97:97: 36:5c:27:23:33:10:9f:e1:c0:4a:47:a1:e3:86:94: 4e:65:4c:82:3d:c9:8a:74:59:ca:3e:fa:2d:a5:d2: d5:09:cd:b0:ac:2a:d0:03:cf:4c:61:0c:ca:f2:10: 8a:9e:2a:d3:38:eb:06:c3:29:1b:e3:df:bd:c7:d0: 08:2d:3c:ee:65:92:b2:9f:4c:50:e3:c9:58:02:4b: d0:af:38:39:dc:e2:be:4a:b1:f0:e8:43:94:c5:7a: 2c:44:d8:d7:72:f8:de:81:96:33:c2:b9:7f:95:5e: cc:5d:1e:41:be:4b:b6:c2:e4:4c:6d:73:18:64:96: 4d:6f:10:dd:77:7f:59:4d:1e:32:6e:aa:e2:55:eb: c9:b4:e5:18:8e:0f:ae:28:3c:f4:05:c0:4b:44:73: 67:14:09:eb:23:0a:ad:91:5e:9e:19:8e:c5:53:dd: 66:a2:03:80:72:87:ee:85:c7:7c:71:b9:fa:28:fd: 08:1e:e4:48:ab:2f:04:ab:f2:da:1b:c8:c0:a8:0e: fe:ee:ad:49:24:57:f7:99:d6:88:31:e6:6b:c5:92: 1e:76:d8:d2:43:ce:37:f1:61:a7:60:b7:1a:9e:4e: 8d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C9:F4:96:2F:2A:A2:01:A8:67:BB:B7:FB:34:AE:FB:1F:9C:E4:07 X509v3 Authority Key Identifier: keyid:BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.10.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:bb:02:3a:36:8d:a4:1e:fd:b5:db:3e:9e:20:89:b7:c9:b3: e1:4c:b5:47:9c:8f:3a:b9:75:c4:3d:18:04:d0:d5:ea:ce:a3: 3b:3c:e0:9e:d2:07:89:ad:06:6e:c9:f2:a0:f3:7c:ee:14:5b: 6b:e7:5c:a5:25:8e:0d:4c:9d:99:fe:89:8f:2e:c3:82:1c:20: ea:7e:dc:ed:7d:dd:96:02:85:75:33:2e:a2:90:0a:d8:52:c4: bd:00:00:23:3f:59:51:b0:29:2d:0e:f5:74:09:f1:75:3a:a3: 50:18:04:5c:38:b5:7f:c2:15:47:9f:48:d0:2f:41:a2:a5:88: 09:82:69:e8:3b:0e:22:0a:ce:0c:36:ea:e8:58:7e:9a:04:15: a6:80:4e:79:b1:c4:3d:63:2e:20:48:dc:3e:f5:d6:0c:55:d3: 74:65:2e:dd:73:11:4e:d1:f7:b7:b4:e0:af:ef:bb:ce:ff:4a: fc:e0:23:b9:14:40:c1:c0:bc:62:e4:ac:b1:f6:e7:b6:22:f7: 55:05:0c:69:90:14:6d:2e:14:a4:6a:ed:77:e6:b6:77:5b:37: 59:d9:c5:a0:5d:54:73:dd:c5:23:59:d6:0f:66:9b:f9:85:7f: 70:2d:fd:4e:cc:65:93:ef:4b:bd:29:42:f6:8a:fc:d5:3d:be: 9d:8c:bd:40 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZgUmHaKhKkM4CHH3FaieohvbddgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY4MUVDNzhDQzhBNjFGQ0ZGNzFBODYyMzIxQTUyMDRF NTgxMjAzQjAeFw0yNjA1MDMwMzA1MjNaFw0yNzA1MDIwMzEwMjNaMDMxMTAvBgNV BAMTKDM5QzlGNDk2MkYyQUEyMDFBODY3QkJCN0ZCMzRBRUZCMUY5Q0U0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7SqGAkaUHw6xDabSWSm7ptfHO ZluRXoDEpsmXlzZcJyMzEJ/hwEpHoeOGlE5lTII9yYp0Wco++i2l0tUJzbCsKtAD z0xhDMryEIqeKtM46wbDKRvj373H0AgtPO5lkrKfTFDjyVgCS9CvODnc4r5KsfDo Q5TFeixE2Ndy+N6BljPCuX+VXsxdHkG+S7bC5Extcxhklk1vEN13f1lNHjJuquJV 68m05RiOD64oPPQFwEtEc2cUCesjCq2RXp4ZjsVT3WaiA4Byh+6Fx3xxufoo/Qge 5EirLwSr8tobyMCoDv7urUkkV/eZ1ogx5mvFkh522NJDzjfxYadgtxqeTo2pAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOcn0li8qogGoZ7u3+zSu+x+c5AcwHwYDVR0j BBgwFoAUv4HseMyKYfz/cahiMhpSBOWBIDswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDg2OGNmMjItZDAyOS00NWUyLTllMjEtZDk4OTJkM2FmN2E2LzAvQkY4MUVDNzhD QzhBNjFGQ0ZGNzFBODYyMzIxQTUyMDRFNTgxMjAzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjgxRUM3OENDOEE2MUZDRkY3MUE4NjIzMjFBNTIwNEU1ODEy MDNCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4NjhjZjIyLWQwMjktNDVlMi05 ZTIxLWQ5ODkyZDNhZjdhNi8wLzMxMzAzMzJlMzEzMzM4MmUzMTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4oKMA0GCSqG SIb3DQEBCwUAA4IBAQBLuwI6No2kHv212z6eIIm3ybPhTLVHnI86uXXEPRgE0NXq zqM7POCe0geJrQZuyfKg83zuFFtr51ylJY4NTJ2Z/omPLsOCHCDqftztfd2WAoV1 My6ikArYUsS9AAAjP1lRsCktDvV0CfF1OqNQGARcOLV/whVHn0jQL0GipYgJgmno Ow4iCs4MNuroWH6aBBWmgE55scQ9Yy4gSNw+9dYMVdN0ZS7dcxFO0fe3tOCv77vO /0r84CO5FEDBwLxi5Kyx9ue2IvdVBQxpkBRtLhSkau135rZ3WzdZ2cWgXVRz3cUj WdYPZpv5hX9wLf1OzGWT70u9KUL2ivzVPb6djL1A -----END CERTIFICATE-----Generated at Wed May 13 04:51:47 2026 by rpki-client