$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa File: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (raw, json) Hash identifier: ikR4B1sB9IhhiTpM9SD6KX5Vk82b9oPtczvgaIgOyo8= Subject key identifier: BC:D4:04:4E:7B:66:34:8D:79:AD:42:CF:50:C7:5C:15:C6:75:11:92 Certificate issuer: /CN=354106638019F94606F5ABA3A90FEB87A8A7FA76 Certificate serial: 2DCF36EA68E13117126F2FBF405E5A35C06A00D8 Authority key identifier: 35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa Signing time: Sun 03 May 2026 03:11:33 +0000 ROA not before: Sun 03 May 2026 03:06:33 +0000 ROA not after: Sun 02 May 2027 03:11:33 +0000 asID: 4800 IP address blocks: 103.191.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:cf:36:ea:68:e1:31:17:12:6f:2f:bf:40:5e:5a:35:c0:6a:00:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=354106638019F94606F5ABA3A90FEB87A8A7FA76 Validity Not Before: May 3 03:06:33 2026 GMT Not After : May 2 03:11:33 2027 GMT Subject: CN=BCD4044E7B66348D79AD42CF50C75C15C6751192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6e:4e:a8:b1:89:6d:51:20:fe:6e:49:8b:9e: 36:29:48:73:51:32:13:f8:21:1d:c8:43:e4:4d:d4: e0:f0:41:51:f5:c7:75:f3:44:fa:73:0e:36:04:ea: eb:c9:13:c7:0a:fb:a8:e3:2f:2a:3d:62:a7:ba:89: 23:b0:3d:a8:d6:45:fb:47:d7:67:ff:d0:21:39:64: f8:a1:b3:3c:1b:12:a9:11:72:71:91:af:c3:13:78: 1c:62:ee:fe:34:6c:12:7f:06:0b:47:2e:d9:82:28: 8b:40:f9:fb:e6:35:64:e3:8a:46:06:d0:35:10:46: fc:d3:7b:54:8b:74:1d:03:8e:cb:d4:c1:64:a9:09: 08:17:6a:65:ac:c8:7d:1f:d5:dc:3f:7f:54:a9:2c: b3:62:4f:fe:fc:57:fb:4c:7a:54:f7:3f:c1:35:66: 4a:4f:a6:4d:82:cf:c0:b1:45:f0:ee:99:24:ea:6c: ff:7b:24:08:b7:06:66:2d:b2:10:a8:2c:22:e3:66: 32:fe:ba:c8:06:96:80:4a:0b:02:70:a7:a6:38:de: 61:03:ad:dd:2a:ca:69:94:8f:f2:46:44:80:a0:fc: 72:5d:5a:62:68:eb:32:6a:87:29:62:05:ca:28:18: 5b:61:fb:a8:96:08:e6:23:12:8d:f5:bb:1a:bc:8f: e5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D4:04:4E:7B:66:34:8D:79:AD:42:CF:50:C7:5C:15:C6:75:11:92 X509v3 Authority Key Identifier: keyid:35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.148.0/23 Signature Algorithm: sha256WithRSAEncryption 53:2e:38:10:71:7c:a8:76:66:e3:d5:df:7e:e4:19:0a:07:9f: b9:ef:01:54:36:ae:d2:03:10:33:12:92:48:94:43:a3:4f:36: 69:ae:cc:f1:cb:1c:e5:fc:49:4a:ff:73:b0:45:4e:52:e5:64: c8:83:8f:af:7a:ac:bf:82:15:61:ce:65:f4:86:61:30:b1:a4: aa:17:22:c4:d4:cd:f8:ef:af:26:26:b0:d5:92:3c:36:f8:de: 95:c3:75:7e:52:73:90:a8:35:96:1a:6e:e6:26:87:31:27:1e: 4c:78:88:36:12:07:d6:74:2b:80:2a:40:b0:50:82:58:4d:18: 12:5d:d9:da:6e:90:2f:b9:7f:41:05:22:85:32:91:9a:ec:65: 8a:1b:5c:24:bf:0c:78:46:fe:94:f0:2a:42:56:f8:a6:7c:80: de:35:c2:42:8d:09:7e:a2:5e:be:e2:53:c4:66:97:d0:a4:ea: 8d:27:0f:62:a8:f9:c1:69:49:b7:65:56:86:69:e3:f3:ef:a1: 31:e4:0d:a7:9c:5e:f3:09:c9:aa:85:b8:b0:a0:16:62:db:ca: 0c:56:ea:2b:01:e8:87:ad:04:62:6b:a2:6e:a0:8c:60:9b:6a: 5a:54:51:b0:f4:41:e0:27:b3:7b:de:d1:1a:00:3f:08:2d:87: 75:46:fd:57 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULc826mjhMRcSby+/QF5aNcBqANgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU0MTA2NjM4MDE5Rjk0NjA2RjVBQkEzQTkwRkVCODdB OEE3RkE3NjAeFw0yNjA1MDMwMzA2MzNaFw0yNzA1MDIwMzExMzNaMDMxMTAvBgNV BAMTKEJDRDQwNDRFN0I2NjM0OEQ3OUFENDJDRjUwQzc1QzE1QzY3NTExOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDebk6osYltUSD+bkmLnjYpSHNR MhP4IR3IQ+RN1ODwQVH1x3XzRPpzDjYE6uvJE8cK+6jjLyo9Yqe6iSOwPajWRftH 12f/0CE5ZPihszwbEqkRcnGRr8MTeBxi7v40bBJ/BgtHLtmCKItA+fvmNWTjikYG 0DUQRvzTe1SLdB0DjsvUwWSpCQgXamWsyH0f1dw/f1SpLLNiT/78V/tMelT3P8E1 ZkpPpk2Cz8CxRfDumSTqbP97JAi3BmYtshCoLCLjZjL+usgGloBKCwJwp6Y43mED rd0qymmUj/JGRICg/HJdWmJo6zJqhyliBcooGFth+6iWCOYjEo31uxq8j+WHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUvNQETntmNI15rULPUMdcFcZ1EZIwHwYDVR0j BBgwFoAUNUEGY4AZ+UYG9aujqQ/rh6in+nYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ5MDZmYzAtNDM2My00ZjQ2LTliMTQtNWMxYWI4MjVhMzM1LzAvMzU0MTA2NjM4 MDE5Rjk0NjA2RjVBQkEzQTkwRkVCODdBOEE3RkE3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTQxMDY2MzgwMTlGOTQ2MDZGNUFCQTNBOTBGRUI4N0E4QTdG QTc2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RkOTA2ZmMwLTQzNjMtNGY0Ni05 YjE0LTVjMWFiODI1YTMzNS8wLzMxMzAzMzJlMzEzOTMxMmUzMTM0MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe/lDANBgkqhkiG 9w0BAQsFAAOCAQEAUy44EHF8qHZm49XffuQZCgefue8BVDau0gMQMxKSSJRDo082 aa7M8csc5fxJSv9zsEVOUuVkyIOPr3qsv4IVYc5l9IZhMLGkqhcixNTN+O+vJiaw 1ZI8NvjelcN1flJzkKg1lhpu5iaHMSceTHiINhIH1nQrgCpAsFCCWE0YEl3Z2m6Q L7l/QQUihTKRmuxlihtcJL8MeEb+lPAqQlb4pnyA3jXCQo0JfqJevuJTxGaX0KTq jScPYqj5wWlJt2VWhmnj8++hMeQNp5xe8wnJqoW4sKAWYtvKDFbqKwHoh60EYmui bqCMYJtqWlRRsPRB4Ceze97RGgA/CC2HdUb9Vw== -----END CERTIFICATE-----Generated at Wed May 13 07:01:10 2026 by rpki-client