$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa File: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (raw, json) Hash identifier: VGZWopnP5E+cpki2YrX/ob7V+wdxOvea5qW0A+eDkWM= Subject key identifier: 5C:D7:9D:A7:BA:00:8F:87:30:6E:23:4D:85:F8:A0:3C:D5:21:71:1E Certificate issuer: /CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Certificate serial: 08E32AD45CC67515B70FB387B67350E7EEFDA785 Authority key identifier: F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa Signing time: Sun 03 May 2026 03:11:35 +0000 ROA not before: Sun 03 May 2026 03:06:35 +0000 ROA not after: Sun 02 May 2027 03:11:35 +0000 asID: 138112 IP address blocks: 103.126.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e3:2a:d4:5c:c6:75:15:b7:0f:b3:87:b6:73:50:e7:ee:fd:a7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Validity Not Before: May 3 03:06:35 2026 GMT Not After : May 2 03:11:35 2027 GMT Subject: CN=5CD79DA7BA008F87306E234D85F8A03CD521711E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:96:82:ba:f2:f8:56:5a:71:aa:e9:e4:0d:f2: 8d:c9:55:67:0a:2f:a4:e1:e6:2d:c2:51:44:30:48: bd:a3:5c:22:cf:1e:e7:37:df:41:88:ed:b3:32:0a: 80:3f:0e:ad:1f:e7:c8:3e:72:12:c4:47:a4:60:69: 1b:80:20:dc:ff:f8:5a:df:55:79:73:1e:9c:85:80: df:39:59:3f:eb:22:b3:dd:1a:03:d2:8a:4d:6a:ba: 53:29:f6:33:f5:47:84:5e:eb:5e:fc:61:84:5a:69: b0:56:fc:13:e8:43:8f:d3:3b:20:f1:00:2e:05:a1: b5:3e:a3:e3:7f:8b:40:f9:f5:ce:4b:33:67:49:fc: 7a:47:2f:d9:2e:8b:7a:90:af:9d:62:59:00:9c:c3: 98:32:a0:7a:69:ab:5d:81:fa:00:cd:78:03:c2:fe: ee:31:be:38:e7:ee:f7:fb:3d:be:57:61:9d:83:bb: e8:55:c1:7e:c0:96:45:79:9b:88:b0:14:f8:10:b8: d9:3b:5d:d1:bd:70:76:b2:3b:65:a3:9e:99:bc:6e: 3f:f3:ff:a2:75:6d:c4:d1:cd:53:1e:d6:34:b7:68: 05:d3:fb:9b:90:ab:b9:f0:41:27:38:03:48:29:2a: 50:06:0b:09:a7:a7:c8:6e:39:8e:fd:be:7b:14:7a: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D7:9D:A7:BA:00:8F:87:30:6E:23:4D:85:F8:A0:3C:D5:21:71:1E X509v3 Authority Key Identifier: keyid:F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.174.0/24 Signature Algorithm: sha256WithRSAEncryption 67:c8:b7:1c:4f:a3:12:7c:64:24:9e:8c:3f:63:3e:bd:2a:fa: d2:4b:0f:ca:a5:eb:47:70:be:35:3c:d6:a3:64:87:db:4a:f1: 70:fa:ae:16:ed:05:6c:f1:45:40:0c:f6:d1:4b:67:ef:28:ad: b0:3d:3d:94:64:33:f1:76:b0:09:9e:37:5e:72:da:99:20:5f: c7:25:4e:7e:69:32:1f:48:9d:78:b9:d3:1d:b1:89:93:17:99: ef:6d:88:67:0e:15:86:3f:09:52:b1:db:8f:0d:c5:74:84:12: d8:23:9f:74:ec:07:79:87:ad:22:b7:8d:c3:2e:dd:8c:f4:95: 8b:9b:4c:df:69:be:16:3b:a0:d6:74:42:e1:0e:79:2a:d3:e1: 3d:14:dd:40:31:65:9a:d4:92:28:ac:b3:f1:7c:f0:a1:c6:75: 47:0c:6f:90:d3:6d:5a:38:a8:8a:af:0c:97:5b:ba:aa:b8:74: ca:f2:cd:ad:af:16:30:c2:5a:9c:6d:c0:75:8f:10:cf:06:fc: a2:5b:c6:77:d1:87:9a:a8:0f:65:e6:31:7a:1a:43:8d:dc:a4: 69:6e:0b:88:a7:a8:fd:87:9a:e4:c3:2f:6b:d0:d6:64:3d:2b: c8:93:97:c7:a3:5c:9f:63:07:79:b4:b4:f2:2c:68:80:34:10: 59:55:29:5a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUCOMq1FzGdRW3D7OHtnNQ5+79p4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlC MUVCRDIxNDAeFw0yNjA1MDMwMzA2MzVaFw0yNzA1MDIwMzExMzVaMDMxMTAvBgNV BAMTKDVDRDc5REE3QkEwMDhGODczMDZFMjM0RDg1RjhBMDNDRDUyMTcxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTloK68vhWWnGq6eQN8o3JVWcK L6Th5i3CUUQwSL2jXCLPHuc330GI7bMyCoA/Dq0f58g+chLER6RgaRuAINz/+Frf VXlzHpyFgN85WT/rIrPdGgPSik1qulMp9jP1R4Re6178YYRaabBW/BPoQ4/TOyDx AC4FobU+o+N/i0D59c5LM2dJ/HpHL9kui3qQr51iWQCcw5gyoHppq12B+gDNeAPC /u4xvjjn7vf7Pb5XYZ2Du+hVwX7AlkV5m4iwFPgQuNk7XdG9cHayO2Wjnpm8bj/z /6J1bcTRzVMe1jS3aAXT+5uQq7nwQSc4A0gpKlAGCwmnp8huOY79vnsUekavAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUXNedp7oAj4cwbiNNhfigPNUhcR4wHwYDVR0j BBgwFoAU+OnUjRfMOONMv8dLXAf0qbHr0hQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOGQ5MDgtMWI5OS00NTVjLWFjNzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQx N0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlCMUVCRDIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEU5RDQ4RDE3Q0MzOEUzNENCRkM3NEI1QzA3RjRBOUIxRUJE MjE0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RkYjhkOTA4LTFiOTktNDU1Yy1h Yzc2LThkNjI0ZGZhNDNiNi8wLzMxMzAzMzJlMzEzMjM2MmUzMTM3MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfq4wDQYJ KoZIhvcNAQELBQADggEBAGfItxxPoxJ8ZCSejD9jPr0q+tJLD8ql60dwvjU81qNk h9tK8XD6rhbtBWzxRUAM9tFLZ+8orbA9PZRkM/F2sAmeN15y2pkgX8clTn5pMh9I nXi50x2xiZMXme9tiGcOFYY/CVKx248NxXSEEtgjn3TsB3mHrSK3jcMu3Yz0lYub TN9pvhY7oNZ0QuEOeSrT4T0U3UAxZZrUkiiss/F88KHGdUcMb5DTbVo4qIqvDJdb uqq4dMryza2vFjDCWpxtwHWPEM8G/KJbxnfRh5qoD2XmMXoaQ43cpGluC4inqP2H muTDL2vQ1mQ9K8iTl8ejXJ9jB3m0tPIsaIA0EFlVKVo= -----END CERTIFICATE-----Generated at Wed May 13 05:44:05 2026 by rpki-client