$ rpki-client -vvf rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa File: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (raw, json) Hash identifier: Mq8DWbeqyF5RASCP8QKF1wsfTOXfn4M5I7xbRWlSkvI= Subject key identifier: A3:54:AD:2C:6E:8F:EA:2D:43:FB:A6:D6:D9:1F:5E:D3:CF:89:13:F8 Certificate issuer: /CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Certificate serial: 713B3BA00884F329F1D710A84154A03A02613C43 Authority key identifier: F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa Signing time: Sun 03 May 2026 03:12:08 +0000 ROA not before: Sun 03 May 2026 03:07:08 +0000 ROA not after: Sun 02 May 2027 03:12:08 +0000 asID: 24532 IP address blocks: 103.116.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:3b:3b:a0:08:84:f3:29:f1:d7:10:a8:41:54:a0:3a:02:61:3c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Validity Not Before: May 3 03:07:08 2026 GMT Not After : May 2 03:12:08 2027 GMT Subject: CN=A354AD2C6E8FEA2D43FBA6D6D91F5ED3CF8913F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:b7:ef:7f:d9:c1:1c:6a:5d:73:05:ed:55: 3a:a2:dd:e3:8e:44:80:a9:34:56:6e:7d:34:82:68: 7c:3f:a3:d9:4f:b9:5b:5a:f7:76:b5:12:44:76:fd: c4:82:85:e9:5e:f9:51:86:3b:ca:da:d2:39:8c:5f: 63:49:2b:3d:ef:f4:ce:b9:01:f9:a4:1d:6a:e4:0c: 72:11:d8:6b:9c:ec:3a:e8:78:01:14:90:ae:32:dc: 9a:db:4c:c8:2a:81:c3:b4:78:2e:b2:14:85:ad:f4: ac:85:fd:6a:7e:9a:84:61:e1:0b:90:0d:85:3c:e4: c2:83:66:66:ea:17:7e:6b:19:31:a8:20:08:f8:78: f9:e5:c6:74:92:7f:4b:8a:8d:01:7c:6a:c7:83:c5: a7:ca:9b:fd:18:6e:05:16:e9:02:52:24:c9:64:d3: f9:83:a5:8c:11:18:df:10:05:ac:84:71:09:e3:a5: 97:a1:28:6a:3d:07:58:92:bd:c1:95:d6:f4:3d:ab: d7:40:ee:b2:36:ac:1d:a0:36:ef:6b:0e:19:3f:d9: d4:93:9d:ee:ed:83:4d:97:f8:d4:12:f7:f8:b8:d8: fe:e6:9f:02:ca:90:39:d2:02:03:8a:3f:3e:42:93: e1:5e:ed:3e:b9:6c:d1:a1:e3:0c:40:09:07:a3:72: 37:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:54:AD:2C:6E:8F:EA:2D:43:FB:A6:D6:D9:1F:5E:D3:CF:89:13:F8 X509v3 Authority Key Identifier: keyid:F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.112.0/22 Signature Algorithm: sha256WithRSAEncryption b2:a4:37:69:f5:e5:e1:fc:1d:b6:1b:17:ac:d0:ea:ae:5e:b3: bd:66:05:69:f1:dd:37:9f:68:4f:9e:6b:e1:f8:19:45:6f:ee: c1:92:99:2d:32:fc:aa:1f:56:da:54:8d:61:d0:c7:a7:80:54: de:43:d2:9f:4a:a8:2f:bc:53:74:32:07:85:ba:e2:12:99:2e: a7:7a:ae:9a:2a:bf:a4:58:e8:c5:82:d6:8a:be:63:9b:e3:7b: 9a:87:19:67:db:bb:ea:04:07:2a:53:5f:08:ee:cb:c0:e5:42: b0:bb:0f:c5:0c:ea:9b:97:65:e8:bc:14:73:57:17:45:67:f1: 0f:81:6b:d6:d4:21:cf:ac:fb:92:c9:44:e9:62:af:ee:07:e2: 68:35:98:56:b0:c9:5d:f9:14:8e:df:8c:fe:8a:14:bb:41:79: dd:cc:c9:ba:69:d9:62:55:fc:d8:41:ce:26:c3:32:ed:7f:0a: 57:29:a5:0a:e8:b9:2d:0d:01:f0:5c:21:1b:a5:88:50:43:2d: 8f:18:67:a5:63:4c:c5:c3:a1:e4:c6:bf:df:86:5b:c2:f7:77: 72:70:ba:0c:d6:85:4b:48:5e:dd:3b:6b:62:b7:dc:34:5f:16: 25:95:0a:82:cb:b2:0c:78:76:1b:d3:b4:ab:a8:04:11:aa:a7: 0f:58:8c:2b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcTs7oAiE8ynx1xCoQVSgOgJhPEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMwREIx MEQyRjRERTAeFw0yNjA1MDMwMzA3MDhaFw0yNzA1MDIwMzEyMDhaMDMxMTAvBgNV BAMTKEEzNTRBRDJDNkU4RkVBMkQ0M0ZCQTZENkQ5MUY1RUQzQ0Y4OTEzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCrfvf9nBHGpdcwXtVTqi3eOO RICpNFZufTSCaHw/o9lPuVta93a1EkR2/cSChele+VGGO8ra0jmMX2NJKz3v9M65 AfmkHWrkDHIR2Guc7DroeAEUkK4y3JrbTMgqgcO0eC6yFIWt9KyF/Wp+moRh4QuQ DYU85MKDZmbqF35rGTGoIAj4ePnlxnSSf0uKjQF8aseDxafKm/0YbgUW6QJSJMlk 0/mDpYwRGN8QBayEcQnjpZehKGo9B1iSvcGV1vQ9q9dA7rI2rB2gNu9rDhk/2dST ne7tg02X+NQS9/i42P7mnwLKkDnSAgOKPz5Ck+Fe7T65bNGh4wxACQejcjdvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUo1StLG6P6i1D+6bW2R9e08+JE/gwHwYDVR0j BBgwFoAU8oNgeB+i2mui+YLLnjTA2xDS9N4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY5YmY3OTctOTEzZC00OGRkLTgzMmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgx RkEyREE2QkEyRjk4MkNCOUUzNEMwREIxMEQyRjRERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjgzNjA3ODFGQTJEQTZCQTJGOTgyQ0I5RTM0QzBEQjEwRDJG NERFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmOWJmNzk3LTkxM2QtNDhkZC04 MzJjLTMzYjQwOWI1Zjc5Yi8wLzMxMzAzMzJlMzEzMTM2MmUzMTMxMzIyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMjM0MzUzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3RwMA0GCSqG SIb3DQEBCwUAA4IBAQCypDdp9eXh/B22Gxes0OquXrO9ZgVp8d03n2hPnmvh+BlF b+7BkpktMvyqH1baVI1h0MengFTeQ9KfSqgvvFN0MgeFuuISmS6neq6aKr+kWOjF gtaKvmOb43uahxln27vqBAcqU18I7svA5UKwuw/FDOqbl2XovBRzVxdFZ/EPgWvW 1CHPrPuSyUTpYq/uB+JoNZhWsMld+RSO34z+ihS7QXndzMm6adliVfzYQc4mwzLt fwpXKaUK6LktDQHwXCEbpYhQQy2PGGelY0zFw6Hkxr/fhlvC93dycLoM1oVLSF7d O2tit9w0XxYllQqCy7IMeHYb07SrqAQRqqcPWIwr -----END CERTIFICATE-----Generated at Wed May 13 07:01:33 2026 by rpki-client