$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa File: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (raw, json) Hash identifier: hgyoReewnJKW4nr6+Jg49Hdij/Yxck5vrTJyyAU/fpU= Subject key identifier: 23:E9:01:5D:41:3B:AE:0B:65:D3:B2:A9:65:FB:D2:D3:7C:20:61:A7 Certificate issuer: /CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76 Certificate serial: 429693D4E93E8E11AE5FF1AC90A2ABA8F475AA07 Authority key identifier: DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa Signing time: Sun 03 May 2026 03:13:08 +0000 ROA not before: Sun 03 May 2026 03:08:08 +0000 ROA not after: Sun 02 May 2027 03:13:08 +0000 asID: 149717 IP address blocks: 103.186.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:96:93:d4:e9:3e:8e:11:ae:5f:f1:ac:90:a2:ab:a8:f4:75:aa:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76 Validity Not Before: May 3 03:08:08 2026 GMT Not After : May 2 03:13:08 2027 GMT Subject: CN=23E9015D413BAE0B65D3B2A965FBD2D37C2061A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:89:8e:27:58:93:bc:47:03:ec:21:ba:61: 12:73:09:74:1d:f4:8c:45:2f:9d:00:68:fc:64:2c: 50:ec:d3:e6:83:95:9a:01:36:5b:b2:22:d6:58:44: 76:65:4c:a5:0d:85:f6:1a:ab:40:3b:5c:e9:fe:55: 4d:4f:19:27:19:8e:23:1e:ac:39:7a:15:46:5e:e0: 27:d7:b9:2d:43:20:31:92:9a:26:b8:6e:11:60:c7: 51:ea:25:83:12:22:e0:ef:02:28:7e:b9:18:6d:3a: f8:0e:5c:f1:5a:c4:31:ea:4a:50:b0:08:14:2c:eb: 5e:e5:7a:e2:71:5a:f4:69:16:7e:2e:87:33:ea:c7: 8f:69:78:b3:68:f5:1a:87:57:46:df:ef:f7:70:bd: 37:f8:86:67:fd:4c:8a:4a:f4:64:e8:9a:03:9a:6c: ab:9a:26:cd:0a:ef:fb:d3:5e:20:a1:7c:33:39:0c: 24:cb:be:62:ea:34:2d:05:79:63:a7:8e:99:00:20: b2:eb:61:6c:4c:9b:94:08:70:7f:a2:2b:13:1c:21: 52:ea:d8:8e:84:1f:e1:fa:c9:b4:98:e1:34:1d:4a: 13:0b:4a:b3:ac:9f:c5:cd:fd:dd:50:17:a0:7a:6a: 43:21:d1:b3:85:40:5d:3f:13:42:b8:f7:77:5b:bb: 12:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E9:01:5D:41:3B:AE:0B:65:D3:B2:A9:65:FB:D2:D3:7C:20:61:A7 X509v3 Authority Key Identifier: keyid:DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.88.0/24 Signature Algorithm: sha256WithRSAEncryption 71:53:34:c4:43:f0:ce:12:47:e3:b5:74:29:b4:71:8b:c3:60: f9:e3:46:6a:2c:6a:2e:dc:a3:7c:10:79:bc:3f:37:4f:de:9d: 80:1f:06:12:23:ce:b7:e5:71:57:5a:cd:7f:c7:58:17:7b:d5: b9:bb:c8:f3:76:8f:f8:38:b8:58:82:d9:a4:ea:3a:3a:25:92: 2e:0f:13:0a:15:c5:31:79:8d:77:ee:48:4f:0b:58:d7:43:ba: 6f:54:9d:78:49:b8:5c:c9:03:96:1b:ec:7c:09:ad:bc:14:a0: ae:f0:13:e3:13:44:5c:4b:c7:5b:c2:2d:c4:e7:52:fe:71:dc: 56:70:fd:d1:6e:24:22:8c:c9:a6:a2:0b:66:21:5f:37:34:a5: e9:a8:43:1b:5d:bc:5d:f3:ed:1b:f4:e6:81:4a:66:5d:f1:6f: 63:48:cf:5a:b6:90:27:a3:2b:2e:a1:6b:18:22:4e:3e:15:d1: a0:d3:d8:1b:8d:35:66:5f:89:97:34:d3:96:e7:71:1c:97:fb: 29:c3:e0:4b:41:9a:ae:1a:30:de:2f:53:cd:1a:96:49:e0:12: f1:7b:59:b1:e3:85:5e:6e:c3:3c:c7:d6:4e:1c:af:7a:d7:1b: 5c:70:d7:ad:ea:a8:d8:c5:06:6e:81:4e:cc:89:70:5f:22:a6: 54:7f:54:be -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQpaT1Ok+jhGuX/GskKKrqPR1qgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1 MjI2NEQ3NjAeFw0yNjA1MDMwMzA4MDhaFw0yNzA1MDIwMzEzMDhaMDMxMTAvBgNV BAMTKDIzRTkwMTVENDEzQkFFMEI2NUQzQjJBOTY1RkJEMkQzN0MyMDYxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmFYmOJ1iTvEcD7CG6YRJzCXQd 9IxFL50AaPxkLFDs0+aDlZoBNluyItZYRHZlTKUNhfYaq0A7XOn+VU1PGScZjiMe rDl6FUZe4CfXuS1DIDGSmia4bhFgx1HqJYMSIuDvAih+uRhtOvgOXPFaxDHqSlCw CBQs617leuJxWvRpFn4uhzPqx49peLNo9RqHV0bf7/dwvTf4hmf9TIpK9GTomgOa bKuaJs0K7/vTXiChfDM5DCTLvmLqNC0FeWOnjpkAILLrYWxMm5QIcH+iKxMcIVLq 2I6EH+H6ybSY4TQdShMLSrOsn8XN/d1QF6B6akMh0bOFQF0/E0K493dbuxIlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUI+kBXUE7rgtl07KpZfvS03wgYacwHwYDVR0j BBgwFoAU3KpQDlbfWbaBet4dUbVgX1ImTXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOTVkZTYtMjA1OC00NmE3LTkzNmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1 NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1MjI2NEQ3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0FBNTAwRTU2REY1OUI2ODE3QURFMUQ1MUI1NjA1RjUyMjY0 RDc2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2UzMjk1ZGU2LTIwNTgtNDZhNy05 MzZiLTA1MmNmMmZhOTIwZC8wLzMxMzAzMzJlMzEzODM2MmUzODM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7pYMA0GCSqG SIb3DQEBCwUAA4IBAQBxUzTEQ/DOEkfjtXQptHGLw2D540ZqLGou3KN8EHm8PzdP 3p2AHwYSI8635XFXWs1/x1gXe9W5u8jzdo/4OLhYgtmk6jo6JZIuDxMKFcUxeY13 7khPC1jXQ7pvVJ14SbhcyQOWG+x8Ca28FKCu8BPjE0RcS8dbwi3E51L+cdxWcP3R biQijMmmogtmIV83NKXpqEMbXbxd8+0b9OaBSmZd8W9jSM9atpAnoysuoWsYIk4+ FdGg09gbjTVmX4mXNNOW53Ecl/spw+BLQZquGjDeL1PNGpZJ4BLxe1mx44VebsM8 x9ZOHK961xtccNet6qjYxQZugU7MiXBfIqZUf1S+ -----END CERTIFICATE-----Generated at Wed May 13 07:36:12 2026 by rpki-client