$ rpki-client -vvf rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa File: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (raw, json) Hash identifier: OOk+m+baT6rSEoQr7jsbvANi5LghM8WtezCSjbbc3mM= Subject key identifier: 5A:A7:F2:70:F0:71:27:8F:F6:D8:2F:84:23:05:E6:0F:19:3B:82:F5 Certificate issuer: /CN=04464393DEE86F9C4534E90FA657647430EE82F1 Certificate serial: 5810F90CF0FF25CA4ED8B5AA9C563D82C3B1E2EE Authority key identifier: 04:46:43:93:DE:E8:6F:9C:45:34:E9:0F:A6:57:64:74:30:EE:82:F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa Signing time: Sun 03 May 2026 03:18:58 +0000 ROA not before: Sun 03 May 2026 03:13:58 +0000 ROA not after: Sun 02 May 2027 03:18:58 +0000 asID: 23954 IP address blocks: 103.191.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.crl rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:10:f9:0c:f0:ff:25:ca:4e:d8:b5:aa:9c:56:3d:82:c3:b1:e2:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04464393DEE86F9C4534E90FA657647430EE82F1 Validity Not Before: May 3 03:13:58 2026 GMT Not After : May 2 03:18:58 2027 GMT Subject: CN=5AA7F270F071278FF6D82F842305E60F193B82F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:43:36:67:ab:f8:b6:ed:9d:97:af:2d:7f:5d: f5:62:7a:4d:fe:60:66:ba:3d:1d:af:d5:7d:1e:31: 20:cc:7d:df:0b:2f:fd:bb:da:78:fc:02:74:27:0f: 85:f3:36:66:fa:85:0a:00:56:13:d8:9c:e5:20:35: c7:ad:58:f2:db:17:ef:4f:a8:4f:b2:89:02:ca:72: 83:27:b2:93:0b:c1:18:86:ef:32:ec:85:37:84:ed: f4:65:41:9f:fc:62:42:87:bb:50:a7:14:1f:83:d5: b2:e5:70:f5:82:09:6d:73:43:e0:87:76:99:fd:db: e6:96:d1:29:3a:5a:3a:48:db:43:ff:5d:3a:6f:38: f3:41:ad:e0:e7:dc:89:fe:d1:03:e9:d6:53:3b:28: 76:3d:46:78:9c:62:68:ef:14:4b:50:4e:13:61:1a: dd:b6:e5:f3:bc:5f:14:02:70:b1:88:fd:0c:b7:0b: 0a:cd:e5:21:dc:9e:5d:eb:6d:35:4e:84:a8:8e:95: 62:15:fd:f5:01:d3:bc:83:02:66:62:fc:38:5c:54: 4d:3b:06:5c:3b:13:55:3e:44:be:15:d9:e1:4f:a0: e7:c2:5b:2e:33:52:19:de:61:cf:40:11:de:80:a3: 39:d2:52:b2:f6:69:66:38:db:7b:f5:45:37:47:ee: 65:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A7:F2:70:F0:71:27:8F:F6:D8:2F:84:23:05:E6:0F:19:3B:82:F5 X509v3 Authority Key Identifier: keyid:04:46:43:93:DE:E8:6F:9C:45:34:E9:0F:A6:57:64:74:30:EE:82:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.126.0/24 Signature Algorithm: sha256WithRSAEncryption d7:37:2a:40:b7:8d:c7:fc:9e:b7:43:40:e1:aa:0f:b4:eb:0f: 98:48:05:7d:3b:0f:08:92:c2:10:a1:86:f1:93:15:e6:17:d2: 16:10:f1:49:cb:7b:43:31:1b:24:27:a6:94:81:82:2c:3d:0e: 4f:4e:31:15:74:1a:aa:3d:be:7e:60:29:e0:37:2b:86:ef:92: 8b:81:43:41:79:45:b9:6d:6a:00:85:a3:bc:b9:b2:4d:cd:7c: 2d:89:33:b6:91:74:09:a4:a4:22:78:12:61:ec:26:ac:cc:4d: 0b:cf:69:db:b2:91:75:72:f6:6a:53:ba:55:3d:cc:e3:20:79: 52:cb:db:08:8e:eb:81:ee:5a:c7:f3:38:c9:5f:1b:e3:82:21: 0b:cb:5a:74:fa:3f:44:1a:70:50:7e:37:fa:b6:6f:3e:ff:89: 92:da:b6:6b:cb:18:c8:ff:0b:d7:da:44:8b:c2:38:86:f4:5d: 56:f6:ce:4b:de:1f:44:10:4f:67:c1:4f:ef:2e:cb:53:70:9e: e7:bb:d4:23:4b:42:4c:21:4f:8f:02:d3:d8:41:ac:94:42:8a: c8:3e:23:a6:ba:41:7f:b4:5d:83:c9:90:d4:57:b4:a9:5f:a7: 40:9b:7c:20:92:29:21:83:f2:f9:0a:87:34:51:e5:1b:f9:d1: b0:4c:55:98 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWBD5DPD/JcpO2LWqnFY9gsOx4u4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ0NjQzOTNERUU4NkY5QzQ1MzRFOTBGQTY1NzY0NzQz MEVFODJGMTAeFw0yNjA1MDMwMzEzNThaFw0yNzA1MDIwMzE4NThaMDMxMTAvBgNV BAMTKDVBQTdGMjcwRjA3MTI3OEZGNkQ4MkY4NDIzMDVFNjBGMTkzQjgyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFQzZnq/i27Z2Xry1/XfViek3+ YGa6PR2v1X0eMSDMfd8LL/272nj8AnQnD4XzNmb6hQoAVhPYnOUgNcetWPLbF+9P qE+yiQLKcoMnspMLwRiG7zLshTeE7fRlQZ/8YkKHu1CnFB+D1bLlcPWCCW1zQ+CH dpn92+aW0Sk6WjpI20P/XTpvOPNBreDn3In+0QPp1lM7KHY9RnicYmjvFEtQThNh Gt225fO8XxQCcLGI/Qy3CwrN5SHcnl3rbTVOhKiOlWIV/fUB07yDAmZi/DhcVE07 Blw7E1U+RL4V2eFPoOfCWy4zUhneYc9AEd6AoznSUrL2aWY423v1RTdH7mUxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWqfycPBxJ4/22C+EIwXmDxk7gvUwHwYDVR0j BBgwFoAUBEZDk97ob5xFNOkPpldkdDDugvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmIwMDc0Y2YtNzZkZC00MDk3LWExOWItZTM3ZTYyODU4YjI0LzAvMDQ0NjQzOTNE RUU4NkY5QzQ1MzRFOTBGQTY1NzY0NzQzMEVFODJGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDQ2NDM5M0RFRTg2RjlDNDUzNEU5MEZBNjU3NjQ3NDMwRUU4 MkYxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZiMDA3NGNmLTc2ZGQtNDA5Ny1h MTliLWUzN2U2Mjg1OGIyNC8wLzMxMzAzMzJlMzEzOTMxMmUzMTMyMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzkzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ79+MA0GCSqG SIb3DQEBCwUAA4IBAQDXNypAt43H/J63Q0Dhqg+06w+YSAV9Ow8IksIQoYbxkxXm F9IWEPFJy3tDMRskJ6aUgYIsPQ5PTjEVdBqqPb5+YCngNyuG75KLgUNBeUW5bWoA haO8ubJNzXwtiTO2kXQJpKQieBJh7CaszE0Lz2nbspF1cvZqU7pVPczjIHlSy9sI juuB7lrH8zjJXxvjgiELy1p0+j9EGnBQfjf6tm8+/4mS2rZryxjI/wvX2kSLwjiG 9F1W9s5L3h9EEE9nwU/vLstTcJ7nu9QjS0JMIU+PAtPYQayUQorIPiOmukF/tF2D yZDUV7SpX6dAm3wgkikhg/L5Coc0UeUb+dGwTFWY -----END CERTIFICATE-----Generated at Wed May 13 02:13:02 2026 by rpki-client