$ rpki-client -vvf rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/3130332e3136342e32322e302f32332d3234203d3e203137393935.roa File: 3130332e3136342e32322e302f32332d3234203d3e203137393935.roa (raw, json) Hash identifier: e5rLZ+uiB21yOgfSRe83jWI/e3SG0saFimxCgcV74b8= Subject key identifier: 1F:84:06:87:58:BA:7B:92:19:B4:38:0E:C6:6E:6E:BB:F2:E9:F5:A9 Certificate issuer: /CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6 Certificate serial: 0B1CC4DF43AB7DB49F9465749AF1C9F53C889B6F Authority key identifier: FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/3130332e3136342e32322e302f32332d3234203d3e203137393935.roa Signing time: Sun 03 May 2026 02:53:24 +0000 ROA not before: Sun 03 May 2026 02:48:24 +0000 ROA not after: Sun 02 May 2027 02:53:24 +0000 asID: 17995 IP address blocks: 103.164.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 17:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1c:c4:df:43:ab:7d:b4:9f:94:65:74:9a:f1:c9:f5:3c:88:9b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6 Validity Not Before: May 3 02:48:24 2026 GMT Not After : May 2 02:53:24 2027 GMT Subject: CN=1F84068758BA7B9219B4380EC66E6EBBF2E9F5A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:8c:37:21:6c:80:20:86:77:c0:5b:2f:72: 98:fe:c0:98:6d:ab:b0:8a:e1:ca:58:8c:43:d8:8e: 25:de:17:55:a5:e6:d1:23:04:cc:46:7e:fa:c8:2c: 36:32:b5:64:86:1e:cf:c6:e1:64:91:90:b5:ab:d1: 25:fc:63:69:61:e8:92:f6:ab:e1:2f:24:50:25:2f: a7:5a:c4:01:92:da:a6:9a:69:90:29:69:2b:c9:e6: a4:ef:e9:95:a7:93:c0:9b:57:11:74:8b:4a:4c:7e: a6:5d:71:02:17:91:11:c4:7e:98:03:06:9a:da:f6: 25:ed:d2:52:c7:9c:32:05:44:dd:31:78:e2:de:26: 06:d5:81:0e:55:77:60:d3:5c:47:f2:66:9f:f9:f6: 49:d9:d5:69:94:bf:f9:b2:9e:be:60:63:cd:9c:1e: 72:53:d3:90:9e:fb:eb:2f:ec:67:06:0f:69:51:16: 4d:9d:88:7e:e9:cd:8a:04:23:ea:9c:d6:96:d3:d8: 61:d9:0f:ec:cc:1c:74:b4:e1:10:46:b2:8f:ff:dc: 37:e2:f5:cb:9f:59:8d:c3:01:dd:30:f9:b8:03:c2: df:a7:95:d6:b4:ef:f4:41:72:ca:5a:1a:35:c9:54: fd:bf:61:b4:fa:c9:5f:98:ee:27:f8:e8:99:35:fc: c2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:84:06:87:58:BA:7B:92:19:B4:38:0E:C6:6E:6E:BB:F2:E9:F5:A9 X509v3 Authority Key Identifier: keyid:FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/3130332e3136342e32322e302f32332d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.22.0/23 Signature Algorithm: sha256WithRSAEncryption 75:9b:a1:da:7e:98:11:b2:5c:4f:d5:a4:d4:9c:e8:ce:1d:4b: 35:2f:8a:7d:d0:7c:13:f4:05:ef:3e:2f:7d:49:7f:e4:5a:3c: 45:af:ec:07:70:c3:20:a9:8a:df:b6:48:d2:fe:86:b4:f9:33: 10:80:34:5d:0d:d7:9b:30:c0:d6:5b:c0:99:d0:44:e9:f1:a8: bc:bc:b8:5b:56:7b:e7:27:e8:3d:81:a7:b6:b9:e4:e5:b1:fd: 01:25:4e:5d:3f:b9:fc:44:63:07:1d:5a:da:b1:f2:26:bd:c5: af:a1:c4:a3:d5:d0:be:3f:e6:02:94:55:ba:81:95:bd:9e:4f: fa:ee:3e:90:84:a8:34:c0:4a:42:fb:a8:d8:04:b7:be:6c:a5: 9e:d3:69:66:1f:ad:43:53:b0:21:eb:3d:56:fd:f5:29:e8:3f: 30:2b:c9:a4:77:6f:82:1e:84:4c:77:3a:c7:19:fe:37:68:b7: b7:b5:cf:fc:ed:2f:ce:52:b5:ca:1f:40:4e:6c:51:2c:50:3c: 09:2b:a2:9d:17:68:34:5f:e0:b8:e4:eb:03:ed:39:65:68:5a: 3a:55:29:52:76:87:86:60:2c:97:ba:57:fd:a0:3a:7e:29:63: 99:d9:8c:1a:0e:7d:d7:c5:1e:2f:35:ae:4e:74:91:f0:42:a8: 4f:13:6e:ab -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCxzE30OrfbSflGV0mvHJ9TyIm28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZEQUM3NzVDQkI1RjFCMkM3Qjk1MUJGMTUyM0VGNkMz MEZGRUNGNjAeFw0yNjA1MDMwMjQ4MjRaFw0yNzA1MDIwMjUzMjRaMDMxMTAvBgNV BAMTKDFGODQwNjg3NThCQTdCOTIxOUI0MzgwRUM2NkU2RUJCRjJFOUY1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgGIw3IWyAIIZ3wFsvcpj+wJht q7CK4cpYjEPYjiXeF1Wl5tEjBMxGfvrILDYytWSGHs/G4WSRkLWr0SX8Y2lh6JL2 q+EvJFAlL6daxAGS2qaaaZApaSvJ5qTv6ZWnk8CbVxF0i0pMfqZdcQIXkRHEfpgD Bpra9iXt0lLHnDIFRN0xeOLeJgbVgQ5Vd2DTXEfyZp/59knZ1WmUv/mynr5gY82c HnJT05Ce++sv7GcGD2lRFk2diH7pzYoEI+qc1pbT2GHZD+zMHHS04RBGso//3Dfi 9cufWY3DAd0w+bgDwt+nlda07/RBcspaGjXJVP2/YbT6yV+Y7if46Jk1/MKXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUH4QGh1i6e5IZtDgOxm5uu/Lp9akwHwYDVR0j BBgwFoAU/9rHdcu18bLHuVG/FSPvbDD/7PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTdkYzdlZTUtY2U2Ny00NWNkLTk4ODEtNDM0ODlhYjJiMWE1LzAvRkZEQUM3NzVD QkI1RjFCMkM3Qjk1MUJGMTUyM0VGNkMzMEZGRUNGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkRBQzc3NUNCQjVGMUIyQzdCOTUxQkYxNTIzRUY2QzMwRkZF Q0Y2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk3ZGM3ZWU1LWNlNjctNDVjZC05 ODgxLTQzNDg5YWIyYjFhNS8wLzMxMzAzMzJlMzEzNjM0MmUzMjMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWekFjANBgkqhkiG 9w0BAQsFAAOCAQEAdZuh2n6YEbJcT9Wk1Jzozh1LNS+KfdB8E/QF7z4vfUl/5Fo8 Ra/sB3DDIKmK37ZI0v6GtPkzEIA0XQ3XmzDA1lvAmdBE6fGovLy4W1Z75yfoPYGn trnk5bH9ASVOXT+5/ERjBx1a2rHyJr3Fr6HEo9XQvj/mApRVuoGVvZ5P+u4+kISo NMBKQvuo2AS3vmylntNpZh+tQ1OwIes9Vv31Keg/MCvJpHdvgh6ETHc6xxn+N2i3 t7XP/O0vzlK1yh9ATmxRLFA8CSuinRdoNF/guOTrA+05ZWhaOlUpUnaHhmAsl7pX /aA6filjmdmMGg5918UeLzWuTnSR8EKoTxNuqw== -----END CERTIFICATE-----Generated at Fri May 8 06:35:56 2026 by rpki-client