$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa File: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (raw, json) Hash identifier: qSXSAuCypxITbArcxADdWqHfhFT512uFXifXCq40Lkk= Subject key identifier: B1:8F:2B:1A:A0:05:0A:FE:B3:C4:F7:98:8D:5E:16:EE:2C:73:58:28 Certificate issuer: /CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Certificate serial: 1270DC69CCC245A38D58EC5D208640C668C2979F Authority key identifier: DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa Signing time: Sun 03 May 2026 02:12:42 +0000 ROA not before: Sun 03 May 2026 02:07:42 +0000 ROA not after: Sun 02 May 2027 02:12:42 +0000 asID: 140457 IP address blocks: 103.189.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:70:dc:69:cc:c2:45:a3:8d:58:ec:5d:20:86:40:c6:68:c2:97:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Validity Not Before: May 3 02:07:42 2026 GMT Not After : May 2 02:12:42 2027 GMT Subject: CN=B18F2B1AA0050AFEB3C4F7988D5E16EE2C735828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:dc:97:48:77:ec:c5:7b:ff:41:3c:90:bb: 79:b7:3a:55:3e:24:3c:d8:a4:3d:bc:e2:b1:8d:7e: 42:42:43:82:8a:3a:7a:c3:36:4a:40:58:8c:06:1a: 97:17:05:8a:1b:da:89:95:f2:bf:04:6f:eb:17:d4: 08:a1:12:d9:ad:a3:5a:27:d4:8f:e5:d8:fc:a4:54: 1e:63:06:48:41:79:ea:75:ff:56:f4:5f:e3:e0:0a: a5:7f:3c:70:3b:47:ea:d1:53:11:5d:4a:44:d9:c3: d3:0e:05:ea:ec:cb:80:05:75:6a:e6:7c:bf:9d:61: d0:86:10:52:82:9c:25:51:32:dc:7f:c8:a8:08:2c: 4c:f3:48:c7:2c:a7:7e:99:d0:3b:27:e5:df:41:a8: 04:a7:40:30:2a:7d:87:99:e9:77:2d:55:5d:72:28: 6c:9d:b0:d7:d4:e7:16:05:14:2e:4f:2f:e8:2e:b4: 90:38:25:e9:5e:8b:9e:76:74:dc:6f:84:22:21:88: f7:ed:e6:69:07:50:7d:cd:38:1f:28:82:e8:32:20: da:d3:3c:9b:e8:72:03:7a:79:13:55:73:a5:7b:0c: 13:60:d3:f2:39:ea:33:45:d3:a2:c5:18:4d:c4:ea: a6:cf:fb:1e:d5:1f:d9:a6:55:07:1e:6c:a4:e0:48: c8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8F:2B:1A:A0:05:0A:FE:B3:C4:F7:98:8D:5E:16:EE:2C:73:58:28 X509v3 Authority Key Identifier: keyid:DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.123.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:0c:83:d5:96:16:19:b2:61:ba:7a:5f:3e:e4:00:a7:c0:d7: d0:d2:10:56:08:6b:ef:98:8a:d8:66:80:83:9e:ac:b3:3a:16: f6:d1:55:54:60:62:7c:4d:9a:eb:ee:c4:e4:59:2b:90:5f:36: 61:69:af:c5:02:f8:a7:a4:66:57:cd:bc:c4:49:1a:c9:67:dc: 26:7a:d0:75:42:e7:77:00:0f:4f:84:bd:39:e4:13:1e:71:6c: f4:ea:aa:e4:6f:8a:33:15:e1:26:62:df:b2:1a:bf:f8:09:a9: 83:23:53:9b:76:11:14:fb:a7:da:2c:11:2a:0d:c3:44:a8:03: 8c:e4:a8:af:d2:07:9c:5b:ae:9d:fb:94:44:b8:40:47:49:49: 1f:f9:b8:8e:24:e9:3d:ad:f4:8c:2f:6c:3e:10:b2:ec:9b:33: b5:b5:4c:e8:63:3c:a0:8d:1c:3c:1b:1c:c3:7c:71:a8:fe:5b: 88:e4:8f:88:42:a7:1a:bc:fe:fe:5f:3d:73:ac:6d:22:89:81: 5a:14:55:43:82:26:18:0e:4e:34:dd:2a:e1:39:d7:31:48:0e: d4:90:bc:be:27:02:0d:c4:f1:99:c2:b5:90:fd:8f:40:12:f4: ec:14:a6:bb:47:9d:80:af:4f:64:91:d2:ed:b7:ee:47:75:9a: f7:ad:5c:40 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEnDcaczCRaONWOxdIIZAxmjCl58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5 ODUxQTFCOTAeFw0yNjA1MDMwMjA3NDJaFw0yNzA1MDIwMjEyNDJaMDMxMTAvBgNV BAMTKEIxOEYyQjFBQTAwNTBBRkVCM0M0Rjc5ODhENUUxNkVFMkM3MzU4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11tyXSHfsxXv/QTyQu3m3OlU+ JDzYpD284rGNfkJCQ4KKOnrDNkpAWIwGGpcXBYob2omV8r8Eb+sX1AihEtmto1on 1I/l2PykVB5jBkhBeep1/1b0X+PgCqV/PHA7R+rRUxFdSkTZw9MOBersy4AFdWrm fL+dYdCGEFKCnCVRMtx/yKgILEzzSMcsp36Z0Dsn5d9BqASnQDAqfYeZ6XctVV1y KGydsNfU5xYFFC5PL+gutJA4Jelei552dNxvhCIhiPft5mkHUH3NOB8ogugyINrT PJvocgN6eRNVc6V7DBNg0/I56jNF06LFGE3E6qbP+x7VH9mmVQcebKTgSMg/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUsY8rGqAFCv6zxPeYjV4W7ixzWCgwHwYDVR0j BBgwFoAU3U/+ysb7E8TxR2AvixgkQphRobkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJhMGI4ZjgtNGZjZi00YjliLTk3OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FD NkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5ODUxQTFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRGRkVDQUM2RkIxM0M0RjE0NzYwMkY4QjE4MjQ0Mjk4NTFB MUI5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBiYTBiOGY4LTRmY2YtNGI5Yi05 Nzk0LWNkM2I0ZTQwNmVhYi8wLzMxMzAzMzJlMzEzODM5MmUzMTMyMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM1Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvXswDQYJ KoZIhvcNAQELBQADggEBAAoMg9WWFhmyYbp6Xz7kAKfA19DSEFYIa++YithmgIOe rLM6FvbRVVRgYnxNmuvuxORZK5BfNmFpr8UC+KekZlfNvMRJGsln3CZ60HVC53cA D0+EvTnkEx5xbPTqquRvijMV4SZi37Iav/gJqYMjU5t2ERT7p9osESoNw0SoA4zk qK/SB5xbrp37lES4QEdJSR/5uI4k6T2t9IwvbD4QsuybM7W1TOhjPKCNHDwbHMN8 caj+W4jkj4hCpxq8/v5fPXOsbSKJgVoUVUOCJhgOTjTdKuE51zFIDtSQvL4nAg3E 8ZnCtZD9j0AS9OwUprtHnYCvT2SR0u237kd1mvetXEA= -----END CERTIFICATE-----Generated at Tue May 5 18:55:45 2026 by rpki-client