$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa File: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (raw, json) Hash identifier: vt8DYAXcs1pDLyawi9vIroRmMQYzGKkbfW81Knq/qWg= Subject key identifier: 37:E8:72:88:33:93:50:A7:E6:DD:F0:61:07:A7:0B:7D:2C:DA:1A:3B Certificate issuer: /CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Certificate serial: 70F7161D6308EB666F880E32F290593E6969AAE9 Authority key identifier: 4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa Signing time: Sun 03 May 2026 02:17:20 +0000 ROA not before: Sun 03 May 2026 02:12:20 +0000 ROA not after: Sun 02 May 2027 02:17:20 +0000 asID: 48465 IP address blocks: 103.150.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f7:16:1d:63:08:eb:66:6f:88:0e:32:f2:90:59:3e:69:69:aa:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Validity Not Before: May 3 02:12:20 2026 GMT Not After : May 2 02:17:20 2027 GMT Subject: CN=37E87288339350A7E6DDF06107A70B7D2CDA1A3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ef:62:9f:b4:36:0b:42:0a:37:bf:6c:de:03: 2b:d0:8d:73:ba:3a:c0:cd:d9:65:d1:c9:7c:41:61: f8:35:0b:40:3f:e3:5c:a7:8b:7e:9f:cb:4d:74:b1: d3:75:d9:cb:bd:de:e5:9f:ef:d7:8e:0a:20:11:10: 93:83:ec:15:a3:c0:70:11:2c:4e:e2:73:44:e3:f1: b6:40:c2:db:95:1d:68:44:88:4f:11:f6:5e:e3:94: 0a:d2:55:49:b3:d4:58:ab:60:aa:51:82:c5:15:19: 9d:9e:47:aa:ab:16:78:91:94:43:6f:3c:f7:e5:34: 07:20:53:0e:e4:7b:97:c9:9b:91:f2:45:48:5c:24: 14:df:d5:0b:b8:69:14:d4:ea:86:22:c7:ab:60:d3: 38:55:d9:fb:00:d9:e2:58:67:d5:58:78:79:46:74: 69:16:14:4d:3d:1e:ab:89:f3:23:f3:7a:38:a7:5f: 36:58:9d:93:34:f6:b3:59:d3:f7:04:2f:11:45:42: a3:b5:e7:3d:ba:44:1f:7d:f5:67:dc:3d:3d:aa:11: c2:25:1f:72:11:90:66:16:48:8c:52:2b:48:61:b7: f1:69:b0:25:99:5a:a9:1c:f3:eb:cd:a0:cb:88:e6: 8d:57:fa:34:b8:59:24:95:f0:d1:c3:d1:eb:a5:fd: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E8:72:88:33:93:50:A7:E6:DD:F0:61:07:A7:0B:7D:2C:DA:1A:3B X509v3 Authority Key Identifier: keyid:4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.149.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:0b:08:f6:9b:14:f0:64:3c:c0:c5:ba:94:4b:c5:76:e3:c6: 4c:70:e3:b3:36:d4:5a:a7:7a:b1:72:b7:b0:57:07:6a:86:9b: d9:88:b1:7f:ec:b7:68:c3:8c:aa:54:2c:2c:f8:86:79:0e:39: a2:d1:37:76:8f:81:63:84:0b:66:f8:dd:04:8b:80:c1:7e:4f: cb:14:9c:f4:42:9e:6b:8e:93:5e:21:41:c3:1f:91:77:d5:76: 7b:93:87:6b:85:3b:05:f4:f2:3e:97:82:1c:7e:c7:79:86:b7: 67:41:13:a0:ee:df:68:6b:28:18:66:65:21:4b:af:93:55:cf: 98:dd:d6:f3:eb:31:c9:fd:3f:af:47:41:f6:cc:62:cb:3a:ce: f2:80:b7:e9:f4:88:7a:87:dc:a3:97:28:76:a6:08:13:d2:cf: 0a:f7:05:42:f8:4c:05:ab:75:6b:a4:70:ad:80:e5:12:c0:81: 63:ed:e4:be:3a:ed:1b:0c:27:1b:ac:3e:db:b6:ad:e1:a0:27: 31:95:74:7a:5a:e9:fb:49:46:a2:24:df:56:05:97:a0:3d:01: e0:7a:e9:e6:05:0e:ee:f7:a5:cb:c3:48:cc:44:54:84:4d:3d: cc:13:40:f9:1a:47:5f:24:86:f8:bd:c9:d2:43:54:95:85:85: 29:f3:3c:55 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcPcWHWMI62ZviA4y8pBZPmlpqukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2 N0UwN0Y2NTAeFw0yNjA1MDMwMjEyMjBaFw0yNzA1MDIwMjE3MjBaMDMxMTAvBgNV BAMTKDM3RTg3Mjg4MzM5MzUwQTdFNkRERjA2MTA3QTcwQjdEMkNEQTFBM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe72KftDYLQgo3v2zeAyvQjXO6 OsDN2WXRyXxBYfg1C0A/41yni36fy010sdN12cu93uWf79eOCiAREJOD7BWjwHAR LE7ic0Tj8bZAwtuVHWhEiE8R9l7jlArSVUmz1FirYKpRgsUVGZ2eR6qrFniRlENv PPflNAcgUw7ke5fJm5HyRUhcJBTf1Qu4aRTU6oYix6tg0zhV2fsA2eJYZ9VYeHlG dGkWFE09HquJ8yPzejinXzZYnZM09rNZ0/cELxFFQqO15z26RB999WfcPT2qEcIl H3IRkGYWSIxSK0hht/FpsCWZWqkc8+vNoMuI5o1X+jS4WSSV8NHD0eul/RylAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUN+hyiDOTUKfm3fBhB6cLfSzaGjswHwYDVR0j BBgwFoAUTdQQawMAPZxbUb+JNjHI5Gfgf2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkZTkzNmItNTNjZi00YjA4LWI1ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIw MzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2N0UwN0Y2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REQ0MTA2QjAzMDAzRDlDNUI1MUJGODkzNjMxQzhFNDY3RTA3 RjY1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFiZGU5MzZiLTUzY2YtNGIwOC1i NWY3LTJiOTBkZTIxZmU5NC8wLzMxMzAzMzJlMzEzNTMwMmUzMTM0MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5aVMA0GCSqG SIb3DQEBCwUAA4IBAQCcCwj2mxTwZDzAxbqUS8V248ZMcOOzNtRap3qxcrewVwdq hpvZiLF/7Ldow4yqVCws+IZ5Djmi0Td2j4FjhAtm+N0Ei4DBfk/LFJz0Qp5rjpNe IUHDH5F31XZ7k4drhTsF9PI+l4Icfsd5hrdnQROg7t9oaygYZmUhS6+TVc+Y3dbz 6zHJ/T+vR0H2zGLLOs7ygLfp9Ih6h9yjlyh2pggT0s8K9wVC+EwFq3VrpHCtgOUS wIFj7eS+Ou0bDCcbrD7btq3hoCcxlXR6Wun7SUaiJN9WBZegPQHgeunmBQ7u96XL w0jMRFSETT3ME0D5GkdfJIb4vcnSQ1SVhYUp8zxV -----END CERTIFICATE-----Generated at Tue May 5 16:56:14 2026 by rpki-client