$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33322e302f32342d3234203d3e20313530323238.roa File: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (raw, json) Hash identifier: GTWGWiGFFFL7qU1osUGFkofRdRSFUHbSkHuzGVb3rSI= Subject key identifier: 07:25:A0:9E:46:58:37:C0:58:E5:D0:77:85:CE:BD:11:ED:03:2B:DB Certificate issuer: /CN=D713503939D2573A44FA29703CDDCC704F03A75E Certificate serial: 1F0B8549BFA05503487BAADBD8184D888A7FB218 Authority key identifier: D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33322e302f32342d3234203d3e20313530323238.roa Signing time: Sun 03 May 2026 02:27:04 +0000 ROA not before: Sun 03 May 2026 02:22:04 +0000 ROA not after: Sun 02 May 2027 02:27:04 +0000 asID: 150228 IP address blocks: 103.17.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 16:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:0b:85:49:bf:a0:55:03:48:7b:aa:db:d8:18:4d:88:8a:7f:b2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D713503939D2573A44FA29703CDDCC704F03A75E Validity Not Before: May 3 02:22:04 2026 GMT Not After : May 2 02:27:04 2027 GMT Subject: CN=0725A09E465837C058E5D07785CEBD11ED032BDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:73:4a:6c:07:17:09:70:22:47:4e:79:c1:e5: 48:02:19:36:37:ac:1b:75:b2:11:91:9a:91:b6:83: fc:9a:44:41:99:14:70:69:34:fe:e6:ea:95:cd:ea: 30:4e:83:90:f9:78:ed:3a:c1:67:8c:be:85:09:84: 79:d3:bd:00:26:cf:5d:48:1f:be:48:f7:e2:2a:85: 1e:ef:a4:0f:fc:d9:b7:45:8d:76:d1:a5:af:1f:4b: e7:8e:13:35:33:b9:f1:17:98:7f:a8:ad:cb:84:06: 68:35:f5:ad:80:5d:7e:aa:4e:b3:2e:9f:57:6b:83: a0:b9:c3:de:a1:68:41:07:d0:33:df:83:a2:fa:20: 05:12:c1:d1:3d:41:b5:61:be:74:11:02:a3:96:1c: 9e:7a:69:5d:c6:41:0f:27:b3:aa:ef:50:5b:89:ce: 0e:d9:32:32:20:32:82:bc:40:8d:f2:d3:27:aa:88: cf:48:8c:39:1d:7b:2d:ab:c4:c1:e9:47:9b:fd:7f: 38:1b:d0:04:67:b5:f7:83:fc:16:f1:6c:74:ee:0d: f8:18:99:28:3f:57:fe:01:db:5f:d3:0a:ff:4c:59: b3:2f:63:03:ce:a6:92:01:b0:82:95:99:6e:4c:fe: 0c:50:f9:96:58:15:6f:ea:c6:f8:e5:8b:48:0a:a7: 32:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:25:A0:9E:46:58:37:C0:58:E5:D0:77:85:CE:BD:11:ED:03:2B:DB X509v3 Authority Key Identifier: keyid:D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33322e302f32342d3234203d3e20313530323238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.32.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:92:01:a3:21:9f:bf:c6:64:a1:60:0e:48:35:6d:fa:f8:33: 49:bd:10:de:48:58:93:42:5c:db:bb:57:b4:9a:bc:71:ae:0a: a8:f6:d3:a2:73:b4:6e:d1:07:ad:29:c5:24:eb:b2:f3:aa:07: d1:f2:50:c1:31:ca:77:9f:96:17:82:f7:c8:da:2c:a6:15:d8: 72:36:78:97:3b:85:01:e9:10:f9:29:91:75:90:f4:50:85:a9: f0:3d:b4:2d:a5:47:d6:7e:42:c2:31:6e:48:49:12:8e:10:8e: 77:38:88:c4:cb:20:61:4f:06:61:d0:4b:44:8c:cd:bb:88:67: e1:7f:70:76:64:90:b8:e9:cf:e5:72:c6:8c:45:0d:c9:6e:55: a3:04:55:30:10:c7:f5:01:95:8f:fc:75:ea:92:ac:c5:4d:29: e2:d8:ab:1e:3f:a0:41:28:b7:6c:4b:78:09:84:72:93:0c:ed: 2c:92:3a:6f:c6:28:02:54:d9:80:c5:33:9c:38:22:51:33:c8: c8:e2:d0:1f:72:bd:f8:ad:1b:24:3d:b8:c4:4f:b9:24:b3:38: 41:e3:a3:95:83:ef:d1:65:f6:8d:f2:e5:d9:e7:ac:ce:37:f9: 08:6b:45:86:f2:e2:ad:8e:ed:f4:f5:86:56:26:78:03:42:e9: 72:9d:f5:d3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHwuFSb+gVQNIe6rb2BhNiIp/shgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NERENDNzA0 RjAzQTc1RTAeFw0yNjA1MDMwMjIyMDRaFw0yNzA1MDIwMjI3MDRaMDMxMTAvBgNV BAMTKDA3MjVBMDlFNDY1ODM3QzA1OEU1RDA3Nzg1Q0VCRDExRUQwMzJCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYc0psBxcJcCJHTnnB5UgCGTY3 rBt1shGRmpG2g/yaREGZFHBpNP7m6pXN6jBOg5D5eO06wWeMvoUJhHnTvQAmz11I H75I9+IqhR7vpA/82bdFjXbRpa8fS+eOEzUzufEXmH+orcuEBmg19a2AXX6qTrMu n1drg6C5w96haEEH0DPfg6L6IAUSwdE9QbVhvnQRAqOWHJ56aV3GQQ8ns6rvUFuJ zg7ZMjIgMoK8QI3y0yeqiM9IjDkdey2rxMHpR5v9fzgb0ARntfeD/BbxbHTuDfgY mSg/V/4B21/TCv9MWbMvYwPOppIBsIKVmW5M/gxQ+ZZYFW/qxvjli0gKpzJJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUByWgnkZYN8BY5dB3hc69Ee0DK9swHwYDVR0j BBgwFoAU1xNQOTnSVzpE+ilwPN3McE8Dp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I5MDU3NjYtNDQwZS00YmNiLWFlNzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkz OUQyNTczQTQ0RkEyOTcwM0NERENDNzA0RjAzQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEzNTAzOTM5RDI1NzNBNDRGQTI5NzAzQ0REQ0M3MDRGMDNB NzVFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiOTA1NzY2LTQ0MGUtNGJjYi1h ZTcyLTNlNzg4MzFjZTlkYy8wLzMxMzAzMzJlMzEzNzJlMzMzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcRIDANBgkqhkiG 9w0BAQsFAAOCAQEAHJIBoyGfv8ZkoWAOSDVt+vgzSb0Q3khYk0Jc27tXtJq8ca4K qPbTonO0btEHrSnFJOuy86oH0fJQwTHKd5+WF4L3yNosphXYcjZ4lzuFAekQ+SmR dZD0UIWp8D20LaVH1n5CwjFuSEkSjhCOdziIxMsgYU8GYdBLRIzNu4hn4X9wdmSQ uOnP5XLGjEUNyW5VowRVMBDH9QGVj/x16pKsxU0p4tirHj+gQSi3bEt4CYRykwzt LJI6b8YoAlTZgMUznDgiUTPIyOLQH3K9+K0bJD24xE+5JLM4QeOjlYPv0WX2jfLl 2eeszjf5CGtFhvLirY7t9PWGViZ4A0Lpcp310w== -----END CERTIFICATE-----Generated at Tue May 5 10:24:14 2026 by rpki-client