$ rpki-client -vvf rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa File: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (raw, json) Hash identifier: dKZb6aaVbPeaaWDRCiGgkOh/h5qEP/6edHL6dbBuTxw= Subject key identifier: E8:D8:DA:FA:C5:4E:8A:EC:9A:D7:9D:56:18:78:36:7B:DA:AB:03:19 Certificate issuer: /CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Certificate serial: 3BFC865D61B13ECD30219B3056950D55ACAF9DB7 Authority key identifier: B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa Signing time: Sun 03 May 2026 02:33:03 +0000 ROA not before: Sun 03 May 2026 02:28:03 +0000 ROA not after: Sun 02 May 2027 02:33:03 +0000 asID: 136121 IP address blocks: 103.154.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 07:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:fc:86:5d:61:b1:3e:cd:30:21:9b:30:56:95:0d:55:ac:af:9d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Validity Not Before: May 3 02:28:03 2026 GMT Not After : May 2 02:33:03 2027 GMT Subject: CN=E8D8DAFAC54E8AEC9AD79D561878367BDAAB0319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:e2:3a:ff:cb:a7:36:00:4e:d0:46:ba:3b: 24:a0:fb:e8:07:b9:d3:87:0e:68:95:33:0c:94:0a: a2:9b:5e:cc:18:f3:02:ff:22:f7:d3:a0:23:8a:87: 68:3d:3c:4f:a4:15:e9:60:ee:79:72:7e:1c:72:88: 1f:71:ee:21:df:33:35:cd:b2:03:1d:b8:49:0d:84: 76:14:e1:b6:c8:ee:60:ab:e8:5f:85:23:9a:28:4f: 8a:0e:de:8d:3c:cb:41:ee:cb:df:07:00:09:92:db: 66:0e:07:98:20:c7:ef:a6:44:4d:65:73:f6:0c:8f: 3e:8f:9f:6c:7e:a9:bd:3f:f9:be:4b:2b:5a:60:9c: 06:24:0d:1a:4a:2e:3f:42:fb:0c:4c:52:7c:cf:56: 25:c5:d2:3a:e9:8e:9a:9a:78:ba:54:bb:50:42:b5: 94:d9:38:78:df:19:a1:5a:de:7b:18:30:17:c9:9d: 5c:c2:66:ef:5c:62:a3:89:48:00:a0:3f:3d:83:d1: 94:80:42:06:da:43:c7:de:80:5e:5b:b2:8e:ef:e4: fb:8d:d5:0c:a0:8a:19:f7:a0:fb:7c:07:6f:a2:3e: 3a:75:ef:8b:c5:c5:eb:d0:89:0f:f0:c6:06:80:fa: f7:b2:45:eb:f7:23:fb:d2:4b:6d:10:5b:97:39:b5: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D8:DA:FA:C5:4E:8A:EC:9A:D7:9D:56:18:78:36:7B:DA:AB:03:19 X509v3 Authority Key Identifier: keyid:B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.230.0/23 Signature Algorithm: sha256WithRSAEncryption 82:d9:50:fe:2d:1e:f6:cf:d3:9d:1f:ad:84:3e:8a:81:b8:9c: d3:fd:02:82:40:b9:03:7d:7d:26:cb:57:d2:84:6d:a1:f0:20: 4c:50:6b:3f:c9:e6:30:c3:23:ad:54:fb:8b:9d:fe:3b:bd:ec: 7d:8e:d0:6e:f1:34:95:e4:43:ae:7a:f9:6c:0f:37:93:2d:5b: 21:03:3d:84:70:da:c9:e5:c6:f5:1b:6e:b9:35:d8:fe:93:88: 51:cf:89:48:98:e4:4e:8a:68:b3:fc:53:ad:03:8f:ee:59:f0: e1:75:ee:4a:00:6e:63:6f:5b:eb:b5:20:a6:a0:1a:94:df:03: 43:18:28:f2:ad:24:5b:e3:29:21:7b:32:32:39:02:d2:df:bc: 80:da:b6:5f:be:09:9e:f2:2b:3c:37:7d:41:c7:c3:99:35:97: a4:fc:05:1d:83:39:3a:3c:59:d8:e4:15:6e:34:a4:54:ba:c8: 94:a6:f5:45:fa:ce:ac:3c:bc:b0:bc:b5:fd:52:19:7c:0a:64: 57:6c:6b:b3:ea:d1:e4:ae:c9:f9:37:cc:e9:e7:03:69:8c:6a: 5e:49:06:e5:6a:2a:37:a4:47:98:26:16:37:9d:3c:f7:66:6f: 5d:6c:02:9a:b9:bf:95:0f:09:77:8e:7e:5b:e5:e7:4f:19:71: 79:cd:93:ac -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUO/yGXWGxPs0wIZswVpUNVayvnbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBB QzFGQkY2RTAeFw0yNjA1MDMwMjI4MDNaFw0yNzA1MDIwMjMzMDNaMDMxMTAvBgNV BAMTKEU4RDhEQUZBQzU0RThBRUM5QUQ3OUQ1NjE4NzgzNjdCREFBQjAzMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBE+I6/8unNgBO0Ea6OySg++gH udOHDmiVMwyUCqKbXswY8wL/IvfToCOKh2g9PE+kFelg7nlyfhxyiB9x7iHfMzXN sgMduEkNhHYU4bbI7mCr6F+FI5ooT4oO3o08y0Huy98HAAmS22YOB5ggx++mRE1l c/YMjz6Pn2x+qb0/+b5LK1pgnAYkDRpKLj9C+wxMUnzPViXF0jrpjpqaeLpUu1BC tZTZOHjfGaFa3nsYMBfJnVzCZu9cYqOJSACgPz2D0ZSAQgbaQ8fegF5bso7v5PuN 1Qygihn3oPt8B2+iPjp174vFxevQiQ/wxgaA+veyRev3I/vSS20QW5c5tZYjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU6Nja+sVOiuya151WGHg2e9qrAxkwHwYDVR0j BBgwFoAUsWjPo3n06s0V2w73bOvFgKwfv24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTIxMjdmZWItOTYxNS00YzU4LWEzYmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3 OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBBQzFGQkY2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTY4Q0ZBMzc5RjRFQUNEMTVEQjBFRjc2Q0VCQzU4MEFDMUZC RjZFLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUyMTI3ZmViLTk2MTUtNGM1OC1h M2JiLWVlZjdiN2E2NTQ3ZS8wLzMxMzAzMzJlMzEzNTM0MmUzMjMzMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzYzMTMyMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnmuYwDQYJ KoZIhvcNAQELBQADggEBAILZUP4tHvbP050frYQ+ioG4nNP9AoJAuQN9fSbLV9KE baHwIExQaz/J5jDDI61U+4ud/ju97H2O0G7xNJXkQ656+WwPN5MtWyEDPYRw2snl xvUbbrk12P6TiFHPiUiY5E6KaLP8U60Dj+5Z8OF17koAbmNvW+u1IKagGpTfA0MY KPKtJFvjKSF7MjI5AtLfvIDatl++CZ7yKzw3fUHHw5k1l6T8BR2DOTo8WdjkFW40 pFS6yJSm9UX6zqw8vLC8tf1SGXwKZFdsa7Pq0eSuyfk3zOnnA2mMal5JBuVqKjek R5gmFjedPPdmb11sApq5v5UPCXeOflvl508ZcXnNk6w= -----END CERTIFICATE-----Generated at Tue May 5 16:54:06 2026 by rpki-client