$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32342d3234203d3e203438343635.roa File: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (raw, json) Hash identifier: AMN816Na79PG9Dr8taQyQqg9+CtJXIVEVEtntXynyXw= Subject key identifier: 27:76:0C:51:38:20:78:D5:63:D3:BE:B9:D6:5E:89:78:D9:A2:B9:6D Certificate issuer: /CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Certificate serial: 3D352F442E387F836D7B1D2FAF3CFC3A1694C3E0 Authority key identifier: AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32342d3234203d3e203438343635.roa Signing time: Sun 03 May 2026 03:00:15 +0000 ROA not before: Sun 03 May 2026 02:55:15 +0000 ROA not after: Sun 02 May 2027 03:00:15 +0000 asID: 48465 IP address blocks: 103.184.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 11:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:35:2f:44:2e:38:7f:83:6d:7b:1d:2f:af:3c:fc:3a:16:94:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Validity Not Before: May 3 02:55:15 2026 GMT Not After : May 2 03:00:15 2027 GMT Subject: CN=27760C51382078D563D3BEB9D65E8978D9A2B96D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:ee:36:92:42:e6:df:10:17:24:07:17:90: e7:b3:04:d5:d0:41:f0:07:e2:a0:5a:aa:7f:de:2c: 28:77:a5:56:8e:99:b3:46:0a:b1:50:e9:a2:19:92: e6:eb:48:51:fd:2b:52:cf:92:fd:23:94:06:b7:56: 5f:49:3f:fd:2f:17:5a:09:74:b3:53:d0:69:72:84: b0:88:b5:81:2d:55:54:ad:2f:8f:21:ff:7b:8b:1a: c0:65:04:15:76:f2:1a:8c:63:1a:b0:26:2c:b0:a4: ef:4f:56:e7:86:5e:ba:43:99:3b:0c:76:6b:db:19: e6:a9:bc:99:c9:f5:e3:df:44:bb:cf:0e:9b:dd:38: 7b:05:d8:65:5f:3e:2b:78:8e:ac:89:7a:8b:43:57: 8f:9e:db:09:d9:82:99:b0:f8:0b:80:c9:cd:1a:06: 84:d0:fa:27:dc:be:ed:64:69:1a:94:2f:9e:ff:6b: 56:90:d5:b9:ea:47:ad:38:00:a5:21:f4:ba:53:41: 9c:d7:03:03:f7:a8:27:0c:50:6f:04:ed:a5:5e:55: 14:56:35:75:71:66:d8:97:9a:e2:3a:17:a9:b3:f8: f8:fa:1f:31:57:34:73:db:e7:24:b4:05:5c:4f:6c: 0a:4f:e9:65:dc:ad:0d:41:88:e0:21:b0:a9:83:7f: 0d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:76:0C:51:38:20:78:D5:63:D3:BE:B9:D6:5E:89:78:D9:A2:B9:6D X509v3 Authority Key Identifier: keyid:AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32342d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.18.0/24 Signature Algorithm: sha256WithRSAEncryption 12:c1:19:d4:ab:03:ab:a7:2d:de:ea:64:e4:d8:2a:37:3b:60: bb:da:3a:77:8e:6a:93:95:5a:0b:e8:60:df:9c:f1:4e:78:f8: 29:e8:d1:09:f6:06:c0:dc:d3:0d:f7:ed:29:49:0a:d2:65:db: 2f:bf:2c:dd:a9:76:63:35:b5:62:fe:2d:db:97:00:31:29:b5: fe:94:31:51:59:ea:0e:ca:e3:b4:34:2c:f4:94:82:a3:c6:4b: 50:28:ab:6a:67:da:0f:23:49:57:ed:0b:4c:96:95:70:b2:43: 9f:95:ba:49:8f:b9:ff:79:89:97:46:18:81:ac:8f:0f:d2:ee: b1:78:9d:f5:9e:76:b9:7a:a8:b5:3e:3f:de:99:39:3f:3f:bf: c2:ec:55:59:d6:61:ff:fb:49:4b:5d:3c:15:4e:ff:b5:2d:e8: e4:3b:94:bc:78:80:76:49:ac:fd:57:92:8f:07:ff:3a:91:e8: 8d:53:d3:f4:cb:88:1f:ca:18:f9:a2:dc:b9:76:df:61:d9:ff: fa:20:f7:96:3a:0d:f5:c4:c4:6f:a6:d1:d9:26:8a:8c:61:ad: 78:2d:42:15:3b:a1:6b:52:e0:0c:d6:84:df:ec:c5:23:36:93: 16:0d:8f:68:be:13:58:eb:e0:b8:e8:e1:de:ac:5e:da:7b:63: 97:ce:40:d3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPTUvRC44f4Ntex0vrzz8OhaUw+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDNDOEYx RTYwRDFDQTAeFw0yNjA1MDMwMjU1MTVaFw0yNzA1MDIwMzAwMTVaMDMxMTAvBgNV BAMTKDI3NzYwQzUxMzgyMDc4RDU2M0QzQkVCOUQ2NUU4OTc4RDlBMkI5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Mu42kkLm3xAXJAcXkOezBNXQ QfAH4qBaqn/eLCh3pVaOmbNGCrFQ6aIZkubrSFH9K1LPkv0jlAa3Vl9JP/0vF1oJ dLNT0GlyhLCItYEtVVStL48h/3uLGsBlBBV28hqMYxqwJiywpO9PVueGXrpDmTsM dmvbGeapvJnJ9ePfRLvPDpvdOHsF2GVfPit4jqyJeotDV4+e2wnZgpmw+AuAyc0a BoTQ+ifcvu1kaRqUL57/a1aQ1bnqR604AKUh9LpTQZzXAwP3qCcMUG8E7aVeVRRW NXVxZtiXmuI6F6mz+Pj6HzFXNHPb5yS0BVxPbApP6WXcrQ1BiOAhsKmDfw0JAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUJ3YMUTggeNVj07651l6JeNmiuW0wHwYDVR0j BBgwFoAUrCPdqiyJ38Q/DRIDMc08jx5g0cowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkOTE0ZWYtMGIxZi00OTBiLTgwOGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEy Qzg5REZDNDNGMEQxMjAzMzFDRDNDOEYxRTYwRDFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIzRERBQTJDODlERkM0M0YwRDEyMDMzMUNEM0M4RjFFNjBE MUNBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwZDkxNGVmLTBiMWYtNDkwYi04 MDhkLWEyN2I4M2ZmOWEzZS8wLzMxMzAzMzJlMzEzODM0MmUzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe4EjANBgkqhkiG 9w0BAQsFAAOCAQEAEsEZ1KsDq6ct3upk5NgqNztgu9o6d45qk5VaC+hg35zxTnj4 KejRCfYGwNzTDfftKUkK0mXbL78s3al2YzW1Yv4t25cAMSm1/pQxUVnqDsrjtDQs 9JSCo8ZLUCiramfaDyNJV+0LTJaVcLJDn5W6SY+5/3mJl0YYgayPD9LusXid9Z52 uXqotT4/3pk5Pz+/wuxVWdZh//tJS108FU7/tS3o5DuUvHiAdkms/VeSjwf/OpHo jVPT9MuIH8oY+aLcuXbfYdn/+iD3ljoN9cTEb6bR2SaKjGGteC1CFTuha1LgDNaE 3+zFIzaTFg2PaL4TWOvguOjh3qxe2ntjl85A0w== -----END CERTIFICATE-----Generated at Tue May 5 16:55:39 2026 by rpki-client