$ rpki-client -vvf rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa File: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (raw, json) Hash identifier: K6H7szwO6ti+xX+3grJSvrA81wCwhPJ39G60g97CTBE= Subject key identifier: FE:DC:8C:90:7C:FB:E5:42:41:87:F6:FC:C1:6F:DE:64:14:BC:3B:95 Certificate issuer: /CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Certificate serial: 5E90A74AD0FE7BB8C1545A5A8416CA16CB7E6F53 Authority key identifier: BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa Signing time: Sun 03 May 2026 03:18:05 +0000 ROA not before: Sun 03 May 2026 03:13:05 +0000 ROA not after: Sun 02 May 2027 03:18:05 +0000 asID: 138873 IP address blocks: 103.140.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:90:a7:4a:d0:fe:7b:b8:c1:54:5a:5a:84:16:ca:16:cb:7e:6f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Validity Not Before: May 3 03:13:05 2026 GMT Not After : May 2 03:18:05 2027 GMT Subject: CN=FEDC8C907CFBE5424187F6FCC16FDE6414BC3B95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fd:ce:49:97:33:f0:93:44:ff:81:89:43:2b: e5:89:83:a0:c8:84:4a:1f:ee:cb:4b:2e:2b:49:f4: 2a:3c:f4:c0:77:13:54:f1:fa:ae:e6:1c:1a:71:2a: 48:4a:34:6e:e1:5d:a0:50:e5:3b:1e:03:c1:1f:b0: 7a:c6:3a:85:69:0b:95:4c:73:b6:19:29:a6:c4:e6: 2e:84:e3:c9:7b:4f:8f:cd:3f:f8:4e:10:b3:73:51: 6b:86:75:13:1b:61:a4:3f:f1:a7:72:d0:3f:df:5f: bc:dc:5b:57:f3:0f:f7:0c:ae:a0:f8:cf:40:a2:52: 10:fe:4a:0f:01:42:01:d7:46:e2:04:ea:ed:74:51: 20:9b:8c:67:8a:cd:4c:30:5e:5d:1e:34:e3:3b:db: a1:94:43:82:49:15:ad:22:81:4d:78:08:e3:a5:fb: 2f:c6:9f:24:33:f3:dd:cc:e6:1c:0c:8e:c1:93:5f: df:3f:05:71:65:16:68:be:9d:98:90:71:01:44:93: b6:c2:6f:5f:4e:53:53:5b:05:81:b7:87:59:f3:21: f8:da:45:59:ea:3b:25:b6:08:d6:ae:60:9b:68:59: f2:56:1b:b0:83:1c:1f:49:b3:d6:4d:5a:a9:4d:3e: 92:86:4e:35:bf:6a:13:e7:32:8e:f5:62:96:ae:fc: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DC:8C:90:7C:FB:E5:42:41:87:F6:FC:C1:6F:DE:64:14:BC:3B:95 X509v3 Authority Key Identifier: keyid:BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.78.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:59:30:20:9b:4f:29:a0:7b:95:c2:66:73:60:96:43:6c:67: aa:4d:e6:53:f1:b2:e2:ec:12:44:4d:b2:b1:21:bc:93:d7:a7: 2b:ff:2d:ef:57:cd:1e:45:51:ef:c2:fa:8d:fa:1a:e5:b6:df: e5:a4:dc:c1:dd:63:bc:17:50:d4:dc:ef:28:87:f6:da:72:2a: 3c:72:2c:57:c4:b7:6b:0c:45:57:e7:f9:84:45:d4:61:e5:f3: 4e:b2:d4:5b:b6:fe:9d:8c:75:84:2a:c9:cc:12:8b:55:e1:66: 9b:6a:9f:ef:c7:16:7f:ea:99:b5:8f:94:8e:ad:19:77:27:10: c7:a5:89:bc:1b:46:fb:2b:5f:2c:05:b3:3f:67:be:c8:1f:2a: b6:31:d5:43:40:ec:e4:b8:c0:9e:35:df:48:ff:7c:6e:91:96: a4:f2:3d:02:08:d0:76:ee:27:ac:7b:d3:fd:8a:a6:05:74:7d: 40:78:0a:2a:7f:98:3a:81:f2:d9:a7:f5:52:0e:8d:e3:47:37: 13:51:5d:94:93:53:e5:ef:16:d4:7a:67:1b:35:03:b9:1b:73: 8a:ea:6c:82:43:7b:2d:8a:0b:5c:7b:0d:7a:0d:30:39:45:03: 84:93:af:7e:33:2f:d7:b6:1f:00:b5:93:ee:6c:17:25:a9:dd: 90:cb:43:ff -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXpCnStD+e7jBVFpahBbKFst+b1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0 QTAwMDBFMzAeFw0yNjA1MDMwMzEzMDVaFw0yNzA1MDIwMzE4MDVaMDMxMTAvBgNV BAMTKEZFREM4QzkwN0NGQkU1NDI0MTg3RjZGQ0MxNkZERTY0MTRCQzNCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy/c5JlzPwk0T/gYlDK+WJg6DI hEof7stLLitJ9Co89MB3E1Tx+q7mHBpxKkhKNG7hXaBQ5TseA8EfsHrGOoVpC5VM c7YZKabE5i6E48l7T4/NP/hOELNzUWuGdRMbYaQ/8ady0D/fX7zcW1fzD/cMrqD4 z0CiUhD+Sg8BQgHXRuIE6u10USCbjGeKzUwwXl0eNOM726GUQ4JJFa0igU14COOl +y/GnyQz893M5hwMjsGTX98/BXFlFmi+nZiQcQFEk7bCb19OU1NbBYG3h1nzIfja RVnqOyW2CNauYJtoWfJWG7CDHB9Js9ZNWqlNPpKGTjW/ahPnMo71Ypau/PbNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/tyMkHz75UJBh/b8wW/eZBS8O5UwHwYDVR0j BBgwFoAUuqQpSmL/vzRMp69h2hPQmUoAAOMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjczYWI3OWQtMDBkNS00OWNiLWFjMTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2 MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0QTAwMDBFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUE0Mjk0QTYyRkZCRjM0NENBN0FGNjFEQTEzRDA5OTRBMDAw MEUzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y3M2FiNzlkLTAwZDUtNDljYi1h YzEwLTNiZDRmMjM4NmJjNi8wLzMxMzAzMzJlMzEzNDMwMmUzNzM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4xOMA0GCSqG SIb3DQEBCwUAA4IBAQB/WTAgm08poHuVwmZzYJZDbGeqTeZT8bLi7BJETbKxIbyT 16cr/y3vV80eRVHvwvqN+hrltt/lpNzB3WO8F1DU3O8oh/bacio8cixXxLdrDEVX 5/mERdRh5fNOstRbtv6djHWEKsnMEotV4Wabap/vxxZ/6pm1j5SOrRl3JxDHpYm8 G0b7K18sBbM/Z77IHyq2MdVDQOzkuMCeNd9I/3xukZak8j0CCNB27iese9P9iqYF dH1AeAoqf5g6gfLZp/VSDo3jRzcTUV2Uk1Pl7xbUemcbNQO5G3OK6myCQ3stigtc ew16DTA5RQOEk69+My/Xth8AtZPubBclqd2Qy0P/ -----END CERTIFICATE-----Generated at Tue May 5 19:06:23 2026 by rpki-client