$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa File: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (raw, json) Hash identifier: 5z/bJ+/CuNEw4m9GqIpMgGnlawNQOmNZd7tIdNX/UD8= Subject key identifier: F0:3D:6F:0A:28:2C:74:0F:58:65:3D:2D:51:F3:B5:58:04:F3:62:EB Certificate issuer: /CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Certificate serial: 616DB1741C8B99735BFD940CA242D63EA2B1A77E Authority key identifier: 85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa Signing time: Sun 03 May 2026 02:13:28 +0000 ROA not before: Sun 03 May 2026 02:08:28 +0000 ROA not after: Sun 02 May 2027 02:13:28 +0000 asID: 138123 IP address blocks: 103.132.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6d:b1:74:1c:8b:99:73:5b:fd:94:0c:a2:42:d6:3e:a2:b1:a7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Validity Not Before: May 3 02:08:28 2026 GMT Not After : May 2 02:13:28 2027 GMT Subject: CN=F03D6F0A282C740F58653D2D51F3B55804F362EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:28:30:b4:7c:2c:8b:44:30:1e:c0:2f:29:b9: c4:52:51:62:c5:90:4f:ce:33:4f:cf:a1:34:f4:67: 18:d2:16:c1:6c:87:84:40:13:03:01:fa:f4:7e:40: a2:69:5f:b3:32:70:f0:d8:a4:fa:d0:57:64:3e:ff: 24:0a:0a:df:15:57:72:ad:5c:d3:76:4a:d2:1e:52: 33:97:d5:db:f8:8d:25:15:1e:bd:ac:98:d8:3d:f7: d8:17:5b:14:0c:83:14:a2:54:46:91:db:bc:cb:ae: 6d:a7:40:70:05:bb:f7:43:03:ce:dd:70:6e:20:54: 1b:10:36:57:09:56:bb:d5:16:80:fc:13:e5:87:ad: 7c:0d:e1:63:7a:15:3f:0a:45:68:9b:7d:de:d9:93: 26:05:67:20:c4:9b:f8:94:eb:19:0c:32:f0:fa:25: 29:d1:5c:e7:9c:46:1f:46:36:22:aa:14:c5:ca:5a: 0d:cb:6f:2b:b4:96:69:b9:78:88:bd:61:7d:c4:2a: 60:61:8f:52:aa:1b:86:1c:33:52:18:b5:06:ba:4a: aa:2b:fe:cf:69:dd:72:11:0a:a4:80:02:e8:6b:c1: 75:5f:9d:53:6e:d1:17:e4:02:8a:d6:ca:a4:56:66: 14:db:b8:43:16:7c:77:9a:49:c4:e2:87:dc:97:64: da:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3D:6F:0A:28:2C:74:0F:58:65:3D:2D:51:F3:B5:58:04:F3:62:EB X509v3 Authority Key Identifier: keyid:85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.132.52.0/24 Signature Algorithm: sha256WithRSAEncryption 97:b5:d0:f7:da:17:2d:77:70:dd:59:6a:f0:35:1b:6a:f4:db: ed:f8:07:28:6c:8f:49:95:bd:23:66:3c:7c:a8:f5:6b:53:98: de:a5:dc:bb:2a:c3:39:b1:91:02:1e:20:3c:75:db:3a:ac:4f: f0:27:0d:a6:78:6f:f5:79:39:f2:d6:00:08:1a:48:46:53:28: a6:50:71:54:00:77:e2:f2:f0:30:a7:4a:44:2a:01:2d:21:3d: 02:f9:fb:53:bb:6d:bf:45:86:2c:3b:87:f1:b6:65:d9:c1:75: 6c:de:6c:e3:ef:e5:f2:62:e1:4b:3a:60:30:d3:f8:e3:38:c4: 6d:35:02:ad:3c:46:dd:c6:9c:07:a4:b4:85:cd:a6:14:fc:6f: 47:e0:cc:05:ec:40:36:5f:28:3c:5a:ef:d8:ad:fc:dc:aa:31: 88:79:06:30:b5:c1:f0:53:74:bd:60:52:7b:5b:d3:71:62:53: 8b:ae:70:b7:a2:97:89:10:cd:96:3a:16:1e:e3:31:60:1a:94: dd:db:12:5a:78:fa:d4:79:2c:64:19:e8:fe:83:bd:a5:a1:e2: e5:09:88:33:0d:b9:be:61:b6:5c:c3:c8:5c:4f:56:8f:a6:6c: 01:61:9f:d1:f3:cd:15:c2:a6:5a:5d:f0:8f:cd:42:b0:7b:2c: 79:ce:7b:e7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYW2xdByLmXNb/ZQMokLWPqKxp34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1 QzYwRjVDMzAeFw0yNjA1MDMwMjA4MjhaFw0yNzA1MDIwMjEzMjhaMDMxMTAvBgNV BAMTKEYwM0Q2RjBBMjgyQzc0MEY1ODY1M0QyRDUxRjNCNTU4MDRGMzYyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvKDC0fCyLRDAewC8pucRSUWLF kE/OM0/PoTT0ZxjSFsFsh4RAEwMB+vR+QKJpX7MycPDYpPrQV2Q+/yQKCt8VV3Kt XNN2StIeUjOX1dv4jSUVHr2smNg999gXWxQMgxSiVEaR27zLrm2nQHAFu/dDA87d cG4gVBsQNlcJVrvVFoD8E+WHrXwN4WN6FT8KRWibfd7ZkyYFZyDEm/iU6xkMMvD6 JSnRXOecRh9GNiKqFMXKWg3Lbyu0lmm5eIi9YX3EKmBhj1KqG4YcM1IYtQa6Sqor /s9p3XIRCqSAAuhrwXVfnVNu0RfkAorWyqRWZhTbuEMWfHeaScTih9yXZNqPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU8D1vCigsdA9YZT0tUfO1WATzYuswHwYDVR0j BBgwFoAUhdc9gE6LQo5DS00qdzugL1xg9cMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU5NmVkODktMmExNi00MTUxLWJmODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0 RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1QzYwRjVDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUQ3M0Q4MDRFOEI0MjhFNDM0QjREMkE3NzNCQTAyRjVDNjBG NUMzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBlOTZlZDg5LTJhMTYtNDE1MS1i ZjgzLTU5ZGNlNTYxNDYwYy8wLzMxMzAzMzJlMzEzMzMyMmUzNTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4Q0MA0GCSqG SIb3DQEBCwUAA4IBAQCXtdD32hctd3DdWWrwNRtq9Nvt+AcobI9Jlb0jZjx8qPVr U5jepdy7KsM5sZECHiA8dds6rE/wJw2meG/1eTny1gAIGkhGUyimUHFUAHfi8vAw p0pEKgEtIT0C+ftTu22/RYYsO4fxtmXZwXVs3mzj7+XyYuFLOmAw0/jjOMRtNQKt PEbdxpwHpLSFzaYU/G9H4MwF7EA2Xyg8Wu/YrfzcqjGIeQYwtcHwU3S9YFJ7W9Nx YlOLrnC3opeJEM2WOhYe4zFgGpTd2xJaePrUeSxkGej+g72loeLlCYgzDbm+YbZc w8hcT1aPpmwBYZ/R880VwqZaXfCPzUKweyx5znvn -----END CERTIFICATE-----Generated at Wed May 13 07:46:11 2026 by rpki-client