$ rpki-client -vvf rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/3130332e3135332e36302e302f32332d3233203d3e20313430343536.roa File: 3130332e3135332e36302e302f32332d3233203d3e20313430343536.roa (raw, json) Hash identifier: SOPJ6LptzafhaHhbYxOp6YPrbTR/9ZdExcQFIaJyuIA= Subject key identifier: D2:DA:40:46:9B:C1:87:84:FC:D5:76:80:CD:20:B6:00:AB:E5:5E:A1 Certificate issuer: /CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Certificate serial: 2167A2869D4A7736A71720E5C63A23D880396AC9 Authority key identifier: 62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/3130332e3135332e36302e302f32332d3233203d3e20313430343536.roa Signing time: Sun 03 May 2026 02:16:52 +0000 ROA not before: Sun 03 May 2026 02:11:52 +0000 ROA not after: Sun 02 May 2027 02:16:52 +0000 asID: 140456 IP address blocks: 103.153.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:67:a2:86:9d:4a:77:36:a7:17:20:e5:c6:3a:23:d8:80:39:6a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Validity Not Before: May 3 02:11:52 2026 GMT Not After : May 2 02:16:52 2027 GMT Subject: CN=D2DA40469BC18784FCD57680CD20B600ABE55EA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:69:e9:ea:22:0e:e2:5b:8f:c8:24:d9:15:6a: d6:48:e9:bc:b7:67:59:20:b2:18:0e:e0:59:9a:75: 3a:12:01:7b:fb:eb:b2:61:47:55:61:a8:70:51:65: 9d:cf:e6:43:f5:15:91:92:74:cb:79:08:af:64:4c: bb:23:68:db:e0:38:eb:49:48:18:6d:6c:7a:07:9c: 76:7d:67:7e:1a:86:03:14:44:01:40:b4:ba:a3:c7: 72:10:17:e1:dc:92:55:da:2c:29:2e:80:47:65:84: 49:31:01:a0:c3:d7:e0:d9:f2:71:1f:4f:ab:22:05: 57:52:03:7d:ab:52:3e:5a:68:6c:48:7a:6d:3c:5a: 64:46:67:5f:98:1a:88:e6:89:c7:8d:b6:24:e4:c0: 03:4f:3d:42:a7:df:87:e0:e0:e7:f0:ba:3f:b3:58: 4d:ae:bc:2d:b2:30:89:24:62:13:98:4d:bc:66:50: a8:18:ab:91:6f:72:36:d3:15:9e:4f:b9:3e:f5:1a: 0a:db:49:00:8e:96:7f:71:a3:36:8b:78:3a:36:34: 6f:f0:1b:a7:29:12:e8:a1:f5:28:11:f0:6e:a0:f0: a3:67:66:83:7a:04:5d:59:99:de:92:96:28:e5:44: 0e:f7:b9:f4:76:b3:9e:9b:05:ac:70:ee:1d:08:d3: 85:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DA:40:46:9B:C1:87:84:FC:D5:76:80:CD:20:B6:00:AB:E5:5E:A1 X509v3 Authority Key Identifier: keyid:62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/3130332e3135332e36302e302f32332d3233203d3e20313430343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.60.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:29:da:30:1b:69:ea:3d:e8:23:65:25:6f:c0:45:b0:e3:1e: 9e:9f:4f:5b:72:7b:aa:dc:e5:50:11:92:0a:9c:9a:19:f4:43: 2a:88:d3:0c:61:ee:34:89:c2:9f:52:29:3f:e2:0a:7b:98:7d: db:77:1a:86:18:50:7a:f6:fe:cf:3e:6f:9b:d1:0c:59:06:40: 27:e1:f9:a9:04:f3:f5:10:2f:b9:6a:dc:da:9e:fe:c5:37:a1: 8f:65:a5:44:7c:e8:c0:86:86:49:f3:69:b9:5e:1a:dd:42:cd: c4:6c:a4:82:e3:c2:fe:8a:85:50:73:5c:6b:da:9b:3e:5c:52: c2:e9:c4:92:75:f3:8d:f1:e2:65:0e:3b:4a:f6:8f:7c:43:66: 88:e1:d6:d5:41:d9:33:40:05:d0:c8:43:39:cd:87:e0:d3:83: bc:ef:8d:cd:a4:ed:3f:3b:8b:72:58:ba:89:ba:bf:c4:75:02: 63:e8:42:59:84:8d:f7:6a:cd:10:b1:fd:40:35:8f:2b:21:1d: d8:61:24:46:cb:70:61:32:80:34:66:dc:71:1d:7c:2c:e7:9a: a0:b4:a4:c7:a9:d6:54:28:ab:57:fb:dd:b4:d1:7e:9e:8f:14: ce:ea:9f:52:bd:a1:07:23:de:16:3a:b6:89:6a:29:84:46:d4: 34:6d:62:44 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIWeihp1KdzanFyDlxjoj2IA5askwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JE Q0ZBQzIzNzAeFw0yNjA1MDMwMjExNTJaFw0yNzA1MDIwMjE2NTJaMDMxMTAvBgNV BAMTKEQyREE0MDQ2OUJDMTg3ODRGQ0Q1NzY4MENEMjBCNjAwQUJFNTVFQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtaenqIg7iW4/IJNkVatZI6by3 Z1kgshgO4FmadToSAXv767JhR1VhqHBRZZ3P5kP1FZGSdMt5CK9kTLsjaNvgOOtJ SBhtbHoHnHZ9Z34ahgMURAFAtLqjx3IQF+HcklXaLCkugEdlhEkxAaDD1+DZ8nEf T6siBVdSA32rUj5aaGxIem08WmRGZ1+YGojmiceNtiTkwANPPUKn34fg4Ofwuj+z WE2uvC2yMIkkYhOYTbxmUKgYq5FvcjbTFZ5PuT71GgrbSQCOln9xozaLeDo2NG/w G6cpEuih9SgR8G6g8KNnZoN6BF1Zmd6SlijlRA73ufR2s56bBaxw7h0I04XxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0tpARpvBh4T81XaAzSC2AKvlXqEwHwYDVR0j BBgwFoAUYlMei/h3+RkAVdfYV8Iey9z6wjcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE5NTIwZmQtOGRlNS00YTY5LTg1ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJG ODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JEQ0ZBQzIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjUzMUU4QkY4NzdGOTE5MDA1NUQ3RDg1N0MyMUVDQkRDRkFD MjM3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFhOTUyMGZkLThkZTUtNGE2OS04 NWYxLWM0NDg5N2FlNjEyMS8wLzMxMzAzMzJlMzEzNTMzMmUzNjMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMwMzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5k8MA0GCSqG SIb3DQEBCwUAA4IBAQAaKdowG2nqPegjZSVvwEWw4x6en09bcnuq3OVQEZIKnJoZ 9EMqiNMMYe40icKfUik/4gp7mH3bdxqGGFB69v7PPm+b0QxZBkAn4fmpBPP1EC+5 atzanv7FN6GPZaVEfOjAhoZJ82m5XhrdQs3EbKSC48L+ioVQc1xr2ps+XFLC6cSS dfON8eJlDjtK9o98Q2aI4dbVQdkzQAXQyEM5zYfg04O8743NpO0/O4tyWLqJur/E dQJj6EJZhI33as0Qsf1ANY8rIR3YYSRGy3BhMoA0ZtxxHXws55qgtKTHqdZUKKtX +9200X6ejxTO6p9SvaEHI94WOraJaimERtQ0bWJE -----END CERTIFICATE-----Generated at Wed May 13 05:57:31 2026 by rpki-client