$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32342d3234203d3e203436303631.roa File: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (raw, json) Hash identifier: 4mD9TjqePo/yOB3/Fiwn7z8Fd4y7bA97GyieYO2qTlw= Subject key identifier: AF:AE:2D:C3:2F:47:7E:3D:9B:FC:0F:32:D9:83:9C:2E:8F:99:73:A1 Certificate issuer: /CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2 Certificate serial: 4B5FE4E472E4018FBCFF2F3FBB869E343BD0A5C7 Authority key identifier: 0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32342d3234203d3e203436303631.roa Signing time: Sun 03 May 2026 02:22:18 +0000 ROA not before: Sun 03 May 2026 02:17:18 +0000 ROA not after: Sun 02 May 2027 02:22:18 +0000 asID: 46061 IP address blocks: 103.24.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5f:e4:e4:72:e4:01:8f:bc:ff:2f:3f:bb:86:9e:34:3b:d0:a5:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2 Validity Not Before: May 3 02:17:18 2026 GMT Not After : May 2 02:22:18 2027 GMT Subject: CN=AFAE2DC32F477E3D9BFC0F32D9839C2E8F9973A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:4c:44:35:29:31:03:be:f6:13:c1:5b:67: 45:84:37:b1:c6:62:9c:ac:d1:d6:03:73:94:8c:57: 59:58:b8:68:be:19:98:4a:97:28:6b:5e:16:ec:66: ae:5b:9a:ec:8e:56:38:94:89:53:36:6b:71:6d:f8: 4e:31:6f:f5:b3:3d:6a:36:cb:10:98:c4:59:01:1a: ab:04:91:0f:37:2f:cb:1e:1d:ca:2f:1b:18:34:23: eb:66:fd:e3:e1:ed:82:0a:d5:b5:ac:6c:56:a5:ad: c3:7d:fc:36:50:cb:84:06:5a:4a:67:f6:1b:26:62: b3:56:c7:56:be:05:09:73:73:fa:5d:56:31:44:ba: 98:84:cc:3a:51:02:84:28:8e:b3:cf:87:5a:fd:6c: 95:6d:63:e8:3f:31:e7:56:36:d4:2a:6e:37:1d:0d: 18:16:d7:0e:63:e9:e7:6b:44:41:4e:b2:dc:70:a5: 2e:a8:1f:d2:4d:e7:b3:49:9c:bd:5a:da:f1:5a:7c: d2:cb:ac:43:cc:2c:c7:3b:bf:4f:dd:f2:2a:32:9c: 8c:c9:1e:f6:27:3c:a6:d0:fc:84:ff:e4:12:af:74: 58:00:fe:9e:b5:66:51:24:37:93:f0:7d:af:24:32: e6:6e:c7:61:31:3c:3d:18:db:c0:95:9c:cf:c5:47: ea:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AE:2D:C3:2F:47:7E:3D:9B:FC:0F:32:D9:83:9C:2E:8F:99:73:A1 X509v3 Authority Key Identifier: keyid:0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32342d3234203d3e203436303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.74.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:dd:fa:2f:c7:68:4c:f5:47:2b:fd:7b:1f:c1:aa:a8:9f:9c: 4f:5e:92:ca:0d:86:62:f4:40:03:4c:39:61:87:dc:68:76:51: d9:20:ab:a7:bf:41:ae:8f:fd:3a:2c:c2:b2:b5:55:a6:66:b3: 2d:14:df:7f:1b:44:a0:cd:91:78:11:7a:eb:f9:82:db:94:22: 5d:07:cd:b0:eb:69:61:b0:95:ca:ab:59:c1:de:84:fc:be:35: 46:b2:4e:48:e7:1f:f5:68:52:a8:13:63:35:32:84:0a:27:82: 57:a3:27:f4:3f:4a:e5:88:66:3b:5b:c1:97:cd:05:d0:45:b1: dc:0e:57:0d:7f:74:c6:8d:04:73:6f:c8:f1:06:19:73:c8:2e: 96:11:54:ec:58:56:67:ba:ea:a1:b8:84:1a:0d:5f:92:c3:93: b3:1a:0c:f8:a6:f8:c5:c9:57:17:50:a9:6d:8e:f2:d3:c4:6d: 54:1b:c4:48:d5:d1:29:e4:8c:12:a4:4b:11:9f:f2:2f:9f:21: 5f:7d:f4:56:9a:a7:7e:73:fd:f5:7e:5b:1f:d9:95:f9:7e:55: 38:f3:d1:72:57:76:0d:fb:9b:1a:31:33:42:3a:4d:86:a4:b6: 9e:17:7f:5e:a0:5f:c5:ad:d4:95:b5:57:d7:a0:d9:ee:12:78: ae:83:ae:be -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUS1/k5HLkAY+8/y8/u4aeNDvQpccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwNjY5NzkyODgzQkY3RERERUI4MkFENjIxNEUwRkE5 MDczMTNFMjAeFw0yNjA1MDMwMjE3MThaFw0yNzA1MDIwMjIyMThaMDMxMTAvBgNV BAMTKEFGQUUyREMzMkY0NzdFM0Q5QkZDMEYzMkQ5ODM5QzJFOEY5OTczQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp0ExENSkxA772E8FbZ0WEN7HG Ypys0dYDc5SMV1lYuGi+GZhKlyhrXhbsZq5bmuyOVjiUiVM2a3Ft+E4xb/WzPWo2 yxCYxFkBGqsEkQ83L8seHcovGxg0I+tm/ePh7YIK1bWsbFalrcN9/DZQy4QGWkpn 9hsmYrNWx1a+BQlzc/pdVjFEupiEzDpRAoQojrPPh1r9bJVtY+g/MedWNtQqbjcd DRgW1w5j6edrREFOstxwpS6oH9JN57NJnL1a2vFafNLLrEPMLMc7v0/d8ioynIzJ HvYnPKbQ/IT/5BKvdFgA/p61ZlEkN5Pwfa8kMuZux2ExPD0Y28CVnM/FR+oRAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUr64twy9Hfj2b/A8y2YOcLo+Zc6EwHwYDVR0j BBgwFoAUCgZpeSiDv33d64KtYhTg+pBzE+IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMzMjZmNGUtNjYwNS00OTZhLWI5ZjgtZDZlNzdiMjliY2M2LzAvMEEwNjY5Nzky ODgzQkY3RERERUI4MkFENjIxNEUwRkE5MDczMTNFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTA2Njk3OTI4ODNCRjdERERFQjgyQUQ2MjE0RTBGQTkwNzMx M0UyLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJjMzI2ZjRlLTY2MDUtNDk2YS1i OWY4LWQ2ZTc3YjI5YmNjNi8wLzMxMzAzMzJlMzIzNDJlMzczNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzYzMDM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnGEowDQYJKoZIhvcN AQELBQADggEBAErd+i/HaEz1Ryv9ex/BqqifnE9eksoNhmL0QANMOWGH3Gh2Udkg q6e/Qa6P/ToswrK1VaZmsy0U338bRKDNkXgReuv5gtuUIl0HzbDraWGwlcqrWcHe hPy+NUayTkjnH/VoUqgTYzUyhAonglejJ/Q/SuWIZjtbwZfNBdBFsdwOVw1/dMaN BHNvyPEGGXPILpYRVOxYVme66qG4hBoNX5LDk7MaDPim+MXJVxdQqW2O8tPEbVQb xEjV0SnkjBKkSxGf8i+fIV999Faap35z/fV+Wx/Zlfl+VTjz0XJXdg37mxoxM0I6 TYaktp4Xf16gX8Wt1JW1V9eg2e4SeK6Drr4= -----END CERTIFICATE-----Generated at Wed May 13 03:00:04 2026 by rpki-client