$ rpki-client -vvf rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa File: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (raw, json) Hash identifier: yc/0oBt8KMkJ6BObdlHua7S5LWTiZ2ieDOyIo2p9JR8= Subject key identifier: 9E:99:8F:C1:7A:8C:5A:5F:C6:7A:92:DA:EB:01:5B:06:51:5D:5B:E7 Certificate issuer: /CN=53A00628F6956E756C477A3B4A12344C34B5F1A8 Certificate serial: 60F4C50E46AFC6FCF525312D6CC5A4F7EF36534E Authority key identifier: 53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa Signing time: Sun 03 May 2026 02:29:14 +0000 ROA not before: Sun 03 May 2026 02:24:14 +0000 ROA not after: Sun 02 May 2027 02:29:14 +0000 asID: 63878 IP address blocks: 103.236.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f4:c5:0e:46:af:c6:fc:f5:25:31:2d:6c:c5:a4:f7:ef:36:53:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53A00628F6956E756C477A3B4A12344C34B5F1A8 Validity Not Before: May 3 02:24:14 2026 GMT Not After : May 2 02:29:14 2027 GMT Subject: CN=9E998FC17A8C5A5FC67A92DAEB015B06515D5BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:43:5d:98:dc:22:d4:3e:a6:3c:85:a5:22: 83:7a:81:c1:dd:78:a5:6b:09:54:9b:51:17:dc:78: 5f:6d:46:72:85:c3:e5:3e:1c:cb:e5:2a:b2:16:ad: 99:a0:73:4e:32:4b:85:b5:87:1c:d9:65:f0:7a:4a: 48:d7:04:bc:72:5f:d4:f6:f7:44:83:38:dd:ac:05: fc:3f:5e:64:d0:4c:58:6f:27:67:35:57:dd:ce:eb: a1:01:c2:f5:71:d1:d5:b0:c2:1a:cd:d0:d7:c3:af: 29:89:b5:61:36:1f:41:ce:e7:49:e0:df:fc:33:fa: 8a:f2:db:8a:07:ff:87:09:4f:aa:78:46:09:0d:fe: 4e:8f:82:4c:1f:75:1f:08:4d:04:24:7c:e4:84:27: 4e:f1:07:9e:dc:4b:e0:70:11:63:05:80:70:ee:31: e8:2d:ae:a2:19:76:49:ef:ce:35:34:e3:13:86:63: 4a:fd:8f:0f:bb:20:fe:26:37:8e:19:05:32:91:2e: 47:78:17:cc:26:21:6e:0d:2d:d8:a2:8f:b9:2d:6c: 1b:aa:1a:47:6a:98:a1:76:29:6d:cc:21:7a:25:72: bc:2d:cd:20:69:47:b2:4c:d7:8e:5d:ea:2d:07:54: 19:c9:ac:18:ae:8e:9f:1e:e0:93:8e:9b:57:bb:b7: fc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:99:8F:C1:7A:8C:5A:5F:C6:7A:92:DA:EB:01:5B:06:51:5D:5B:E7 X509v3 Authority Key Identifier: keyid:53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.188.0/22 Signature Algorithm: sha256WithRSAEncryption 84:92:6f:ad:12:fb:37:4d:fe:d8:64:f9:83:bc:4f:13:2d:5f: a1:a9:45:87:fd:0b:14:42:cd:ec:e9:88:01:dc:91:68:2f:32: cd:44:35:56:b5:30:13:46:85:e6:ec:df:3c:d4:4b:b8:d3:2c: 35:7c:12:d0:bf:82:a3:5d:27:be:ee:c7:5a:bc:14:b1:ba:c4: 77:f8:aa:f1:a4:c9:7f:56:cb:41:08:e2:e3:c2:ca:d9:ea:85: 18:a9:75:ca:f0:8f:2c:20:7a:ea:ce:64:36:12:67:dd:86:60: bf:84:7c:7b:fe:f7:f1:f0:a4:9a:17:22:51:9a:0d:51:98:46: a7:b4:d2:a7:86:a4:d8:6a:b6:b6:fe:ad:e8:27:b9:60:fa:b6: 64:1d:3f:21:13:af:fb:b7:06:c8:94:0a:a0:fd:59:bf:40:a1: c1:69:3d:4f:cd:2c:27:8d:97:1c:95:30:bd:9b:b6:cc:59:5e: 0c:99:42:91:d2:dd:4e:d3:4d:df:1d:ad:a3:0a:b1:dd:7c:d2: 6d:0b:27:2d:e4:67:5e:00:0e:cb:91:2b:c5:81:f1:cc:22:1c: bb:9c:89:fc:04:50:a6:c2:31:7a:18:18:8e:5b:2d:3e:d0:8a: 18:cc:98:35:9c:5d:4f:da:f1:a8:de:95:be:51:57:cb:20:ff: 5d:95:e9:41 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYPTFDkavxvz1JTEtbMWk9+82U04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBMDA2MjhGNjk1NkU3NTZDNDc3QTNCNEExMjM0NEMz NEI1RjFBODAeFw0yNjA1MDMwMjI0MTRaFw0yNzA1MDIwMjI5MTRaMDMxMTAvBgNV BAMTKDlFOTk4RkMxN0E4QzVBNUZDNjdBOTJEQUVCMDE1QjA2NTE1RDVCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cENdmNwi1D6mPIWlIoN6gcHd eKVrCVSbURfceF9tRnKFw+U+HMvlKrIWrZmgc04yS4W1hxzZZfB6SkjXBLxyX9T2 90SDON2sBfw/XmTQTFhvJ2c1V93O66EBwvVx0dWwwhrN0NfDrymJtWE2H0HO50ng 3/wz+ory24oH/4cJT6p4RgkN/k6PgkwfdR8ITQQkfOSEJ07xB57cS+BwEWMFgHDu MegtrqIZdknvzjU04xOGY0r9jw+7IP4mN44ZBTKRLkd4F8wmIW4NLdiij7ktbBuq GkdqmKF2KW3MIXolcrwtzSBpR7JM145d6i0HVBnJrBiujp8e4JOOm1e7t/z1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUnpmPwXqMWl/GepLa6wFbBlFdW+cwHwYDVR0j BBgwFoAUU6AGKPaVbnVsR3o7ShI0TDS18agwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI2MWZhYmItZDQ2Zi00ZjhjLTgxMDAtNzE0YzIwZTdiM2NhLzAvNTNBMDA2MjhG Njk1NkU3NTZDNDc3QTNCNEExMjM0NEMzNEI1RjFBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0EwMDYyOEY2OTU2RTc1NkM0NzdBM0I0QTEyMzQ0QzM0QjVG MUE4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQyNjFmYWJiLWQ0NmYtNGY4Yy04 MTAwLTcxNGMyMGU3YjNjYS8wLzMxMzAzMzJlMzIzMzM2MmUzMTM4MzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNjMzMzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+y8MA0GCSqG SIb3DQEBCwUAA4IBAQCEkm+tEvs3Tf7YZPmDvE8TLV+hqUWH/QsUQs3s6YgB3JFo LzLNRDVWtTATRoXm7N881Eu40yw1fBLQv4KjXSe+7sdavBSxusR3+KrxpMl/VstB COLjwsrZ6oUYqXXK8I8sIHrqzmQ2EmfdhmC/hHx7/vfx8KSaFyJRmg1RmEantNKn hqTYara2/q3oJ7lg+rZkHT8hE6/7twbIlAqg/Vm/QKHBaT1PzSwnjZcclTC9m7bM WV4MmUKR0t1O003fHa2jCrHdfNJtCyct5GdeAA7LkSvFgfHMIhy7nIn8BFCmwjF6 GBiOWy0+0IoYzJg1nF1P2vGo3pW+UVfLIP9dlelB -----END CERTIFICATE-----Generated at Wed May 13 04:26:37 2026 by rpki-client