$ rpki-client -vvf rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa File: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (raw, json) Hash identifier: eCOHpaJr3e3g+S1j1WgdBSHj+x6BIYHKOcTVf2mib5Y= Subject key identifier: DF:61:0A:CB:CF:93:DB:56:34:E7:5C:66:FA:62:33:39:3B:0C:10:67 Certificate issuer: /CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Certificate serial: 3C21B70A4CAD156DC526F095438A55F398635196 Authority key identifier: 52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa Signing time: Sun 03 May 2026 02:34:47 +0000 ROA not before: Sun 03 May 2026 02:29:47 +0000 ROA not after: Sun 02 May 2027 02:34:47 +0000 asID: 135478 IP address blocks: 103.129.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:21:b7:0a:4c:ad:15:6d:c5:26:f0:95:43:8a:55:f3:98:63:51:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Validity Not Before: May 3 02:29:47 2026 GMT Not After : May 2 02:34:47 2027 GMT Subject: CN=DF610ACBCF93DB5634E75C66FA6233393B0C1067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:6f:cf:e4:ef:bf:76:4b:4f:b1:78:34:ef: e9:3c:b8:39:74:ab:40:b0:a5:f5:d8:20:78:63:16: 89:67:44:3e:ab:ef:40:6f:c5:be:b5:4b:de:6d:1e: 17:cf:60:b4:03:2d:88:f6:e3:c7:39:4a:02:4b:49: 1e:21:5d:03:f3:21:0c:3e:06:e9:2d:3b:d9:c1:d6: e3:6a:57:84:0e:a9:12:01:34:7a:c0:f2:f5:ea:3b: 34:40:22:3a:30:8c:58:5d:45:10:86:8c:67:52:15: 6e:8b:78:6d:a5:50:19:ae:6b:d7:23:0b:3f:ab:28: 4a:77:cd:93:a3:20:77:20:0c:3e:0e:1c:67:77:31: 1a:99:3f:27:62:1a:85:af:c6:04:94:8a:0d:4c:d9: 31:4e:6c:77:c7:77:05:f9:ed:59:9b:00:23:1c:68: 2e:85:f5:ea:c3:df:e6:81:79:1e:4a:ff:53:66:b2: dd:37:38:ce:ae:b2:af:6d:e6:f3:f5:29:33:bf:7a: c7:8f:86:ae:67:ae:30:94:32:bd:68:d9:c8:cf:77: b7:92:65:7a:cf:ef:f5:44:9b:fd:4f:84:5f:36:f1: 64:da:40:d7:bc:c1:81:cf:eb:3c:55:99:1e:16:ba: d6:90:f4:c6:cd:12:e1:78:b9:07:87:43:87:cf:7a: 9a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:61:0A:CB:CF:93:DB:56:34:E7:5C:66:FA:62:33:39:3B:0C:10:67 X509v3 Authority Key Identifier: keyid:52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.68.0/23 Signature Algorithm: sha256WithRSAEncryption c2:b7:8d:46:07:ee:39:d2:65:c4:1e:9a:0f:37:1e:88:e3:26: cf:04:4e:2e:83:84:6e:2b:0e:08:55:e2:2d:4d:2d:be:8e:05: ec:d4:3c:25:bc:bb:6c:25:e7:29:53:8e:6d:4d:52:40:a4:c6: 87:8a:76:72:c0:36:aa:2c:b6:7a:b5:c9:26:e1:e7:e6:79:f3: 57:26:54:e6:1f:7d:f5:ef:09:c0:70:b7:e5:dc:09:65:ed:12: c8:47:4c:95:5c:e0:02:5f:24:f5:31:4c:aa:e6:1a:62:78:61: c1:f8:e1:6f:bd:dc:db:8b:1a:76:30:38:84:81:5c:ef:62:68: ec:5a:3c:9e:c3:5a:a5:1f:3b:5c:cc:28:73:24:72:b7:a0:e0: 4b:a4:78:de:dd:3e:32:ab:dc:8f:4e:e7:ae:00:d8:9e:32:db: 55:5f:a1:c0:c5:64:09:54:13:3c:b7:e1:09:e0:60:fb:78:0e: 20:01:97:34:10:c2:51:dc:72:79:2d:af:b5:83:7f:08:54:d4: 9e:54:77:42:ec:45:6e:82:9a:c5:c9:92:ab:0a:fe:ae:91:6b: 09:7a:e4:da:dc:d1:15:19:47:e8:71:50:64:95:23:ac:cd:8e: e7:96:31:2b:2e:29:b7:7f:37:c2:f0:3f:18:86:59:ff:60:d8: bf:aa:40:aa -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPCG3CkytFW3FJvCVQ4pV85hjUZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1 NTExQUUyMDAeFw0yNjA1MDMwMjI5NDdaFw0yNzA1MDIwMjM0NDdaMDMxMTAvBgNV BAMTKERGNjEwQUNCQ0Y5M0RCNTYzNEU3NUM2NkZBNjIzMzM5M0IwQzEwNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9m/P5O+/dktPsXg07+k8uDl0 q0CwpfXYIHhjFolnRD6r70Bvxb61S95tHhfPYLQDLYj248c5SgJLSR4hXQPzIQw+ BuktO9nB1uNqV4QOqRIBNHrA8vXqOzRAIjowjFhdRRCGjGdSFW6LeG2lUBmua9cj Cz+rKEp3zZOjIHcgDD4OHGd3MRqZPydiGoWvxgSUig1M2TFObHfHdwX57VmbACMc aC6F9erD3+aBeR5K/1Nmst03OM6usq9t5vP1KTO/esePhq5nrjCUMr1o2cjPd7eS ZXrP7/VEm/1PhF828WTaQNe8wYHP6zxVmR4WutaQ9MbNEuF4uQeHQ4fPeprHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU32EKy8+T21Y051xm+mIzOTsMEGcwHwYDVR0j BBgwFoAUUtmhCZqnGi9AhAm+ErMDG1URriAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdmNmU1N2ItNGMyNi00NDJiLThhZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5 QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1NTExQUUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MkQ5QTEwOTlBQTcxQTJGNDA4NDA5QkUxMkIzMDMxQjU1MTFB RTIwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU3ZjZlNTdiLTRjMjYtNDQyYi04 YWZjLTAzMjllZWRhZmI3Mi8wLzMxMzAzMzJlMzEzMjM5MmUzNjM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4FEMA0GCSqG SIb3DQEBCwUAA4IBAQDCt41GB+450mXEHpoPNx6I4ybPBE4ug4RuKw4IVeItTS2+ jgXs1DwlvLtsJecpU45tTVJApMaHinZywDaqLLZ6tckm4efmefNXJlTmH3317wnA cLfl3All7RLIR0yVXOACXyT1MUyq5hpieGHB+OFvvdzbixp2MDiEgVzvYmjsWjye w1qlHztczChzJHK3oOBLpHje3T4yq9yPTueuANieMttVX6HAxWQJVBM8t+EJ4GD7 eA4gAZc0EMJR3HJ5La+1g38IVNSeVHdC7EVugprFyZKrCv6ukWsJeuTa3NEVGUfo cVBklSOszY7nljErLim3fzfC8D8Yhln/YNi/qkCq -----END CERTIFICATE-----Generated at Wed May 13 11:35:44 2026 by rpki-client