$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa File: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (raw, json) Hash identifier: kAF9XX+k/l/rK1GEr+bjFHX1YeYovpaBVZcUfCaqwVQ= Subject key identifier: 53:76:39:94:41:55:F4:39:8E:09:06:32:5E:3F:4E:FA:67:BD:9A:85 Certificate issuer: /CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Certificate serial: 31305B2DC3ED2C2A13629414D7AC76B26A496D3D Authority key identifier: 8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa Signing time: Sun 03 May 2026 02:36:46 +0000 ROA not before: Sun 03 May 2026 02:31:46 +0000 ROA not after: Sun 02 May 2027 02:36:46 +0000 asID: 151545 IP address blocks: 103.236.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:30:5b:2d:c3:ed:2c:2a:13:62:94:14:d7:ac:76:b2:6a:49:6d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Validity Not Before: May 3 02:31:46 2026 GMT Not After : May 2 02:36:46 2027 GMT Subject: CN=537639944155F4398E0906325E3F4EFA67BD9A85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6e:33:d0:76:b7:2d:58:e7:9e:44:f4:9e:06: 05:ba:ef:5b:a4:51:7a:07:1a:b9:3a:3c:4a:14:a6: 60:cc:98:49:72:82:0f:98:6d:06:41:6a:fb:e6:7a: 3d:c1:67:e8:5b:af:63:8a:68:60:ff:e6:c5:8f:67: 5b:4d:90:d8:50:b9:88:dd:c3:f9:bb:17:9f:5f:61: 6d:5d:c7:81:c3:db:ce:1c:1d:80:d6:83:fc:59:ed: 12:ea:65:c0:f0:34:4d:a0:a6:33:31:c4:00:94:31: 78:93:ed:09:c9:37:80:98:61:8e:cc:c3:db:a8:c2: b4:2c:fe:32:d5:af:17:87:35:d9:3a:32:34:1d:a0: 7b:54:23:9b:62:32:d3:b5:e7:f5:62:8f:6e:c9:08: d1:f0:66:72:cc:b1:b3:5a:4e:b6:d7:a4:b7:16:52: 9f:55:af:5c:1f:9c:38:e1:b3:35:0e:09:60:cc:13: 58:a4:f2:6d:7b:74:4d:c8:29:99:09:32:1c:8e:11: 1d:06:a7:56:72:b7:29:07:b0:09:df:97:4a:51:6b: 72:0d:7a:9a:6e:13:f0:17:ee:ed:45:a2:4a:51:36: 80:34:67:19:34:05:42:a2:a2:0f:9a:d1:2c:60:53: d1:8e:f2:e7:0d:9d:e6:aa:9c:32:63:2d:65:9e:ef: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:76:39:94:41:55:F4:39:8E:09:06:32:5E:3F:4E:FA:67:BD:9A:85 X509v3 Authority Key Identifier: keyid:8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.130.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:f9:04:5a:65:36:7c:58:9f:54:1a:01:c3:8d:cc:10:c8:6a: bd:9c:e0:62:a1:9c:0a:9f:cf:bb:6c:d1:0d:71:67:9d:98:89: 10:0b:d3:1a:ce:d9:cd:9e:aa:67:f6:12:ee:9f:32:3d:3f:12: 35:5d:71:20:68:36:5f:93:a1:ec:7d:b6:29:3d:2e:c6:7a:e7: 6c:18:35:59:40:fb:a4:2c:d5:c2:b9:fb:1f:22:dd:48:fa:87: 33:c8:07:b4:6f:1b:93:66:c0:ad:e8:30:be:9c:bd:1f:53:d7: e2:30:f0:46:bf:96:30:f3:e0:06:ad:03:ef:e0:13:41:e5:9a: ee:78:02:68:f9:12:3a:26:85:a4:b7:80:1b:7c:a5:72:84:42: 9c:75:db:dd:c2:82:49:bc:10:11:83:32:e0:35:a4:1a:c3:4c: bd:e3:92:a1:69:95:49:44:4d:ef:21:7c:70:43:b9:d2:7f:23: 0e:d0:2d:42:95:30:a1:15:94:bc:01:08:40:f9:d4:62:56:aa: a0:ed:bc:ef:69:61:4a:29:75:ce:53:1d:e5:e7:a5:9a:17:78: 1d:a7:d7:42:0d:51:31:5c:f7:4d:24:f3:71:53:a5:40:5d:db: e0:db:8b:2e:65:0c:8f:08:5f:c0:5e:0e:2e:0d:63:2b:07:4c: 2e:f0:55:75 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMTBbLcPtLCoTYpQU16x2smpJbT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVC MTRDODk2QzAeFw0yNjA1MDMwMjMxNDZaFw0yNzA1MDIwMjM2NDZaMDMxMTAvBgNV BAMTKDUzNzYzOTk0NDE1NUY0Mzk4RTA5MDYzMjVFM0Y0RUZBNjdCRDlBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYbjPQdrctWOeeRPSeBgW671uk UXoHGrk6PEoUpmDMmElygg+YbQZBavvmej3BZ+hbr2OKaGD/5sWPZ1tNkNhQuYjd w/m7F59fYW1dx4HD284cHYDWg/xZ7RLqZcDwNE2gpjMxxACUMXiT7QnJN4CYYY7M w9uowrQs/jLVrxeHNdk6MjQdoHtUI5tiMtO15/Vij27JCNHwZnLMsbNaTrbXpLcW Up9Vr1wfnDjhszUOCWDME1ik8m17dE3IKZkJMhyOER0Gp1ZytykHsAnfl0pRa3IN eppuE/AX7u1FokpRNoA0Zxk0BUKiog+a0SxgU9GO8ucNneaqnDJjLWWe7ydxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUU3Y5lEFV9DmOCQYyXj9O+me9moUwHwYDVR0j BBgwFoAUj/qLucCdxMpCyVyBfA/9lbFMiWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ1YWYyMmMtN2UzZS00MGI1LWFjNTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlD MDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVCMTRDODk2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBOEJCOUMwOURDNENBNDJDOTVDODE3QzBGRkQ5NUIxNEM4 OTZDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkNWFmMjJjLTdlM2UtNDBiNS1h YzUwLTYzNzc3MmE5NWMyMS8wLzMxMzAzMzJlMzIzMzM2MmUzMTMzMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTM0MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn7IIwDQYJ KoZIhvcNAQELBQADggEBACv5BFplNnxYn1QaAcONzBDIar2c4GKhnAqfz7ts0Q1x Z52YiRAL0xrO2c2eqmf2Eu6fMj0/EjVdcSBoNl+Toex9tik9LsZ652wYNVlA+6Qs 1cK5+x8i3Uj6hzPIB7RvG5NmwK3oML6cvR9T1+Iw8Ea/ljDz4AatA+/gE0Hlmu54 Amj5EjomhaS3gBt8pXKEQpx1293Cgkm8EBGDMuA1pBrDTL3jkqFplUlETe8hfHBD udJ/Iw7QLUKVMKEVlLwBCED51GJWqqDtvO9pYUopdc5THeXnpZoXeB2n10INUTFc 900k83FTpUBd2+Dbiy5lDI8IX8BeDi4NYysHTC7wVXU= -----END CERTIFICATE-----Generated at Wed May 13 12:18:26 2026 by rpki-client