$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa File: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (raw, json) Hash identifier: QhRYWa4o40Fj31iivWLXUVwfrIn/xEIOzWLl7q2EcpQ= Subject key identifier: F0:8B:38:4E:AE:7B:33:07:3C:38:94:C5:8E:4D:F9:90:37:E6:BC:87 Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 12E5D5957BF374727BFE0D30CE2B9B012C1E6277 Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa Signing time: Sun 03 May 2026 02:49:34 +0000 ROA not before: Sun 03 May 2026 02:44:34 +0000 ROA not after: Sun 02 May 2027 02:49:34 +0000 asID: 138810 IP address blocks: 103.134.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e5:d5:95:7b:f3:74:72:7b:fe:0d:30:ce:2b:9b:01:2c:1e:62:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: May 3 02:44:34 2026 GMT Not After : May 2 02:49:34 2027 GMT Subject: CN=F08B384EAE7B33073C3894C58E4DF99037E6BC87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:03:03:8f:4b:dc:9c:71:b0:53:f7:12:17:2b: 64:45:b6:34:a0:17:bc:9c:87:1c:e8:b5:32:b9:a1: 48:51:4e:02:e5:24:8b:8c:7c:aa:cb:e4:ab:03:35: 1e:d2:d2:12:dc:07:b3:3d:0c:ff:9c:b2:c9:c1:2b: 98:95:6c:91:97:d1:ce:bf:c2:8f:19:64:30:d8:99: 7d:ba:cf:73:cd:01:3f:d9:a5:a2:0b:4b:ef:82:63: 33:a7:33:a6:1d:d5:be:05:f1:07:a9:e0:b6:68:f4: 9f:29:15:db:0f:c5:7c:93:5e:6f:62:cf:95:ca:b4: cc:b2:3b:b1:f6:fc:34:7f:36:5e:9c:24:e2:96:1c: c6:8c:41:61:39:23:11:0a:86:fd:2a:ee:13:af:cd: e7:a3:31:1f:fb:c3:04:5f:cd:e3:a0:82:c9:81:b6: 24:2a:77:fe:03:27:d9:c7:d9:4c:45:81:ea:20:fe: ed:d3:10:15:27:fc:73:51:17:43:47:2d:b6:5c:00: 00:c3:2b:4f:8d:59:0a:fa:90:d1:8b:67:7b:a6:5c: c5:f1:2c:20:4c:a2:8f:33:d9:57:dd:cd:26:20:f8: 13:1f:db:8e:0c:2d:17:64:f8:a5:1c:27:d7:34:a2: 5a:9f:6c:d9:36:29:22:2a:06:e6:b0:e4:29:64:8b: 94:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8B:38:4E:AE:7B:33:07:3C:38:94:C5:8E:4D:F9:90:37:E6:BC:87 X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.220.0/22 Signature Algorithm: sha256WithRSAEncryption 54:80:b2:fa:f9:0b:b8:6d:b1:12:0b:a5:69:27:26:d7:e5:0c: e7:5d:9a:2e:63:d3:5e:49:bf:cd:81:9a:1a:8a:f2:d6:b8:1e: b3:2e:a4:a8:85:ef:c8:3d:e1:b6:fb:07:ee:25:09:9c:c7:ac: 53:15:79:9e:a0:c2:1a:0c:7b:bb:6c:5b:b5:a4:35:e1:90:18: da:9e:83:5d:ba:3f:f9:50:c8:9b:d7:7c:d9:8e:3b:93:27:c8: 34:e1:7e:e1:94:89:19:bd:57:55:e6:c6:11:7c:9d:14:2c:44: 83:2d:b2:81:45:c4:7d:6d:d0:b0:97:d3:20:c3:d8:f4:ae:5d: d5:1c:11:9f:4b:82:30:a8:d2:61:97:bb:71:b8:a9:f4:36:0a: 2e:a9:5a:3e:e8:91:5e:a6:4c:12:43:55:50:f7:5a:5f:a0:be: c5:c4:a2:63:2f:89:00:7c:14:e1:69:df:01:3a:f6:0d:10:3d: be:6f:ae:55:4c:96:7b:03:28:d4:23:d1:38:f0:11:3b:61:74: 20:eb:1a:9d:4e:27:8c:ea:21:22:41:61:2b:bc:26:d1:55:13: 1c:ef:d5:99:c1:ca:ed:ec:86:b3:83:8f:17:af:39:ba:b8:08: b3:7a:13:db:38:7d:b6:d9:ef:31:9e:b2:19:21:58:06:86:9a: be:85:e0:24 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEuXVlXvzdHJ7/g0wziubASweYncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjA1MDMwMjQ0MzRaFw0yNzA1MDIwMjQ5MzRaMDMxMTAvBgNV BAMTKEYwOEIzODRFQUU3QjMzMDczQzM4OTRDNThFNERGOTkwMzdFNkJDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUAwOPS9yccbBT9xIXK2RFtjSg F7ychxzotTK5oUhRTgLlJIuMfKrL5KsDNR7S0hLcB7M9DP+cssnBK5iVbJGX0c6/ wo8ZZDDYmX26z3PNAT/ZpaILS++CYzOnM6Yd1b4F8Qep4LZo9J8pFdsPxXyTXm9i z5XKtMyyO7H2/DR/Nl6cJOKWHMaMQWE5IxEKhv0q7hOvzeejMR/7wwRfzeOggsmB tiQqd/4DJ9nH2UxFgeog/u3TEBUn/HNRF0NHLbZcAADDK0+NWQr6kNGLZ3umXMXx LCBMoo8z2VfdzSYg+BMf244MLRdk+KUcJ9c0olqfbNk2KSIqBuaw5Clki5RLAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU8Is4Tq57Mwc8OJTFjk35kDfmvIcwHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhiMzZlODhkLWQ1NzMtNGNiYi1i NDYwLWEwYjk2OWFhODRkNS8wLzMxMzAzMzJlMzEzMzM0MmUzMjMyMzAyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzgzODMxMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnhtwwDQYJ KoZIhvcNAQELBQADggEBAFSAsvr5C7htsRILpWknJtflDOddmi5j015Jv82BmhqK 8ta4HrMupKiF78g94bb7B+4lCZzHrFMVeZ6gwhoMe7tsW7WkNeGQGNqeg126P/lQ yJvXfNmOO5MnyDThfuGUiRm9V1XmxhF8nRQsRIMtsoFFxH1t0LCX0yDD2PSuXdUc EZ9LgjCo0mGXu3G4qfQ2Ci6pWj7okV6mTBJDVVD3Wl+gvsXEomMviQB8FOFp3wE6 9g0QPb5vrlVMlnsDKNQj0TjwETthdCDrGp1OJ4zqISJBYSu8JtFVExzv1ZnByu3s hrODjxevObq4CLN6E9s4fbbZ7zGeshkhWAaGmr6F4CQ= -----END CERTIFICATE-----Generated at Wed May 13 04:27:03 2026 by rpki-client