$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa File: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (raw, json) Hash identifier: WlvOsmtXUZmaJuz2S7/1ST2g+J5f/ew6UvbcNvgCPtw= Subject key identifier: C6:F2:8A:D4:9D:48:39:92:69:66:7D:E3:05:BE:B2:58:89:06:C3:81 Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 0DE1CFB749E474B58E07444303A43B53C756E938 Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa Signing time: Sun 03 May 2026 02:49:32 +0000 ROA not before: Sun 03 May 2026 02:44:32 +0000 ROA not after: Sun 02 May 2027 02:49:32 +0000 asID: 45305 IP address blocks: 103.134.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e1:cf:b7:49:e4:74:b5:8e:07:44:43:03:a4:3b:53:c7:56:e9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: May 3 02:44:32 2026 GMT Not After : May 2 02:49:32 2027 GMT Subject: CN=C6F28AD49D48399269667DE305BEB2588906C381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:27:2d:52:36:01:08:00:10:da:b4:7a:fe:9f: af:43:b5:ba:77:12:cd:24:2b:48:f9:c0:82:62:e0: 65:96:a6:8a:ed:92:cc:f7:50:49:ef:cb:4a:05:30: 19:8b:4f:01:6d:db:49:39:43:ca:9f:6c:d9:d3:2c: 61:3a:92:d6:c2:6c:fc:95:54:3e:58:70:a2:68:2d: 96:75:ad:86:9d:84:40:bd:83:02:f5:5f:85:43:34: 41:1d:41:30:d3:8d:9d:d0:73:44:1f:31:60:e9:e3: 07:56:4f:1b:b5:68:1e:26:a2:16:24:24:3c:29:65: 52:bd:1a:81:da:bb:ab:ce:5b:b1:d1:12:43:94:53: d8:27:bb:20:63:78:45:a9:9c:65:00:3e:37:8a:a3: 70:f5:9c:c7:ff:15:5e:56:f9:74:11:03:5a:e3:57: 54:6d:00:e5:15:4f:ac:d7:6d:8e:4e:16:a5:e1:d6: 1a:df:2d:bf:f7:89:78:8f:e3:0b:50:57:45:8e:03: 52:d8:6b:95:e5:12:6e:af:b5:42:d8:8c:cf:ba:b1: c8:ef:04:e7:b7:25:9c:ad:da:26:d1:f0:9f:61:50: 66:91:ce:7c:ad:6a:c3:d0:0c:67:e2:98:6e:d3:c7: 09:ca:45:02:9b:7c:db:96:91:69:17:09:49:7c:e1: 4a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F2:8A:D4:9D:48:39:92:69:66:7D:E3:05:BE:B2:58:89:06:C3:81 X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.223.0/24 Signature Algorithm: sha256WithRSAEncryption b2:df:02:b7:97:f8:6b:e6:bd:e5:e9:e1:86:bd:ba:ef:df:86: 9a:52:ae:a6:64:b7:af:91:33:42:42:88:70:aa:5e:f5:65:be: 89:89:e4:d8:31:8d:c6:28:cf:eb:e5:d7:7a:c3:0e:8a:f2:75: ee:7c:f9:ec:e8:64:ef:ae:41:83:1e:22:7c:d4:a8:59:e1:cc: b3:ce:a3:9c:c1:72:67:48:d3:97:49:e5:a3:89:ae:68:12:6f: b6:ec:26:eb:02:b4:a7:71:dd:49:90:9b:7b:6f:3d:6c:3a:f6: b9:bc:01:83:2f:c2:ac:51:d4:5c:a0:d4:f2:75:58:c1:43:18: 2a:4d:5b:ac:23:b3:a3:a4:49:be:08:37:d6:49:dd:d5:a1:5a: a5:5b:a8:97:e8:d7:96:2a:db:22:14:01:f4:da:ac:9b:46:3c: 4f:6d:e7:39:91:78:c1:1e:9a:1e:96:74:11:59:bc:aa:46:e5: 5b:48:b3:b6:5c:57:83:d6:23:b7:8a:d9:30:f4:44:4f:47:4f: 2a:e7:29:be:db:d2:82:45:ab:0c:bc:79:0a:e3:90:00:09:6a: d1:63:f0:09:16:65:f2:6b:7f:28:b2:98:28:e3:7d:0b:f6:92: cc:0d:7c:60:4e:67:37:bc:46:fc:e9:2a:41:b8:d5:36:96:fb: 82:d7:2e:db -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDeHPt0nkdLWOB0RDA6Q7U8dW6TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjA1MDMwMjQ0MzJaFw0yNzA1MDIwMjQ5MzJaMDMxMTAvBgNV BAMTKEM2RjI4QUQ0OUQ0ODM5OTI2OTY2N0RFMzA1QkVCMjU4ODkwNkMzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClJy1SNgEIABDatHr+n69Dtbp3 Es0kK0j5wIJi4GWWportksz3UEnvy0oFMBmLTwFt20k5Q8qfbNnTLGE6ktbCbPyV VD5YcKJoLZZ1rYadhEC9gwL1X4VDNEEdQTDTjZ3Qc0QfMWDp4wdWTxu1aB4mohYk JDwpZVK9GoHau6vOW7HREkOUU9gnuyBjeEWpnGUAPjeKo3D1nMf/FV5W+XQRA1rj V1RtAOUVT6zXbY5OFqXh1hrfLb/3iXiP4wtQV0WOA1LYa5XlEm6vtULYjM+6scjv BOe3JZyt2ibR8J9hUGaRznytasPQDGfimG7TxwnKRQKbfNuWkWkXCUl84UrbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUxvKK1J1IOZJpZn3jBb6yWIkGw4EwHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhiMzZlODhkLWQ1NzMtNGNiYi1i NDYwLWEwYjk2OWFhODRkNS8wLzMxMzAzMzJlMzEzMzM0MmUzMjMyMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4bfMA0GCSqG SIb3DQEBCwUAA4IBAQCy3wK3l/hr5r3l6eGGvbrv34aaUq6mZLevkTNCQohwql71 Zb6JieTYMY3GKM/r5dd6ww6K8nXufPns6GTvrkGDHiJ81KhZ4cyzzqOcwXJnSNOX SeWjia5oEm+27CbrArSncd1JkJt7bz1sOva5vAGDL8KsUdRcoNTydVjBQxgqTVus I7OjpEm+CDfWSd3VoVqlW6iX6NeWKtsiFAH02qybRjxPbec5kXjBHpoelnQRWbyq RuVbSLO2XFeD1iO3itkw9ERPR08q5ym+29KCRasMvHkK45AACWrRY/AJFmXya38o spgo430L9pLMDXxgTmc3vEb86SpBuNU2lvuC1y7b -----END CERTIFICATE-----Generated at Wed May 13 02:33:46 2026 by rpki-client