$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa File: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (raw, json) Hash identifier: nEP4w2fSSO/JQDFjA5Ly4wgPOtkX8Po6PEn4YaYfsXM= Subject key identifier: 6A:60:AB:EA:C9:BC:A3:9F:C0:30:B1:BF:34:3F:FF:FE:40:BD:39:A4 Certificate issuer: /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Certificate serial: 67E4BC2A4F91FE660EC5CBD3379F5DDDD2531DFA Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa Signing time: Sun 03 May 2026 03:00:24 +0000 ROA not before: Sun 03 May 2026 02:55:24 +0000 ROA not after: Sun 02 May 2027 03:00:24 +0000 asID: 135444 IP address blocks: 103.235.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e4:bc:2a:4f:91:fe:66:0e:c5:cb:d3:37:9f:5d:dd:d2:53:1d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Validity Not Before: May 3 02:55:24 2026 GMT Not After : May 2 03:00:24 2027 GMT Subject: CN=6A60ABEAC9BCA39FC030B1BF343FFFFE40BD39A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:ad:65:4e:d6:4c:3a:e1:c7:8c:e7:d6:ac: dd:3b:7e:e2:81:2e:e2:75:50:51:d8:a1:ec:64:f6: c5:7c:05:ef:ad:d3:ed:30:a4:75:d2:d5:92:f2:6e: 67:b6:67:00:9d:4a:cc:bf:0c:9e:d7:a9:71:f2:80: d5:3c:22:24:e1:f2:8a:cb:04:66:3c:d4:93:bb:79: 74:9d:a6:42:b8:3c:d3:fb:66:2a:f0:72:7d:49:b3: 2f:05:ac:f3:58:11:13:8b:29:a3:7d:e8:c4:a4:14: 96:87:c7:7e:04:9a:00:c4:19:8c:75:8d:42:b1:79: a6:12:64:e3:06:8d:98:89:2f:5c:11:ec:96:b1:2d: b3:df:6a:da:f7:de:05:a0:1d:c1:c3:7b:0b:32:02: 18:30:ad:c3:60:4b:12:58:95:04:ec:28:c6:b2:17: 97:4a:8f:66:39:d8:7e:31:0a:5a:4d:d1:0e:7a:b0: 36:d4:8a:24:41:f2:ef:f6:8f:95:ed:f9:2f:4d:a2: 3b:a2:1d:f4:23:d5:9e:a5:a3:75:33:0d:e4:4c:ae: 45:d0:e4:c5:e3:ea:bc:9f:81:09:d3:33:c2:5a:22: 54:d8:57:c5:48:ee:09:18:e4:cb:17:c5:3c:26:1b: e6:1c:df:ad:63:cb:14:b6:08:a3:3b:87:d7:77:91: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:60:AB:EA:C9:BC:A3:9F:C0:30:B1:BF:34:3F:FF:FE:40:BD:39:A4 X509v3 Authority Key Identifier: keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.72.0/24 Signature Algorithm: sha256WithRSAEncryption 62:a3:48:84:70:43:f5:f3:c3:bc:80:e8:3a:45:9d:2b:d5:62: 32:7e:b2:3b:76:fd:5c:a3:55:1b:04:16:cd:8f:7b:08:94:2d: c7:05:d0:92:1b:f4:76:da:34:fb:ba:46:98:7c:84:d4:00:51: fb:3d:f9:21:13:17:f1:f5:56:96:1b:f4:5b:ec:91:8d:99:2b: dc:99:34:3d:7f:02:0c:6d:c8:07:e0:71:09:0b:c2:45:fe:f8: 48:53:bd:c5:46:b2:b0:ef:ba:d3:be:d9:2b:19:58:ea:fd:2e: a0:d0:1d:f2:91:ef:98:a2:e2:5e:c6:18:f2:38:85:78:04:3d: de:06:18:19:57:f3:c7:bd:95:26:3b:52:b4:a2:f4:c8:f0:9f: 77:fa:62:5d:c8:00:95:b5:24:f3:2a:41:4a:79:1a:8a:f8:b8: ae:d5:29:ba:05:b8:a8:f2:c0:55:40:03:a4:1c:0b:fc:9a:74: 21:10:4e:fa:c3:99:bf:58:a8:dc:2c:ce:c6:9f:ba:47:15:c0: 06:f3:e9:1a:ff:98:d7:1b:a9:c8:3f:8d:9d:b6:61:b9:7a:04: 09:9b:3e:59:52:99:fb:27:01:07:2f:29:81:62:56:f5:88:73: 1b:0a:82:7c:8c:30:6f:23:21:77:a7:ca:48:db:2a:e3:1d:bb: 2e:1d:50:55 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZ+S8Kk+R/mYOxcvTN59d3dJTHfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlGMURD MUVBM0YxMDAeFw0yNjA1MDMwMjU1MjRaFw0yNzA1MDIwMzAwMjRaMDMxMTAvBgNV BAMTKDZBNjBBQkVBQzlCQ0EzOUZDMDMwQjFCRjM0M0ZGRkZFNDBCRDM5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23a1lTtZMOuHHjOfWrN07fuKB LuJ1UFHYoexk9sV8Be+t0+0wpHXS1ZLybme2ZwCdSsy/DJ7XqXHygNU8IiTh8orL BGY81JO7eXSdpkK4PNP7Zirwcn1Jsy8FrPNYEROLKaN96MSkFJaHx34EmgDEGYx1 jUKxeaYSZOMGjZiJL1wR7JaxLbPfatr33gWgHcHDewsyAhgwrcNgSxJYlQTsKMay F5dKj2Y52H4xClpN0Q56sDbUiiRB8u/2j5Xt+S9NojuiHfQj1Z6lo3UzDeRMrkXQ 5MXj6ryfgQnTM8JaIlTYV8VI7gkY5MsXxTwmG+Yc361jyxS2CKM7h9d3kSLnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUamCr6sm8o5/AMLG/ND///kC9OaQwHwYDVR0j BBgwFoAUXRO/hLjZGooayAhiJ9WfHcHqPxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjFhNzdhZGQtYTQ5YS00YzhmLWE3MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRC OEQ5MUE4QTFBQzgwODYyMjdENTlGMURDMUVBM0YxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDEzQkY4NEI4RDkxQThBMUFDODA4NjIyN0Q1OUYxREMxRUEz RjEwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IxYTc3YWRkLWE0OWEtNGM4Zi1h NzM1LWVmOTZjMzNhYjI5Zi8wLzMxMzAzMzJlMzIzMzM1MmUzNzMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+tIMA0GCSqG SIb3DQEBCwUAA4IBAQBio0iEcEP188O8gOg6RZ0r1WIyfrI7dv1co1UbBBbNj3sI lC3HBdCSG/R22jT7ukaYfITUAFH7PfkhExfx9VaWG/Rb7JGNmSvcmTQ9fwIMbcgH 4HEJC8JF/vhIU73FRrKw77rTvtkrGVjq/S6g0B3yke+YouJexhjyOIV4BD3eBhgZ V/PHvZUmO1K0ovTI8J93+mJdyACVtSTzKkFKeRqK+Liu1Sm6Bbio8sBVQAOkHAv8 mnQhEE76w5m/WKjcLM7Gn7pHFcAG8+ka/5jXG6nIP42dtmG5egQJmz5ZUpn7JwEH LymBYlb1iHMbCoJ8jDBvIyF3p8pI2yrjHbsuHVBV -----END CERTIFICATE-----Generated at Wed May 13 03:54:58 2026 by rpki-client