$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35362e302f32342d3234203d3e203436303532.roa File: 3130332e32342e35362e302f32342d3234203d3e203436303532.roa (raw, json) Hash identifier: hCsETlpD6R/zfRJVkzNBOTiAfvvIYDjPCkGRa8bOeSk= Subject key identifier: 11:81:B1:BA:D5:08:BF:4C:B4:70:AC:3D:C9:CF:2F:2E:93:A2:2E:89 Certificate issuer: /CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Certificate serial: 38AD641A501E242B40CE72839EE1E493749E0993 Authority key identifier: 59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35362e302f32342d3234203d3e203436303532.roa Signing time: Sun 03 May 2026 03:02:29 +0000 ROA not before: Sun 03 May 2026 02:57:29 +0000 ROA not after: Sun 02 May 2027 03:02:29 +0000 asID: 46052 IP address blocks: 103.24.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ad:64:1a:50:1e:24:2b:40:ce:72:83:9e:e1:e4:93:74:9e:09:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Validity Not Before: May 3 02:57:29 2026 GMT Not After : May 2 03:02:29 2027 GMT Subject: CN=1181B1BAD508BF4CB470AC3DC9CF2F2E93A22E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:48:af:25:61:d3:2f:88:ad:fa:55:37:7f: c6:f4:bb:46:86:2c:2f:d4:b2:35:38:e7:4a:6b:4a: 3b:31:7a:0e:9b:31:0e:0b:03:8c:a0:1b:b0:32:19: 4d:c3:e2:f8:21:e4:48:4c:3f:cc:d4:0e:6f:01:a9: 78:29:ca:23:83:d6:7e:12:10:b6:38:fc:c7:05:12: 2f:f4:0e:cb:dd:3d:e2:75:89:21:de:d4:bf:66:2a: 3c:b1:b5:22:61:73:cd:8f:93:4b:c7:ab:08:0e:9f: 69:46:af:33:46:15:f1:75:2d:c7:82:4f:98:cb:d0: 0f:b4:7f:b8:67:d5:8c:5f:8d:38:62:74:f7:31:4a: 0c:93:bd:a0:00:49:25:c0:cc:d1:9c:d3:19:ad:1b: 66:a2:e2:f2:6c:bc:30:9b:b6:3b:8c:02:b1:bc:e1: fd:4f:23:36:c2:48:0e:9b:a3:73:d2:07:98:9f:c8: 21:2c:c3:93:87:1c:bc:b5:48:ad:8c:10:d5:e4:8e: 5e:e0:02:2e:8d:53:cf:e2:a6:9c:02:86:b4:e6:da: 1d:6e:fa:88:6c:01:5c:c0:f7:80:2d:55:59:be:f9: 75:ee:a7:13:68:1c:31:5c:3d:4b:96:59:79:de:e0: 05:6c:4a:e0:5f:e4:83:bf:74:25:5c:82:35:37:a0: 6a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:81:B1:BA:D5:08:BF:4C:B4:70:AC:3D:C9:CF:2F:2E:93:A2:2E:89 X509v3 Authority Key Identifier: keyid:59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35362e302f32342d3234203d3e203436303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.56.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:e9:16:b2:b2:4d:a5:56:f9:07:59:93:15:cd:41:2f:fc:05: 33:e6:06:65:8c:2f:6a:40:b0:95:2f:81:75:50:70:b4:27:8f: 80:2b:99:97:27:5b:88:af:ee:69:6c:d0:b7:33:bb:44:56:e3: 85:c2:0b:e0:0d:92:f3:05:b8:24:36:90:b3:eb:3f:54:3b:b0: 48:c5:54:82:7c:a6:14:ce:02:f2:74:bb:16:23:52:a6:84:df: b9:7f:6b:29:2c:20:c7:68:da:40:8a:4a:67:85:a2:3f:5c:11: 5c:76:5b:9d:49:27:ee:09:56:3c:64:0d:72:7d:ce:da:2d:be: e2:64:90:ae:6d:77:10:29:9b:f6:d2:03:f4:7f:2a:ec:c1:d8: 31:72:a7:48:dc:5c:3b:32:4b:6a:3a:85:51:b4:35:25:29:55: 5f:fd:c4:3c:74:62:f1:0d:c8:09:12:35:fc:5f:11:f9:d0:35: 1f:7b:f4:99:69:c9:c7:a2:2a:2c:06:67:e4:e9:b9:47:ed:d3: ba:a8:3b:53:55:ef:ee:3f:0b:9a:87:ac:0d:4c:bf:fa:66:f8: 33:3f:56:ab:21:75:09:4b:ee:23:77:78:49:40:64:a4:37:77: 44:b5:2b:04:cc:55:8c:1d:3f:e1:24:e2:b1:d6:70:cc:84:4e: 60:a8:76:18 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUOK1kGlAeJCtAznKDnuHkk3SeCZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhEOTZD QzQzQjM5RjAeFw0yNjA1MDMwMjU3MjlaFw0yNzA1MDIwMzAyMjlaMDMxMTAvBgNV BAMTKDExODFCMUJBRDUwOEJGNENCNDcwQUMzREM5Q0YyRjJFOTNBMjJFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70kivJWHTL4it+lU3f8b0u0aG LC/UsjU450prSjsxeg6bMQ4LA4ygG7AyGU3D4vgh5EhMP8zUDm8BqXgpyiOD1n4S ELY4/McFEi/0DsvdPeJ1iSHe1L9mKjyxtSJhc82Pk0vHqwgOn2lGrzNGFfF1LceC T5jL0A+0f7hn1YxfjThidPcxSgyTvaAASSXAzNGc0xmtG2ai4vJsvDCbtjuMArG8 4f1PIzbCSA6bo3PSB5ifyCEsw5OHHLy1SK2MENXkjl7gAi6NU8/ippwChrTm2h1u +ohsAVzA94AtVVm++XXupxNoHDFcPUuWWXne4AVsSuBf5IO/dCVcgjU3oGqBAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUEYGxutUIv0y0cKw9yc8vLpOiLokwHwYDVR0j BBgwFoAUWUBta4lNJZb4lQA97k2NlsxDs58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxZWU1ZTItMzM4Yy00ZDIwLTgwN2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4 OTREMjU5NkY4OTUwMDNERUU0RDhEOTZDQzQzQjM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTQwNkQ2Qjg5NEQyNTk2Rjg5NTAwM0RFRTREOEQ5NkNDNDNC MzlGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JkMWVlNWUyLTMzOGMtNGQyMC04 MDdlLWU1MGI3NTU4M2RiOC8wLzMxMzAzMzJlMzIzNDJlMzUzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzYzMDM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnGDgwDQYJKoZIhvcN AQELBQADggEBAB3pFrKyTaVW+QdZkxXNQS/8BTPmBmWML2pAsJUvgXVQcLQnj4Ar mZcnW4iv7mls0Lczu0RW44XCC+ANkvMFuCQ2kLPrP1Q7sEjFVIJ8phTOAvJ0uxYj UqaE37l/ayksIMdo2kCKSmeFoj9cEVx2W51JJ+4JVjxkDXJ9ztotvuJkkK5tdxAp m/bSA/R/KuzB2DFyp0jcXDsyS2o6hVG0NSUpVV/9xDx0YvENyAkSNfxfEfnQNR97 9JlpyceiKiwGZ+TpuUft07qoO1NV7+4/C5qHrA1Mv/pm+DM/VqshdQlL7iN3eElA ZKQ3d0S1KwTMVYwdP+Ek4rHWcMyETmCodhg= -----END CERTIFICATE-----Generated at Tue May 12 23:10:32 2026 by rpki-client