$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa File: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (raw, json) Hash identifier: 3sTXjzHUOLPeEyAojCjuo6mjJbiX0Eb7eAu+BmtWebk= Subject key identifier: 6B:96:57:C0:83:9A:19:84:41:D1:0A:45:BD:98:AC:C9:DA:36:D7:F0 Certificate issuer: /CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Certificate serial: 6B3785C0A70A686E0FBE25E6E8CBEE4AC897ACDD Authority key identifier: C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa Signing time: Sun 03 May 2026 03:09:05 +0000 ROA not before: Sun 03 May 2026 03:04:05 +0000 ROA not after: Sun 02 May 2027 03:09:05 +0000 asID: 140443 IP address blocks: 103.152.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:37:85:c0:a7:0a:68:6e:0f:be:25:e6:e8:cb:ee:4a:c8:97:ac:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Validity Not Before: May 3 03:04:05 2026 GMT Not After : May 2 03:09:05 2027 GMT Subject: CN=6B9657C0839A198441D10A45BD98ACC9DA36D7F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:cb:a1:3c:a6:9f:f2:02:60:f7:e6:a1:1f: 63:27:1e:1d:60:b0:99:75:27:65:5c:3e:d8:da:84: 73:c4:e9:a8:6d:9c:4d:90:a5:33:c6:44:e8:6e:e5: 28:c2:1a:19:cb:a4:b3:96:75:64:ff:7f:50:db:0e: cb:f9:bd:1a:5f:f8:0a:ee:ad:93:64:a5:40:03:a0: 63:4a:f2:ab:d3:0f:f1:ec:ed:32:6c:3c:06:5b:d1: 70:46:65:c6:a6:2a:9a:41:52:9a:a0:52:4d:94:7b: 35:24:e6:d4:e9:36:4e:f5:52:67:70:9c:80:4f:d6: ab:f9:21:1a:65:d4:8b:84:17:7d:9a:d4:0b:39:c7: db:0d:6a:29:8b:ad:4b:58:4a:47:9c:d1:1a:69:59: b3:8d:cf:85:02:02:79:02:6c:df:1b:4b:47:f8:9f: 15:d2:3f:54:0c:92:e3:f7:41:df:f1:60:f1:8b:30: 62:89:14:dd:93:c6:e7:b5:23:4a:4c:f3:4a:31:9c: 98:af:18:ef:ed:bd:dc:27:04:87:c5:c4:55:fd:db: 58:a3:8d:6f:59:5c:a7:a8:51:27:01:b9:c5:de:4f: a6:e1:2a:df:55:5c:10:5c:ba:25:68:06:c0:f8:49: 1a:cb:54:62:ee:11:aa:3e:0c:88:4f:3b:6c:94:c7: 68:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:96:57:C0:83:9A:19:84:41:D1:0A:45:BD:98:AC:C9:DA:36:D7:F0 X509v3 Authority Key Identifier: keyid:C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.118.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:49:e7:fa:0e:c3:1d:ad:73:4e:1a:aa:e9:44:21:94:b9:26: 8c:39:0c:e7:a9:36:67:e5:ac:2e:5a:ad:4d:6d:13:a3:c2:6f: 9b:11:9e:ba:9e:59:bd:25:ef:2c:5e:b7:17:2c:a3:03:24:c9: 20:cb:89:7e:10:33:4c:84:ce:de:ed:4c:2e:a3:29:21:44:30: 41:cc:04:7d:6f:55:eb:cc:1c:9a:41:e4:d3:d9:fe:f1:67:0c: a9:9d:6d:7a:93:ca:e0:51:61:60:1b:4b:ca:2d:e3:25:99:2e: bf:9e:68:07:bb:7a:85:7b:a1:c3:d7:2d:be:34:48:86:a5:8c: 9a:35:b6:24:ba:b8:8b:f1:08:29:86:73:80:79:68:e0:1f:6d: f8:37:4a:a6:77:07:43:d3:60:0b:75:86:0a:3a:81:9f:99:57: d5:3a:41:6d:b9:3d:d8:ec:a0:45:98:23:9e:b5:72:6e:7c:5e: b3:c1:06:1e:7f:4e:30:fb:3b:e3:3f:b2:22:74:e8:94:da:a4: 7c:f9:c9:1f:a5:07:a9:01:df:55:6a:e7:a4:65:d4:52:e5:4c: 0d:69:a4:62:dc:9a:db:9f:b5:f4:fd:8a:c1:66:9d:26:d3:a9: f8:ec:37:b1:71:c9:ea:6f:bd:ae:8f:aa:dd:d6:78:c6:fc:9a: 6d:18:b3:ba -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUazeFwKcKaG4PviXm6MvuSsiXrN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5 QUIxQzc4RjAeFw0yNjA1MDMwMzA0MDVaFw0yNzA1MDIwMzA5MDVaMDMxMTAvBgNV BAMTKDZCOTY1N0MwODM5QTE5ODQ0MUQxMEE0NUJEOThBQ0M5REEzNkQ3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vsuhPKaf8gJg9+ahH2MnHh1g sJl1J2VcPtjahHPE6ahtnE2QpTPGROhu5SjCGhnLpLOWdWT/f1DbDsv5vRpf+Aru rZNkpUADoGNK8qvTD/Hs7TJsPAZb0XBGZcamKppBUpqgUk2UezUk5tTpNk71Umdw nIBP1qv5IRpl1IuEF32a1As5x9sNaimLrUtYSkec0RppWbONz4UCAnkCbN8bS0f4 nxXSP1QMkuP3Qd/xYPGLMGKJFN2Txue1I0pM80oxnJivGO/tvdwnBIfFxFX921ij jW9ZXKeoUScBucXeT6bhKt9VXBBcuiVoBsD4SRrLVGLuEao+DIhPO2yUx2jnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUa5ZXwIOaGYRB0QpFvZisydo21/AwHwYDVR0j BBgwFoAUxSwSq5sTWbk8bIZAPTtR0Zqxx48wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwNzNhY2UtYTY5MS00ODYzLTljMWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5 QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5QUIxQzc4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNTJDMTJBQjlCMTM1OUI5M0M2Qzg2NDAzRDNCNTFEMTlBQjFD NzhGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QyMDczYWNlLWE2OTEtNDg2My05 YzFjLTU5YjJkYjljYjQ2My8wLzMxMzAzMzJlMzEzNTMyMmUzMTMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM0MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmHYwDQYJ KoZIhvcNAQELBQADggEBAB1J5/oOwx2tc04aqulEIZS5Jow5DOepNmflrC5arU1t E6PCb5sRnrqeWb0l7yxetxcsowMkySDLiX4QM0yEzt7tTC6jKSFEMEHMBH1vVevM HJpB5NPZ/vFnDKmdbXqTyuBRYWAbS8ot4yWZLr+eaAe7eoV7ocPXLb40SIaljJo1 tiS6uIvxCCmGc4B5aOAfbfg3SqZ3B0PTYAt1hgo6gZ+ZV9U6QW25PdjsoEWYI561 cm58XrPBBh5/TjD7O+M/siJ06JTapHz5yR+lB6kB31Vq56Rl1FLlTA1ppGLcmtuf tfT9isFmnSbTqfjsN7Fxyepvva6Pqt3WeMb8mm0Ys7o= -----END CERTIFICATE-----Generated at Wed May 13 08:40:08 2026 by rpki-client