$ rpki-client -vvf rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa File: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (raw, json) Hash identifier: gQZiPSYPZragbcbOQFwUKBcBf5Wr0XRio1UQ/GfXKcY= Subject key identifier: C9:BB:92:C3:23:AC:0E:CE:FF:C3:3C:7A:FC:B3:26:FB:FF:B0:07:18 Certificate issuer: /CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Certificate serial: 2EABE3A64219A5B7F2553BA4FA50AAD9055DBC09 Authority key identifier: 2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa Signing time: Sun 03 May 2026 03:09:50 +0000 ROA not before: Sun 03 May 2026 03:04:50 +0000 ROA not after: Sun 02 May 2027 03:09:50 +0000 asID: 139427 IP address blocks: 103.31.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ab:e3:a6:42:19:a5:b7:f2:55:3b:a4:fa:50:aa:d9:05:5d:bc:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Validity Not Before: May 3 03:04:50 2026 GMT Not After : May 2 03:09:50 2027 GMT Subject: CN=C9BB92C323AC0ECEFFC33C7AFCB326FBFFB00718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:09:06:e1:f6:48:37:ad:21:38:20:e7:fa:c2: cc:9f:cc:a3:6c:35:65:d7:a8:70:94:59:cb:dd:95: 59:12:c7:5b:6b:31:66:28:da:49:db:e1:b3:7d:d1: 54:6f:06:e6:f6:35:43:30:39:c6:55:8e:12:54:d0: c3:56:11:65:d1:2d:6f:ef:7a:7e:cc:34:73:f9:eb: 04:04:06:02:c0:bd:08:c7:93:36:78:2a:aa:06:25: 4d:32:d3:4c:2b:c4:11:f3:05:d4:f7:03:27:8b:27: 8a:70:b1:64:45:bc:c1:4a:f5:72:8e:d2:25:35:55: a6:03:c0:1c:54:0e:20:c6:da:57:ea:cf:4a:e8:86: f6:bf:c0:7e:78:42:d5:6d:a7:9a:a5:47:50:97:ce: 0d:87:57:9b:e7:93:55:3a:06:3a:c3:cb:1f:f7:98: 03:75:a1:a4:a6:3b:2b:27:f1:77:c2:4f:62:1c:d3: 4a:cf:a4:1d:9f:8e:3d:c0:9b:e0:0d:ea:1d:28:c0: 0c:a0:e3:e6:1c:d3:11:fa:72:d7:3c:df:3c:ac:89: 36:52:13:11:0d:79:5f:8b:c8:10:33:98:98:c3:08: bc:db:39:99:75:e8:86:63:cf:ce:17:cc:c0:07:93: 23:fa:cf:d5:c0:7a:a3:ca:ef:6a:24:83:c0:49:55: 19:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BB:92:C3:23:AC:0E:CE:FF:C3:3C:7A:FC:B3:26:FB:FF:B0:07:18 X509v3 Authority Key Identifier: keyid:2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.248.0/23 Signature Algorithm: sha256WithRSAEncryption 92:a9:0d:d6:b9:62:c7:ac:ab:bb:99:15:ac:f0:a2:4b:54:39: a9:83:bd:4d:cf:5c:c5:dd:80:92:85:84:3e:ea:b2:72:ca:04: 2b:8a:e1:54:b4:5e:1e:59:6c:9a:08:db:2a:74:65:48:d5:17: 04:94:08:54:2c:3b:fa:9f:b4:47:d1:4c:a8:e4:0a:b1:d7:78: 01:4a:64:43:e6:5f:36:20:eb:ba:08:69:6f:5e:e5:0f:17:bd: 98:bd:b4:bd:69:3a:5c:0e:2e:a2:fe:86:b3:69:a9:9f:df:1a: 9e:7e:1a:ac:e8:ea:fc:b7:12:62:2e:9b:24:df:33:57:5f:7e: 17:10:82:8a:93:97:c2:55:cf:b6:b7:69:a9:4b:df:64:7c:50: 8e:c1:23:fa:2d:5c:da:f9:23:3e:29:df:07:c6:00:b1:60:3e: 92:5f:e7:60:6b:a1:99:59:c1:38:ea:61:4e:75:35:9e:60:7d: b8:a1:87:ec:c9:99:37:31:bf:5e:52:a3:f0:4c:78:c6:15:4b: 61:d2:f3:53:8f:fb:b5:ef:4d:0f:64:18:0c:4c:12:67:ed:32: 4d:91:76:26:4f:65:0e:1d:1c:99:57:67:be:54:cd:67:f6:06: ee:9f:6e:8d:59:eb:80:6e:f7:9e:3b:b2:37:1e:b1:9d:ad:a6: 68:ef:c1:cb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULqvjpkIZpbfyVTuk+lCq2QVdvAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0MUNC RkIzRkIzMjAeFw0yNjA1MDMwMzA0NTBaFw0yNzA1MDIwMzA5NTBaMDMxMTAvBgNV BAMTKEM5QkI5MkMzMjNBQzBFQ0VGRkMzM0M3QUZDQjMyNkZCRkZCMDA3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUCQbh9kg3rSE4IOf6wsyfzKNs NWXXqHCUWcvdlVkSx1trMWYo2knb4bN90VRvBub2NUMwOcZVjhJU0MNWEWXRLW/v en7MNHP56wQEBgLAvQjHkzZ4KqoGJU0y00wrxBHzBdT3AyeLJ4pwsWRFvMFK9XKO 0iU1VaYDwBxUDiDG2lfqz0rohva/wH54QtVtp5qlR1CXzg2HV5vnk1U6BjrDyx/3 mAN1oaSmOysn8XfCT2Ic00rPpB2fjj3Am+AN6h0owAyg4+Yc0xH6ctc83zysiTZS ExENeV+LyBAzmJjDCLzbOZl16IZjz84XzMAHkyP6z9XAeqPK72okg8BJVRkpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUybuSwyOsDs7/wzx6/LMm+/+wBxgwHwYDVR0j BBgwFoAULL2BKV6j+jhnCCBy0b3kHL+z+zIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDYxYjhjY2MtNmMyMi00MjRlLTk2MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1 RUEzRkEzODY3MDgyMDcyRDFCREU0MUNCRkIzRkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0JEODEyOTVFQTNGQTM4NjcwODIwNzJEMUJERTQxQ0JGQjNG QjMyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q2MWI4Y2NjLTZjMjItNDI0ZS05 NjE0LThhYjhhZDI4ODQ5Yy8wLzMxMzAzMzJlMzMzMTJlMzIzNDM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM5MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZx/4MA0GCSqG SIb3DQEBCwUAA4IBAQCSqQ3WuWLHrKu7mRWs8KJLVDmpg71Nz1zF3YCShYQ+6rJy ygQriuFUtF4eWWyaCNsqdGVI1RcElAhULDv6n7RH0Uyo5Aqx13gBSmRD5l82IOu6 CGlvXuUPF72YvbS9aTpcDi6i/oazaamf3xqefhqs6Or8txJiLpsk3zNXX34XEIKK k5fCVc+2t2mpS99kfFCOwSP6LVza+SM+Kd8HxgCxYD6SX+dga6GZWcE46mFOdTWe YH24oYfsyZk3Mb9eUqPwTHjGFUth0vNTj/u1700PZBgMTBJn7TJNkXYmT2UOHRyZ V2e+VM1n9gbun26NWeuAbveeO7I3HrGdraZo78HL -----END CERTIFICATE-----Generated at Wed May 13 10:20:09 2026 by rpki-client