$ rpki-client -vvf rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32332d3233203d3e20313339343237.roa File: 3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (raw, json) Hash identifier: wZpRBXgVxARx5THQhkidt3uYEJCBivcYi7zf6PFHOe8= Subject key identifier: B1:4C:11:00:FF:24:72:84:D7:3D:97:A1:4E:44:D9:B7:91:DD:C9:3A Certificate issuer: /CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Certificate serial: 021299F2863D8225BD86B9110A701943287A9FE1 Authority key identifier: 2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32332d3233203d3e20313339343237.roa Signing time: Sun 03 May 2026 03:09:49 +0000 ROA not before: Sun 03 May 2026 03:04:49 +0000 ROA not after: Sun 02 May 2027 03:09:49 +0000 asID: 139427 IP address blocks: 103.52.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:12:99:f2:86:3d:82:25:bd:86:b9:11:0a:70:19:43:28:7a:9f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Validity Not Before: May 3 03:04:49 2026 GMT Not After : May 2 03:09:49 2027 GMT Subject: CN=B14C1100FF247284D73D97A14E44D9B791DDC93A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ef:79:ee:1a:92:15:9a:a7:f6:5c:17:41:db: 96:ee:32:18:f6:a5:46:e0:12:5d:ff:4b:9f:09:fb: 23:6a:dc:d1:ec:27:40:01:cb:ed:03:1a:8a:5c:37: 75:16:75:54:c5:c7:6e:3e:7f:b8:32:b5:d7:28:69: 44:c6:67:9f:49:50:e1:af:cc:d8:41:e4:bc:6d:fe: ef:80:93:5b:84:1b:1a:c2:f7:ff:87:c0:15:f7:05: a4:75:93:cf:cc:48:4e:1f:45:30:39:01:79:b5:de: df:30:f1:6b:37:a2:2d:72:bc:ed:44:fa:77:49:4c: a1:bb:36:56:4d:ff:44:69:7e:e3:ff:11:a0:97:45: 1f:5d:64:31:3b:45:c3:8c:db:31:f6:f2:32:7d:34: 0e:c3:ed:e6:fc:cd:a3:56:21:6b:e9:12:92:ca:fe: 33:10:67:4e:51:3b:05:20:19:fc:0a:82:8b:28:47: 89:29:27:db:ad:8f:7e:9b:47:69:15:a6:07:96:2b: e8:0d:4c:3d:14:7f:00:c1:82:4b:ec:6f:ec:f0:e4: e3:57:1e:f4:b8:f5:a1:90:fe:ad:d1:25:40:e8:20: 8c:9f:3c:9d:6c:ad:e1:a0:e9:d3:71:de:65:3e:7c: 45:43:21:0b:4f:99:56:60:00:c9:54:80:b7:d9:0a: e1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4C:11:00:FF:24:72:84:D7:3D:97:A1:4E:44:D9:B7:91:DD:C9:3A X509v3 Authority Key Identifier: keyid:2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32332d3233203d3e20313339343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.60.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:04:3f:6c:c7:9d:5b:ed:f0:3d:3f:b0:9a:33:3b:75:e2:3a: 42:d9:6a:7b:b3:cf:5f:ab:63:cf:76:e2:66:f6:c6:e2:bf:2b: 8b:3a:da:6f:bc:8b:50:10:ed:45:b1:f3:9e:b2:bb:83:b6:35: 79:1b:0f:40:f8:95:c9:be:0f:06:90:d2:66:ae:70:74:b3:79: 52:b4:1f:62:c8:d4:96:d8:33:22:2c:05:3b:00:05:3f:30:cf: d0:bf:50:0c:b5:05:bb:0a:4e:06:4a:be:3e:d8:09:fb:bd:33: 0c:34:53:92:ee:31:a7:e2:5b:f4:64:da:ca:14:a1:54:e6:79: 3d:aa:c5:b9:8b:6d:b0:10:99:95:77:55:31:18:87:f0:00:8b: 9e:db:63:28:b1:e2:7c:ed:b0:de:bf:46:83:5e:49:66:56:2b: 54:d9:d2:07:0e:ea:c1:2a:59:c8:87:43:84:95:50:1f:02:7d: 06:38:1e:83:7a:e3:35:58:84:4d:10:7a:b5:a1:8d:9e:15:bc: 7f:09:d4:88:07:6c:22:51:5f:90:e2:77:bc:70:0e:2c:f7:20: 67:e7:42:b5:09:16:13:89:4b:85:56:40:41:cd:5f:b0:82:4f: 65:04:0d:4d:47:16:b0:e1:d0:d2:ec:79:67:58:54:2d:11:ee: dd:51:ba:8b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAhKZ8oY9giW9hrkRCnAZQyh6n+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0MUNC RkIzRkIzMjAeFw0yNjA1MDMwMzA0NDlaFw0yNzA1MDIwMzA5NDlaMDMxMTAvBgNV BAMTKEIxNEMxMTAwRkYyNDcyODRENzNEOTdBMTRFNDREOUI3OTFEREM5M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc73nuGpIVmqf2XBdB25buMhj2 pUbgEl3/S58J+yNq3NHsJ0ABy+0DGopcN3UWdVTFx24+f7gytdcoaUTGZ59JUOGv zNhB5Lxt/u+Ak1uEGxrC9/+HwBX3BaR1k8/MSE4fRTA5AXm13t8w8Ws3oi1yvO1E +ndJTKG7NlZN/0RpfuP/EaCXRR9dZDE7RcOM2zH28jJ9NA7D7eb8zaNWIWvpEpLK /jMQZ05ROwUgGfwKgosoR4kpJ9utj36bR2kVpgeWK+gNTD0UfwDBgkvsb+zw5ONX HvS49aGQ/q3RJUDoIIyfPJ1sreGg6dNx3mU+fEVDIQtPmVZgAMlUgLfZCuEJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUsUwRAP8kcoTXPZehTkTZt5HdyTowHwYDVR0j BBgwFoAULL2BKV6j+jhnCCBy0b3kHL+z+zIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDYxYjhjY2MtNmMyMi00MjRlLTk2MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1 RUEzRkEzODY3MDgyMDcyRDFCREU0MUNCRkIzRkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0JEODEyOTVFQTNGQTM4NjcwODIwNzJEMUJERTQxQ0JGQjNG QjMyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q2MWI4Y2NjLTZjMjItNDI0ZS05 NjE0LThhYjhhZDI4ODQ5Yy8wLzMxMzAzMzJlMzUzMjJlMzYzMDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzMzOTM0MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc0PDANBgkqhkiG 9w0BAQsFAAOCAQEAPAQ/bMedW+3wPT+wmjM7deI6Qtlqe7PPX6tjz3biZvbG4r8r izrab7yLUBDtRbHznrK7g7Y1eRsPQPiVyb4PBpDSZq5wdLN5UrQfYsjUltgzIiwF OwAFPzDP0L9QDLUFuwpOBkq+PtgJ+70zDDRTku4xp+Jb9GTayhShVOZ5ParFuYtt sBCZlXdVMRiH8ACLnttjKLHifO2w3r9Gg15JZlYrVNnSBw7qwSpZyIdDhJVQHwJ9 Bjgeg3rjNViETRB6taGNnhW8fwnUiAdsIlFfkOJ3vHAOLPcgZ+dCtQkWE4lLhVZA Qc1fsIJPZQQNTUcWsOHQ0ux5Z1hULRHu3VG6iw== -----END CERTIFICATE-----Generated at Wed May 13 05:54:38 2026 by rpki-client