$ rpki-client -vvf rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32342d3234203d3e20313339343237.roa File: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (raw, json) Hash identifier: oRYTuCJLLdMWXGYdD1e1WCx/FrIV0BiHCyH2sk8DrtM= Subject key identifier: 04:49:19:43:3C:36:CA:0B:F6:B7:3B:58:00:3E:5A:8C:55:B0:2D:01 Certificate issuer: /CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Certificate serial: 2321DDB233083E811438EE638C5CE7106ED515E5 Authority key identifier: 2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32342d3234203d3e20313339343237.roa Signing time: Sun 03 May 2026 03:09:50 +0000 ROA not before: Sun 03 May 2026 03:04:50 +0000 ROA not after: Sun 02 May 2027 03:09:50 +0000 asID: 139427 IP address blocks: 103.52.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:21:dd:b2:33:08:3e:81:14:38:ee:63:8c:5c:e7:10:6e:d5:15:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Validity Not Before: May 3 03:04:50 2026 GMT Not After : May 2 03:09:50 2027 GMT Subject: CN=044919433C36CA0BF6B73B58003E5A8C55B02D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:4d:6b:c3:2d:0b:95:60:9c:6d:98:79:81: e4:fe:21:38:f2:b8:49:f0:76:2b:05:87:f3:2c:bf: 1f:29:7b:21:e0:13:69:84:3a:11:91:fb:4a:b0:f1: ce:a2:eb:b9:57:a0:41:0d:ee:6d:e4:b5:af:51:a5: e4:c0:b2:5b:6e:41:25:21:83:cc:2a:e8:64:df:2d: 26:23:9c:4f:36:43:cc:3d:05:bf:eb:66:30:34:92: 2a:1b:af:a4:0b:62:3a:09:4d:3b:87:5a:f8:ec:90: c8:bb:0f:52:a9:47:91:fd:9d:fd:b5:e2:86:de:12: 95:53:73:56:56:5e:9f:bc:89:e2:5b:e7:22:40:39: 9e:70:e8:05:17:d0:5e:b4:82:d1:fb:1f:00:74:ee: 62:bd:11:42:82:5b:73:98:90:23:e4:a1:5d:9c:7b: 4d:f6:5b:fb:45:fe:75:7d:0a:26:e3:dc:78:75:47: 41:a5:50:e9:c2:22:13:dd:d7:eb:2d:72:60:79:ca: af:2a:ef:b9:db:16:94:d8:16:4e:cc:b7:5d:ca:97: 44:c6:2d:22:58:1f:15:2e:c4:cf:dc:8b:d6:df:5a: cb:6c:ae:c7:2a:93:44:06:4f:de:c0:d5:a1:e3:e1: 26:79:2a:e1:77:e7:46:f3:a5:2c:c4:eb:08:8d:7b: a1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:49:19:43:3C:36:CA:0B:F6:B7:3B:58:00:3E:5A:8C:55:B0:2D:01 X509v3 Authority Key Identifier: keyid:2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32342d3234203d3e20313339343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.60.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:e5:a8:12:92:fb:84:bd:c6:ce:de:70:d5:be:24:9c:2d:50: c2:24:5b:69:1f:33:36:61:90:1d:05:7c:d5:a9:0d:e1:96:38: 47:70:1b:e6:97:1f:87:fa:58:ca:a5:c5:ef:f0:3b:2b:60:83: 1a:91:4f:ae:70:19:9f:82:ea:8c:e9:be:8c:3d:90:11:e2:95: 1b:59:48:30:17:fe:1b:bf:04:5f:4d:94:70:5d:a9:cc:23:a5: b9:38:68:03:17:bc:7c:84:83:ed:d9:e4:92:8a:f9:50:a5:ab: 6e:3d:d2:62:4c:a9:22:20:0f:28:d6:85:e1:eb:ad:6a:8c:3b: 16:ae:8f:7b:fa:09:2e:c7:0f:50:bb:00:21:e9:3a:46:08:ee: 79:2e:db:97:f1:a6:cb:2e:b2:ac:d9:fd:6f:8e:49:64:e4:92: 33:61:e2:58:01:44:06:58:b3:70:29:c9:b7:57:35:5b:d9:68: 6d:21:80:d0:71:54:9e:4c:47:c7:62:5c:fd:0c:84:25:6e:2c: 99:76:0e:94:00:44:6a:bd:5e:75:48:b8:df:38:69:dc:5d:e0: 17:17:dd:c8:bc:8c:5f:e6:27:35:51:1d:0a:09:04:b0:a3:b3: 76:e7:e8:90:d7:cb:48:e1:c0:e1:95:17:fe:73:64:f6:c0:0d: 5b:3c:4d:8d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIyHdsjMIPoEUOO5jjFznEG7VFeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0MUNC RkIzRkIzMjAeFw0yNjA1MDMwMzA0NTBaFw0yNzA1MDIwMzA5NTBaMDMxMTAvBgNV BAMTKDA0NDkxOTQzM0MzNkNBMEJGNkI3M0I1ODAwM0U1QThDNTVCMDJEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChAU1rwy0LlWCcbZh5geT+ITjy uEnwdisFh/Msvx8peyHgE2mEOhGR+0qw8c6i67lXoEEN7m3kta9RpeTAsltuQSUh g8wq6GTfLSYjnE82Q8w9Bb/rZjA0kiobr6QLYjoJTTuHWvjskMi7D1KpR5H9nf21 4obeEpVTc1ZWXp+8ieJb5yJAOZ5w6AUX0F60gtH7HwB07mK9EUKCW3OYkCPkoV2c e032W/tF/nV9Cibj3Hh1R0GlUOnCIhPd1+stcmB5yq8q77nbFpTYFk7Mt13Kl0TG LSJYHxUuxM/ci9bfWstsrscqk0QGT97A1aHj4SZ5KuF350bzpSzE6wiNe6EVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUBEkZQzw2ygv2tztYAD5ajFWwLQEwHwYDVR0j BBgwFoAULL2BKV6j+jhnCCBy0b3kHL+z+zIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDYxYjhjY2MtNmMyMi00MjRlLTk2MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1 RUEzRkEzODY3MDgyMDcyRDFCREU0MUNCRkIzRkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0JEODEyOTVFQTNGQTM4NjcwODIwNzJEMUJERTQxQ0JGQjNG QjMyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q2MWI4Y2NjLTZjMjItNDI0ZS05 NjE0LThhYjhhZDI4ODQ5Yy8wLzMxMzAzMzJlMzUzMjJlMzYzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzOTM0MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc0PDANBgkqhkiG 9w0BAQsFAAOCAQEAjuWoEpL7hL3Gzt5w1b4knC1QwiRbaR8zNmGQHQV81akN4ZY4 R3Ab5pcfh/pYyqXF7/A7K2CDGpFPrnAZn4LqjOm+jD2QEeKVG1lIMBf+G78EX02U cF2pzCOluThoAxe8fISD7dnkkor5UKWrbj3SYkypIiAPKNaF4eutaow7Fq6Pe/oJ LscPULsAIek6RgjueS7bl/Gmyy6yrNn9b45JZOSSM2HiWAFEBlizcCnJt1c1W9lo bSGA0HFUnkxHx2Jc/QyEJW4smXYOlABEar1edUi43zhp3F3gFxfdyLyMX+YnNVEd CgkEsKOzdufokNfLSOHA4ZUX/nNk9sANWzxNjQ== -----END CERTIFICATE-----Generated at Wed May 13 08:27:54 2026 by rpki-client