$ rpki-client -vvf rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa File: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (raw, json) Hash identifier: PJ6SYnJsMTtu1EVv401gG2I/mMRasJM6zvehsyeEO6I= Subject key identifier: 21:FF:2D:FD:02:E6:5F:24:BA:A6:ED:89:2D:CF:FF:26:83:BB:36:2C Certificate issuer: /CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Certificate serial: 3BD997FAEC96266B2CC828C73EFBAFD60813241F Authority key identifier: EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa Signing time: Sun 03 May 2026 03:11:13 +0000 ROA not before: Sun 03 May 2026 03:06:13 +0000 ROA not after: Sun 02 May 2027 03:11:13 +0000 asID: 140464 IP address blocks: 103.153.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d9:97:fa:ec:96:26:6b:2c:c8:28:c7:3e:fb:af:d6:08:13:24:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Validity Not Before: May 3 03:06:13 2026 GMT Not After : May 2 03:11:13 2027 GMT Subject: CN=21FF2DFD02E65F24BAA6ED892DCFFF2683BB362C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:b8:4e:9c:8c:f6:ef:c8:b6:de:56:55:76: 3b:8f:2d:e5:f9:17:36:a9:a3:c9:94:70:5d:ff:03: e9:4c:dd:67:66:85:bb:48:e7:c6:3a:f3:82:f3:69: fb:36:f6:17:92:5c:bb:a0:17:19:76:fb:7d:58:29: 35:03:46:35:90:2f:7e:52:13:e5:2f:18:f8:59:c6: 53:d2:c4:95:07:7a:d4:0f:a1:43:13:71:5b:19:b2: 98:50:b3:50:9f:24:bc:cb:fe:f2:38:c8:54:b1:ec: b2:5d:71:2c:52:37:26:24:cd:51:7d:09:e0:93:40: c0:8c:06:27:6e:3d:82:34:37:d8:0e:9d:41:9e:0c: fa:6e:84:25:37:0b:59:fd:62:dd:ea:56:89:bb:51: c9:62:0c:e1:83:e1:9f:c5:9b:89:e4:67:91:7a:64: 30:9b:3d:c3:2c:55:81:d9:f6:64:4a:59:4b:41:f5: a1:5c:00:05:82:79:95:a5:0c:96:a6:e5:a8:a7:6e: 14:19:d4:6a:f7:d0:ae:f9:7e:2a:f2:da:7b:e0:06: 35:5f:83:ea:42:6b:46:39:dd:5d:c5:29:6e:5e:2a: 20:50:ae:d3:46:77:53:72:9a:f7:30:52:68:0a:a7: b0:84:60:33:06:09:30:b3:49:ff:fe:a6:d0:83:50: 0f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FF:2D:FD:02:E6:5F:24:BA:A6:ED:89:2D:CF:FF:26:83:BB:36:2C X509v3 Authority Key Identifier: keyid:EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.134.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:e9:b1:4a:2a:b5:26:f2:09:56:8e:69:af:50:04:22:45:44: 48:35:e5:85:5c:d8:24:f4:8b:b3:f3:00:4e:53:ff:86:a1:be: b7:0c:61:87:4f:21:ac:ee:e7:ac:b3:e7:76:95:ec:15:cc:e1: ff:3e:8b:c3:a1:20:d0:d5:a7:c0:48:82:3f:42:ce:4f:5b:9a: 23:4f:30:d4:77:3e:26:ea:6b:a5:61:82:98:55:e8:2b:af:55: 1f:af:b0:dc:53:cf:92:37:05:39:92:7a:81:16:f7:13:82:cc: e7:ae:08:3d:d3:73:a3:26:02:ac:d3:69:3c:7c:67:69:f4:b9: 8b:60:cb:20:d6:96:f4:91:bc:2a:bd:e5:d5:3f:ec:04:d2:dc: a3:a9:f3:c3:b4:0a:54:c7:14:0a:fd:43:17:58:35:d6:a8:d3: 22:97:32:b5:9a:8e:f0:a2:35:62:fa:1b:91:23:d8:3e:79:d0: 9c:3e:e3:2e:ea:f4:52:de:ba:97:19:59:85:2d:42:1e:bd:25: 2c:c8:c5:35:0b:13:94:d9:6a:52:dd:65:b2:74:70:c9:ac:45: dd:5f:23:50:fd:78:44:93:f8:a4:eb:8d:7e:7f:6c:30:df:f6: 29:c7:e3:e8:88:b0:75:ac:e7:51:d7:19:b5:ed:bd:ec:ee:2f: 0a:df:bd:67 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUO9mX+uyWJmssyCjHPvuv1ggTJB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE0MTNGQkNCRTJCRjczNjUyRDg1MTAyNDk1RUNFMzNF OTMzMEQwRjAeFw0yNjA1MDMwMzA2MTNaFw0yNzA1MDIwMzExMTNaMDMxMTAvBgNV BAMTKDIxRkYyREZEMDJFNjVGMjRCQUE2RUQ4OTJEQ0ZGRjI2ODNCQjM2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZzLhOnIz278i23lZVdjuPLeX5 Fzapo8mUcF3/A+lM3WdmhbtI58Y684Lzafs29heSXLugFxl2+31YKTUDRjWQL35S E+UvGPhZxlPSxJUHetQPoUMTcVsZsphQs1CfJLzL/vI4yFSx7LJdcSxSNyYkzVF9 CeCTQMCMBiduPYI0N9gOnUGeDPpuhCU3C1n9Yt3qVom7UcliDOGD4Z/Fm4nkZ5F6 ZDCbPcMsVYHZ9mRKWUtB9aFcAAWCeZWlDJam5ainbhQZ1Gr30K75firy2nvgBjVf g+pCa0Y53V3FKW5eKiBQrtNGd1NymvcwUmgKp7CEYDMGCTCzSf/+ptCDUA/5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUIf8t/QLmXyS6pu2JLc//JoO7NiwwHwYDVR0j BBgwFoAU6kE/vL4r9zZS2FECSV7OM+kzDQ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmU5MDUtZjI5Ni00NWQxLWE4NzktNGE0ZGU1MmNiMmQ2LzAvRUE0MTNGQkNC RTJCRjczNjUyRDg1MTAyNDk1RUNFMzNFOTMzMEQwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQTQxM0ZCQ0JFMkJGNzM2NTJEODUxMDI0OTVFQ0UzM0U5MzMw RDBGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RiOGJlOTA1LWYyOTYtNDVkMS1h ODc5LTRhNGRlNTJjYjJkNi8wLzMxMzAzMzJlMzEzNTMzMmUzMTMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM2MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmYYwDQYJ KoZIhvcNAQELBQADggEBABzpsUoqtSbyCVaOaa9QBCJFREg15YVc2CT0i7PzAE5T /4ahvrcMYYdPIazu56yz53aV7BXM4f8+i8OhINDVp8BIgj9Czk9bmiNPMNR3Pibq a6VhgphV6CuvVR+vsNxTz5I3BTmSeoEW9xOCzOeuCD3Tc6MmAqzTaTx8Z2n0uYtg yyDWlvSRvCq95dU/7ATS3KOp88O0ClTHFAr9QxdYNdao0yKXMrWajvCiNWL6G5Ej 2D550Jw+4y7q9FLeupcZWYUtQh69JSzIxTULE5TZalLdZbJ0cMmsRd1fI1D9eEST +KTrjX5/bDDf9inH4+iIsHWs51HXGbXtvezuLwrfvWc= -----END CERTIFICATE-----Generated at Wed May 13 07:45:42 2026 by rpki-client