$ rpki-client -vvf rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa File: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (raw, json) Hash identifier: TJUBR5g23/Ha5LOhGDSn0vJC/lz9ZEDX1zyT3IQkV1w= Subject key identifier: 2A:F3:51:0F:8B:3F:7B:09:36:A2:9F:FD:1C:1F:31:2E:2E:79:70:63 Certificate issuer: /CN=CA342D64E10FDED8935633F782F970DA5D9B064C Certificate serial: 4A32E96F53AE390987728BCE328CFDAFA1C96E63 Authority key identifier: CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa Signing time: Sun 03 May 2026 03:11:45 +0000 ROA not before: Sun 03 May 2026 03:06:45 +0000 ROA not after: Sun 02 May 2027 03:11:45 +0000 asID: 141122 IP address blocks: 103.157.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:32:e9:6f:53:ae:39:09:87:72:8b:ce:32:8c:fd:af:a1:c9:6e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA342D64E10FDED8935633F782F970DA5D9B064C Validity Not Before: May 3 03:06:45 2026 GMT Not After : May 2 03:11:45 2027 GMT Subject: CN=2AF3510F8B3F7B0936A29FFD1C1F312E2E797063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:ee:48:21:fb:15:1a:b7:9b:3f:11:93:a8: d0:c4:ef:c6:65:63:9e:3c:6a:c4:68:10:cf:26:7c: 16:6e:a0:a3:a7:50:de:ad:ca:24:8b:cd:c1:62:39: 0a:c7:bd:48:d5:55:dc:d6:7c:f1:34:c1:93:5c:2e: 45:f2:72:5c:17:7f:ce:91:cd:49:45:1b:b5:85:9f: 68:23:40:96:66:75:17:bb:0e:a8:be:48:74:e2:9a: 23:9b:ba:da:ce:94:8b:1a:72:3c:02:f3:ff:77:ef: e3:06:a8:cb:bf:61:01:af:8f:9d:91:ea:a3:25:6d: b7:29:33:66:3a:8e:8e:41:59:6d:30:78:f4:4b:0a: aa:27:f3:cb:fa:e1:78:7a:1f:a6:8d:00:3c:aa:02: ef:06:f1:b5:aa:6f:e9:f9:48:32:dc:c2:f7:f9:1a: be:35:6f:10:69:f3:fb:eb:84:cd:c7:2f:99:ff:5c: a0:42:29:3e:ef:b6:af:16:28:93:dc:4f:d1:2c:18: ae:9c:f6:7b:39:ff:6b:98:73:3d:e0:35:6c:f5:a6: 75:2f:4c:bf:e1:7a:02:a1:85:d2:ec:3f:45:40:b6: 0f:4a:f3:e4:cc:79:24:a0:a1:f8:8c:62:ca:82:91: 99:a2:4c:a4:f3:72:88:f8:03:bf:9b:7d:a4:12:da: 31:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F3:51:0F:8B:3F:7B:09:36:A2:9F:FD:1C:1F:31:2E:2E:79:70:63 X509v3 Authority Key Identifier: keyid:CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.192.0/24 Signature Algorithm: sha256WithRSAEncryption af:a4:4b:17:c5:64:05:17:3b:af:29:e4:b5:b1:5c:f2:a4:30: 58:c2:79:40:ef:43:ac:cb:97:fb:1c:61:22:73:c6:0e:2d:21: 5c:a9:16:50:90:0d:63:c4:69:63:78:ab:be:41:db:f8:01:ca: 86:6b:63:a2:6b:05:6b:2a:30:6e:b6:fa:33:e8:f0:8d:a7:d2: e3:b2:ed:7b:51:20:da:c0:7f:2c:ef:fe:d7:d8:aa:f7:f2:f9: a6:c2:62:52:b4:ac:93:a7:9e:db:89:b3:81:38:46:90:86:49: b2:0d:f5:08:72:e4:8a:55:7a:90:8f:30:c1:3d:fc:b4:80:34: 6c:c0:c3:e9:3c:3d:3e:9d:0e:36:66:27:35:11:99:ae:09:0c: 42:52:b0:96:22:c9:8e:8d:23:ab:00:a7:15:f2:2a:93:17:ee: 49:bb:0f:fc:17:b9:6f:48:47:f0:16:01:80:05:cf:68:fe:ca: 4c:4f:e3:0b:37:a2:62:d2:23:5d:09:64:63:66:b0:83:28:d1: 91:7d:ac:32:46:fd:40:22:fd:56:e9:46:2b:8f:2b:ae:51:a3: 9a:91:75:05:20:a9:a5:94:2d:5f:cf:e5:49:e2:45:78:5b:23: ad:9f:a0:f6:5c:16:08:1f:45:af:d2:50:42:cb:f5:c6:b5:10: 91:6a:1b:20 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSjLpb1OuOQmHcovOMoz9r6HJbmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcwREE1 RDlCMDY0QzAeFw0yNjA1MDMwMzA2NDVaFw0yNzA1MDIwMzExNDVaMDMxMTAvBgNV BAMTKDJBRjM1MTBGOEIzRjdCMDkzNkEyOUZGRDFDMUYzMTJFMkU3OTcwNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcCu5IIfsVGrebPxGTqNDE78Zl Y548asRoEM8mfBZuoKOnUN6tyiSLzcFiOQrHvUjVVdzWfPE0wZNcLkXyclwXf86R zUlFG7WFn2gjQJZmdRe7Dqi+SHTimiObutrOlIsacjwC8/937+MGqMu/YQGvj52R 6qMlbbcpM2Y6jo5BWW0wePRLCqon88v64Xh6H6aNADyqAu8G8bWqb+n5SDLcwvf5 Gr41bxBp8/vrhM3HL5n/XKBCKT7vtq8WKJPcT9EsGK6c9ns5/2uYcz3gNWz1pnUv TL/hegKhhdLsP0VAtg9K8+TMeSSgofiMYsqCkZmiTKTzcoj4A7+bfaQS2jHTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUKvNRD4s/ewk2op/9HB8xLi55cGMwHwYDVR0j BBgwFoAUyjQtZOEP3tiTVjP3gvlw2l2bBkwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2ZjVjZTctYjM2Yi00NzNkLWE1YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRF MTBGREVEODkzNTYzM0Y3ODJGOTcwREE1RDlCMDY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTM0MkQ2NEUxMEZERUQ4OTM1NjMzRjc4MkY5NzBEQTVEOUIw NjRDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RlNmY1Y2U3LWIzNmItNDczZC1h NWJlLTljMDM1MGQxZjM4Mi8wLzMxMzAzMzJlMzEzNTM3MmUzMTM5MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnncAwDQYJ KoZIhvcNAQELBQADggEBAK+kSxfFZAUXO68p5LWxXPKkMFjCeUDvQ6zLl/scYSJz xg4tIVypFlCQDWPEaWN4q75B2/gByoZrY6JrBWsqMG62+jPo8I2n0uOy7XtRINrA fyzv/tfYqvfy+abCYlK0rJOnntuJs4E4RpCGSbIN9Qhy5IpVepCPMME9/LSANGzA w+k8PT6dDjZmJzURma4JDEJSsJYiyY6NI6sApxXyKpMX7km7D/wXuW9IR/AWAYAF z2j+ykxP4ws3omLSI10JZGNmsIMo0ZF9rDJG/UAi/VbpRiuPK65Ro5qRdQUgqaWU LV/P5UniRXhbI62foPZcFggfRa/SUELL9ca1EJFqGyA= -----END CERTIFICATE-----Generated at Wed May 13 04:47:53 2026 by rpki-client