$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/3130332e35332e302e302f32322d3234203d3e203633383733.roa File: 3130332e35332e302e302f32322d3234203d3e203633383733.roa (raw, json) Hash identifier: mNLYMhzy89PxQTAE+kur6oFEKDHuq9q324ipGGtSuR0= Subject key identifier: 5E:E6:0D:CA:C7:C6:D4:61:C2:9B:EA:20:D5:75:FD:A0:D2:FE:3A:13 Certificate issuer: /CN=6372758CCA381920292B5E0D338ECF89D0000FEE Certificate serial: 6EA2270FCAA332292451D4649A98ED1DAA4D1C95 Authority key identifier: 63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/3130332e35332e302e302f32322d3234203d3e203633383733.roa Signing time: Sun 03 May 2026 03:15:37 +0000 ROA not before: Sun 03 May 2026 03:10:37 +0000 ROA not after: Sun 02 May 2027 03:15:37 +0000 asID: 63873 IP address blocks: 103.53.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a2:27:0f:ca:a3:32:29:24:51:d4:64:9a:98:ed:1d:aa:4d:1c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6372758CCA381920292B5E0D338ECF89D0000FEE Validity Not Before: May 3 03:10:37 2026 GMT Not After : May 2 03:15:37 2027 GMT Subject: CN=5EE60DCAC7C6D461C29BEA20D575FDA0D2FE3A13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:f1:fa:ca:b3:d6:09:dc:92:e8:09:54:f0: 47:04:ad:fd:57:4f:e1:01:eb:2f:30:32:08:1f:e4: c3:3a:85:52:1b:d2:80:97:b2:25:dd:a3:4f:99:ac: ce:a5:e3:3f:99:47:a3:b7:56:2d:00:a7:3f:51:26: f4:31:7e:5a:9c:1b:29:6c:0a:92:44:2e:5f:d4:73: e8:12:9d:29:a1:82:e2:53:8e:30:19:ac:89:2d:fe: 00:58:0a:65:b5:a3:f7:e2:4d:47:d0:5d:a6:f5:c6: 42:a7:63:7b:fa:53:60:cb:91:1c:ee:c9:e8:d3:34: b7:c6:10:77:fa:9b:cb:f7:67:21:34:aa:67:e7:50: 95:f1:93:47:a2:a7:55:73:6b:26:39:ee:16:16:90: 09:23:a4:b5:e5:df:df:58:0b:bd:a5:7f:79:f7:d4: c4:30:07:f1:bc:0e:9e:3b:47:34:7d:ef:1b:f6:37: c4:88:8d:6a:bd:05:12:82:59:b5:8c:68:f4:1d:5c: 65:ad:e0:93:74:83:76:89:d5:a0:e8:a0:33:f2:0d: d3:2f:1b:fd:14:c5:33:c5:b5:81:91:bd:1f:db:1a: ac:98:72:a0:e1:9a:01:cd:ee:72:ea:fc:e4:50:3d: 01:a7:09:b1:7f:d3:f2:25:2b:69:91:3f:6c:75:58: 2e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E6:0D:CA:C7:C6:D4:61:C2:9B:EA:20:D5:75:FD:A0:D2:FE:3A:13 X509v3 Authority Key Identifier: keyid:63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/3130332e35332e302e302f32322d3234203d3e203633383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.53.0.0/22 Signature Algorithm: sha256WithRSAEncryption 72:b6:5b:cf:8a:1e:19:7a:34:b5:a0:f1:69:e9:43:cb:2a:ce: 75:3d:31:e2:e0:25:04:3f:10:9c:49:7c:d6:35:25:01:88:ac: 74:04:3b:e9:4f:52:12:60:36:59:3a:16:78:a7:7e:bf:e6:54: 19:fc:18:97:58:02:f1:a5:36:66:64:1f:18:bb:52:14:4c:57: 08:e6:4b:5b:2d:6b:55:1c:e3:70:c7:e8:5d:ee:1e:0c:30:43: 91:fd:80:2e:4d:b2:32:af:a6:4e:80:4d:88:75:c7:ee:c4:53: 72:67:ab:4b:16:fb:52:f4:20:24:69:69:29:29:ec:07:4e:76: ef:64:75:d9:fa:4b:c5:ec:b1:a2:cc:35:b3:3b:f5:b4:93:ca: 3d:45:a7:a9:d3:67:31:4a:3f:bc:54:be:6b:32:53:f2:fc:5f: 5d:c5:b8:b6:68:0d:0a:43:68:16:b5:3e:f5:ad:11:8a:85:7a: c0:1a:ea:d3:c2:d4:ac:70:05:9b:fb:bc:75:57:8f:eb:57:0e: 19:8b:77:6e:8f:23:19:eb:22:6b:85:96:a6:22:1e:82:40:0b: 31:19:06:57:99:c8:a4:f8:9d:f0:04:d1:18:7f:e3:a3:d9:84: f1:3d:d6:ea:7f:e6:d2:40:ae:5c:3d:b8:59:e2:55:a5:31:3f: d7:ed:c1:50 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUbqInD8qjMikkUdRkmpjtHapNHJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3Mjc1OENDQTM4MTkyMDI5MkI1RTBEMzM4RUNGODlE MDAwMEZFRTAeFw0yNjA1MDMwMzEwMzdaFw0yNzA1MDIwMzE1MzdaMDMxMTAvBgNV BAMTKDVFRTYwRENBQzdDNkQ0NjFDMjlCRUEyMEQ1NzVGREEwRDJGRTNBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MvH6yrPWCdyS6AlU8EcErf1X T+EB6y8wMggf5MM6hVIb0oCXsiXdo0+ZrM6l4z+ZR6O3Vi0Apz9RJvQxflqcGyls CpJELl/Uc+gSnSmhguJTjjAZrIkt/gBYCmW1o/fiTUfQXab1xkKnY3v6U2DLkRzu yejTNLfGEHf6m8v3ZyE0qmfnUJXxk0eip1VzayY57hYWkAkjpLXl399YC72lf3n3 1MQwB/G8Dp47RzR97xv2N8SIjWq9BRKCWbWMaPQdXGWt4JN0g3aJ1aDooDPyDdMv G/0UxTPFtYGRvR/bGqyYcqDhmgHN7nLq/ORQPQGnCbF/0/IlK2mRP2x1WC63AgMB AAGjggItMIICKTAdBgNVHQ4EFgQUXuYNysfG1GHCm+og1XX9oNL+OhMwHwYDVR0j BBgwFoAUY3J1jMo4GSApK14NM47PidAAD+4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM1MWU3YWItYTYzOC00ZmEwLWJiY2MtYjBmODU2YThhMTU3LzAvNjM3Mjc1OEND QTM4MTkyMDI5MkI1RTBEMzM4RUNGODlEMDAwMEZFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzcyNzU4Q0NBMzgxOTIwMjkyQjVFMEQzMzhFQ0Y4OUQwMDAw RkVFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM1MWU3YWItYTYzOC00ZmEwLWJi Y2MtYjBmODU2YThhMTU3LzAvMzEzMDMzMmUzNTMzMmUzMDJlMzAyZjMyMzIyZDMy MzQyMDNkM2UyMDM2MzMzODM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnNQAwDQYJKoZIhvcNAQEL BQADggEBAHK2W8+KHhl6NLWg8WnpQ8sqznU9MeLgJQQ/EJxJfNY1JQGIrHQEO+lP UhJgNlk6Fninfr/mVBn8GJdYAvGlNmZkHxi7UhRMVwjmS1sta1Uc43DH6F3uHgww Q5H9gC5NsjKvpk6ATYh1x+7EU3Jnq0sW+1L0ICRpaSkp7AdOdu9kddn6S8XssaLM NbM79bSTyj1Fp6nTZzFKP7xUvmsyU/L8X13FuLZoDQpDaBa1PvWtEYqFesAa6tPC 1KxwBZv7vHVXj+tXDhmLd26PIxnrImuFlqYiHoJACzEZBleZyKT4nfAE0Rh/46PZ hPE91up/5tJArlw9uFniVaUxP9ftwVA= -----END CERTIFICATE-----Generated at Tue May 12 22:56:40 2026 by rpki-client