$ rpki-client -vvf rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa File: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (raw, json) Hash identifier: AerViwEwX6M35LdYkw1W6Rm917nFOVWmFQ/wALZRWuI= Subject key identifier: 17:45:FD:65:14:2F:F8:58:3E:B5:37:F6:7E:6B:8C:0B:A7:B6:95:0E Certificate issuer: /CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3 Certificate serial: 7FE04C88804E198693136FD9991B5E461AA01D47 Authority key identifier: 32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa Signing time: Sun 03 May 2026 03:16:48 +0000 ROA not before: Sun 03 May 2026 03:11:48 +0000 ROA not after: Sun 02 May 2027 03:16:48 +0000 asID: 136081 IP address blocks: 103.86.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e0:4c:88:80:4e:19:86:93:13:6f:d9:99:1b:5e:46:1a:a0:1d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3 Validity Not Before: May 3 03:11:48 2026 GMT Not After : May 2 03:16:48 2027 GMT Subject: CN=1745FD65142FF8583EB537F67E6B8C0BA7B6950E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:6a:ea:0c:50:f2:9f:66:27:b8:61:92:27: e9:25:c9:77:e8:2c:6d:c3:af:cd:a0:d4:54:3e:e5: be:b6:33:23:c5:c3:d2:2a:fb:53:65:00:05:2f:a1: a4:f3:b6:bb:ef:8c:8b:30:76:86:d1:46:b7:49:21: 19:79:83:f1:1b:30:97:e8:27:6d:bc:8b:bd:2d:43: 25:ff:f4:12:8b:43:93:35:98:9d:83:7c:a1:b4:0c: 90:85:82:d1:e7:d1:dd:7b:d1:fe:7e:26:70:67:c7: 7f:f5:01:92:b3:ed:a3:41:53:c3:ef:d7:04:5d:8f: f9:7f:d2:f6:07:2b:21:a1:b5:23:99:81:6b:77:29: 27:69:b4:1f:ec:95:ee:b7:fc:28:9d:3e:3e:33:be: 87:b6:25:f5:20:ca:41:eb:b0:9b:41:fd:2d:e7:58: 59:b9:aa:3b:8f:6e:bb:a7:bd:0f:7d:cf:04:d8:1f: f1:a9:87:1e:f9:28:e4:c3:d0:5f:6f:29:c6:82:d2: d2:d0:90:45:ca:92:84:38:01:29:61:14:24:52:1f: 9d:c9:8d:5d:e3:83:10:24:8f:27:de:45:27:c3:5d: 45:f2:bd:40:dd:68:f4:ff:04:a8:20:4b:7c:97:91: da:03:56:8b:04:b5:4c:ef:6d:2d:31:35:20:64:4a: 55:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:45:FD:65:14:2F:F8:58:3E:B5:37:F6:7E:6B:8C:0B:A7:B6:95:0E X509v3 Authority Key Identifier: keyid:32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.86.103.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:c4:e3:ee:60:7e:e2:bc:a5:1a:03:a5:b8:87:b3:a8:08:30: 24:4f:a9:51:66:44:38:20:ba:a8:cf:d3:d4:82:23:85:d5:14: c6:8a:7f:ee:f4:73:5d:14:4c:9a:3c:20:c5:71:3e:31:7e:0b: 58:82:90:73:f1:ed:76:cb:a4:a5:15:06:35:0e:f7:d2:35:df: 65:96:ab:ec:5c:00:28:f7:8c:7d:16:99:2b:29:aa:12:70:53: e6:77:8b:2b:3f:94:7d:16:18:0b:fd:6e:fd:94:ff:27:e3:9d: b3:4e:29:bc:04:56:e5:0f:80:3c:f0:a6:b1:87:e6:e7:bc:f8: cf:e9:e9:68:9c:4f:90:2b:8f:bd:c3:8f:4c:0a:11:5e:dc:5b: 02:e3:f7:2b:b9:e7:5c:97:0e:76:73:ff:d3:b3:e2:03:11:41: 7c:e1:ca:62:9e:18:ba:96:5a:cc:8e:75:a1:22:15:b6:2c:eb: 6c:90:f3:e0:65:f2:03:a7:a4:a2:e9:aa:69:2b:3b:42:b2:3e: 6a:68:26:e0:39:aa:a1:1d:94:fe:57:00:47:c1:13:bd:af:52: 2d:0d:90:cb:1e:2f:c2:be:fd:dc:dd:b0:f7:8c:ea:11:76:71: 7c:38:79:78:f9:e6:d7:7e:ad:eb:15:84:84:6c:f2:57:03:79: 2f:43:33:79 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUf+BMiIBOGYaTE2/ZmRteRhqgHUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNDA4NjkyNTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRC Q0M3RUVGMzAeFw0yNjA1MDMwMzExNDhaFw0yNzA1MDIwMzE2NDhaMDMxMTAvBgNV BAMTKDE3NDVGRDY1MTQyRkY4NTgzRUI1MzdGNjdFNkI4QzBCQTdCNjk1MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOmrqDFDyn2YnuGGSJ+klyXfo LG3Dr82g1FQ+5b62MyPFw9Iq+1NlAAUvoaTztrvvjIswdobRRrdJIRl5g/EbMJfo J228i70tQyX/9BKLQ5M1mJ2DfKG0DJCFgtHn0d170f5+JnBnx3/1AZKz7aNBU8Pv 1wRdj/l/0vYHKyGhtSOZgWt3KSdptB/sle63/CidPj4zvoe2JfUgykHrsJtB/S3n WFm5qjuPbrunvQ99zwTYH/Gphx75KOTD0F9vKcaC0tLQkEXKkoQ4ASlhFCRSH53J jV3jgxAkjyfeRSfDXUXyvUDdaPT/BKggS3yXkdoDVosEtUzvbS0xNSBkSlVxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUF0X9ZRQv+Fg+tTf2fmuMC6e2lQ4wHwYDVR0j BBgwFoAUMsQIaSUM6WBuBcFbabIP9LzH7vMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI2MDU4NmQtYjAyNy00NjU2LWI2MzEtMDU4OTZiNTQzNzgyLzAvMzJDNDA4Njky NTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRCQ0M3RUVGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkM0MDg2OTI1MENFOTYwNkUwNUMxNUI2OUIyMEZGNEJDQzdF RUYzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YyNjA1ODZkLWIwMjctNDY1Ni1i NjMxLTA1ODk2YjU0Mzc4Mi8wLzMxMzAzMzJlMzgzNjJlMzEzMDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1ZnMA0GCSqG SIb3DQEBCwUAA4IBAQCPxOPuYH7ivKUaA6W4h7OoCDAkT6lRZkQ4ILqoz9PUgiOF 1RTGin/u9HNdFEyaPCDFcT4xfgtYgpBz8e12y6SlFQY1DvfSNd9llqvsXAAo94x9 FpkrKaoScFPmd4srP5R9FhgL/W79lP8n452zTim8BFblD4A88Kaxh+bnvPjP6elo nE+QK4+9w49MChFe3FsC4/cruedclw52c//Ts+IDEUF84cpinhi6llrMjnWhIhW2 LOtskPPgZfIDp6Si6appKztCsj5qaCbgOaqhHZT+VwBHwRO9r1ItDZDLHi/Cvv3c 3bD3jOoRdnF8OHl4+ebXfq3rFYSEbPJXA3kvQzN5 -----END CERTIFICATE-----Generated at Wed May 13 08:45:18 2026 by rpki-client