$ rpki-client -vvf rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135322e302f32342d3234203d3e2039333431.roa File: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: 6yxa8Y8b4DaabwAbCdywk8T5puaQapNj4oIey5BeZh0= Subject key identifier: 03:98:92:50:96:29:F8:B0:53:A1:D4:8C:2C:D1:CD:89:E5:0A:EC:7B Certificate issuer: /CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Certificate serial: 686044FFEA96487211763E6018DA13B34EE11759 Authority key identifier: C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135322e302f32342d3234203d3e2039333431.roa Signing time: Sun 03 May 2026 02:14:49 +0000 ROA not before: Sun 03 May 2026 02:09:49 +0000 ROA not after: Sun 02 May 2027 02:14:49 +0000 asID: 9341 IP address blocks: 103.35.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:60:44:ff:ea:96:48:72:11:76:3e:60:18:da:13:b3:4e:e1:17:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Validity Not Before: May 3 02:09:49 2026 GMT Not After : May 2 02:14:49 2027 GMT Subject: CN=039892509629F8B053A1D48C2CD1CD89E50AEC7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:91:68:fa:9a:8c:7f:fa:a9:0e:80:2a:19: 7b:35:7a:aa:18:9f:6f:a1:9a:08:94:25:b0:ec:54: d0:39:92:87:bf:ed:1e:41:b1:5e:63:31:30:e8:65: 01:f8:cb:71:4c:ec:13:98:53:6e:7f:88:ca:07:2e: 9b:a8:f2:7e:a3:48:4f:1f:97:23:c9:e0:4a:b3:a6: 17:76:83:b1:35:67:8f:c9:9d:c2:be:77:55:35:5c: 49:92:39:cd:35:b8:57:8b:58:25:f1:49:e2:73:d6: 41:15:a5:23:2b:51:23:ae:cf:e0:10:90:cc:71:d4: 7e:1f:d3:b1:9a:79:e7:82:29:d0:cf:e2:7f:96:95: ea:c6:6e:44:aa:82:91:d7:21:e6:71:9d:e2:4b:7a: ac:de:68:dd:31:c7:44:1e:a8:07:44:97:ab:7f:58: 36:6d:07:f5:5c:51:7f:ba:29:a1:9a:21:45:52:01: bf:e6:08:ed:eb:ec:94:86:09:7e:6c:22:44:9b:c7: 7b:76:a9:b8:55:68:f0:95:e2:54:2e:42:f4:a0:82: ef:11:6f:9b:38:a4:56:b1:8c:bc:e9:b5:9f:c1:a2: cf:32:21:8d:5a:82:07:79:50:80:65:c4:53:b4:dc: a1:fe:54:a7:f2:ed:17:bd:7a:76:c7:61:5c:f0:2d: b3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:98:92:50:96:29:F8:B0:53:A1:D4:8C:2C:D1:CD:89:E5:0A:EC:7B X509v3 Authority Key Identifier: keyid:C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135322e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.35.152.0/24 Signature Algorithm: sha256WithRSAEncryption b4:b3:09:4c:2b:36:e6:e1:14:80:39:55:82:39:04:e5:a1:4c: 66:39:c6:bb:11:dd:c7:f3:93:67:1d:e5:25:e9:c8:e6:de:f6: 0f:f7:36:c0:46:ae:04:8b:e3:f5:c3:1e:11:40:bf:72:27:00: b6:b9:97:39:6d:c0:a2:a8:88:14:c8:69:e7:ac:e1:c1:8b:a0: 25:fe:8b:a0:16:78:7d:0e:f3:0a:15:f2:e2:c2:8c:11:bb:9e: 21:e4:e1:5e:bc:df:cc:7b:c4:54:49:a3:4e:4c:9d:a7:23:58: 62:ef:21:d3:61:5d:15:80:63:69:5d:14:3f:52:c6:11:3e:31: 3b:33:07:06:12:35:61:6f:20:6f:47:bd:85:5f:33:36:17:30: e8:3d:48:2d:03:87:96:f5:0b:17:30:52:b8:d4:10:82:59:a1: 72:51:2e:b5:d2:85:e0:19:7f:cc:65:c0:22:a8:f1:91:c4:b1: ff:99:27:f9:15:78:23:38:b7:d9:64:03:74:0c:b6:70:03:90: 8f:5d:1c:b5:bf:8a:cb:c5:5e:6e:3f:4c:27:95:db:03:4c:d7: 50:c7:6a:ed:b9:40:ca:c6:9d:e8:15:a0:1c:29:7d:16:ca:1f: b3:a4:33:0f:0d:3f:a4:1f:ea:fe:32:49:3f:de:3a:85:da:51: 49:f8:e3:26 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUaGBE/+qWSHIRdj5gGNoTs07hF1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0 MTc2N0YyOTAeFw0yNjA1MDMwMjA5NDlaFw0yNzA1MDIwMjE0NDlaMDMxMTAvBgNV BAMTKDAzOTg5MjUwOTYyOUY4QjA1M0ExRDQ4QzJDRDFDRDg5RTUwQUVDN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3JFo+pqMf/qpDoAqGXs1eqoY n2+hmgiUJbDsVNA5koe/7R5BsV5jMTDoZQH4y3FM7BOYU25/iMoHLpuo8n6jSE8f lyPJ4Eqzphd2g7E1Z4/JncK+d1U1XEmSOc01uFeLWCXxSeJz1kEVpSMrUSOuz+AQ kMxx1H4f07GaeeeCKdDP4n+WlerGbkSqgpHXIeZxneJLeqzeaN0xx0QeqAdEl6t/ WDZtB/VcUX+6KaGaIUVSAb/mCO3r7JSGCX5sIkSbx3t2qbhVaPCV4lQuQvSggu8R b5s4pFaxjLzptZ/Bos8yIY1aggd5UIBlxFO03KH+VKfy7Re9enbHYVzwLbPjAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUA5iSUJYp+LBTodSMLNHNieUK7HswHwYDVR0j BBgwFoAUw/syxKQ9GvRHOv/XLaN8YEF2fykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ4ODU1MjUtY2IwZi00NmEwLTgyNTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRB NDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0MTc2N0YyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0ZCMzJDNEE0M0QxQUY0NDczQUZGRDcyREEzN0M2MDQxNzY3 RjI5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE0ODg1NTI1LWNiMGYtNDZhMC04 MjUzLTA0MmQ3ZDdhZmYzOC8wLzMxMzAzMzJlMzMzNTJlMzEzNTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnI5gwDQYJKoZIhvcN AQELBQADggEBALSzCUwrNubhFIA5VYI5BOWhTGY5xrsR3cfzk2cd5SXpyObe9g/3 NsBGrgSL4/XDHhFAv3InALa5lzltwKKoiBTIaees4cGLoCX+i6AWeH0O8woV8uLC jBG7niHk4V6838x7xFRJo05MnacjWGLvIdNhXRWAY2ldFD9SxhE+MTszBwYSNWFv IG9HvYVfMzYXMOg9SC0Dh5b1CxcwUrjUEIJZoXJRLrXSheAZf8xlwCKo8ZHEsf+Z J/kVeCM4t9lkA3QMtnADkI9dHLW/isvFXm4/TCeV2wNM11DHau25QMrGnegVoBwp fRbKH7OkMw8NP6Qf6v4yST/eOoXaUUn44yY= -----END CERTIFICATE-----Generated at Tue May 5 13:29:33 2026 by rpki-client