$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/3130332e32302e38362e302f32342d3234203d3e2039333431.roa File: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: WGwf4ZheCNstu5sMth6N0foU0qrM+z/FwSG3oFHTVv4= Subject key identifier: D3:8E:1D:B5:55:AD:9B:B3:16:AA:87:14:A7:8C:35:B7:EB:1D:24:9E Certificate issuer: /CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51 Certificate serial: 3519C0BF78B26724E148E7F41A79BDB21790754C Authority key identifier: 50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/3130332e32302e38362e302f32342d3234203d3e2039333431.roa Signing time: Sun 03 May 2026 02:58:18 +0000 ROA not before: Sun 03 May 2026 02:53:18 +0000 ROA not after: Sun 02 May 2027 02:58:18 +0000 asID: 9341 IP address blocks: 103.20.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:19:c0:bf:78:b2:67:24:e1:48:e7:f4:1a:79:bd:b2:17:90:75:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51 Validity Not Before: May 3 02:53:18 2026 GMT Not After : May 2 02:58:18 2027 GMT Subject: CN=D38E1DB555AD9BB316AA8714A78C35B7EB1D249E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:09:7c:32:fd:39:1a:1a:9c:8e:a4:6f:28:38: ca:fa:66:30:8d:85:67:05:3a:45:3b:ba:cd:27:a4: 2f:b8:d9:a9:a2:68:a1:e0:2a:63:84:ea:74:6c:36: 85:5d:f3:6e:dd:44:a1:37:eb:0c:39:4a:33:be:c6: d1:0e:2b:ae:7a:c9:f4:a2:e1:be:02:1b:a0:0b:7f: 56:d7:4f:e9:93:ab:04:c4:6e:b0:94:67:72:3b:30: 7e:33:15:37:7f:e8:fd:e3:9b:6e:b0:65:b8:30:08: 5b:a8:de:da:9a:a4:06:92:8a:5e:3c:16:9e:78:b0: 1f:3e:39:27:39:f9:5e:64:32:d0:37:eb:ab:a0:69: 33:ef:60:57:1f:0c:1e:40:a8:52:11:ff:88:f5:50: ba:83:e3:59:b6:16:1f:cc:8e:41:6b:c6:e7:15:e2: 2f:a1:f7:8a:6a:54:33:2b:06:bf:df:b6:56:be:f7: 4b:0c:39:1b:7a:b1:b5:d4:b5:67:29:ee:04:45:b4: dc:8e:ce:36:14:66:b0:89:8c:41:82:cd:07:b4:cb: 9d:71:7b:e2:ce:01:4a:db:99:e2:65:96:6c:ef:45: 2d:37:47:cf:15:bc:5e:d4:a8:9a:2f:6d:b2:51:a4: 91:da:d4:42:80:27:fc:64:8e:80:8b:32:29:3d:cf: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8E:1D:B5:55:AD:9B:B3:16:AA:87:14:A7:8C:35:B7:EB:1D:24:9E X509v3 Authority Key Identifier: keyid:50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/3130332e32302e38362e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.86.0/24 Signature Algorithm: sha256WithRSAEncryption 85:09:3a:a3:df:f5:61:91:a6:ff:3f:83:49:be:01:c1:93:41: 71:10:0e:fd:2d:f9:0d:03:a3:f3:6d:73:71:ac:02:2a:e8:97: 7d:43:f3:6f:c7:bd:1e:f5:81:df:33:45:c1:49:e9:2b:a0:32: 32:f8:ee:c8:76:88:b3:55:33:e3:a1:cb:11:7e:a4:6c:2b:dc: ae:58:42:d2:32:59:1b:98:a7:2f:a7:0a:69:5d:e5:fb:39:f3: 45:a6:f8:13:ef:08:17:5a:1d:ad:2c:a6:33:46:ad:4a:5a:91: e3:14:00:1a:9d:73:94:c4:1b:a5:55:01:9d:4b:37:45:06:d7: be:cc:ab:4e:33:36:89:dc:2a:a4:f1:a0:bd:f8:43:53:52:a7: 58:de:da:4c:15:cd:a2:3e:f3:0a:d5:df:ae:d2:c7:aa:8c:6c: 08:a2:e6:44:e6:28:4b:59:c2:f8:b3:48:b4:65:3a:0a:04:08: d1:cb:cf:84:23:83:6b:f6:dc:9f:40:ce:6d:b5:89:8c:ac:1d: cd:96:0d:63:f0:6a:09:38:b8:8b:70:2e:3f:90:76:10:4d:b7: 24:2e:4b:8a:96:43:7c:95:79:0b:51:78:5c:18:a3:1e:7c:52: fc:58:02:65:b9:10:31:0e:56:46:51:9b:cb:4b:c0:85:01:7c: 3b:78:f6:d2 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUNRnAv3iyZyThSOf0Gnm9sheQdUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAzNDFFQTE3QTZDRUU5MzlCMkNERkE4MzJEQzAzMjRG NkM2NEQ1MTAeFw0yNjA1MDMwMjUzMThaFw0yNzA1MDIwMjU4MThaMDMxMTAvBgNV BAMTKEQzOEUxREI1NTVBRDlCQjMxNkFBODcxNEE3OEMzNUI3RUIxRDI0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCXwy/TkaGpyOpG8oOMr6ZjCN hWcFOkU7us0npC+42amiaKHgKmOE6nRsNoVd827dRKE36ww5SjO+xtEOK656yfSi 4b4CG6ALf1bXT+mTqwTEbrCUZ3I7MH4zFTd/6P3jm26wZbgwCFuo3tqapAaSil48 Fp54sB8+OSc5+V5kMtA366ugaTPvYFcfDB5AqFIR/4j1ULqD41m2Fh/MjkFrxucV 4i+h94pqVDMrBr/ftla+90sMORt6sbXUtWcp7gRFtNyOzjYUZrCJjEGCzQe0y51x e+LOAUrbmeJllmzvRS03R88VvF7UqJovbbJRpJHa1EKAJ/xkjoCLMik9z3GXAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU044dtVWtm7MWqocUp4w1t+sdJJ4wHwYDVR0j BBgwFoAUUDQeoXps7pObLN+oMtwDJPbGTVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhNDg5YTYtNTQ4NS00ODdmLWI1ZGQtOGY0ZWRlYjQ2YmNiLzAvNTAzNDFFQTE3 QTZDRUU5MzlCMkNERkE4MzJEQzAzMjRGNkM2NEQ1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MDM0MUVBMTdBNkNFRTkzOUIyQ0RGQTgzMkRDMDMyNEY2QzY0 RDUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvMzEzMDMzMmUzMjMwMmUzODM2MmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnFFYwDQYJKoZIhvcNAQEL BQADggEBAIUJOqPf9WGRpv8/g0m+AcGTQXEQDv0t+Q0Do/Ntc3GsAirol31D82/H vR71gd8zRcFJ6SugMjL47sh2iLNVM+OhyxF+pGwr3K5YQtIyWRuYpy+nCmld5fs5 80Wm+BPvCBdaHa0spjNGrUpakeMUABqdc5TEG6VVAZ1LN0UG177Mq04zNoncKqTx oL34Q1NSp1je2kwVzaI+8wrV367Sx6qMbAii5kTmKEtZwvizSLRlOgoECNHLz4Qj g2v23J9Azm21iYysHc2WDWPwagk4uItwLj+QdhBNtyQuS4qWQ3yVeQtReFwYox58 UvxYAmW5EDEOVkZRm8tLwIUBfDt49tI= -----END CERTIFICATE-----Generated at Tue May 5 13:26:44 2026 by rpki-client