$ rpki-client -vvf rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa File: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (raw, json) Hash identifier: buNf/KMT3H26jyT7kcH4G4XIVCs19dscJeFhejymKUs= Subject key identifier: D9:48:58:80:57:54:7D:C9:CA:73:B5:07:6A:33:2A:41:27:59:EA:BE Certificate issuer: /CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Certificate serial: 48D4ED2E920A884583D02AAA9F9DBE70084C7AD6 Authority key identifier: 86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa Signing time: Sun 03 May 2026 02:10:28 +0000 ROA not before: Sun 03 May 2026 02:05:28 +0000 ROA not after: Sun 02 May 2027 02:10:28 +0000 asID: 138881 IP address blocks: 103.140.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d4:ed:2e:92:0a:88:45:83:d0:2a:aa:9f:9d:be:70:08:4c:7a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Validity Not Before: May 3 02:05:28 2026 GMT Not After : May 2 02:10:28 2027 GMT Subject: CN=D948588057547DC9CA73B5076A332A412759EABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:04:56:1e:27:2f:fc:dd:e0:23:a9:14:a7:54: a4:8c:47:31:07:40:04:47:1d:67:07:84:23:5e:17: 6d:7d:63:2b:0c:b9:9c:91:a2:8e:63:2a:be:c9:55: e9:f5:53:cc:74:7f:60:56:dc:58:09:9b:48:23:7f: 1a:70:08:76:91:0c:49:86:9f:10:33:69:e6:a1:67: c5:a9:59:f6:26:ff:2a:70:75:70:9a:29:b2:05:9d: 10:ea:d6:24:5f:9c:31:cc:68:01:fc:99:05:30:58: 73:e2:9e:bf:e6:91:a7:7e:01:9d:65:2c:b1:80:06: fe:e6:ac:53:72:90:6c:a1:72:b9:85:84:45:25:3c: d0:b8:a5:5d:1e:76:cc:6f:1f:37:3f:fe:13:1a:fa: e3:43:c5:89:c9:6a:54:6a:27:a0:7f:c8:34:34:82: b9:3b:8f:43:f6:14:49:09:fc:fa:d2:0f:10:80:d5: e1:01:1e:dd:90:31:a5:76:88:06:1c:a1:dd:8c:0b: 2c:91:99:eb:89:00:79:05:c6:4e:04:4a:78:be:21: 34:1f:4f:82:a7:6c:b8:a2:f7:38:64:9d:de:d5:e9: f5:56:1d:32:75:52:be:e9:7e:25:e7:15:c1:60:04: 03:f5:af:dd:c3:51:0b:98:eb:65:d8:73:fb:25:c3: b1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:48:58:80:57:54:7D:C9:CA:73:B5:07:6A:33:2A:41:27:59:EA:BE X509v3 Authority Key Identifier: keyid:86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.189.0/24 Signature Algorithm: sha256WithRSAEncryption 10:92:16:4b:0c:f0:9b:af:fd:cb:24:84:f1:56:3d:a0:4d:a7: 4d:32:5c:dd:f6:36:08:ce:db:5a:e1:ab:27:8e:5c:e0:9c:8f: ae:32:31:29:83:27:b7:bd:73:c1:8c:47:00:72:a5:a3:25:6a: 55:af:32:44:d2:cf:cc:5e:03:c2:ed:bf:0a:99:9e:fb:39:f2: 26:60:3e:b4:43:1c:2a:24:ba:56:09:0c:9b:31:20:7b:81:21: e2:fc:74:19:54:9a:80:24:7f:68:f6:d4:06:06:c3:38:50:12: c7:eb:4c:97:f9:3c:b0:be:db:98:95:09:31:85:40:7e:43:e6: b9:e7:96:4a:f1:39:3a:82:cb:92:1c:25:ef:2a:d5:a4:02:d6: 01:fb:3c:5f:7a:11:9b:77:f9:54:a2:94:37:65:0f:bc:15:44: 11:d3:78:4e:1b:57:6a:42:0f:0b:4f:d8:07:f4:d2:87:b2:25: d6:11:1e:6d:24:6b:cb:ed:78:66:ec:dc:e8:41:a6:4e:53:1d: 06:7b:60:eb:8c:9b:7d:37:0c:0f:1a:7d:1b:3b:d9:67:97:ca: bf:54:55:66:e5:a4:4d:5d:68:68:75:4f:e7:71:64:8c:4a:5e: 28:6b:da:6d:35:03:5e:cf:25:35:a3:08:24:e0:0e:6d:bc:54: d9:34:f4:be -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSNTtLpIKiEWD0Cqqn52+cAhMetYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQw QUQ5QzA3NzAeFw0yNjA1MDMwMjA1MjhaFw0yNzA1MDIwMjEwMjhaMDMxMTAvBgNV BAMTKEQ5NDg1ODgwNTc1NDdEQzlDQTczQjUwNzZBMzMyQTQxMjc1OUVBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRBFYeJy/83eAjqRSnVKSMRzEH QARHHWcHhCNeF219YysMuZyRoo5jKr7JVen1U8x0f2BW3FgJm0gjfxpwCHaRDEmG nxAzaeahZ8WpWfYm/ypwdXCaKbIFnRDq1iRfnDHMaAH8mQUwWHPinr/mkad+AZ1l LLGABv7mrFNykGyhcrmFhEUlPNC4pV0edsxvHzc//hMa+uNDxYnJalRqJ6B/yDQ0 grk7j0P2FEkJ/PrSDxCA1eEBHt2QMaV2iAYcod2MCyyRmeuJAHkFxk4ESni+ITQf T4KnbLii9zhknd7V6fVWHTJ1Ur7pfiXnFcFgBAP1r93DUQuY62XYc/slw7HTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU2UhYgFdUfcnKc7UHajMqQSdZ6r4wHwYDVR0j BBgwFoAUhkTvXK/W/yx1ODO1iNbV5ArZwHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDJjYjBiM2EtNjkyZC00NDJlLTkzMDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNB RkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQwQUQ5QzA3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjQ0RUY1Q0FGRDZGRjJDNzUzODMzQjU4OEQ2RDVFNDBBRDlD MDc3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzAyY2IwYjNhLTY5MmQtNDQyZS05 MzA4LTkwM2MwMmQ1NzE4Zi8wLzMxMzAzMzJlMzEzNDMwMmUzMTM4MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjL0wDQYJ KoZIhvcNAQELBQADggEBABCSFksM8Juv/cskhPFWPaBNp00yXN32NgjO21rhqyeO XOCcj64yMSmDJ7e9c8GMRwBypaMlalWvMkTSz8xeA8LtvwqZnvs58iZgPrRDHCok ulYJDJsxIHuBIeL8dBlUmoAkf2j21AYGwzhQEsfrTJf5PLC+25iVCTGFQH5D5rnn lkrxOTqCy5IcJe8q1aQC1gH7PF96EZt3+VSilDdlD7wVRBHTeE4bV2pCDwtP2Af0 0oeyJdYRHm0ka8vteGbs3OhBpk5THQZ7YOuMm303DA8afRs72WeXyr9UVWblpE1d aGh1T+dxZIxKXihr2m01A17PJTWjCCTgDm28VNk09L4= -----END CERTIFICATE-----Generated at Wed May 13 14:25:27 2026 by rpki-client