$ rpki-client -vvf rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa File: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (raw, json) Hash identifier: krKKJL8xoxgN2wyxvjJrqrqA9vT6YHk/PFCm7/PP3c4= Subject key identifier: 3B:66:AD:EB:B7:4D:6F:F6:5F:3E:F4:DA:45:99:28:8F:44:20:DF:A7 Certificate issuer: /CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Certificate serial: 04676C5F5BACD62D7C4E2AD946304A834F468C1C Authority key identifier: 1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa Signing time: Sun 03 May 2026 02:12:16 +0000 ROA not before: Sun 03 May 2026 02:07:16 +0000 ROA not after: Sun 02 May 2027 02:12:16 +0000 asID: 138059 IP address blocks: 103.121.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:67:6c:5f:5b:ac:d6:2d:7c:4e:2a:d9:46:30:4a:83:4f:46:8c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Validity Not Before: May 3 02:07:16 2026 GMT Not After : May 2 02:12:16 2027 GMT Subject: CN=3B66ADEBB74D6FF65F3EF4DA4599288F4420DFA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:25:4f:4f:c7:27:a7:02:71:ce:ff:79:d2:95: 26:e4:7c:c1:c7:c4:e1:0c:af:1d:16:21:6b:c8:4c: 2f:87:02:5c:68:52:ae:35:30:00:3f:57:3b:1f:ae: fe:df:45:48:01:1a:cb:e1:f7:8f:f9:a9:d0:ba:40: 35:4c:0e:c3:ce:40:67:0d:76:bf:f9:b4:21:bc:92: df:35:ca:65:3d:b4:c3:3e:dd:7e:92:c6:e0:f5:dc: 0c:91:8e:6c:6a:f6:e4:81:b6:2b:fe:fa:6c:9c:ec: 02:ff:fa:5e:39:9c:f2:27:e1:2f:7d:4d:3f:d2:75: 84:53:8c:a2:5e:7c:36:4b:c4:a0:cd:8f:27:05:d0: 34:a4:2b:39:ec:7f:a0:f3:eb:19:a7:d3:a7:1d:70: e1:5f:5e:8d:a7:fe:0d:73:e3:c3:b3:e3:ef:94:49: 96:80:d3:1e:46:0f:39:b9:53:e0:92:7d:35:ee:90: 40:09:c6:df:31:60:da:22:d4:6f:26:9f:11:90:08: ac:92:af:31:82:5a:13:be:7f:15:ae:58:2c:7a:eb: 19:55:e6:40:73:4a:a1:1d:55:5d:0b:bc:d2:f9:cf: 66:de:a1:aa:9e:05:b7:23:59:99:b1:80:6c:b4:fa: 3a:07:15:53:39:91:29:32:c7:a5:b0:e7:d9:be:45: 57:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:66:AD:EB:B7:4D:6F:F6:5F:3E:F4:DA:45:99:28:8F:44:20:DF:A7 X509v3 Authority Key Identifier: keyid:1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.123.0/24 Signature Algorithm: sha256WithRSAEncryption 93:f6:a6:bb:53:5b:71:d1:9e:ed:a5:10:0d:b8:23:4c:50:1b: 70:7b:b5:ce:ba:e0:5f:da:85:d5:f8:e1:6b:9b:8f:0f:d5:a9: 82:60:52:16:cb:5d:39:ff:5a:81:8a:f5:e5:e9:5c:ec:eb:18: 7a:b6:53:9a:69:d1:fa:08:ba:d0:7f:0b:a4:4e:25:9b:33:0a: c1:a5:03:b1:37:cd:77:e2:e4:12:53:77:6f:b6:ae:82:4c:fc: 27:55:f5:1e:5a:8b:7b:5e:62:e9:4b:87:ce:66:c6:dd:a1:b7: f6:a1:dd:c7:06:f5:93:fe:2c:55:67:53:77:e4:96:53:9c:a5: eb:f8:fd:10:7d:d4:c4:bd:9e:b7:56:b3:1a:b5:be:db:d6:11: fb:a0:50:b6:0e:97:2f:a3:2b:b9:95:ba:9a:3c:20:1e:72:ea: 50:7f:1e:a6:ec:80:cc:f3:83:f3:5f:6a:ad:44:74:84:ef:b3: 77:53:83:3a:49:23:aa:4a:81:ed:b1:32:0d:a0:49:a8:e3:ae: 82:80:14:47:0b:2e:9d:6a:67:7b:ab:b5:52:58:2a:23:d3:f9: 5b:ce:13:0f:5e:67:9b:e0:71:0d:ec:b9:c4:0f:e7:04:55:62: fd:da:37:ac:19:6a:db:15:61:ac:28:29:72:2c:93:c3:06:e9: b3:6f:88:7f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBGdsX1us1i18TirZRjBKg09GjBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5 NjFGNzIwNTAeFw0yNjA1MDMwMjA3MTZaFw0yNzA1MDIwMjEyMTZaMDMxMTAvBgNV BAMTKDNCNjZBREVCQjc0RDZGRjY1RjNFRjREQTQ1OTkyODhGNDQyMERGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJU9PxyenAnHO/3nSlSbkfMHH xOEMrx0WIWvITC+HAlxoUq41MAA/Vzsfrv7fRUgBGsvh94/5qdC6QDVMDsPOQGcN dr/5tCG8kt81ymU9tMM+3X6SxuD13AyRjmxq9uSBtiv++myc7AL/+l45nPIn4S99 TT/SdYRTjKJefDZLxKDNjycF0DSkKznsf6Dz6xmn06cdcOFfXo2n/g1z48Oz4++U SZaA0x5GDzm5U+CSfTXukEAJxt8xYNoi1G8mnxGQCKySrzGCWhO+fxWuWCx66xlV 5kBzSqEdVV0LvNL5z2beoaqeBbcjWZmxgGy0+joHFVM5kSkyx6Ww59m+RVcDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUO2at67dNb/ZfPvTaRZkoj0Qg36cwHwYDVR0j BBgwFoAUHGSl14+G4noPz8Cx4mBuKpYfcgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdkZWRlZDEtZDE0ZS00MTIzLWI1YzktYzkzYTU5OTdmYzMwLzAvMUM2NEE1RDc4 Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5NjFGNzIwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzY0QTVENzhGODZFMjdBMEZDRkMwQjFFMjYwNkUyQTk2MUY3 MjA1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA3ZGVkZWQxLWQxNGUtNDEyMy1i NWM5LWM5M2E1OTk3ZmMzMC8wLzMxMzAzMzJlMzEzMjMxMmUzMTMyMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneXswDQYJ KoZIhvcNAQELBQADggEBAJP2prtTW3HRnu2lEA24I0xQG3B7tc664F/ahdX44Wub jw/VqYJgUhbLXTn/WoGK9eXpXOzrGHq2U5pp0foIutB/C6ROJZszCsGlA7E3zXfi 5BJTd2+2roJM/CdV9R5ai3teYulLh85mxt2ht/ah3ccG9ZP+LFVnU3fkllOcpev4 /RB91MS9nrdWsxq1vtvWEfugULYOly+jK7mVupo8IB5y6lB/HqbsgMzzg/Nfaq1E dITvs3dTgzpJI6pKge2xMg2gSajjroKAFEcLLp1qZ3urtVJYKiPT+VvOEw9eZ5vg cQ3sucQP5wRVYv3aN6wZatsVYawoKXIsk8MG6bNviH8= -----END CERTIFICATE-----Generated at Wed May 13 06:26:19 2026 by rpki-client