$ rpki-client -vvf rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa File: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (raw, json) Hash identifier: p7VwLh9rGTmmzKRM+j0/DLnuVRuHxbeAnVLeUJIFLBE= Subject key identifier: 0D:7C:4C:1E:CF:DE:78:58:DF:3D:B2:9D:8E:BF:8A:40:A9:36:91:32 Certificate issuer: /CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A Certificate serial: 3AF1178578385F3BF32B769B6228D4F94DB0089E Authority key identifier: F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa Signing time: Sun 03 May 2026 02:13:04 +0000 ROA not before: Sun 03 May 2026 02:08:04 +0000 ROA not after: Sun 02 May 2027 02:13:04 +0000 asID: 138082 IP address blocks: 103.120.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f1:17:85:78:38:5f:3b:f3:2b:76:9b:62:28:d4:f9:4d:b0:08:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A Validity Not Before: May 3 02:08:04 2026 GMT Not After : May 2 02:13:04 2027 GMT Subject: CN=0D7C4C1ECFDE7858DF3DB29D8EBF8A40A9369132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:4b:92:78:1b:ae:27:c2:be:09:34:ce:33: 3d:85:a8:27:e4:0c:d3:98:d8:97:f7:ce:4c:f9:13: e9:7c:47:35:84:71:90:9c:d4:a1:54:c3:53:b3:bc: c6:5f:fa:fe:bd:13:6b:0a:5c:6b:9a:70:21:bf:fc: 39:30:b2:32:4e:d9:14:36:8f:13:a4:e9:a2:d0:a5: 51:9a:83:af:95:55:ed:95:0d:bc:3e:ca:7a:4e:c8: b2:9a:d6:44:e2:bb:bd:55:02:05:87:39:81:42:72: 4e:49:fa:88:f6:b3:ce:dc:11:45:5f:af:57:7d:47: 60:60:7b:3f:93:94:c3:fb:76:fd:8f:f6:dd:01:f2: d7:83:d5:31:03:88:ad:08:d7:74:58:7b:31:35:9f: ec:9a:69:7e:7e:e0:cf:78:48:e7:3b:fd:83:42:51: d4:fa:fc:e5:91:93:b7:c7:56:4e:60:70:a8:52:24: 4b:44:58:fd:cf:36:15:07:f6:07:02:84:e8:62:5b: 3f:49:60:d0:c6:69:0e:c6:4b:88:41:31:45:3e:4f: 47:99:6a:80:43:1d:b9:20:95:b8:50:16:84:d7:89: e4:f6:d9:90:66:02:e6:0b:0b:ff:84:c0:da:4d:dc: 0d:c8:d9:89:f7:12:f1:3c:4e:9a:2f:9f:4f:fc:95: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7C:4C:1E:CF:DE:78:58:DF:3D:B2:9D:8E:BF:8A:40:A9:36:91:32 X509v3 Authority Key Identifier: keyid:F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.218.0/24 Signature Algorithm: sha256WithRSAEncryption a1:47:15:ef:9a:c5:85:70:a9:e0:5f:65:2a:3d:ce:ad:83:59: d5:dd:14:1a:ee:1f:58:55:77:9c:ef:72:c1:9f:be:bf:0c:8c: 6f:c7:31:a4:26:9d:ab:d3:24:ab:b2:21:e9:cf:b3:c2:7b:32: 5e:d6:5d:8d:59:aa:d5:3d:88:40:cd:b9:be:c3:55:8b:87:df: c9:5b:60:30:b3:23:a7:3a:41:7b:05:06:01:b3:3b:ef:0e:ce: 49:56:a5:54:1c:56:45:6b:25:8a:16:9f:8e:f4:72:e7:af:1d: d4:ab:d9:10:14:3e:b4:83:66:5c:7e:ce:6d:4b:92:50:c6:5a: 48:9a:c3:c4:b5:14:0c:1e:a2:5f:73:89:29:dc:e8:49:89:74: ed:17:f6:e9:56:5b:84:5d:8d:3e:c7:7a:97:99:8d:78:b7:a7: a4:42:5a:dc:ec:49:4b:01:55:45:d7:b2:77:30:e9:4e:7b:1d: 47:b1:28:da:d9:fd:90:83:4e:3e:58:a6:79:5d:33:53:5f:4e: 0f:ba:8f:b1:94:fa:cf:9a:9d:2e:98:dc:49:d2:18:6c:2f:2d: f5:c9:61:57:59:c4:b7:c8:9f:32:b2:28:13:ac:8d:cd:18:a9: d9:f2:08:39:25:93:00:67:97:9f:43:e7:fc:a9:57:1d:29:d7: 9e:8e:1e:22 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUOvEXhXg4XzvzK3abYijU+U2wCJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4NDU0MkUxNEI5QkNDRkUyNzE0NUQ5QzU4RUIxQTc4 NUYxNDY0QTAeFw0yNjA1MDMwMjA4MDRaFw0yNzA1MDIwMjEzMDRaMDMxMTAvBgNV BAMTKDBEN0M0QzFFQ0ZERTc4NThERjNEQjI5RDhFQkY4QTQwQTkzNjkxMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDREUuSeBuuJ8K+CTTOMz2FqCfk DNOY2Jf3zkz5E+l8RzWEcZCc1KFUw1OzvMZf+v69E2sKXGuacCG//DkwsjJO2RQ2 jxOk6aLQpVGag6+VVe2VDbw+ynpOyLKa1kTiu71VAgWHOYFCck5J+oj2s87cEUVf r1d9R2Bgez+TlMP7dv2P9t0B8teD1TEDiK0I13RYezE1n+yaaX5+4M94SOc7/YNC UdT6/OWRk7fHVk5gcKhSJEtEWP3PNhUH9gcChOhiWz9JYNDGaQ7GS4hBMUU+T0eZ aoBDHbkglbhQFoTXieT22ZBmAuYLC/+EwNpN3A3I2Yn3EvE8Tpovn0/8lZXrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUDXxMHs/eeFjfPbKdjr+KQKk2kTIwHwYDVR0j BBgwFoAU84RULhS5vM/icUXZxY6xp4XxRkowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGNkMjRlODItZjMwNi00NDAwLWIwMGEtZDU5YjQxZTI4NmJiLzAvRjM4NDU0MkUx NEI5QkNDRkUyNzE0NUQ5QzU4RUIxQTc4NUYxNDY0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzg0NTQyRTE0QjlCQ0NGRTI3MTQ1RDlDNThFQjFBNzg1RjE0 NjRBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBjZDI0ZTgyLWYzMDYtNDQwMC1i MDBhLWQ1OWI0MWUyODZiYi8wLzMxMzAzMzJlMzEzMjMwMmUzMjMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneNowDQYJ KoZIhvcNAQELBQADggEBAKFHFe+axYVwqeBfZSo9zq2DWdXdFBruH1hVd5zvcsGf vr8MjG/HMaQmnavTJKuyIenPs8J7Ml7WXY1ZqtU9iEDNub7DVYuH38lbYDCzI6c6 QXsFBgGzO+8OzklWpVQcVkVrJYoWn470cuevHdSr2RAUPrSDZlx+zm1LklDGWkia w8S1FAweol9ziSnc6EmJdO0X9ulWW4RdjT7HepeZjXi3p6RCWtzsSUsBVUXXsncw 6U57HUexKNrZ/ZCDTj5YpnldM1NfTg+6j7GU+s+anS6Y3EnSGGwvLfXJYVdZxLfI nzKyKBOsjc0YqdnyCDklkwBnl59D5/ypVx0p156OHiI= -----END CERTIFICATE-----Generated at Wed May 13 02:59:41 2026 by rpki-client