$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa File: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (raw, json) Hash identifier: hL7QfKjtDKqwKchVRtqitw7xLrTQDNQicxI0MMMupQI= Subject key identifier: 20:96:16:AB:63:47:0F:95:6B:6D:E0:6B:66:E9:FB:A2:11:6E:4B:DF Certificate issuer: /CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Certificate serial: 4D71F429F69FA838DE0DE37EFA4E9BCF1C315883 Authority key identifier: E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa Signing time: Sun 03 May 2026 02:17:15 +0000 ROA not before: Sun 03 May 2026 02:12:15 +0000 ROA not after: Sun 02 May 2027 02:17:15 +0000 asID: 131778 IP address blocks: 103.246.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:71:f4:29:f6:9f:a8:38:de:0d:e3:7e:fa:4e:9b:cf:1c:31:58:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Validity Not Before: May 3 02:12:15 2026 GMT Not After : May 2 02:17:15 2027 GMT Subject: CN=209616AB63470F956B6DE06B66E9FBA2116E4BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a2:ca:87:d6:94:fb:0b:1c:20:48:77:ed:dd: 8f:ac:c9:a5:ea:79:54:d7:08:c8:57:6c:d3:5b:99: 02:0d:cf:1f:93:6e:99:99:9a:92:8f:ec:ad:a4:ad: cd:28:f0:b0:dd:37:fa:fc:fa:a0:0e:78:e6:bb:07: 05:62:13:4c:ab:07:f4:51:06:60:ce:94:46:db:de: 87:47:cd:18:57:9c:91:f8:3c:14:54:bd:c9:7b:92: 93:26:3f:9e:45:b4:6f:a0:f6:b5:6c:4d:58:6a:6b: 53:86:42:f9:a4:c8:ab:7a:d3:e8:84:7e:81:f2:07: 2c:24:ea:20:13:3a:4b:d9:03:dc:ef:53:93:bf:88: 8a:f5:be:c5:38:e3:d3:49:ab:3e:9f:e8:6b:d5:cb: 52:8b:7f:44:3c:10:cd:00:4c:39:d9:5b:fe:02:70: f6:21:6c:04:98:b0:dc:9b:d6:3d:06:af:6a:f4:e3: fb:3d:23:57:17:11:ec:b5:8a:11:5f:d8:a0:25:93: 17:4e:74:aa:f7:4b:a0:1d:00:6e:87:d1:b7:c8:5f: 0e:6c:ba:e1:93:ef:93:fe:85:e4:6c:5b:c5:11:ec: ba:bf:88:bf:18:e9:93:f8:5d:79:d8:22:f7:50:e1: 3c:5f:9c:18:54:e1:bb:33:52:fa:2b:92:6d:cc:27: 99:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:96:16:AB:63:47:0F:95:6B:6D:E0:6B:66:E9:FB:A2:11:6E:4B:DF X509v3 Authority Key Identifier: keyid:E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.246.107.0/24 Signature Algorithm: sha256WithRSAEncryption 10:d4:ce:ab:15:4e:a0:2e:5a:1e:b6:08:67:0b:d1:94:71:95: 40:15:5c:d9:69:41:6f:b7:f8:a9:16:36:6e:62:e4:30:2d:5b: 51:4d:57:ee:0c:79:54:b6:33:86:47:aa:c8:8f:cb:75:ba:a0: 7d:67:bb:6a:ea:d2:54:ed:1d:b8:b3:71:6f:12:6b:f5:1c:26: 5a:b5:85:08:c4:d6:f1:fc:4e:f4:cd:5f:0a:39:e9:e4:bf:ee: e2:60:c0:93:0d:02:85:43:6a:03:71:53:86:38:d2:a0:93:21: cc:27:0a:ac:53:b8:a8:59:0d:83:3c:b2:b6:16:38:53:88:95: 4b:d5:2c:19:ee:00:07:c0:41:53:b8:23:bd:53:2e:f9:28:18: 32:8a:e6:3d:45:49:15:97:5f:b9:33:0e:16:55:99:3e:51:4c: c1:1c:c4:57:b1:88:9b:2c:04:9d:b8:58:ec:ff:c3:8e:58:e9: 9d:8a:16:ed:b0:eb:53:f8:7f:dd:67:ee:39:33:b0:27:6e:96: a3:83:0d:8d:04:35:08:6f:0b:c2:b1:5e:96:36:5c:99:e4:85: 9a:7e:78:23:73:29:f8:f2:f6:3f:c7:cc:bd:3e:98:73:60:ee: 48:cf:24:aa:2e:70:54:12:a3:51:b9:51:65:80:3e:ab:65:33: cb:13:b5:26 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTXH0KfafqDjeDeN++k6bzxwxWIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThGMjM5NDJDODcxQjFBMjNENTBBQTcwMjdBNzRBQkRD NzE3MkVBMzAeFw0yNjA1MDMwMjEyMTVaFw0yNzA1MDIwMjE3MTVaMDMxMTAvBgNV BAMTKDIwOTYxNkFCNjM0NzBGOTU2QjZERTA2QjY2RTlGQkEyMTE2RTRCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHosqH1pT7CxwgSHft3Y+syaXq eVTXCMhXbNNbmQINzx+TbpmZmpKP7K2krc0o8LDdN/r8+qAOeOa7BwViE0yrB/RR BmDOlEbb3odHzRhXnJH4PBRUvcl7kpMmP55FtG+g9rVsTVhqa1OGQvmkyKt60+iE foHyBywk6iATOkvZA9zvU5O/iIr1vsU449NJqz6f6GvVy1KLf0Q8EM0ATDnZW/4C cPYhbASYsNyb1j0Gr2r04/s9I1cXEey1ihFf2KAlkxdOdKr3S6AdAG6H0bfIXw5s uuGT75P+heRsW8UR7Lq/iL8Y6ZP4XXnYIvdQ4TxfnBhU4bszUvorkm3MJ5n/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUIJYWq2NHD5VrbeBrZun7ohFuS98wHwYDVR0j BBgwFoAU6PI5QshxsaI9UKpwJ6dKvccXLqMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJhZTU4YWMtNTkxNy00MDY5LTlhNmMtODNkYzFiYTMyMTI2LzAvRThGMjM5NDJD ODcxQjFBMjNENTBBQTcwMjdBNzRBQkRDNzE3MkVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEYyMzk0MkM4NzFCMUEyM0Q1MEFBNzAyN0E3NEFCREM3MTcy RUEzLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFiYWU1OGFjLTU5MTctNDA2OS05 YTZjLTgzZGMxYmEzMjEyNi8wLzMxMzAzMzJlMzIzNDM2MmUzMTMwMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn9mswDQYJ KoZIhvcNAQELBQADggEBABDUzqsVTqAuWh62CGcL0ZRxlUAVXNlpQW+3+KkWNm5i 5DAtW1FNV+4MeVS2M4ZHqsiPy3W6oH1nu2rq0lTtHbizcW8Sa/UcJlq1hQjE1vH8 TvTNXwo56eS/7uJgwJMNAoVDagNxU4Y40qCTIcwnCqxTuKhZDYM8srYWOFOIlUvV LBnuAAfAQVO4I71TLvkoGDKK5j1FSRWXX7kzDhZVmT5RTMEcxFexiJssBJ24WOz/ w45Y6Z2KFu2w61P4f91n7jkzsCdulqODDY0ENQhvC8KxXpY2XJnkhZp+eCNzKfjy 9j/HzL0+mHNg7kjPJKoucFQSo1G5UWWAPqtlM8sTtSY= -----END CERTIFICATE-----Generated at Wed May 13 13:24:40 2026 by rpki-client