$ rpki-client -vvf rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa File: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (raw, json) Hash identifier: 5A4dPtUK7PjCIyvsgm0TeACgqogT7kOhSEqkeVa0xLI= Subject key identifier: 88:53:4A:43:06:B6:A1:44:49:A0:51:B3:B1:CD:39:7A:1E:8B:5D:AE Certificate issuer: /CN=08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38 Certificate serial: 4536AA9DFF4830C6325B683BEE2E0C9EB748EA16 Authority key identifier: 08:46:5F:A1:5C:F4:94:2C:9C:4C:E0:9B:FD:3D:A0:43:8F:ED:BB:38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa Signing time: Sun 03 May 2026 02:42:47 +0000 ROA not before: Sun 03 May 2026 02:37:47 +0000 ROA not after: Sun 02 May 2027 02:42:47 +0000 asID: 137384 IP address blocks: 103.120.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.crl rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:36:aa:9d:ff:48:30:c6:32:5b:68:3b:ee:2e:0c:9e:b7:48:ea:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38 Validity Not Before: May 3 02:37:47 2026 GMT Not After : May 2 02:42:47 2027 GMT Subject: CN=88534A4306B6A14449A051B3B1CD397A1E8B5DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:0a:70:1b:09:6d:d9:1c:20:64:f7:f4:69: 15:6a:a0:de:a1:eb:4e:56:45:e2:ab:1e:4c:86:87: 40:9d:f1:8e:2a:4e:9e:15:0f:e5:ff:f8:86:4a:51: 00:bd:13:9e:49:d9:36:ac:16:40:1c:93:36:3f:76: ec:27:ef:1f:24:32:29:ce:10:2b:e1:97:a3:56:d3: 1a:6b:30:2f:76:5c:54:3c:c6:19:22:29:8a:45:76: bd:5b:29:8e:84:e9:05:2c:3c:83:21:f8:cc:15:0c: 7a:3b:89:30:13:6d:45:02:fe:7b:8a:1e:ba:b4:36: ba:78:2d:55:37:7e:66:07:ff:18:59:23:4a:fc:4b: ca:ce:a4:39:0c:a5:cb:58:5a:24:85:60:85:7e:e3: 67:0e:8d:cd:1a:3d:83:86:df:d0:ce:83:94:e7:b8: 9d:ed:cc:8c:19:bc:62:24:9e:97:1b:ff:23:74:62: 41:57:db:48:8b:2b:9d:05:c8:e5:39:c6:76:6b:2d: 7a:78:e1:20:c6:ee:0d:57:19:50:85:a2:32:4e:c7: 52:6d:ee:26:2d:ed:c3:7c:94:c5:80:4f:0f:18:54: 3b:30:f5:a2:26:cb:ad:4f:6c:74:ac:e0:93:f8:41: b9:b1:c3:42:b5:73:f9:ca:60:b8:0f:34:1a:dc:02: 0e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:53:4A:43:06:B6:A1:44:49:A0:51:B3:B1:CD:39:7A:1E:8B:5D:AE X509v3 Authority Key Identifier: keyid:08:46:5F:A1:5C:F4:94:2C:9C:4C:E0:9B:FD:3D:A0:43:8F:ED:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.232.0/24 Signature Algorithm: sha256WithRSAEncryption 41:9d:40:ce:20:61:f9:c3:db:11:97:78:c5:4d:43:5b:31:cc: cd:58:c3:82:1e:23:2f:73:26:58:3f:a8:2e:d8:a8:a1:e6:e9: fd:ff:98:fe:a7:15:30:14:4c:ef:fe:ae:4a:c8:08:fd:e1:60: ca:45:49:cf:81:c0:57:66:1e:5e:58:63:56:3c:bf:06:36:93: 80:78:1e:44:9c:32:28:2c:e2:fe:61:f4:a8:b7:ab:0f:a4:77: e3:dc:11:a5:cb:4d:e2:38:26:4a:c9:ac:b0:2a:0e:87:5a:a1: 7e:b8:5e:e1:45:69:cb:cc:0b:f8:bb:c7:a9:bb:c5:cd:2f:43: 9c:9e:4a:4d:aa:b6:05:61:54:4f:50:a9:4a:3e:9d:95:f7:6e: bc:19:37:55:e9:2d:c7:23:1e:45:fb:87:f5:16:0e:27:52:da: 79:7f:b0:28:06:b1:36:83:d6:65:de:83:0a:83:06:ec:b3:b9: d8:2b:32:71:85:1b:25:6c:a4:2c:eb:eb:21:8d:7b:1b:6c:38: 4b:54:f9:5e:bd:8a:b6:15:75:93:0b:da:25:ba:b5:f9:d2:81: 0e:db:49:04:99:d9:d0:99:a7:75:08:a3:da:5d:34:2f:bc:f5: 72:39:86:aa:4e:13:e6:2e:40:71:52:a8:4a:d5:5b:65:d4:e5: 5a:b2:f3:e9 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIURTaqnf9IMMYyW2g77i4MnrdI6hYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0NjVGQTE1Q0Y0OTQyQzlDNENFMDlCRkQzREEwNDM4 RkVEQkIzODAeFw0yNjA1MDMwMjM3NDdaFw0yNzA1MDIwMjQyNDdaMDMxMTAvBgNV BAMTKDg4NTM0QTQzMDZCNkExNDQ0OUEwNTFCM0IxQ0QzOTdBMUU4QjVEQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNUQpwGwlt2RwgZPf0aRVqoN6h 605WReKrHkyGh0Cd8Y4qTp4VD+X/+IZKUQC9E55J2TasFkAckzY/duwn7x8kMinO ECvhl6NW0xprMC92XFQ8xhkiKYpFdr1bKY6E6QUsPIMh+MwVDHo7iTATbUUC/nuK Hrq0Nrp4LVU3fmYH/xhZI0r8S8rOpDkMpctYWiSFYIV+42cOjc0aPYOG39DOg5Tn uJ3tzIwZvGIknpcb/yN0YkFX20iLK50FyOU5xnZrLXp44SDG7g1XGVCFojJOx1Jt 7iYt7cN8lMWATw8YVDsw9aImy61PbHSs4JP4Qbmxw0K1c/nKYLgPNBrcAg4fAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUiFNKQwa2oURJoFGzsc05eh6LXa4wHwYDVR0j BBgwFoAUCEZfoVz0lCycTOCb/T2gQ4/tuzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzJjMDBmNzktNDllYi00NTI1LTkwMjYtYTIzOGZmNDQ4MDcwLzAvMDg0NjVGQTE1 Q0Y0OTQyQzlDNENFMDlCRkQzREEwNDM4RkVEQkIzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODQ2NUZBMTVDRjQ5NDJDOUM0Q0UwOUJGRDNEQTA0MzhGRURC QjM4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzcyYzAwZjc5LTQ5ZWItNDUyNS05 MDI2LWEyMzhmZjQ0ODA3MC8wLzMxMzAzMzJlMzEzMjMwMmUzMjMzMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzM4MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneOgwDQYJ KoZIhvcNAQELBQADggEBAEGdQM4gYfnD2xGXeMVNQ1sxzM1Yw4IeIy9zJlg/qC7Y qKHm6f3/mP6nFTAUTO/+rkrICP3hYMpFSc+BwFdmHl5YY1Y8vwY2k4B4HkScMigs 4v5h9Ki3qw+kd+PcEaXLTeI4JkrJrLAqDodaoX64XuFFacvMC/i7x6m7xc0vQ5ye Sk2qtgVhVE9QqUo+nZX3brwZN1XpLccjHkX7h/UWDidS2nl/sCgGsTaD1mXegwqD BuyzudgrMnGFGyVspCzr6yGNextsOEtU+V69irYVdZML2iW6tfnSgQ7bSQSZ2dCZ p3UIo9pdNC+89XI5hqpOE+YuQHFSqErVW2XU5Vqy8+k= -----END CERTIFICATE-----Generated at Wed May 13 11:25:31 2026 by rpki-client