$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130342e302f32342d3234203d3e203130313337.roa File: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (raw, json) Hash identifier: jn+GzuAFdRGnqz/8h2QUcRukZQjtYixsBnGXWuK3nO4= Subject key identifier: 8D:F3:CF:91:97:EB:42:EA:EF:69:32:16:3E:A0:57:CA:4D:7F:5A:2D Certificate issuer: /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D Certificate serial: 07CC89125E009CC9536B980FC48051382BBC4912 Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130342e302f32342d3234203d3e203130313337.roa Signing time: Sun 03 May 2026 02:46:05 +0000 ROA not before: Sun 03 May 2026 02:41:05 +0000 ROA not after: Sun 02 May 2027 02:46:05 +0000 asID: 10137 IP address blocks: 203.99.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:cc:89:12:5e:00:9c:c9:53:6b:98:0f:c4:80:51:38:2b:bc:49:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D Validity Not Before: May 3 02:41:05 2026 GMT Not After : May 2 02:46:05 2027 GMT Subject: CN=8DF3CF9197EB42EAEF6932163EA057CA4D7F5A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:59:cd:2b:6a:36:ad:ef:9e:06:ef:65:4a:2c: b4:f2:6f:77:fa:e6:5b:25:28:a6:fb:07:3e:c4:4b: f3:82:e1:6e:40:5c:23:c4:bb:77:34:6a:ba:53:51: 1d:0f:9e:e9:ea:51:8c:96:8d:c6:f6:94:a7:16:d9: 36:04:43:7c:f4:22:8c:6f:ed:59:9e:53:1f:c9:49: 0c:fb:6c:d9:7f:7e:48:d2:38:ea:32:cc:35:9d:5d: c4:cc:22:8e:13:70:1d:29:52:bc:f5:80:a5:cc:ce: 18:9d:19:50:55:50:f5:73:ee:cd:de:2e:02:77:43: 69:a8:b2:81:e0:2c:75:b7:32:74:c7:39:f6:29:1a: a0:ce:5f:51:21:eb:d8:69:1a:14:1c:e1:6f:19:56: f9:e9:46:a5:3d:20:2e:98:0c:12:88:75:aa:83:4d: 8b:90:29:bd:9c:8c:c4:78:c8:a0:cb:c4:42:32:0b: aa:a8:70:81:5b:90:6f:33:f6:19:89:e8:aa:6d:4b: a8:18:2d:f6:8f:a2:bc:88:0a:f5:b1:64:e6:f4:cd: 8b:23:7b:d6:57:f4:f4:79:26:d4:30:7a:2f:34:a5: ab:16:93:2f:97:35:07:94:4e:48:93:cf:80:e8:07: 2d:c4:ad:80:ec:12:12:03:87:d5:e5:8f:13:24:f8: 77:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F3:CF:91:97:EB:42:EA:EF:69:32:16:3E:A0:57:CA:4D:7F:5A:2D X509v3 Authority Key Identifier: keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130342e302f32342d3234203d3e203130313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.104.0/24 Signature Algorithm: sha256WithRSAEncryption 21:9d:c0:b1:27:07:ed:f9:99:68:ce:e0:1d:2a:31:9e:f0:a8: 8d:b7:3c:e3:6d:1f:c7:c8:6c:cd:c5:c4:b4:da:82:e9:1a:ae: f7:b4:2b:af:60:ab:3f:86:58:b8:76:0b:c9:02:33:b5:7b:46: ee:eb:f9:1b:44:25:7c:ae:bf:68:fc:51:4b:1f:23:a7:40:74: f4:0d:9b:23:4d:1f:94:10:cd:9d:5a:b2:e0:ee:b0:d8:6d:ec: 2a:50:9f:e0:d7:33:ae:52:4b:40:31:5f:61:6f:4a:c5:43:5c: 46:f7:43:2e:2c:94:da:a5:23:64:04:8a:3d:36:d5:12:fa:3a: cd:42:a7:10:76:39:79:fb:9d:0f:4b:9a:cc:3d:87:fc:ab:95: bf:fa:e9:d7:cd:20:13:28:6a:69:d2:02:19:25:b0:61:94:63: 65:90:d2:da:52:7a:a5:7a:e0:30:b1:7f:55:6d:11:46:9e:04: 64:bc:e1:6a:3d:7c:3e:a6:05:b5:bd:28:5b:f0:51:ed:73:73: f1:4b:6c:9d:51:e5:fd:6b:e1:62:2e:ac:1b:22:58:da:3f:2e: 87:95:be:cc:1f:45:f3:31:54:ef:c6:e1:b6:8b:ef:c2:35:7e: a2:f3:e7:0d:b7:4c:cf:2a:fd:d4:5e:92:3b:5f:79:88:05:91: 15:bd:14:72 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUB8yJEl4AnMlTa5gPxIBROCu8SRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJCRDVGM0Y2QzVBQjFBOUY0RTMxMkE3REFGQUFDQkMy MjIyOTQ2RDAeFw0yNjA1MDMwMjQxMDVaFw0yNzA1MDIwMjQ2MDVaMDMxMTAvBgNV BAMTKDhERjNDRjkxOTdFQjQyRUFFRjY5MzIxNjNFQTA1N0NBNEQ3RjVBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXWc0rajat754G72VKLLTyb3f6 5lslKKb7Bz7ES/OC4W5AXCPEu3c0arpTUR0PnunqUYyWjcb2lKcW2TYEQ3z0Ioxv 7VmeUx/JSQz7bNl/fkjSOOoyzDWdXcTMIo4TcB0pUrz1gKXMzhidGVBVUPVz7s3e LgJ3Q2mosoHgLHW3MnTHOfYpGqDOX1Eh69hpGhQc4W8ZVvnpRqU9IC6YDBKIdaqD TYuQKb2cjMR4yKDLxEIyC6qocIFbkG8z9hmJ6KptS6gYLfaPoryICvWxZOb0zYsj e9ZX9PR5JtQwei80pasWky+XNQeUTkiTz4DoBy3ErYDsEhIDh9XljxMk+HfJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUjfPPkZfrQurvaTIWPqBXyk1/Wi0wHwYDVR0j BBgwFoAUEr1fP2xasan04xKn2vqsvCIilG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U1OWRiN2UtOTRmNi00MDAyLTk5ZWYtNWU5NmQ4ZTM3ZTUwLzAvMTJCRDVGM0Y2 QzVBQjFBOUY0RTMxMkE3REFGQUFDQkMyMjIyOTQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMkJENUYzRjZDNUFCMUE5RjRFMzEyQTdEQUZBQUNCQzIyMjI5 NDZELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdlNTlkYjdlLTk0ZjYtNDAwMi05 OWVmLTVlOTZkOGUzN2U1MC8wLzMyMzAzMzJlMzkzOTJlMzEzMDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMDMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtjaDANBgkqhkiG 9w0BAQsFAAOCAQEAIZ3AsScH7fmZaM7gHSoxnvCojbc8420fx8hszcXEtNqC6Rqu 97Qrr2CrP4ZYuHYLyQIztXtG7uv5G0QlfK6/aPxRSx8jp0B09A2bI00flBDNnVqy 4O6w2G3sKlCf4NczrlJLQDFfYW9KxUNcRvdDLiyU2qUjZASKPTbVEvo6zUKnEHY5 efudD0uazD2H/KuVv/rp180gEyhqadICGSWwYZRjZZDS2lJ6pXrgMLF/VW0RRp4E ZLzhaj18PqYFtb0oW/BR7XNz8UtsnVHl/WvhYi6sGyJY2j8uh5W+zB9F8zFU78bh tovvwjV+ovPnDbdMzyr91F6SO195iAWRFb0Ucg== -----END CERTIFICATE-----Generated at Wed May 13 02:50:52 2026 by rpki-client