$ rpki-client -vvf rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32342d3234203d3e20313338313030.roa File: 3130332e3132352e3130342e302f32342d3234203d3e20313338313030.roa (raw, json) Hash identifier: c0s6g/0N7Mpt32/FZfwmkqY2FOP2/z8Sv0VSvzKlGpQ= Subject key identifier: 84:74:13:47:9A:1F:62:E9:E3:10:E0:51:B8:8B:D8:BD:F7:0F:65:68 Certificate issuer: /CN=E48354BE9F141988ABFB54173029C4000CF9B18B Certificate serial: 37BE12A1E3E684DE4BDEEE6759732B214F9854BB Authority key identifier: E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32342d3234203d3e20313338313030.roa Signing time: Sun 03 May 2026 02:48:52 +0000 ROA not before: Sun 03 May 2026 02:43:52 +0000 ROA not after: Sun 02 May 2027 02:48:52 +0000 asID: 138100 IP address blocks: 103.125.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.crl rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:be:12:a1:e3:e6:84:de:4b:de:ee:67:59:73:2b:21:4f:98:54:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48354BE9F141988ABFB54173029C4000CF9B18B Validity Not Before: May 3 02:43:52 2026 GMT Not After : May 2 02:48:52 2027 GMT Subject: CN=847413479A1F62E9E310E051B88BD8BDF70F6568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:93:45:37:d6:11:d5:6b:7e:ee:b4:da:d3: e7:43:f8:e4:a9:80:46:49:ff:3d:71:37:1a:30:93: 81:97:92:da:07:6a:71:a2:0d:dc:f2:5f:d8:d9:d6: 19:54:f3:e0:1b:fd:f0:a7:54:00:93:03:12:99:dc: 92:e0:cd:78:be:5a:0c:bc:9b:c8:27:83:d2:65:f6: fe:c1:e6:f7:89:ab:11:d4:84:de:d6:d9:68:ed:0e: d4:b3:13:4f:01:f3:37:68:6b:36:ee:3d:64:73:66: 3a:9d:00:38:2a:77:9e:24:f3:0f:0a:a6:95:bb:22: 3e:76:c7:d9:be:cb:95:4f:0c:42:12:db:b7:93:ff: 81:91:e4:32:08:80:cb:e8:b2:a9:0d:51:5c:60:9c: 9e:79:cd:e7:87:00:2f:32:76:32:46:4c:15:14:c9: 79:28:2e:10:44:5d:ae:17:18:1b:ed:0b:86:dd:42: 1c:aa:9d:7b:8e:ad:bb:ed:d9:dc:20:fa:5e:0e:16: c4:d4:61:fe:f7:c5:a6:9b:87:71:75:c1:4c:34:b6: fd:37:5c:b1:08:d2:72:a5:ad:f0:d3:93:16:f7:6d: b7:3a:8d:53:1d:a9:32:90:2b:a7:8c:75:e1:0e:52: ea:d0:52:24:ea:59:90:e1:35:f9:18:e7:be:d4:b8: 73:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:74:13:47:9A:1F:62:E9:E3:10:E0:51:B8:8B:D8:BD:F7:0F:65:68 X509v3 Authority Key Identifier: keyid:E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32342d3234203d3e20313338313030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.104.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:fc:6b:f5:55:59:1a:cd:ef:f8:5a:05:9d:73:97:9e:44:6d: c9:cd:48:09:79:e9:c4:e0:cb:0e:ba:10:3a:a1:00:2d:96:78: 59:d8:2d:fa:8c:88:36:3b:7d:74:c4:06:92:dc:21:36:db:24: fb:61:e4:0b:86:28:2e:eb:91:fa:3b:94:1d:09:2a:4a:72:b0: d9:78:e4:51:ad:7a:e0:f8:c7:96:f8:b9:08:e5:b0:33:16:80: 10:1f:d2:1a:cb:21:fc:16:f3:cc:83:da:5a:ed:e4:09:40:3a: 69:2d:1d:76:ac:02:7c:31:9c:06:22:f8:1b:e5:4d:81:13:4d: 55:6f:d8:90:6e:2d:ba:da:cb:5a:1e:89:11:81:12:b2:6d:68: 49:c7:ac:f1:a5:81:3c:87:fe:95:34:03:da:3a:0d:dd:88:d7: de:1a:a7:70:ac:12:70:36:71:d1:a1:cc:a0:16:27:1e:f9:2e: c3:5f:19:2b:24:e0:3a:93:9a:15:06:d3:67:30:ba:56:ad:8f: f7:d4:a3:49:7d:e5:67:52:57:70:c3:62:dc:38:9e:ea:6b:ac: 15:64:0e:c6:f1:75:31:83:ec:6d:ee:ef:fb:c0:5e:ce:4f:9d: 87:25:56:fd:90:cc:c0:36:5e:09:a0:a0:37:3b:2f:e3:ae:11: 21:f8:fb:db -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUN74SoePmhN5L3u5nWXMrIU+YVLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4MzU0QkU5RjE0MTk4OEFCRkI1NDE3MzAyOUM0MDAw Q0Y5QjE4QjAeFw0yNjA1MDMwMjQzNTJaFw0yNzA1MDIwMjQ4NTJaMDMxMTAvBgNV BAMTKDg0NzQxMzQ3OUExRjYyRTlFMzEwRTA1MUI4OEJEOEJERjcwRjY1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjpNFN9YR1Wt+7rTa0+dD+OSp gEZJ/z1xNxowk4GXktoHanGiDdzyX9jZ1hlU8+Ab/fCnVACTAxKZ3JLgzXi+Wgy8 m8gng9Jl9v7B5veJqxHUhN7W2WjtDtSzE08B8zdoazbuPWRzZjqdADgqd54k8w8K ppW7Ij52x9m+y5VPDEIS27eT/4GR5DIIgMvosqkNUVxgnJ55zeeHAC8ydjJGTBUU yXkoLhBEXa4XGBvtC4bdQhyqnXuOrbvt2dwg+l4OFsTUYf73xaabh3F1wUw0tv03 XLEI0nKlrfDTkxb3bbc6jVMdqTKQK6eMdeEOUurQUiTqWZDhNfkY577UuHPHAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUhHQTR5ofYunjEOBRuIvYvfcPZWgwHwYDVR0j BBgwFoAU5INUvp8UGYir+1QXMCnEAAz5sYswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhjYWMxNjEtZjg4MC00MjA2LThkMmMtZGFhNjA0ZmUwOTAyLzAvRTQ4MzU0QkU5 RjE0MTk4OEFCRkI1NDE3MzAyOUM0MDAwQ0Y5QjE4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDgzNTRCRTlGMTQxOTg4QUJGQjU0MTczMDI5QzQwMDBDRjlC MThCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg4Y2FjMTYxLWY4ODAtNDIwNi04 ZDJjLWRhYTYwNGZlMDkwMi8wLzMxMzAzMzJlMzEzMjM1MmUzMTMwMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMwMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfWgwDQYJ KoZIhvcNAQELBQADggEBABv8a/VVWRrN7/haBZ1zl55EbcnNSAl56cTgyw66EDqh AC2WeFnYLfqMiDY7fXTEBpLcITbbJPth5AuGKC7rkfo7lB0JKkpysNl45FGteuD4 x5b4uQjlsDMWgBAf0hrLIfwW88yD2lrt5AlAOmktHXasAnwxnAYi+BvlTYETTVVv 2JBuLbray1oeiRGBErJtaEnHrPGlgTyH/pU0A9o6Dd2I194ap3CsEnA2cdGhzKAW Jx75LsNfGSsk4DqTmhUG02cwulatj/fUo0l95WdSV3DDYtw4nuprrBVkDsbxdTGD 7G3u7/vAXs5PnYclVv2QzMA2XgmgoDc7L+OuESH4+9s= -----END CERTIFICATE-----Generated at Wed May 13 12:46:20 2026 by rpki-client