$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa File: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (raw, json) Hash identifier: ubZK1JZSOkQSdT51nvL6YxDcdnyD6UzUmGgbeftTx40= Subject key identifier: F0:25:5D:5D:91:06:84:61:29:70:C8:FA:9F:62:0F:7D:C6:54:84:E4 Certificate issuer: /CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Certificate serial: 1D0AEBF5578AEA9B9486201B8B0D2090F564A61C Authority key identifier: CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa Signing time: Sun 03 May 2026 02:50:27 +0000 ROA not before: Sun 03 May 2026 02:45:27 +0000 ROA not after: Sun 02 May 2027 02:50:27 +0000 asID: 58819 IP address blocks: 103.240.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0a:eb:f5:57:8a:ea:9b:94:86:20:1b:8b:0d:20:90:f5:64:a6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Validity Not Before: May 3 02:45:27 2026 GMT Not After : May 2 02:50:27 2027 GMT Subject: CN=F0255D5D910684612970C8FA9F620F7DC65484E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:48:9c:1d:bc:b7:f5:48:b2:c9:22:0b:f3:2a: 69:e3:cc:3c:60:d8:ac:c5:8b:b5:f0:34:62:f0:68: 96:19:67:98:a5:a0:0d:35:5a:6a:d5:03:95:20:f5: 77:a9:2a:b7:ba:35:76:73:85:39:32:43:63:13:bb: 7b:35:bd:31:66:50:fe:2f:20:ea:54:4d:32:31:24: 15:fe:9e:2d:08:b9:3d:78:6f:e6:6f:1c:01:29:8f: d6:47:95:0a:63:2c:a7:e4:38:00:93:3c:49:8d:c0: b7:d0:31:6d:2b:0b:b4:43:28:80:7d:95:5e:6a:aa: 58:ee:8d:ce:b0:6b:bd:ff:77:d0:2c:d8:0f:ca:af: 3a:28:21:10:84:88:a9:00:09:d2:7e:af:27:32:31: 72:38:21:52:65:08:d7:87:a6:a2:2a:9a:8f:53:5a: 98:39:08:ad:07:55:59:e9:61:5b:d4:d4:5c:17:01: 39:18:33:6c:eb:3f:0e:0e:06:20:b1:73:49:06:ef: 1f:a4:ba:bf:85:c2:97:9f:1b:47:7f:bb:f7:fc:9d: 50:51:0b:13:7f:9b:ad:f8:ff:03:0c:ba:51:d9:66: b4:66:80:72:84:bd:0c:9e:de:24:8d:43:06:8a:b4: fd:dc:c5:78:a3:4b:ef:f9:68:1b:c1:f4:0a:42:a8: 86:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:25:5D:5D:91:06:84:61:29:70:C8:FA:9F:62:0F:7D:C6:54:84:E4 X509v3 Authority Key Identifier: keyid:CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.240.108.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:d6:c7:60:8d:87:b0:46:de:4b:0a:95:83:8e:eb:f8:c3:a4: 65:f2:e0:5d:e1:b8:e3:90:5b:f4:bf:9f:79:6e:68:49:93:3c: e9:af:74:e9:37:e7:15:f0:6b:41:15:65:1b:77:0b:82:00:11: c2:3d:34:22:40:dd:74:6d:2d:bd:3a:a5:dc:5a:10:e4:4d:bf: 97:23:20:41:35:81:ad:cf:11:c0:43:7b:63:62:51:31:29:8f: 0f:71:7f:87:01:5a:76:88:44:c9:2e:59:b2:ab:7f:6a:07:26: a1:17:6a:41:56:cf:de:43:18:3c:3b:7e:03:2d:53:d7:7a:d2: 11:e5:f6:70:7b:b8:74:b0:c9:47:68:d3:0f:19:83:0e:62:d7: 37:f9:5f:1f:f7:bb:47:8c:00:70:2c:30:0e:b5:66:5b:d9:c2: 42:5d:30:ad:37:ce:fd:3d:d8:dc:95:ca:f1:79:94:07:3e:a3: 88:0a:65:3b:69:52:dd:12:78:8b:2d:97:b3:b1:13:2c:a4:13: 6b:ef:23:db:8e:8b:45:ea:6b:fe:f7:8d:88:98:2f:83:fe:1f: 25:28:04:a0:30:c3:8d:7f:04:ba:5c:a6:f6:15:2a:88:7c:d8: 03:ce:9b:c2:06:c1:2f:e0:5f:65:2a:40:a8:e4:36:03:c6:4f: e7:39:e6:3e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHQrr9VeK6puUhiAbiw0gkPVkphwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQw Q0YzM0MxQzAeFw0yNjA1MDMwMjQ1MjdaFw0yNzA1MDIwMjUwMjdaMDMxMTAvBgNV BAMTKEYwMjU1RDVEOTEwNjg0NjEyOTcwQzhGQTlGNjIwRjdEQzY1NDg0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSJwdvLf1SLLJIgvzKmnjzDxg 2KzFi7XwNGLwaJYZZ5iloA01WmrVA5Ug9XepKre6NXZzhTkyQ2MTu3s1vTFmUP4v IOpUTTIxJBX+ni0IuT14b+ZvHAEpj9ZHlQpjLKfkOACTPEmNwLfQMW0rC7RDKIB9 lV5qqljujc6wa73/d9As2A/KrzooIRCEiKkACdJ+rycyMXI4IVJlCNeHpqIqmo9T Wpg5CK0HVVnpYVvU1FwXATkYM2zrPw4OBiCxc0kG7x+kur+FwpefG0d/u/f8nVBR CxN/m634/wMMulHZZrRmgHKEvQye3iSNQwaKtP3cxXijS+/5aBvB9ApCqIaLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU8CVdXZEGhGEpcMj6n2IPfcZUhOQwHwYDVR0j BBgwFoAUzmIND1HLDuHI3yZMSIzjTQzzPBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQwM2FmMDEtZjIzOS00YTFmLTgxY2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1 MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQwQ0YzM0MxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTYyMEQwRjUxQ0IwRUUxQzhERjI2NEM0ODhDRTM0RDBDRjMz QzFDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhkMDNhZjAxLWYyMzktNGExZi04 MWNkLTQxMDZiZWJiMmEyMi8wLzMxMzAzMzJlMzIzNDMwMmUzMTMwMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzgzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/BsMA0GCSqG SIb3DQEBCwUAA4IBAQAu1sdgjYewRt5LCpWDjuv4w6Rl8uBd4bjjkFv0v595bmhJ kzzpr3TpN+cV8GtBFWUbdwuCABHCPTQiQN10bS29OqXcWhDkTb+XIyBBNYGtzxHA Q3tjYlExKY8PcX+HAVp2iETJLlmyq39qByahF2pBVs/eQxg8O34DLVPXetIR5fZw e7h0sMlHaNMPGYMOYtc3+V8f97tHjABwLDAOtWZb2cJCXTCtN879PdjclcrxeZQH PqOICmU7aVLdEniLLZezsRMspBNr7yPbjotF6mv+942ImC+D/h8lKASgMMONfwS6 XKb2FSqIfNgDzpvCBsEv4F9lKkCo5DYDxk/nOeY+ -----END CERTIFICATE-----Generated at Wed May 13 13:02:36 2026 by rpki-client