$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa File: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (raw, json) Hash identifier: TA/s8DKqVENi0iNK6VJjUYJ9iOIFI3fpPu0mJtiANFQ= Subject key identifier: CF:F6:49:D5:B2:39:1E:58:AA:67:14:9E:B6:D4:44:37:A3:81:1D:B2 Certificate issuer: /CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Certificate serial: 2A39658F71CAC61CF551B0B5EAC94D377CCB288F Authority key identifier: CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa Signing time: Sun 03 May 2026 02:50:27 +0000 ROA not before: Sun 03 May 2026 02:45:27 +0000 ROA not after: Sun 02 May 2027 02:50:27 +0000 asID: 58819 IP address blocks: 103.240.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:39:65:8f:71:ca:c6:1c:f5:51:b0:b5:ea:c9:4d:37:7c:cb:28:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Validity Not Before: May 3 02:45:27 2026 GMT Not After : May 2 02:50:27 2027 GMT Subject: CN=CFF649D5B2391E58AA67149EB6D44437A3811DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b6:de:6d:6b:1d:2a:dc:cb:0f:4e:57:9c:13: 7c:7c:4a:ef:ee:95:3e:fb:1f:90:ed:9e:16:d9:45: 88:56:2e:03:7c:6c:9b:89:b5:b7:c4:d3:96:e4:36: 5d:10:49:f4:23:38:8f:b4:48:47:d9:dc:8c:50:8d: 3d:78:79:91:ef:5b:4a:6c:bb:d7:13:d5:75:b3:31: bb:46:3c:e3:d1:8f:c6:04:d0:1a:a6:c4:fb:9a:4f: 39:c6:94:e8:b2:87:24:49:58:7e:2e:eb:07:f3:f0: d2:39:ef:6e:5f:94:6a:ab:9e:48:80:f6:1d:28:b1: 5f:22:e9:23:a0:d5:bf:da:24:53:a4:00:5c:2f:25: 60:c8:26:0e:9a:58:86:64:c9:c2:ef:a9:62:80:80: 3d:4c:25:78:e4:22:b3:ce:71:4d:0d:e5:ae:c7:dd: 2d:53:78:5e:e2:47:4e:8c:9a:c6:80:e0:d3:c9:09: 23:43:c8:d2:ea:2c:c6:69:2b:7c:62:78:45:e6:b3: 68:15:a7:5b:ca:5b:ec:2c:3e:da:39:b1:88:c2:f8: b7:47:ec:b7:79:de:ca:b6:e1:57:96:5a:4f:da:e6: 0f:22:d2:01:a8:30:93:e5:2a:53:33:1a:f0:84:fa: e0:02:0a:50:e3:b7:ac:a8:bd:52:06:6d:e2:97:31: f3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F6:49:D5:B2:39:1E:58:AA:67:14:9E:B6:D4:44:37:A3:81:1D:B2 X509v3 Authority Key Identifier: keyid:CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.240.109.0/24 Signature Algorithm: sha256WithRSAEncryption 40:37:5a:0b:a2:70:3d:9e:b0:c8:3f:44:6e:c4:64:d4:fa:22: 2a:3d:55:a4:95:a8:2c:1f:5d:2e:15:81:68:90:cf:f7:e9:28: b0:a8:ba:82:14:bd:51:cf:30:b0:23:f0:3b:f8:7b:5a:93:2a: 39:1d:e9:59:80:91:f6:9c:b9:93:ae:b8:ae:d0:ba:31:33:08: a1:42:ac:59:cb:4b:96:10:e9:f4:39:03:04:bd:2f:0d:ee:91: 51:93:0a:ec:3d:73:72:6f:aa:91:95:86:2d:6a:2b:9b:b7:1d: 82:e1:29:4e:85:54:52:80:02:80:a9:f0:3d:55:bf:6c:54:6b: 84:59:0a:a2:85:c3:c2:07:ac:81:3e:8f:67:8d:e6:25:31:45: 9f:9a:5f:38:5f:2c:6d:41:64:0e:77:01:0a:91:fe:0d:2b:95: f7:89:65:f6:d7:b6:ec:3a:a3:be:45:f6:b4:40:f0:03:d7:d3: 17:5a:81:58:02:7c:46:98:a4:a9:cf:f2:06:e9:90:c2:8a:dd: 17:bd:44:bd:38:96:65:c8:45:98:24:3b:d6:b9:e9:2a:d8:6a: 20:26:73:68:7d:0d:63:ae:07:b4:a8:55:0d:6b:5a:a8:59:b8: e4:08:bc:7d:7a:b5:33:c1:d8:b0:d9:0f:16:ca:b3:8b:97:a9: 25:78:af:4a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKjllj3HKxhz1UbC16slNN3zLKI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQw Q0YzM0MxQzAeFw0yNjA1MDMwMjQ1MjdaFw0yNzA1MDIwMjUwMjdaMDMxMTAvBgNV BAMTKENGRjY0OUQ1QjIzOTFFNThBQTY3MTQ5RUI2RDQ0NDM3QTM4MTFEQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCitt5tax0q3MsPTlecE3x8Su/u lT77H5DtnhbZRYhWLgN8bJuJtbfE05bkNl0QSfQjOI+0SEfZ3IxQjT14eZHvW0ps u9cT1XWzMbtGPOPRj8YE0BqmxPuaTznGlOiyhyRJWH4u6wfz8NI5725flGqrnkiA 9h0osV8i6SOg1b/aJFOkAFwvJWDIJg6aWIZkycLvqWKAgD1MJXjkIrPOcU0N5a7H 3S1TeF7iR06MmsaA4NPJCSNDyNLqLMZpK3xieEXms2gVp1vKW+wsPto5sYjC+LdH 7Ld53sq24VeWWk/a5g8i0gGoMJPlKlMzGvCE+uACClDjt6yovVIGbeKXMfOlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUz/ZJ1bI5HliqZxSettREN6OBHbIwHwYDVR0j BBgwFoAUzmIND1HLDuHI3yZMSIzjTQzzPBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQwM2FmMDEtZjIzOS00YTFmLTgxY2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1 MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQwQ0YzM0MxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTYyMEQwRjUxQ0IwRUUxQzhERjI2NEM0ODhDRTM0RDBDRjMz QzFDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhkMDNhZjAxLWYyMzktNGExZi04 MWNkLTQxMDZiZWJiMmEyMi8wLzMxMzAzMzJlMzIzNDMwMmUzMTMwMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzgzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/BtMA0GCSqG SIb3DQEBCwUAA4IBAQBAN1oLonA9nrDIP0RuxGTU+iIqPVWklagsH10uFYFokM/3 6SiwqLqCFL1RzzCwI/A7+Htakyo5HelZgJH2nLmTrriu0LoxMwihQqxZy0uWEOn0 OQMEvS8N7pFRkwrsPXNyb6qRlYYtaiubtx2C4SlOhVRSgAKAqfA9Vb9sVGuEWQqi hcPCB6yBPo9njeYlMUWfml84XyxtQWQOdwEKkf4NK5X3iWX217bsOqO+Rfa0QPAD 19MXWoFYAnxGmKSpz/IG6ZDCit0XvUS9OJZlyEWYJDvWuekq2GogJnNofQ1jrge0 qFUNa1qoWbjkCLx9erUzwdiw2Q8WyrOLl6kleK9K -----END CERTIFICATE-----Generated at Wed May 13 14:47:30 2026 by rpki-client