$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa File: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (raw, json) Hash identifier: OAg2GudHEhCjZV+7yoh21gYo7gVQiw3JjcWhfs55ypg= Subject key identifier: 4D:94:8F:A4:A7:65:4D:92:2D:66:DF:C8:09:E2:48:F9:C6:D5:AC:1B Certificate issuer: /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B Certificate serial: 10038DA2E15AFA225B50CC95678012F124FF6B64 Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa Signing time: Sun 03 May 2026 02:59:35 +0000 ROA not before: Sun 03 May 2026 02:54:35 +0000 ROA not after: Sun 02 May 2027 02:59:35 +0000 asID: 149746 IP address blocks: 103.247.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:03:8d:a2:e1:5a:fa:22:5b:50:cc:95:67:80:12:f1:24:ff:6b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B Validity Not Before: May 3 02:54:35 2026 GMT Not After : May 2 02:59:35 2027 GMT Subject: CN=4D948FA4A7654D922D66DFC809E248F9C6D5AC1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c5:53:ac:b2:cb:55:38:03:4a:62:16:4a:00: a5:ad:90:59:9c:ad:22:2e:83:cf:49:d6:92:e2:b2: 8b:6c:14:cf:9a:4a:4a:ce:bd:3f:55:a6:f0:48:ad: 78:b2:9f:c3:c1:e6:32:b7:57:c2:1c:8a:38:8b:4d: 15:29:b3:93:e9:87:11:7b:c4:13:7e:29:13:0e:fd: eb:61:16:80:09:70:25:0d:2f:5e:6c:73:d2:b7:ee: 8e:25:8c:eb:fa:1f:cf:0e:49:29:4d:c1:c2:7a:b9: d8:01:7c:35:95:83:24:e2:6b:42:7f:07:b3:7c:32: a7:58:8d:12:ba:d9:e7:9b:cd:00:52:1b:fb:e7:17: 8e:12:7d:8e:bc:db:1c:56:66:df:51:40:b4:af:6a: 0d:d3:d3:79:81:ff:a9:ba:43:75:2d:8e:39:9d:94: 68:95:ff:e3:92:e0:fe:17:f0:ae:15:05:95:28:44: e7:52:41:69:46:05:11:d6:58:ad:99:fb:83:a7:f6: 05:30:b7:80:c6:95:ce:4b:5c:0b:ef:4c:4e:df:a3: 1b:30:0f:78:f6:17:14:d4:1a:30:97:30:d3:a9:b2: 93:ef:68:15:02:1d:08:ee:a3:c5:5a:37:e0:ac:8b: 05:b7:a5:12:a6:ac:36:93:84:c7:3e:1e:a9:5b:14: 1e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:94:8F:A4:A7:65:4D:92:2D:66:DF:C8:09:E2:48:F9:C6:D5:AC:1B X509v3 Authority Key Identifier: keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.121.0/24 Signature Algorithm: sha256WithRSAEncryption 07:12:02:24:8e:45:3d:61:d5:ac:24:35:e7:31:c3:68:81:98: 57:15:b4:1d:e3:d8:bb:04:d4:42:24:94:81:a0:48:b5:89:7a: da:5e:09:4e:76:3c:79:7f:78:78:bb:62:e9:a5:36:71:44:c5: 6c:fb:57:c6:0a:b3:21:fe:76:34:6f:08:91:3d:50:39:6e:f6: c6:1c:03:44:b4:20:ef:93:c0:f3:f0:12:a2:65:db:d8:21:6e: ec:34:89:78:da:6a:27:d8:82:2d:2f:b5:85:ac:d5:80:8d:28: 58:6d:90:4f:56:28:32:8a:1a:f8:71:ba:ad:4b:d7:77:fb:ab: 13:ff:71:bb:b2:37:67:ef:8c:02:cc:27:7a:8d:3f:71:77:78: f8:02:97:50:60:ba:f0:c2:d8:09:97:86:5e:0f:fd:99:9f:04: f1:04:2d:cb:4d:57:ca:7c:9c:4e:58:32:23:d4:b2:ee:7d:a2: 82:f4:08:98:01:25:a2:ab:bd:b6:c8:89:f6:55:2b:ce:14:46: 84:2f:e5:ac:df:a1:08:ef:59:c4:fe:4f:06:72:64:d3:a0:a8: 7d:f8:b1:84:59:c2:d5:5f:e4:94:21:46:d1:68:3c:85:7c:3b: a6:37:68:0a:d0:ff:aa:f3:c7:4f:e8:9c:c3:98:b7:11:f9:5c: 4c:90:9c:1a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEAONouFa+iJbUMyVZ4AS8ST/a2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4QzU2RUQxRUEwQzZGOTM5MUNEOTAwOEU3OENERjM4 MUMyNzIwQjAeFw0yNjA1MDMwMjU0MzVaFw0yNzA1MDIwMjU5MzVaMDMxMTAvBgNV BAMTKDREOTQ4RkE0QTc2NTREOTIyRDY2REZDODA5RTI0OEY5QzZENUFDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxVOssstVOANKYhZKAKWtkFmc rSIug89J1pLisotsFM+aSkrOvT9VpvBIrXiyn8PB5jK3V8IcijiLTRUps5PphxF7 xBN+KRMO/ethFoAJcCUNL15sc9K37o4ljOv6H88OSSlNwcJ6udgBfDWVgyTia0J/ B7N8MqdYjRK62eebzQBSG/vnF44SfY682xxWZt9RQLSvag3T03mB/6m6Q3Utjjmd lGiV/+OS4P4X8K4VBZUoROdSQWlGBRHWWK2Z+4On9gUwt4DGlc5LXAvvTE7foxsw D3j2FxTUGjCXMNOpspPvaBUCHQjuo8VaN+CsiwW3pRKmrDaThMc+HqlbFB4BAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUTZSPpKdlTZItZt/ICeJI+cbVrBswHwYDVR0j BBgwFoAUjIxW7R6gxvk5HNkAjnjN84HCcgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVhN2ExMTUtYjhiOC00OTBiLTgzMjAtYzllNTlhMTAwM2RkLzAvOEM4QzU2RUQx RUEwQzZGOTM5MUNEOTAwOEU3OENERjM4MUMyNzIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QzhDNTZFRDFFQTBDNkY5MzkxQ0Q5MDA4RTc4Q0RGMzgxQzI3 MjBCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FlYTdhMTE1LWI4YjgtNDkwYi04 MzIwLWM5ZTU5YTEwMDNkZC8wLzMxMzAzMzJlMzIzNDM3MmUzMTMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM0MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn93kwDQYJ KoZIhvcNAQELBQADggEBAAcSAiSORT1h1awkNecxw2iBmFcVtB3j2LsE1EIklIGg SLWJetpeCU52PHl/eHi7YumlNnFExWz7V8YKsyH+djRvCJE9UDlu9sYcA0S0IO+T wPPwEqJl29ghbuw0iXjaaifYgi0vtYWs1YCNKFhtkE9WKDKKGvhxuq1L13f7qxP/ cbuyN2fvjALMJ3qNP3F3ePgCl1BguvDC2AmXhl4P/ZmfBPEELctNV8p8nE5YMiPU su59ooL0CJgBJaKrvbbIifZVK84URoQv5azfoQjvWcT+TwZyZNOgqH34sYRZwtVf 5JQhRtFoPIV8O6Y3aArQ/6rzx0/onMOYtxH5XEyQnBo= -----END CERTIFICATE-----Generated at Wed May 13 08:35:20 2026 by rpki-client