$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/3130332e34302e3132302e302f32322d3234203d3e203633353038.roa File: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (raw, json) Hash identifier: kjFpYE2tHcJudyUulebatKRmVdaAJGBwcjnuFBP+Tj8= Subject key identifier: DF:EF:9E:11:B9:F9:B9:CC:56:A5:63:B9:FF:FC:F2:50:38:FC:9C:A8 Certificate issuer: /CN=029298EDFAB613103A6838C4E6588574BAE7834B Certificate serial: 2D119F31057A637586E52D9DACDCDBAC1F1DF39D Authority key identifier: 02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/3130332e34302e3132302e302f32322d3234203d3e203633353038.roa Signing time: Sun 03 May 2026 03:01:01 +0000 ROA not before: Sun 03 May 2026 02:56:01 +0000 ROA not after: Sun 02 May 2027 03:01:01 +0000 asID: 63508 IP address blocks: 103.40.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:11:9f:31:05:7a:63:75:86:e5:2d:9d:ac:dc:db:ac:1f:1d:f3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029298EDFAB613103A6838C4E6588574BAE7834B Validity Not Before: May 3 02:56:01 2026 GMT Not After : May 2 03:01:01 2027 GMT Subject: CN=DFEF9E11B9F9B9CC56A563B9FFFCF25038FC9CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:7a:76:39:f3:92:9b:71:be:33:91:a0:da: 7f:24:0f:2c:0f:51:9d:bb:a2:a9:85:c3:27:f2:29: de:28:93:b1:7a:7a:60:a9:84:81:ac:5c:e8:92:ff: dd:23:36:f2:b5:a4:bf:d3:05:dc:b6:b3:c1:6c:7d: 8f:a6:65:b5:4e:7c:2a:3d:f9:05:a5:cb:d1:33:d3: 21:80:39:3a:d3:58:a8:ee:3b:11:dc:ce:ef:8d:d0: 71:a7:ef:24:d0:bb:af:49:94:34:7a:52:8e:a0:e9: 92:41:c3:15:b4:84:b1:cf:63:dd:0e:c0:82:5f:77: 8b:8b:7e:44:3a:de:dd:dd:f2:fe:55:92:64:39:f2: 78:08:20:1e:fc:65:49:1e:c9:15:d9:e2:fb:70:c9: 87:86:1f:d1:ce:c3:28:79:af:ee:98:35:f2:e3:83: 24:91:d3:0f:68:eb:d1:03:17:94:78:32:17:b2:3a: 86:6c:cd:6a:bf:81:38:0f:5a:9a:f5:33:d7:33:14: ff:64:67:a3:f0:25:e3:81:5b:08:5a:8b:28:69:e4: e1:04:04:38:69:90:b3:ae:ef:35:3d:7a:ca:09:7c: 34:ba:c5:7d:0a:88:ab:0e:78:16:8d:84:36:a0:21: 66:1c:18:73:45:fa:f6:d2:6b:c6:b4:08:9e:cb:cc: 07:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EF:9E:11:B9:F9:B9:CC:56:A5:63:B9:FF:FC:F2:50:38:FC:9C:A8 X509v3 Authority Key Identifier: keyid:02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/3130332e34302e3132302e302f32322d3234203d3e203633353038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.40.120.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:8c:b1:33:34:63:fe:d4:a4:03:e4:57:ce:68:70:7f:56:e2: 3e:bc:2f:43:4a:7c:05:8f:ad:72:df:c9:e5:6d:a9:9b:61:52: bd:25:78:bc:cb:ef:9a:79:bc:43:ac:53:b6:3c:63:7a:9e:e8: b2:1f:02:1f:67:b5:e2:a6:80:d6:62:6b:c5:e2:99:a9:b4:48: 15:c6:6c:c5:33:9d:96:d9:11:28:85:56:b2:4a:f5:36:71:62: ff:93:e7:16:7f:94:7c:7d:b2:40:9e:be:05:75:d7:cd:26:a0: d9:06:42:66:dc:49:51:c5:19:4f:f9:33:74:6b:48:98:b1:9d: cc:f5:9d:29:fe:b1:f8:95:70:59:4e:6f:86:f1:68:8b:f9:03: 94:ce:e7:b5:bf:fa:17:06:08:8a:00:9b:cb:4e:57:96:fb:52: 64:90:d9:22:d7:d3:3e:f2:e3:3a:8c:75:bc:f2:39:d0:6a:f7: d4:95:8c:a7:9b:38:ec:ad:65:1a:69:c9:db:27:0e:dc:3b:5e: 0f:d2:5d:b7:d1:c2:6e:32:69:23:c7:a1:c6:55:ee:58:fb:de: 17:10:96:c0:f4:06:03:4d:71:08:c6:3c:89:bd:f7:47:c3:87: a4:2a:1e:8d:2c:77:53:2b:d2:e7:cf:f9:fa:82:61:aa:14:10: 98:55:3d:a6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULRGfMQV6Y3WG5S2drNzbrB8d850wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRC QUU3ODM0QjAeFw0yNjA1MDMwMjU2MDFaFw0yNzA1MDIwMzAxMDFaMDMxMTAvBgNV BAMTKERGRUY5RTExQjlGOUI5Q0M1NkE1NjNCOUZGRkNGMjUwMzhGQzlDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QHp2OfOSm3G+M5Gg2n8kDywP UZ27oqmFwyfyKd4ok7F6emCphIGsXOiS/90jNvK1pL/TBdy2s8FsfY+mZbVOfCo9 +QWly9Ez0yGAOTrTWKjuOxHczu+N0HGn7yTQu69JlDR6Uo6g6ZJBwxW0hLHPY90O wIJfd4uLfkQ63t3d8v5VkmQ58ngIIB78ZUkeyRXZ4vtwyYeGH9HOwyh5r+6YNfLj gySR0w9o69EDF5R4MheyOoZszWq/gTgPWpr1M9czFP9kZ6PwJeOBWwhaiyhp5OEE BDhpkLOu7zU9esoJfDS6xX0KiKsOeBaNhDagIWYcGHNF+vbSa8a0CJ7LzAeLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU3++eEbn5ucxWpWO5//zyUDj8nKgwHwYDVR0j BBgwFoAUApKY7fq2ExA6aDjE5liFdLrng0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiMGJmNWItNDU2ZC00ZTYyLTlmNDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURG QUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRCQUU3ODM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjkyOThFREZBQjYxMzEwM0E2ODM4QzRFNjU4ODU3NEJBRTc4 MzRCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I0YjBiZjViLTQ1NmQtNGU2Mi05 ZjQ4LTYxOTIxNDlkNTJjMi8wLzMxMzAzMzJlMzQzMDJlMzEzMjMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzYzMzM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcoeDANBgkqhkiG 9w0BAQsFAAOCAQEALYyxMzRj/tSkA+RXzmhwf1biPrwvQ0p8BY+tct/J5W2pm2FS vSV4vMvvmnm8Q6xTtjxjep7osh8CH2e14qaA1mJrxeKZqbRIFcZsxTOdltkRKIVW skr1NnFi/5PnFn+UfH2yQJ6+BXXXzSag2QZCZtxJUcUZT/kzdGtImLGdzPWdKf6x +JVwWU5vhvFoi/kDlM7ntb/6FwYIigCby05XlvtSZJDZItfTPvLjOox1vPI50Gr3 1JWMp5s47K1lGmnJ2ycO3DteD9Jdt9HCbjJpI8ehxlXuWPveFxCWwPQGA01xCMY8 ib33R8OHpCoejSx3UyvS58/5+oJhqhQQmFU9pg== -----END CERTIFICATE-----Generated at Wed May 13 02:33:49 2026 by rpki-client