$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa File: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (raw, json) Hash identifier: U9EOJ8bWyg53fTX5/xBwCB9D3URUJVmaYk+uSMcOkJM= Subject key identifier: 23:00:81:2D:E9:42:D1:46:DA:D1:3D:71:DE:77:F8:04:69:0A:A6:D1 Certificate issuer: /CN=67EFB834694FDF326541D90AA7679322947189B3 Certificate serial: 127455D77F7CCA7AD993ECCC6E85AEB33351CAAA Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa Signing time: Sun 03 May 2026 03:06:07 +0000 ROA not before: Sun 03 May 2026 03:01:07 +0000 ROA not after: Sun 02 May 2027 03:06:07 +0000 asID: 139952 IP address blocks: 103.149.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:74:55:d7:7f:7c:ca:7a:d9:93:ec:cc:6e:85:ae:b3:33:51:ca:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3 Validity Not Before: May 3 03:01:07 2026 GMT Not After : May 2 03:06:07 2027 GMT Subject: CN=2300812DE942D146DAD13D71DE77F804690AA6D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cd:11:78:4e:df:c3:57:70:8c:3d:c3:ad:56: 7c:4c:bc:09:a4:8e:7a:1d:3d:94:36:0a:e4:3a:78: 60:96:05:39:2e:c5:2d:8a:82:6f:0b:de:dd:e9:e7: b8:a7:a1:9b:90:5f:b0:0a:e7:c0:95:7b:17:e1:03: b1:9b:2f:b9:46:6a:26:d4:0b:f9:bf:9f:db:18:b9: 4c:6a:fa:ab:9e:a3:37:e4:6c:ea:f1:8d:45:86:08: 4d:51:a7:00:61:2e:af:e3:3e:52:f3:7b:92:1a:98: 50:6e:66:9a:42:8e:78:96:34:b2:13:22:6b:8e:56: e5:69:3d:72:57:41:5b:1f:bb:54:b2:32:6a:b4:4a: 48:e1:cc:03:8c:fa:9e:b7:30:20:3a:40:ce:8e:ff: a8:ff:09:36:0f:c3:da:98:63:ef:ec:4c:66:58:1a: c0:42:10:8e:9e:1d:b0:c6:b9:85:9e:ca:48:b7:51: 61:d3:2d:83:00:29:cc:d5:b7:3b:3f:85:7e:f6:c7: 9d:da:65:35:cc:db:3b:50:c6:9b:f5:e2:53:d3:19: a9:b9:0d:10:da:e6:de:b1:c3:c3:32:bb:89:5e:30: be:9e:a5:a0:59:40:82:00:7c:8e:e8:93:40:da:85: 7e:57:d3:1c:1c:73:15:1b:a4:e4:24:d3:7e:44:02: 64:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:00:81:2D:E9:42:D1:46:DA:D1:3D:71:DE:77:F8:04:69:0A:A6:D1 X509v3 Authority Key Identifier: keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.120.0/23 Signature Algorithm: sha256WithRSAEncryption 58:45:b2:a7:85:7f:11:16:ef:5f:8a:5a:bb:90:ca:36:e3:5a: ae:4b:ed:2e:16:83:7d:3e:55:f4:73:3a:85:34:e5:c5:bf:a9: 11:2a:0d:0e:58:aa:ae:7b:ca:29:48:54:dc:88:a4:87:57:d7: 0a:30:92:e4:a5:ac:72:ce:df:62:49:a9:b0:52:f6:97:c8:c5: 47:d9:a5:58:88:8a:7c:e7:a1:47:85:e4:6b:80:08:32:67:d6: 45:4a:6e:8b:7d:e2:7a:30:55:40:de:f1:be:44:58:27:a7:5c: 44:a3:fe:4c:cc:57:c2:5e:94:3f:90:72:3c:e3:25:07:e8:fb: 32:34:5d:6e:5d:69:05:c6:83:59:f3:3e:f8:7d:0e:94:29:8a: c0:fe:f9:c3:68:1c:94:32:4c:c2:50:e5:cb:5e:8f:ba:ce:32: b1:68:fe:aa:73:49:1c:e7:8c:10:39:48:a8:88:ca:d8:30:d3: 7c:ac:c3:26:81:59:f9:d3:f9:3c:26:17:01:3c:24:76:14:30: 8a:53:77:3c:b2:ed:fb:38:ad:e4:5c:a9:2b:4c:e7:b5:3f:30: 4c:c4:17:3b:0e:d4:0c:67:89:7b:a6:55:71:b6:ee:69:44:bb: d1:bf:e6:83:97:18:36:d0:8b:cc:ec:c8:65:93:1a:e9:cc:47: 0b:1d:b6:19 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEnRV1398ynrZk+zMboWuszNRyqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5 NDcxODlCMzAeFw0yNjA1MDMwMzAxMDdaFw0yNzA1MDIwMzA2MDdaMDMxMTAvBgNV BAMTKDIzMDA4MTJERTk0MkQxNDZEQUQxM0Q3MURFNzdGODA0NjkwQUE2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIzRF4Tt/DV3CMPcOtVnxMvAmk jnodPZQ2CuQ6eGCWBTkuxS2Kgm8L3t3p57inoZuQX7AK58CVexfhA7GbL7lGaibU C/m/n9sYuUxq+queozfkbOrxjUWGCE1RpwBhLq/jPlLze5IamFBuZppCjniWNLIT ImuOVuVpPXJXQVsfu1SyMmq0SkjhzAOM+p63MCA6QM6O/6j/CTYPw9qYY+/sTGZY GsBCEI6eHbDGuYWeyki3UWHTLYMAKczVtzs/hX72x53aZTXM2ztQxpv14lPTGam5 DRDa5t6xw8Myu4leML6epaBZQIIAfI7ok0DahX5X0xwccxUbpOQk035EAmQXAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUIwCBLelC0Uba0T1x3nf4BGkKptEwHwYDVR0j BBgwFoAUZ++4NGlP3zJlQdkKp2eTIpRxibMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhkMGU2NDAtMjJlOS00NDFjLTg2MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2 OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5NDcxODlCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0VGQjgzNDY5NEZERjMyNjU0MUQ5MEFBNzY3OTMyMjk0NzE4 OUIzLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M4ZDBlNjQwLTIyZTktNDQxYy04 NjM0LWY5NTI1MzA3ZGE3Ni8wLzMxMzAzMzJlMzEzNDM5MmUzMTMyMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzkzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlXgwDQYJ KoZIhvcNAQELBQADggEBAFhFsqeFfxEW71+KWruQyjbjWq5L7S4Wg30+VfRzOoU0 5cW/qREqDQ5Yqq57yilIVNyIpIdX1wowkuSlrHLO32JJqbBS9pfIxUfZpViIinzn oUeF5GuACDJn1kVKbot94nowVUDe8b5EWCenXESj/kzMV8JelD+QcjzjJQfo+zI0 XW5daQXGg1nzPvh9DpQpisD++cNoHJQyTMJQ5ctej7rOMrFo/qpzSRznjBA5SKiI ytgw03yswyaBWfnT+TwmFwE8JHYUMIpTdzyy7fs4reRcqStM57U/MEzEFzsO1Axn iXumVXG27mlEu9G/5oOXGDbQi8zsyGWTGunMRwsdthk= -----END CERTIFICATE-----Generated at Wed May 13 09:54:40 2026 by rpki-client