$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa File: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (raw, json) Hash identifier: I6I2rds5tbrSTDfNGBJVoBNAVLa2CLtfgmH3plnMbkE= Subject key identifier: 93:1A:C5:D4:C1:CF:E0:E2:CB:0D:27:49:4D:D1:FF:52:90:7A:C4:BA Certificate issuer: /CN=67EFB834694FDF326541D90AA7679322947189B3 Certificate serial: 120BAE5480C2F2A74CED51D297AB7841F2F93304 Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa Signing time: Sun 03 May 2026 03:06:07 +0000 ROA not before: Sun 03 May 2026 03:01:07 +0000 ROA not after: Sun 02 May 2027 03:06:07 +0000 asID: 140023 IP address blocks: 103.149.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0b:ae:54:80:c2:f2:a7:4c:ed:51:d2:97:ab:78:41:f2:f9:33:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3 Validity Not Before: May 3 03:01:07 2026 GMT Not After : May 2 03:06:07 2027 GMT Subject: CN=931AC5D4C1CFE0E2CB0D27494DD1FF52907AC4BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:e2:e0:6c:67:eb:97:18:b2:b1:3b:cc:5b: 70:94:99:6b:92:5f:c3:36:ab:1d:8e:cf:2a:0e:16: 61:a4:c9:79:56:83:a7:5f:bf:65:ec:3f:cf:a5:1f: ad:66:f8:e9:41:93:97:3b:ae:b4:5b:24:f5:c8:ec: 26:c8:83:9f:d8:a7:c5:b8:a8:1f:df:be:ab:6d:c9: 09:3a:a8:33:51:31:5d:12:5f:aa:75:f9:04:ba:d2: 9c:a8:a3:95:d1:13:7e:0f:d0:bf:a4:bd:83:c2:b8: 0f:e1:b9:6d:95:20:38:fd:0e:bd:74:8c:0f:e9:d8: 93:4a:4c:5d:50:c5:9e:51:a2:aa:75:a4:ad:24:6e: 99:d6:c0:b8:b3:15:a2:a7:1b:d1:ad:11:f3:60:74: 0e:23:3b:a7:bb:58:01:44:6a:ab:2f:64:7b:e3:1f: ef:c4:9b:b7:7b:11:a0:cd:09:cf:9f:25:d8:38:a8: 9a:18:19:bc:2f:8a:ec:42:e2:f4:9d:79:af:22:a8: 8d:17:6f:cc:45:2a:e9:33:f2:3e:bb:69:5a:3e:1d: ac:ef:78:74:e8:9e:51:36:c5:3e:af:19:a4:24:32: 56:2d:4b:5e:79:09:3f:d8:20:25:7d:a3:e5:6c:93: 7c:6c:3d:74:98:71:80:1e:6e:8e:75:33:15:46:91: 1d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1A:C5:D4:C1:CF:E0:E2:CB:0D:27:49:4D:D1:FF:52:90:7A:C4:BA X509v3 Authority Key Identifier: keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.120.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:03:06:35:44:46:5d:42:60:b9:7d:86:11:10:b9:57:65:53: 65:7c:42:1e:dd:d6:5e:5a:aa:88:71:ab:dd:96:48:38:e4:22: 00:07:e2:88:65:82:d0:4e:4c:e0:ba:22:fd:a3:9f:eb:0d:a0: 44:d8:c8:0a:58:89:d2:86:17:1c:65:da:fc:a7:dc:4e:45:56: b5:40:c5:6f:f9:1a:a4:99:de:0b:2f:4c:8c:ce:47:49:e2:73: 77:ff:48:1b:74:d8:83:8c:f2:f2:1f:b4:b9:18:a8:7c:f2:a7: 96:ba:11:91:97:91:b2:7e:3d:90:d5:a9:98:47:11:7f:bf:cf: 47:d4:4a:7e:13:fc:cf:86:8c:8d:64:de:b3:eb:ca:f6:c2:5f: 62:b8:15:c9:d1:f8:af:a8:32:0a:03:a6:e1:45:16:70:9a:a0: 7f:66:61:2c:c6:d8:9c:f1:c7:a2:87:10:e7:f7:f6:22:f3:6b: 91:a0:59:0c:6d:69:c3:04:31:18:f0:9a:0e:d0:df:6a:76:86: f7:5a:cc:bc:a1:d0:ad:3a:93:72:bb:5e:fd:6d:22:ee:60:89: 4f:a9:ce:a6:05:49:2d:70:60:b0:cc:4c:c8:99:31:49:94:bd: 6b:11:8a:82:99:77:21:e2:37:d0:c1:da:76:ee:87:de:9f:1c: 5b:f8:6e:d3 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEguuVIDC8qdM7VHSl6t4QfL5MwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5 NDcxODlCMzAeFw0yNjA1MDMwMzAxMDdaFw0yNzA1MDIwMzA2MDdaMDMxMTAvBgNV BAMTKDkzMUFDNUQ0QzFDRkUwRTJDQjBEMjc0OTRERDFGRjUyOTA3QUM0QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZOLgbGfrlxiysTvMW3CUmWuS X8M2qx2OzyoOFmGkyXlWg6dfv2XsP8+lH61m+OlBk5c7rrRbJPXI7CbIg5/Yp8W4 qB/fvqttyQk6qDNRMV0SX6p1+QS60pyoo5XRE34P0L+kvYPCuA/huW2VIDj9Dr10 jA/p2JNKTF1QxZ5Roqp1pK0kbpnWwLizFaKnG9GtEfNgdA4jO6e7WAFEaqsvZHvj H+/Em7d7EaDNCc+fJdg4qJoYGbwviuxC4vSdea8iqI0Xb8xFKukz8j67aVo+Hazv eHTonlE2xT6vGaQkMlYtS155CT/YICV9o+Vsk3xsPXSYcYAebo51MxVGkR3hAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUkxrF1MHP4OLLDSdJTdH/UpB6xLowHwYDVR0j BBgwFoAUZ++4NGlP3zJlQdkKp2eTIpRxibMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhkMGU2NDAtMjJlOS00NDFjLTg2MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2 OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5NDcxODlCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0VGQjgzNDY5NEZERjMyNjU0MUQ5MEFBNzY3OTMyMjk0NzE4 OUIzLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M4ZDBlNjQwLTIyZTktNDQxYy04 NjM0LWY5NTI1MzA3ZGE3Ni8wLzMxMzAzMzJlMzEzNDM5MmUzMTMyMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlXgwDQYJ KoZIhvcNAQELBQADggEBAD0DBjVERl1CYLl9hhEQuVdlU2V8Qh7d1l5aqohxq92W SDjkIgAH4ohlgtBOTOC6Iv2jn+sNoETYyApYidKGFxxl2vyn3E5FVrVAxW/5GqSZ 3gsvTIzOR0nic3f/SBt02IOM8vIftLkYqHzyp5a6EZGXkbJ+PZDVqZhHEX+/z0fU Sn4T/M+GjI1k3rPryvbCX2K4FcnR+K+oMgoDpuFFFnCaoH9mYSzG2Jzxx6KHEOf3 9iLza5GgWQxtacMEMRjwmg7Q32p2hvdazLyh0K06k3K7Xv1tIu5giU+pzqYFSS1w YLDMTMiZMUmUvWsRioKZdyHiN9DB2nbuh96fHFv4btM= -----END CERTIFICATE-----Generated at Wed May 13 11:04:01 2026 by rpki-client