$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa File: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (raw, json) Hash identifier: 8eM6PpqxHfl3Geudaa3NUNuJ/PYw2ByWv6dsPSCRAGY= Subject key identifier: E5:E3:CE:50:9F:DF:FD:00:BE:6B:01:62:3A:CB:CF:A2:4A:7C:DA:E4 Certificate issuer: /CN=67EFB834694FDF326541D90AA7679322947189B3 Certificate serial: 24D788C6F60719DDCECAAB401FF3D4F45A989409 Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa Signing time: Sun 03 May 2026 03:06:06 +0000 ROA not before: Sun 03 May 2026 03:01:06 +0000 ROA not after: Sun 02 May 2027 03:06:06 +0000 asID: 140023 IP address blocks: 103.149.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d7:88:c6:f6:07:19:dd:ce:ca:ab:40:1f:f3:d4:f4:5a:98:94:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3 Validity Not Before: May 3 03:01:06 2026 GMT Not After : May 2 03:06:06 2027 GMT Subject: CN=E5E3CE509FDFFD00BE6B01623ACBCFA24A7CDAE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a7:01:b0:79:36:84:84:56:03:05:4e:89:6a: 65:59:83:49:6f:8c:83:18:22:d8:d8:35:36:92:a1: a6:62:09:28:cd:2f:ed:9c:90:00:00:da:8b:db:1c: 0c:d6:07:6c:b7:e6:d8:1b:9e:48:e6:7d:ca:e4:ec: 2c:0e:8c:7d:83:0f:60:70:96:f7:07:a6:91:39:1c: 28:92:43:a7:c9:a4:ba:04:1d:84:ed:6a:b6:98:0e: 77:cf:13:8b:88:7c:b9:37:4c:f1:37:78:b7:f1:f7: 1a:f1:fb:e1:fd:a5:0e:89:db:a9:cc:f3:77:6e:61: 88:08:df:74:e8:0e:67:42:c0:5f:be:15:f0:34:9e: c7:b6:f8:18:88:8d:cc:e3:94:5e:62:e9:77:fc:ad: 6d:95:12:13:68:c9:c8:6c:07:81:ec:8d:7f:8b:91: 1d:99:91:5c:88:bc:16:5a:bb:b2:ba:64:f9:8e:e5: 51:fd:5a:3a:77:a3:be:b7:74:12:3d:1f:05:2c:82: a3:bd:46:63:ac:fc:c9:eb:05:31:34:7c:b2:da:89: 32:5e:aa:12:2f:d2:dc:fc:d2:6c:f8:7a:16:1e:2c: 62:02:75:7e:7d:7f:70:3e:87:1e:eb:de:98:0b:38: 11:c0:02:f7:5b:21:8f:5d:c9:ff:8b:f2:5f:ae:97: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E3:CE:50:9F:DF:FD:00:BE:6B:01:62:3A:CB:CF:A2:4A:7C:DA:E4 X509v3 Authority Key Identifier: keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.120.0/23 Signature Algorithm: sha256WithRSAEncryption bc:da:b5:9d:ad:27:53:36:8a:aa:95:55:c1:76:68:01:84:d5: 7f:02:b6:d0:10:5c:ef:88:25:85:ba:c9:11:b9:30:04:ce:83: 0d:fd:6a:31:61:89:0e:5d:09:a7:c0:e7:e9:f3:bc:b3:de:a1: 7d:29:6c:64:c4:87:65:71:d0:3a:ea:a8:d6:5c:b1:3b:22:a3: ad:8d:48:fc:1f:a5:5e:0a:3d:88:5c:c3:d6:78:82:56:d7:59: 6a:79:b5:fc:6b:a9:ae:22:de:fa:0b:f8:8d:37:34:d0:5a:2d: 3a:af:1f:20:7c:0d:10:9c:29:54:34:9a:cf:11:f9:95:cc:41: 03:25:4a:3a:40:12:60:4b:63:5d:79:66:b5:5b:41:da:bc:c8: 1c:ca:83:6c:76:32:2a:8d:f7:ef:6f:36:b1:83:ff:a4:c5:9b: b8:80:c1:b4:ac:5f:c6:b3:9d:b6:c5:81:cd:15:46:6f:8a:5d: 36:30:0f:a2:78:0f:81:9b:cc:f6:93:da:6f:fa:fc:88:4a:4e: 0a:03:d9:30:ec:fe:f4:cb:80:8b:d3:89:0d:94:8c:91:a8:d4: e4:8b:12:3e:ca:01:b1:05:75:b6:63:19:e1:96:e9:eb:e1:80: 0f:93:91:30:da:81:6e:d0:7b:4e:5e:08:a2:74:ca:b7:6e:59: 50:66:ee:f5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJNeIxvYHGd3OyqtAH/PU9FqYlAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5 NDcxODlCMzAeFw0yNjA1MDMwMzAxMDZaFw0yNzA1MDIwMzA2MDZaMDMxMTAvBgNV BAMTKEU1RTNDRTUwOUZERkZEMDBCRTZCMDE2MjNBQ0JDRkEyNEE3Q0RBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChpwGweTaEhFYDBU6JamVZg0lv jIMYItjYNTaSoaZiCSjNL+2ckAAA2ovbHAzWB2y35tgbnkjmfcrk7CwOjH2DD2Bw lvcHppE5HCiSQ6fJpLoEHYTtaraYDnfPE4uIfLk3TPE3eLfx9xrx++H9pQ6J26nM 83duYYgI33ToDmdCwF++FfA0nse2+BiIjczjlF5i6Xf8rW2VEhNoychsB4HsjX+L kR2ZkVyIvBZau7K6ZPmO5VH9Wjp3o763dBI9HwUsgqO9RmOs/MnrBTE0fLLaiTJe qhIv0tz80mz4ehYeLGICdX59f3A+hx7r3pgLOBHAAvdbIY9dyf+L8l+ul1fXAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU5ePOUJ/f/QC+awFiOsvPokp82uQwHwYDVR0j BBgwFoAUZ++4NGlP3zJlQdkKp2eTIpRxibMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhkMGU2NDAtMjJlOS00NDFjLTg2MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2 OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5NDcxODlCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0VGQjgzNDY5NEZERjMyNjU0MUQ5MEFBNzY3OTMyMjk0NzE4 OUIzLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M4ZDBlNjQwLTIyZTktNDQxYy04 NjM0LWY5NTI1MzA3ZGE3Ni8wLzMxMzAzMzJlMzEzNDM5MmUzMTMyMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlXgwDQYJ KoZIhvcNAQELBQADggEBALzatZ2tJ1M2iqqVVcF2aAGE1X8CttAQXO+IJYW6yRG5 MATOgw39ajFhiQ5dCafA5+nzvLPeoX0pbGTEh2Vx0DrqqNZcsTsio62NSPwfpV4K PYhcw9Z4glbXWWp5tfxrqa4i3voL+I03NNBaLTqvHyB8DRCcKVQ0ms8R+ZXMQQMl SjpAEmBLY115ZrVbQdq8yBzKg2x2MiqN9+9vNrGD/6TFm7iAwbSsX8aznbbFgc0V Rm+KXTYwD6J4D4GbzPaT2m/6/IhKTgoD2TDs/vTLgIvTiQ2UjJGo1OSLEj7KAbEF dbZjGeGW6evhgA+TkTDagW7Qe05eCKJ0yrduWVBm7vU= -----END CERTIFICATE-----Generated at Wed May 13 14:13:17 2026 by rpki-client