$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa File: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (raw, json) Hash identifier: XTkmlIXCx+NIYx/yl8MiLKLX/AMPwncPF1lXc5QdA9I= Subject key identifier: A5:3C:D7:F4:11:25:02:4A:38:F4:99:2D:66:D5:EA:9C:28:01:18:81 Certificate issuer: /CN=67EFB834694FDF326541D90AA7679322947189B3 Certificate serial: 3087C98C6B55909EFDC6E2D717A8E99777DC6023 Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa Signing time: Sun 03 May 2026 03:06:10 +0000 ROA not before: Sun 03 May 2026 03:01:10 +0000 ROA not after: Sun 02 May 2027 03:06:10 +0000 asID: 140023 IP address blocks: 103.149.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:87:c9:8c:6b:55:90:9e:fd:c6:e2:d7:17:a8:e9:97:77:dc:60:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3 Validity Not Before: May 3 03:01:10 2026 GMT Not After : May 2 03:06:10 2027 GMT Subject: CN=A53CD7F41125024A38F4992D66D5EA9C28011881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:2e:d0:8e:c7:16:09:d1:e7:40:44:2e:8f: b8:ab:d6:50:2c:e6:db:42:c2:9e:79:0d:6c:fa:27: c0:2c:30:38:8a:82:b7:8a:23:be:09:ea:b3:32:dc: ea:66:63:62:01:22:9a:99:c9:fc:cd:41:1c:d1:9f: 98:5b:3a:40:01:b3:16:fe:fb:b9:16:b0:72:66:0c: c1:aa:7a:32:c0:34:f5:d9:6c:10:ce:b0:cc:aa:01: 10:8e:14:36:58:0e:de:63:3d:d0:2c:68:02:0d:2d: 9b:5e:df:f0:8f:f0:88:00:3b:16:ec:3e:93:4d:ce: 8a:3d:a5:f2:03:fe:2f:19:40:f2:ae:04:73:53:98: fb:e2:b9:07:e6:21:9d:ec:62:61:1d:7b:56:33:35: 2b:41:a8:9a:ce:9d:b4:3b:e5:7a:7b:19:45:12:6b: a8:ce:c8:ca:51:9b:9e:6c:46:08:d5:32:08:4a:57: 40:08:b8:a4:0c:c4:31:7b:64:9d:cd:dd:ef:57:d6: bd:6f:c5:e0:eb:7a:43:93:f6:07:2e:d1:17:4d:ae: 76:1d:f1:a6:a6:f3:4f:23:42:90:38:d1:ef:a5:6e: 27:8c:78:d4:6d:a5:a8:08:2a:85:e4:70:bb:ef:b1: 26:07:25:ae:6c:a4:cc:00:7b:a5:d8:f9:67:ae:1c: 86:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3C:D7:F4:11:25:02:4A:38:F4:99:2D:66:D5:EA:9C:28:01:18:81 X509v3 Authority Key Identifier: keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.121.0/24 Signature Algorithm: sha256WithRSAEncryption 83:f8:db:33:3a:86:ef:db:9e:2c:5d:9b:24:e3:c5:36:3c:53: 21:27:71:75:a9:2c:5e:a3:55:21:e8:8e:73:07:11:d5:6f:48: ab:b9:4c:be:a1:46:50:28:50:e0:9b:92:85:26:8a:56:90:4e: 99:37:89:e1:10:ee:76:fc:2d:c9:5d:d2:3e:09:5c:c4:48:e5: 7a:32:c7:ab:45:ce:aa:45:e2:b1:78:70:7c:84:c3:ad:6a:b6: e2:b9:7d:46:93:a1:58:a2:cb:31:05:ff:35:13:2f:70:61:5c: 83:9b:69:50:9d:86:41:8b:75:73:1d:37:ed:39:ca:fe:9a:35: 0c:9e:41:1e:73:02:2a:08:e0:de:79:75:39:09:f0:6e:3a:06: 1b:b7:b5:d8:c0:f6:22:af:88:dd:61:df:13:57:bb:3c:ec:6a: 3c:c7:04:c5:8d:03:94:08:06:eb:66:44:21:a1:d6:f0:93:e1: c0:ba:ec:99:14:51:54:03:b0:96:c8:f2:31:2d:fd:17:20:dc: 93:4e:b4:83:bb:73:98:cb:5e:37:0a:6d:7e:88:d7:26:17:b7: d0:94:48:5a:65:de:06:7a:90:c2:3c:9b:60:94:07:65:b7:5a: 3e:c2:73:f2:5b:f2:cc:52:32:42:2b:e6:43:29:94:b7:46:b4: c1:b7:3b:9c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMIfJjGtVkJ79xuLXF6jpl3fcYCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5 NDcxODlCMzAeFw0yNjA1MDMwMzAxMTBaFw0yNzA1MDIwMzA2MTBaMDMxMTAvBgNV BAMTKEE1M0NEN0Y0MTEyNTAyNEEzOEY0OTkyRDY2RDVFQTlDMjgwMTE4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aS7QjscWCdHnQEQuj7ir1lAs 5ttCwp55DWz6J8AsMDiKgreKI74J6rMy3OpmY2IBIpqZyfzNQRzRn5hbOkABsxb+ +7kWsHJmDMGqejLANPXZbBDOsMyqARCOFDZYDt5jPdAsaAINLZte3/CP8IgAOxbs PpNNzoo9pfID/i8ZQPKuBHNTmPviuQfmIZ3sYmEde1YzNStBqJrOnbQ75Xp7GUUS a6jOyMpRm55sRgjVMghKV0AIuKQMxDF7ZJ3N3e9X1r1vxeDrekOT9gcu0RdNrnYd 8aam808jQpA40e+lbieMeNRtpagIKoXkcLvvsSYHJa5spMwAe6XY+WeuHIYxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUpTzX9BElAko49JktZtXqnCgBGIEwHwYDVR0j BBgwFoAUZ++4NGlP3zJlQdkKp2eTIpRxibMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhkMGU2NDAtMjJlOS00NDFjLTg2MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2 OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5NDcxODlCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0VGQjgzNDY5NEZERjMyNjU0MUQ5MEFBNzY3OTMyMjk0NzE4 OUIzLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M4ZDBlNjQwLTIyZTktNDQxYy04 NjM0LWY5NTI1MzA3ZGE3Ni8wLzMxMzAzMzJlMzEzNDM5MmUzMTMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnlXkwDQYJ KoZIhvcNAQELBQADggEBAIP42zM6hu/bnixdmyTjxTY8UyEncXWpLF6jVSHojnMH EdVvSKu5TL6hRlAoUOCbkoUmilaQTpk3ieEQ7nb8Lcld0j4JXMRI5Xoyx6tFzqpF 4rF4cHyEw61qtuK5fUaToViiyzEF/zUTL3BhXIObaVCdhkGLdXMdN+05yv6aNQye QR5zAioI4N55dTkJ8G46Bhu3tdjA9iKviN1h3xNXuzzsajzHBMWNA5QIButmRCGh 1vCT4cC67JkUUVQDsJbI8jEt/Rcg3JNOtIO7c5jLXjcKbX6I1yYXt9CUSFpl3gZ6 kMI8m2CUB2W3Wj7Cc/Jb8sxSMkIr5kMplLdGtMG3O5w= -----END CERTIFICATE-----Generated at Wed May 13 14:39:44 2026 by rpki-client