$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e203538343737.roa File: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: ieJoOGDuwtLlA8t0dN5yUaBjAk+rstjVqpks3BBFT2E= Subject key identifier: 12:04:0C:67:06:E0:2F:09:43:1F:CC:D5:83:EC:97:79:86:6E:C0:21 Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Certificate serial: 0C21AAAA396E5A324A2C6702785EDC6E96DB0E34 Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e203538343737.roa Signing time: Sun 03 May 2026 03:09:29 +0000 ROA not before: Sun 03 May 2026 03:04:29 +0000 ROA not after: Sun 02 May 2027 03:09:29 +0000 asID: 58477 IP address blocks: 103.56.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:21:aa:aa:39:6e:5a:32:4a:2c:67:02:78:5e:dc:6e:96:db:0e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Validity Not Before: May 3 03:04:29 2026 GMT Not After : May 2 03:09:29 2027 GMT Subject: CN=12040C6706E02F09431FCCD583EC9779866EC021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a2:a9:c8:47:58:56:cb:a2:4b:75:ae:b8:2c: 64:6a:ff:6b:57:54:b0:9b:97:b3:c0:51:ca:11:14: f3:37:5c:d0:95:ab:8f:2b:09:bd:88:4a:a8:f9:f7: 49:cc:74:47:92:35:41:f9:b0:4f:50:e5:b6:dc:a4: c4:6c:9c:7d:c1:81:bd:93:ed:f3:2c:4f:8c:dd:40: 4d:24:a9:b6:8c:1a:e8:bb:fd:1b:9d:01:62:94:37: 42:57:d8:4e:3b:fb:15:06:62:66:c5:d1:3f:f8:5e: 0d:2f:f2:29:8b:3b:3f:69:42:4d:13:77:e9:bf:8d: d8:88:dc:8a:13:d7:8e:74:19:21:82:bb:e8:21:7c: 24:cb:27:b9:14:86:72:93:90:8b:67:0f:c7:60:7d: fc:38:bc:3b:93:bf:55:1c:fe:bc:36:23:2d:86:af: 99:10:15:8d:75:24:fd:8f:1a:fa:91:df:d3:49:ca: 62:09:bf:22:12:93:3c:6d:5a:ed:e0:8a:09:65:21: 4e:2a:45:46:87:ba:d0:17:15:f6:37:3a:f2:1f:97: a9:0b:fc:a0:d1:68:38:a0:54:26:eb:69:6a:41:18: fc:ab:e6:a1:c4:28:b2:ff:dd:46:b8:4a:43:78:22: 71:50:3a:48:8b:2b:a8:fd:87:00:74:3d:fa:b6:b4: e1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:04:0C:67:06:E0:2F:09:43:1F:CC:D5:83:EC:97:79:86:6E:C0:21 X509v3 Authority Key Identifier: keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.204.0/24 Signature Algorithm: sha256WithRSAEncryption 47:6c:62:6a:fa:35:eb:e5:5f:bf:c3:14:39:52:14:1c:b5:15: 41:47:f2:b9:cc:9b:f6:50:13:c7:8c:a7:e6:ab:66:05:36:84: 3f:4a:dc:4a:21:a9:5b:31:f0:a6:43:51:2b:0e:a4:b3:04:9f: ff:aa:34:16:ea:42:e2:fa:15:eb:bc:d4:7d:1d:f7:1c:a8:f6: f9:7b:c0:63:3d:f2:0e:2e:c9:82:72:d5:fe:1f:1f:ee:e5:42: b8:b7:a1:25:5d:32:d9:91:5d:14:78:1d:a9:68:ae:9f:0d:df: 81:bd:26:f5:6a:64:99:a5:09:fd:3c:52:01:92:fb:1b:bf:b3: 92:48:65:ee:b4:7a:16:e5:87:ca:b2:2f:ad:b3:9e:ed:e7:bd: b7:54:23:8f:9d:f8:63:3b:c1:19:8d:4a:d1:1e:02:0b:45:1a: e2:7d:7c:96:99:9d:4b:9d:db:e7:eb:fc:5e:50:9c:b5:06:4a: 36:90:a4:f9:03:a8:9f:8a:0e:b4:84:5f:b6:3b:2c:83:31:e8: eb:aa:f8:61:24:53:65:54:d7:63:7a:ea:46:3f:cc:34:08:e8: d5:00:09:7f:8a:9d:3b:ee:5b:ec:1f:04:c2:9f:8b:5d:f9:e0: b2:e4:77:18:eb:5c:39:2e:4f:da:6b:c9:fc:fe:30:41:ae:be: 5b:c6:dd:65 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDCGqqjluWjJKLGcCeF7cbpbbDjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0 RThDRUM4RjAeFw0yNjA1MDMwMzA0MjlaFw0yNzA1MDIwMzA5MjlaMDMxMTAvBgNV BAMTKDEyMDQwQzY3MDZFMDJGMDk0MzFGQ0NENTgzRUM5Nzc5ODY2RUMwMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHoqnIR1hWy6JLda64LGRq/2tX VLCbl7PAUcoRFPM3XNCVq48rCb2ISqj590nMdEeSNUH5sE9Q5bbcpMRsnH3Bgb2T 7fMsT4zdQE0kqbaMGui7/RudAWKUN0JX2E47+xUGYmbF0T/4Xg0v8imLOz9pQk0T d+m/jdiI3IoT1450GSGCu+ghfCTLJ7kUhnKTkItnD8dgffw4vDuTv1Uc/rw2Iy2G r5kQFY11JP2PGvqR39NJymIJvyISkzxtWu3gigllIU4qRUaHutAXFfY3OvIfl6kL /KDRaDigVCbraWpBGPyr5qHEKLL/3Ua4SkN4InFQOkiLK6j9hwB0Pfq2tOFJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUEgQMZwbgLwlDH8zVg+yXeYZuwCEwHwYDVR0j BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF QzhGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04 OTBmLTBkZTNlMjQwNDYxMS8wLzMxMzAzMzJlMzUzNjJlMzIzMDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc4zDANBgkqhkiG 9w0BAQsFAAOCAQEAR2xiavo16+Vfv8MUOVIUHLUVQUfyucyb9lATx4yn5qtmBTaE P0rcSiGpWzHwpkNRKw6kswSf/6o0FupC4voV67zUfR33HKj2+XvAYz3yDi7JgnLV /h8f7uVCuLehJV0y2ZFdFHgdqWiunw3fgb0m9WpkmaUJ/TxSAZL7G7+zkkhl7rR6 FuWHyrIvrbOe7ee9t1Qjj534YzvBGY1K0R4CC0Ua4n18lpmdS53b5+v8XlCctQZK NpCk+QOon4oOtIRftjssgzHo66r4YSRTZVTXY3rqRj/MNAjo1QAJf4qdO+5b7B8E wp+LXfngsuR3GOtcOS5P2mvJ/P4wQa6+W8bdZQ== -----END CERTIFICATE-----Generated at Wed May 13 02:49:47 2026 by rpki-client