$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa File: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (raw, json) Hash identifier: 9E/Ti671GF/WZdUwZ2RH1G2YB9kJfWY4JlzPZetlvoI= Subject key identifier: A4:55:BC:F0:D1:FF:3D:C6:BB:08:77:22:A0:AD:1D:9C:48:D0:D3:BD Certificate issuer: /CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Certificate serial: 63FFE1FF539C56ED5D45868291EC81CB134D1C8E Authority key identifier: F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa Signing time: Sun 03 May 2026 03:11:34 +0000 ROA not before: Sun 03 May 2026 03:06:34 +0000 ROA not after: Sun 02 May 2027 03:11:34 +0000 asID: 138112 IP address blocks: 103.126.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ff:e1:ff:53:9c:56:ed:5d:45:86:82:91:ec:81:cb:13:4d:1c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Validity Not Before: May 3 03:06:34 2026 GMT Not After : May 2 03:11:34 2027 GMT Subject: CN=A455BCF0D1FF3DC6BB087722A0AD1D9C48D0D3BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c6:3c:09:f0:5b:8e:a7:b4:20:9e:90:2e:76: 8d:81:c2:25:7e:be:83:45:ac:37:e6:a3:ea:89:71: 71:c1:5d:e7:4e:4e:26:e4:4d:e5:a2:1d:7b:a2:34: b2:aa:16:df:f9:fb:e4:28:35:63:5c:73:9d:f1:65: 19:11:bc:10:a1:7e:d1:d9:aa:b9:c8:4d:45:1c:c2: 6d:b6:36:49:d1:96:10:2b:65:d7:87:26:eb:fe:59: 41:fa:b9:8d:fc:54:59:e8:20:06:1d:c9:47:e2:31: 9e:89:d0:d7:3c:16:09:43:27:b8:bb:00:0c:5f:82: 47:5b:68:8d:05:e6:14:2c:62:70:a2:4e:fa:fb:57: e3:48:48:fc:c4:0a:e0:ed:28:9f:6c:ee:93:fb:0b: 29:a5:6b:0a:e8:54:48:de:71:4c:0c:ee:07:5b:11: 44:07:49:07:12:d4:c7:a6:ef:74:f0:11:77:f9:ee: 08:09:16:ff:83:1b:a7:8b:1a:ae:34:57:46:01:45: 24:d8:9a:96:db:7f:cc:90:1b:cc:ab:79:ef:a3:a6: 85:20:8a:e5:8e:9c:f6:09:32:d2:34:0e:6f:91:dd: 84:65:97:9b:3c:b9:a0:be:47:5e:70:03:d1:61:46: f6:38:31:55:3b:67:96:e9:98:07:f2:72:e9:35:7e: ce:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:55:BC:F0:D1:FF:3D:C6:BB:08:77:22:A0:AD:1D:9C:48:D0:D3:BD X509v3 Authority Key Identifier: keyid:F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.172.0/24 Signature Algorithm: sha256WithRSAEncryption 37:4d:5c:5c:07:05:af:86:9f:d0:a2:26:dd:e6:5e:3e:5d:fb: 6a:d7:83:92:b6:2f:fa:75:f3:99:49:de:48:db:59:f9:5c:72: cc:c0:3e:cc:e2:3e:f1:f7:55:49:0f:08:c0:03:6d:83:41:3d: 33:1b:11:ad:c8:4b:00:8d:6a:59:73:df:d0:34:52:89:4e:bc: 8a:bd:92:bb:94:8b:95:1d:1d:6e:63:88:7d:fc:bf:46:f9:08: 31:f0:66:a2:96:3b:08:8b:74:d4:0b:6a:03:bd:f7:30:bd:30: b7:7d:21:7a:22:68:88:0c:1f:6b:b6:da:e7:a4:ba:61:35:8d: 84:32:e4:a1:0e:c1:73:8f:6c:32:a3:ab:86:23:0e:26:47:58: dd:9c:8d:41:1a:b4:62:a0:e5:ca:75:b5:50:91:0c:bc:c0:8e: 8d:62:13:57:f7:94:6d:38:9e:31:1b:31:c2:59:4a:62:e7:5b: af:8e:f1:7e:22:9b:70:35:33:d4:ca:3e:23:f8:3f:2d:44:1f: 2c:af:6c:84:2f:12:dc:d9:c1:7b:0e:e9:6c:90:20:ae:f2:a0: 92:3e:8b:f8:b1:6f:45:fd:e3:10:99:4f:3b:24:93:ab:d5:9a: d7:b1:2c:71:18:30:81:55:99:80:0b:8c:83:bb:b8:2b:8f:b1: cb:ab:5a:0c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUY//h/1OcVu1dRYaCkeyByxNNHI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlC MUVCRDIxNDAeFw0yNjA1MDMwMzA2MzRaFw0yNzA1MDIwMzExMzRaMDMxMTAvBgNV BAMTKEE0NTVCQ0YwRDFGRjNEQzZCQjA4NzcyMkEwQUQxRDlDNDhEMEQzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZxjwJ8FuOp7QgnpAudo2BwiV+ voNFrDfmo+qJcXHBXedOTibkTeWiHXuiNLKqFt/5++QoNWNcc53xZRkRvBChftHZ qrnITUUcwm22NknRlhArZdeHJuv+WUH6uY38VFnoIAYdyUfiMZ6J0Nc8FglDJ7i7 AAxfgkdbaI0F5hQsYnCiTvr7V+NISPzECuDtKJ9s7pP7CymlawroVEjecUwM7gdb EUQHSQcS1Mem73TwEXf57ggJFv+DG6eLGq40V0YBRSTYmpbbf8yQG8yree+jpoUg iuWOnPYJMtI0Dm+R3YRll5s8uaC+R15wA9FhRvY4MVU7Z5bpmAfycuk1fs4ZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUpFW88NH/Pca7CHcioK0dnEjQ070wHwYDVR0j BBgwFoAU+OnUjRfMOONMv8dLXAf0qbHr0hQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOGQ5MDgtMWI5OS00NTVjLWFjNzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQx N0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlCMUVCRDIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEU5RDQ4RDE3Q0MzOEUzNENCRkM3NEI1QzA3RjRBOUIxRUJE MjE0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RkYjhkOTA4LTFiOTktNDU1Yy1h Yzc2LThkNjI0ZGZhNDNiNi8wLzMxMzAzMzJlMzEzMjM2MmUzMTM3MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfqwwDQYJ KoZIhvcNAQELBQADggEBADdNXFwHBa+Gn9CiJt3mXj5d+2rXg5K2L/p185lJ3kjb WflccszAPsziPvH3VUkPCMADbYNBPTMbEa3ISwCNallz39A0UolOvIq9kruUi5Ud HW5jiH38v0b5CDHwZqKWOwiLdNQLagO99zC9MLd9IXoiaIgMH2u22uekumE1jYQy 5KEOwXOPbDKjq4YjDiZHWN2cjUEatGKg5cp1tVCRDLzAjo1iE1f3lG04njEbMcJZ SmLnW6+O8X4im3A1M9TKPiP4Py1EHyyvbIQvEtzZwXsO6WyQIK7yoJI+i/ixb0X9 4xCZTzskk6vVmtexLHEYMIFVmYALjIO7uCuPscurWgw= -----END CERTIFICATE-----Generated at Wed May 13 04:09:50 2026 by rpki-client