$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa File: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (raw, json) Hash identifier: rPbVerJ1hIqpxViNC0hFDNp8HCiflf0mjWJTLUhjlFU= Subject key identifier: 34:22:85:61:0D:CF:0F:32:37:F2:E0:24:5D:AB:0C:15:17:22:D9:23 Certificate issuer: /CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Certificate serial: 208EEBD1F721B4B0731EBFE7247B4276134C1AC3 Authority key identifier: F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa Signing time: Sun 03 May 2026 03:11:34 +0000 ROA not before: Sun 03 May 2026 03:06:34 +0000 ROA not after: Sun 02 May 2027 03:11:34 +0000 asID: 138112 IP address blocks: 103.126.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8e:eb:d1:f7:21:b4:b0:73:1e:bf:e7:24:7b:42:76:13:4c:1a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Validity Not Before: May 3 03:06:34 2026 GMT Not After : May 2 03:11:34 2027 GMT Subject: CN=342285610DCF0F3237F2E0245DAB0C151722D923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:9b:8d:13:d9:e0:dd:47:d1:2b:ea:85:89: aa:95:6b:3c:7d:9a:2a:d0:5f:fe:d6:52:63:96:e9: 4f:91:f1:c1:01:b7:f9:c1:ba:3d:e5:87:1c:51:4d: 48:ef:14:b4:e7:82:a2:ae:6a:16:a2:86:eb:c7:1e: 81:9d:7e:d0:fc:d5:0f:da:0e:9c:fe:9d:36:d2:8f: c8:30:d5:71:06:16:ca:b9:0f:6c:62:30:2b:19:e0: 3b:49:70:a8:39:a2:d8:af:f1:37:00:d6:3b:64:ab: 3d:ab:72:bc:f2:fb:24:0b:5d:d4:29:d4:f7:15:85: 77:32:88:7c:e5:eb:17:9a:d7:10:35:ff:1d:1e:50: 74:e0:c9:95:cd:21:8d:2b:90:03:ab:7e:b4:ea:63: 9c:cc:8a:10:6f:32:e9:ee:0d:79:39:fe:7d:d7:f1: 2f:69:0a:e3:6f:da:28:82:0c:28:14:c6:e1:c4:91: 68:6a:a3:6f:13:60:c0:b9:64:a4:bc:6b:3d:3e:b8: 5a:0e:ed:6c:e4:77:ad:77:79:c6:3b:8a:e7:ea:d0: ff:9d:97:98:e8:86:8a:f6:b2:de:9c:5b:4c:5f:a1: e2:a0:94:4f:45:02:ae:54:bc:5a:2d:12:94:5f:ed: 70:54:2a:fd:39:f5:5b:88:0c:84:a4:a7:26:55:00: ae:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:22:85:61:0D:CF:0F:32:37:F2:E0:24:5D:AB:0C:15:17:22:D9:23 X509v3 Authority Key Identifier: keyid:F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.175.0/24 Signature Algorithm: sha256WithRSAEncryption 20:db:12:d8:dd:0a:3b:b2:1a:f9:78:3c:80:69:6d:2f:79:93: 17:2e:a2:ce:e8:a3:73:d1:a7:18:bb:bd:e1:71:38:40:96:36: c3:fa:6a:5a:d0:01:1b:44:9a:f6:a4:b8:55:af:e6:1c:02:25: d3:77:a3:b3:8a:6b:cf:46:02:25:2a:35:4b:ce:a8:d0:b7:3f: 84:ef:00:54:da:a4:3c:70:8e:fc:a5:69:71:d6:c0:fb:dd:dc: 2d:30:4b:5f:ce:81:2c:8a:49:68:59:00:18:52:cd:df:d6:57: 77:ed:ed:c8:f1:be:dd:05:62:1b:6f:d4:d2:60:cb:25:5c:1f: 66:32:71:cf:b4:d2:d1:08:a6:dd:06:ac:57:64:92:2b:69:5c: 38:8c:cb:f3:87:39:c8:3b:16:8d:4f:f5:9c:20:71:af:83:32: 5f:d0:73:21:fa:59:09:c3:ee:15:e5:c5:d0:20:87:e2:96:8e: 42:7c:8d:c9:2a:eb:cb:3a:bd:3e:ea:3f:d5:13:c8:d1:46:e0: c2:df:cb:c7:6b:e2:de:c5:55:29:51:86:b3:83:6f:bb:a2:e7: f9:19:72:d2:e0:07:7f:59:f6:70:56:5e:09:6d:45:2f:16:a7: 4f:46:ae:34:53:ee:37:f8:bf:63:96:cd:60:ac:81:ef:ce:fc: 5f:ba:8f:5b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUII7r0fchtLBzHr/nJHtCdhNMGsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlC MUVCRDIxNDAeFw0yNjA1MDMwMzA2MzRaFw0yNzA1MDIwMzExMzRaMDMxMTAvBgNV BAMTKDM0MjI4NTYxMERDRjBGMzIzN0YyRTAyNDVEQUIwQzE1MTcyMkQ5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XJuNE9ng3UfRK+qFiaqVazx9 mirQX/7WUmOW6U+R8cEBt/nBuj3lhxxRTUjvFLTngqKuahaihuvHHoGdftD81Q/a Dpz+nTbSj8gw1XEGFsq5D2xiMCsZ4DtJcKg5otiv8TcA1jtkqz2rcrzy+yQLXdQp 1PcVhXcyiHzl6xea1xA1/x0eUHTgyZXNIY0rkAOrfrTqY5zMihBvMunuDXk5/n3X 8S9pCuNv2iiCDCgUxuHEkWhqo28TYMC5ZKS8az0+uFoO7Wzkd613ecY7iufq0P+d l5johor2st6cW0xfoeKglE9FAq5UvFotEpRf7XBUKv059VuIDISkpyZVAK7vAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUNCKFYQ3PDzI38uAkXasMFRci2SMwHwYDVR0j BBgwFoAU+OnUjRfMOONMv8dLXAf0qbHr0hQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOGQ5MDgtMWI5OS00NTVjLWFjNzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQx N0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlCMUVCRDIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEU5RDQ4RDE3Q0MzOEUzNENCRkM3NEI1QzA3RjRBOUIxRUJE MjE0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RkYjhkOTA4LTFiOTktNDU1Yy1h Yzc2LThkNjI0ZGZhNDNiNi8wLzMxMzAzMzJlMzEzMjM2MmUzMTM3MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfq8wDQYJ KoZIhvcNAQELBQADggEBACDbEtjdCjuyGvl4PIBpbS95kxcuos7oo3PRpxi7veFx OECWNsP6alrQARtEmvakuFWv5hwCJdN3o7OKa89GAiUqNUvOqNC3P4TvAFTapDxw jvylaXHWwPvd3C0wS1/OgSyKSWhZABhSzd/WV3ft7cjxvt0FYhtv1NJgyyVcH2Yy cc+00tEIpt0GrFdkkitpXDiMy/OHOcg7Fo1P9Zwgca+DMl/QcyH6WQnD7hXlxdAg h+KWjkJ8jckq68s6vT7qP9UTyNFG4MLfy8dr4t7FVSlRhrODb7ui5/kZctLgB39Z 9nBWXgltRS8Wp09GrjRT7jf4v2OWzWCsge/O/F+6j1s= -----END CERTIFICATE-----Generated at Wed May 13 05:38:22 2026 by rpki-client