$ rpki-client -vvf rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa File: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (raw, json) Hash identifier: d1ZK5CDzhtaNvYbuQR6mmsziLXG16ilK4xHvMUVhmNg= Subject key identifier: 6A:A7:37:EC:64:7B:22:18:9B:72:A9:B4:7B:B0:38:68:3C:0D:EB:D6 Certificate issuer: /CN=FC2134DAE4378B90D9026728D4F693714082E391 Certificate serial: 5157235A5DE1CB98242E5B97A1F75FDC48CCDA8E Authority key identifier: FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa Signing time: Sun 03 May 2026 03:14:36 +0000 ROA not before: Sun 03 May 2026 03:09:36 +0000 ROA not after: Sun 02 May 2027 03:14:36 +0000 asID: 137373 IP address blocks: 103.120.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:57:23:5a:5d:e1:cb:98:24:2e:5b:97:a1:f7:5f:dc:48:cc:da:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2134DAE4378B90D9026728D4F693714082E391 Validity Not Before: May 3 03:09:36 2026 GMT Not After : May 2 03:14:36 2027 GMT Subject: CN=6AA737EC647B22189B72A9B47BB038683C0DEBD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:98:15:dd:af:54:05:70:09:8b:07:4a:7d:7e: 80:a1:67:97:2a:99:2e:a2:3e:89:76:f9:d2:c0:ed: 83:10:e4:08:06:5f:de:44:26:80:28:d7:d1:d4:a4: 85:5b:7e:31:69:b1:ec:8c:ee:f8:8f:8c:b6:78:62: 10:9a:39:35:90:d1:9c:a2:e1:5e:1c:dd:44:39:3d: 89:ff:10:4c:fe:9d:1e:03:df:81:3c:3a:eb:40:c6: 5d:ff:72:ff:44:58:b0:08:77:3a:20:c1:99:3c:5a: 38:81:07:a3:81:96:df:26:f6:e0:da:64:2f:47:76: 5d:2c:47:a6:4b:96:f3:04:14:a9:5a:8d:29:0c:24: a5:92:4f:bf:cb:0c:12:ad:a2:e4:98:4e:45:42:8c: 54:bb:f0:d1:00:67:9e:bf:37:6f:6b:19:ff:1f:47: 8c:b2:2a:e2:57:91:d7:ee:cc:10:9b:ff:ef:8b:db: 12:40:ec:97:68:25:33:f5:f9:c5:5c:b1:a4:03:4a: 19:eb:87:f7:4d:73:0b:8e:42:fa:fe:6f:aa:05:d3: 1d:0d:c8:5b:00:7d:3e:d3:79:37:3f:cc:8b:96:c0: c7:08:28:ee:d3:82:11:e8:58:81:97:3e:92:0c:e6: 6a:fa:1f:6e:dc:a2:ce:42:99:36:b2:90:17:29:e7: 50:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A7:37:EC:64:7B:22:18:9B:72:A9:B4:7B:B0:38:68:3C:0D:EB:D6 X509v3 Authority Key Identifier: keyid:FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.66.0/24 Signature Algorithm: sha256WithRSAEncryption 40:37:4b:77:34:47:4c:c9:5c:99:d5:88:f3:a1:d4:98:fc:13: 3a:aa:07:94:29:27:ac:12:42:84:ef:41:cd:a1:23:b5:bf:a5: 96:65:99:07:54:51:1d:aa:b0:45:a0:a4:34:f0:50:80:af:53: cd:77:93:b7:45:b5:d7:cc:59:5f:31:02:b7:9c:97:97:b3:37: aa:cf:11:cc:29:17:92:94:90:0d:67:71:1a:4f:7a:65:29:10: 3d:c5:e2:6f:0a:5e:01:fc:82:bf:3f:46:36:4b:56:6c:11:5c: 90:7f:09:d5:64:06:24:e2:2a:87:91:2f:8d:f0:f8:00:c3:00: 74:14:c8:9d:e7:dd:62:01:48:89:f1:cb:59:ea:c9:e8:5a:6b: 2f:52:e0:02:e4:50:bc:41:7a:bd:ae:00:09:1f:a8:ec:04:41: aa:73:c9:67:ad:69:9b:1a:00:64:19:24:00:bc:3a:80:3e:c7: c1:d9:b4:b0:a0:39:67:e6:01:0d:19:a0:2f:ac:f2:2e:b8:a4: b4:6a:d0:a7:ca:3d:82:06:07:7b:1b:ef:bd:5e:54:64:9a:d3: 8c:d5:63:7a:e6:91:33:ba:2e:f9:94:12:1c:2a:1b:e6:a3:16: 4a:b0:c6:13:78:21:a9:1e:05:81:6e:9b:0e:eb:88:c7:2c:5b: bc:1a:f9:d6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUVcjWl3hy5gkLluXofdf3EjM2o4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyMTM0REFFNDM3OEI5MEQ5MDI2NzI4RDRGNjkzNzE0 MDgyRTM5MTAeFw0yNjA1MDMwMzA5MzZaFw0yNzA1MDIwMzE0MzZaMDMxMTAvBgNV BAMTKDZBQTczN0VDNjQ3QjIyMTg5QjcyQTlCNDdCQjAzODY4M0MwREVCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmBXdr1QFcAmLB0p9foChZ5cq mS6iPol2+dLA7YMQ5AgGX95EJoAo19HUpIVbfjFpseyM7viPjLZ4YhCaOTWQ0Zyi 4V4c3UQ5PYn/EEz+nR4D34E8OutAxl3/cv9EWLAIdzogwZk8WjiBB6OBlt8m9uDa ZC9Hdl0sR6ZLlvMEFKlajSkMJKWST7/LDBKtouSYTkVCjFS78NEAZ56/N29rGf8f R4yyKuJXkdfuzBCb/++L2xJA7JdoJTP1+cVcsaQDShnrh/dNcwuOQvr+b6oF0x0N yFsAfT7TeTc/zIuWwMcIKO7TghHoWIGXPpIM5mr6H27cos5CmTaykBcp51AFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUaqc37GR7Ihibcqm0e7A4aDwN69YwHwYDVR0j BBgwFoAU/CE02uQ3i5DZAmco1PaTcUCC45EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTg2ZTQ2ZWMtZGY1Yy00YjRkLWEzMGUtMTBiMmM2ODhjMmZjLzAvRkMyMTM0REFF NDM3OEI5MEQ5MDI2NzI4RDRGNjkzNzE0MDgyRTM5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzIxMzREQUU0Mzc4QjkwRDkwMjY3MjhENEY2OTM3MTQwODJF MzkxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U4NmU0NmVjLWRmNWMtNGI0ZC1h MzBlLTEwYjJjNjg4YzJmYy8wLzMxMzAzMzJlMzEzMjMwMmUzNjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3hCMA0GCSqG SIb3DQEBCwUAA4IBAQBAN0t3NEdMyVyZ1YjzodSY/BM6qgeUKSesEkKE70HNoSO1 v6WWZZkHVFEdqrBFoKQ08FCAr1PNd5O3RbXXzFlfMQK3nJeXszeqzxHMKReSlJAN Z3EaT3plKRA9xeJvCl4B/IK/P0Y2S1ZsEVyQfwnVZAYk4iqHkS+N8PgAwwB0FMid 591iAUiJ8ctZ6snoWmsvUuAC5FC8QXq9rgAJH6jsBEGqc8lnrWmbGgBkGSQAvDqA PsfB2bSwoDln5gENGaAvrPIuuKS0atCnyj2CBgd7G++9XlRkmtOM1WN65pEzui75 lBIcKhvmoxZKsMYTeCGpHgWBbpsO64jHLFu8GvnW -----END CERTIFICATE-----Generated at Wed May 13 02:34:22 2026 by rpki-client