$ rpki-client -vvf rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa File: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (raw, json) Hash identifier: lz98VZByNVjP88hEyC/FArLpyfqt3UkStR89LwAjmAE= Subject key identifier: A8:78:2A:EE:D7:0E:A0:4F:A7:0A:31:A0:FF:7B:E1:D3:51:82:FA:D1 Certificate issuer: /CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Certificate serial: 040417D8A4C8FD6461AF956C0D4D4E6E2C22C84C Authority key identifier: 36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa Signing time: Sun 03 May 2026 02:14:38 +0000 ROA not before: Sun 03 May 2026 02:09:38 +0000 ROA not after: Sun 02 May 2027 02:14:38 +0000 asID: 197537 IP address blocks: 103.120.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 21:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:04:17:d8:a4:c8:fd:64:61:af:95:6c:0d:4d:4e:6e:2c:22:c8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Validity Not Before: May 3 02:09:38 2026 GMT Not After : May 2 02:14:38 2027 GMT Subject: CN=A8782AEED70EA04FA70A31A0FF7BE1D35182FAD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:2a:02:c2:9f:dc:4e:ac:0d:9f:4d:95:28: 87:40:1d:7a:40:22:19:b2:f7:b4:93:5b:f6:78:ef: 0d:f4:55:37:7d:f0:28:3f:d2:a0:f7:3d:13:ea:a6: 31:4d:6e:0f:fb:d7:18:3d:79:b0:78:6d:b9:d2:6d: 5a:06:fa:30:42:9d:0d:55:0b:b9:0b:54:77:40:79: ef:e3:9c:81:9d:3d:b5:3e:f8:c3:dc:cd:fb:b5:e4: 7c:61:31:9f:9e:ce:33:58:07:bc:83:86:f2:d4:c2: 86:3e:c1:75:b4:05:93:ce:c0:82:ff:e6:9e:0b:66: 16:51:3c:dc:a6:70:87:e4:64:72:f7:ca:ea:70:7e: 36:52:3a:97:6d:3f:b8:de:74:b8:9e:23:a5:cd:67: e2:d8:03:20:96:d4:84:fe:ef:11:04:0c:cc:0d:c5: e5:34:82:34:a6:c3:a6:a7:74:18:08:ef:fe:80:47: f4:f7:9a:e8:5c:d9:b0:11:1b:96:60:04:8d:25:0a: 31:51:4c:33:ea:e8:33:27:ed:19:75:2b:ee:fa:2d: ac:7d:18:c1:a7:8b:a2:33:fc:6d:63:d1:91:f7:68: e0:b5:07:04:c7:44:a2:18:cf:ca:c6:8d:18:26:19: d9:b7:25:9e:ae:fa:cd:a7:92:cf:43:c6:c4:00:a3: 9f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:78:2A:EE:D7:0E:A0:4F:A7:0A:31:A0:FF:7B:E1:D3:51:82:FA:D1 X509v3 Authority Key Identifier: keyid:36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.204.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:70:99:33:40:a2:c6:0b:6f:d6:10:e1:3b:9f:3e:7e:a7:60: be:ed:d4:eb:ed:69:7f:3e:3c:af:fc:7e:07:ed:d0:d1:f5:81: ed:16:c7:06:48:88:83:e0:69:c0:c4:8f:4e:74:51:b2:cf:9e: e6:f4:ba:38:7d:30:35:11:ee:0b:99:ae:fb:02:d7:e2:e1:1d: 73:a5:d8:75:14:11:ec:0c:90:1d:be:b1:f8:ef:0d:79:79:36: 93:06:37:47:ce:23:b6:4f:1b:8b:78:7d:bd:6e:e7:b8:b8:86: aa:ad:1e:a3:e6:27:06:18:9f:56:ec:90:32:18:29:e7:57:b0: ed:4e:2e:50:32:7b:47:0c:86:8c:91:0a:35:be:07:43:ec:03: 8d:05:38:f3:8a:92:19:c3:13:a2:be:56:57:c2:9a:e1:fa:ef: 72:c6:d3:01:45:1c:71:3a:b1:4c:40:67:71:b6:4e:11:2b:66: c5:7d:58:6a:41:26:b8:86:96:09:3f:b7:f9:d8:89:df:22:f8: 60:29:37:6a:9a:c8:eb:ea:fd:21:31:65:d5:db:9b:10:7d:e3: 4e:01:a4:77:74:0c:28:b7:7e:7f:0e:c1:34:23:a0:53:d0:1d: 3e:b9:fb:04:f0:1d:1f:ac:d5:17:de:59:fb:b6:d4:2e:50:08: 28:aa:d2:64 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBAQX2KTI/WRhr5VsDU1ObiwiyEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RCOUEy NEE4Qjg3NzAeFw0yNjA1MDMwMjA5MzhaFw0yNzA1MDIwMjE0MzhaMDMxMTAvBgNV BAMTKEE4NzgyQUVFRDcwRUEwNEZBNzBBMzFBMEZGN0JFMUQzNTE4MkZBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6yoCwp/cTqwNn02VKIdAHXpA Ihmy97STW/Z47w30VTd98Cg/0qD3PRPqpjFNbg/71xg9ebB4bbnSbVoG+jBCnQ1V C7kLVHdAee/jnIGdPbU++MPczfu15HxhMZ+ezjNYB7yDhvLUwoY+wXW0BZPOwIL/ 5p4LZhZRPNymcIfkZHL3yupwfjZSOpdtP7jedLieI6XNZ+LYAyCW1IT+7xEEDMwN xeU0gjSmw6andBgI7/6AR/T3muhc2bARG5ZgBI0lCjFRTDPq6DMn7Rl1K+76Lax9 GMGni6Iz/G1j0ZH3aOC1BwTHRKIYz8rGjRgmGdm3JZ6u+s2nks9DxsQAo59HAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUqHgq7tcOoE+nCjGg/3vh01GC+tEwHwYDVR0j BBgwFoAUNpnt1x2mCrxQs8gYenfbmiSouHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZjM3YzAtMzgwYy00MDUzLWIzYmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcx REE2MEFCQzUwQjNDODE4N0E3N0RCOUEyNEE4Qjg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk5RURENzFEQTYwQUJDNTBCM0M4MTg3QTc3REI5QTI0QThC ODc3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE0MGYzN2MwLTM4MGMtNDA1My1i M2JhLWIzMmVmMDM1YzI4Zi8wLzMxMzAzMzJlMzEzMjMwMmUzMjMwMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM5MzczNTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneMwwDQYJ KoZIhvcNAQELBQADggEBAH1wmTNAosYLb9YQ4TufPn6nYL7t1OvtaX8+PK/8fgft 0NH1ge0WxwZIiIPgacDEj050UbLPnub0ujh9MDUR7guZrvsC1+LhHXOl2HUUEewM kB2+sfjvDXl5NpMGN0fOI7ZPG4t4fb1u57i4hqqtHqPmJwYYn1bskDIYKedXsO1O LlAye0cMhoyRCjW+B0PsA40FOPOKkhnDE6K+VlfCmuH673LG0wFFHHE6sUxAZ3G2 ThErZsV9WGpBJriGlgk/t/nYid8i+GApN2qayOvq/SExZdXbmxB9404BpHd0DCi3 fn8OwTQjoFPQHT65+wTwHR+s1RfeWfu21C5QCCiq0mQ= -----END CERTIFICATE-----Generated at Thu May 7 05:38:31 2026 by rpki-client