$ rpki-client -vvf rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa File: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (raw, json) Hash identifier: lpwKH/1rt1O8n37PkqiZ5Fo1jTQNKkwVgQuRatXBn2c= Subject key identifier: 12:95:7F:57:C9:51:B1:71:13:75:5B:EB:CE:4B:C0:9E:D1:2B:DB:07 Certificate issuer: /CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Certificate serial: 7D845F8CD77D155F35388506370D1A3B1DD53743 Authority key identifier: 36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa Signing time: Sun 03 May 2026 02:14:38 +0000 ROA not before: Sun 03 May 2026 02:09:38 +0000 ROA not after: Sun 02 May 2027 02:14:38 +0000 asID: 63023 IP address blocks: 103.120.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 21:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:84:5f:8c:d7:7d:15:5f:35:38:85:06:37:0d:1a:3b:1d:d5:37:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Validity Not Before: May 3 02:09:38 2026 GMT Not After : May 2 02:14:38 2027 GMT Subject: CN=12957F57C951B17113755BEBCE4BC09ED12BDB07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:89:6c:29:c9:af:67:44:b0:96:3f:2f:29:00: 29:91:c3:e4:0b:02:30:be:34:bd:2a:75:5e:16:0a: 95:09:70:1f:92:df:a6:42:76:81:fc:91:69:02:d2: 7b:a8:cd:2a:fb:5c:ed:60:01:44:68:bf:cb:49:01: 8d:11:29:97:ad:05:9e:66:42:21:85:9d:23:e0:99: 5e:f8:08:d1:dd:b7:f2:b1:89:33:53:43:00:f6:66: 49:37:3e:b2:0c:01:0a:a8:68:42:8c:6b:b1:a0:1d: 71:b4:37:7a:0d:24:3d:b3:2c:9a:dc:1f:d9:4a:f2: 30:3c:ab:c9:b5:73:b3:f7:c5:4b:5d:93:b1:fa:14: 00:b9:e1:da:21:6b:c1:fc:5f:02:cc:7c:83:c5:c1: e3:39:7c:5a:8d:dd:1f:9c:09:39:a9:02:2b:10:5d: a9:7c:70:5a:7a:3b:82:c0:d5:ca:25:6c:c4:73:6f: 3a:d9:55:3f:86:54:48:a0:b2:c9:98:23:65:38:97: de:c6:63:25:b1:75:02:ce:e5:d0:de:86:40:03:14: 67:50:8e:37:47:37:47:c9:aa:07:e1:42:86:a8:45: e7:c3:8a:9e:0b:53:1a:44:da:19:33:14:5d:bc:32: ff:47:87:45:b7:a7:d0:98:d0:fd:98:eb:f1:fb:f1: 2c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:95:7F:57:C9:51:B1:71:13:75:5B:EB:CE:4B:C0:9E:D1:2B:DB:07 X509v3 Authority Key Identifier: keyid:36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.205.0/24 Signature Algorithm: sha256WithRSAEncryption 86:8b:4b:54:b3:11:cc:39:38:2d:1d:51:82:cd:fd:b7:eb:a9: 12:a5:c9:3a:99:98:2e:fc:1d:d1:6b:18:96:00:1c:13:59:b7: cc:9d:62:fb:4f:ca:a9:cb:78:dd:b6:ff:4b:a2:93:d1:d7:23: 52:6f:9b:d1:e7:cb:1e:7e:0c:e6:aa:ec:92:55:d2:4d:77:5c: b0:25:98:af:17:97:0c:ce:d7:b2:41:b5:ae:19:5c:1e:2b:cc: 20:69:46:c6:7e:ce:8f:a2:69:5b:27:d1:10:be:57:e5:2f:ab: d3:48:43:b2:47:8f:95:b2:13:6e:09:50:23:9d:2c:f3:c1:f1: 39:68:15:28:00:0e:3e:c1:f1:c4:02:84:72:b8:b6:40:eb:fa: 3f:ec:07:f9:dd:a2:61:d9:b2:9b:bd:61:32:11:f5:3c:5e:98: fa:ad:36:0c:c2:6c:cf:7e:a9:8c:3b:85:9a:91:a8:ef:c2:5e: cb:a2:18:e8:07:72:aa:9d:25:99:d7:db:c7:20:13:12:83:a7: c7:e2:d3:ff:63:f0:90:7f:eb:56:b0:1d:c8:61:8d:ae:de:e0: f6:a9:1c:1a:8b:05:8e:7a:d5:a8:4a:51:4c:a2:ce:49:e4:a6: 2f:8f:6d:bd:3c:fe:7d:7c:2a:f7:a8:5b:06:be:dd:13:8d:b2: b7:95:4b:c8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfYRfjNd9FV81OIUGNw0aOx3VN0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RCOUEy NEE4Qjg3NzAeFw0yNjA1MDMwMjA5MzhaFw0yNzA1MDIwMjE0MzhaMDMxMTAvBgNV BAMTKDEyOTU3RjU3Qzk1MUIxNzExMzc1NUJFQkNFNEJDMDlFRDEyQkRCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiWwpya9nRLCWPy8pACmRw+QL AjC+NL0qdV4WCpUJcB+S36ZCdoH8kWkC0nuozSr7XO1gAURov8tJAY0RKZetBZ5m QiGFnSPgmV74CNHdt/KxiTNTQwD2Zkk3PrIMAQqoaEKMa7GgHXG0N3oNJD2zLJrc H9lK8jA8q8m1c7P3xUtdk7H6FAC54doha8H8XwLMfIPFweM5fFqN3R+cCTmpAisQ Xal8cFp6O4LA1colbMRzbzrZVT+GVEigssmYI2U4l97GYyWxdQLO5dDehkADFGdQ jjdHN0fJqgfhQoaoRefDip4LUxpE2hkzFF28Mv9Hh0W3p9CY0P2Y6/H78SxvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUEpV/V8lRsXETdVvrzkvAntEr2wcwHwYDVR0j BBgwFoAUNpnt1x2mCrxQs8gYenfbmiSouHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZjM3YzAtMzgwYy00MDUzLWIzYmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcx REE2MEFCQzUwQjNDODE4N0E3N0RCOUEyNEE4Qjg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk5RURENzFEQTYwQUJDNTBCM0M4MTg3QTc3REI5QTI0QThC ODc3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE0MGYzN2MwLTM4MGMtNDA1My1i M2JhLWIzMmVmMDM1YzI4Zi8wLzMxMzAzMzJlMzEzMjMwMmUzMjMwMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzAzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3jNMA0GCSqG SIb3DQEBCwUAA4IBAQCGi0tUsxHMOTgtHVGCzf2366kSpck6mZgu/B3RaxiWABwT WbfMnWL7T8qpy3jdtv9LopPR1yNSb5vR58sefgzmquySVdJNd1ywJZivF5cMztey QbWuGVweK8wgaUbGfs6PomlbJ9EQvlflL6vTSEOyR4+VshNuCVAjnSzzwfE5aBUo AA4+wfHEAoRyuLZA6/o/7Af53aJh2bKbvWEyEfU8Xpj6rTYMwmzPfqmMO4Wakajv wl7LohjoB3KqnSWZ19vHIBMSg6fH4tP/Y/CQf+tWsB3IYY2u3uD2qRwaiwWOetWo SlFMos5J5KYvj229PP59fCr3qFsGvt0TjbK3lUvI -----END CERTIFICATE-----Generated at Thu May 7 05:38:31 2026 by rpki-client