$ rpki-client -vvf rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa File: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (raw, json) Hash identifier: FcbgzQdIQigiunMpm6/hzO5KdG9gtqkjcIfWQ/NRFWE= Subject key identifier: 06:E9:46:4C:86:85:53:00:B7:B0:6E:20:D1:82:0A:E1:40:58:A6:BD Certificate issuer: /CN=6E36D51ED37E76652D33954036B724B015FE6535 Certificate serial: 1ADACF7BBD36879F5C5C56897E3E85AC6230FF61 Authority key identifier: 6E:36:D5:1E:D3:7E:76:65:2D:33:95:40:36:B7:24:B0:15:FE:65:35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E36D51ED37E76652D33954036B724B015FE6535.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa Signing time: Sun 03 May 2026 02:10:51 +0000 ROA not before: Sun 03 May 2026 02:05:51 +0000 ROA not after: Sun 02 May 2027 02:10:51 +0000 asID: 138864 IP address blocks: 103.139.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.crl rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E36D51ED37E76652D33954036B724B015FE6535.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:da:cf:7b:bd:36:87:9f:5c:5c:56:89:7e:3e:85:ac:62:30:ff:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E36D51ED37E76652D33954036B724B015FE6535 Validity Not Before: May 3 02:05:51 2026 GMT Not After : May 2 02:10:51 2027 GMT Subject: CN=06E9464C86855300B7B06E20D1820AE14058A6BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:91:cc:a6:fc:e1:52:20:26:8c:4b:05:21:d7: 77:09:87:03:42:00:1b:a9:0e:35:86:1f:ff:38:46: 14:af:21:f7:90:e3:be:6e:d7:6c:27:40:db:f0:f6: 26:b4:e8:a0:dd:c2:e8:ab:a8:a0:c8:9e:2b:13:9b: 33:c4:f5:7f:f8:e7:05:7c:a5:97:cc:cf:06:74:68: fc:19:b9:91:23:a1:47:7b:19:a8:89:1a:8b:af:8d: 9f:fb:39:46:ff:09:fb:d6:02:bd:a0:b9:a5:5b:4e: d7:07:12:8f:92:c5:b5:dd:a2:b0:7a:dd:08:aa:33: 5a:fa:eb:71:b1:fc:aa:7f:11:ca:60:a8:22:61:31: d9:6c:02:4e:5e:a4:64:8c:72:4a:ba:30:f9:17:98: 1a:be:12:74:7e:40:e3:55:aa:69:ed:c1:bf:4a:a3: fa:24:6e:37:bc:ca:c4:9c:bc:af:62:8d:75:37:8a: 74:cb:a7:d8:47:90:de:4c:5d:e0:a1:62:ef:9a:90: 40:ee:e9:f0:3e:54:f7:11:b9:df:94:11:8b:c1:38: f5:92:24:15:fe:3e:04:fc:9c:9b:ee:46:4f:70:95: 41:bf:3a:c8:f1:2b:09:e8:d2:aa:b1:9a:34:76:42: 6d:ee:01:3f:f9:7b:11:90:01:95:15:5a:b4:28:39: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E9:46:4C:86:85:53:00:B7:B0:6E:20:D1:82:0A:E1:40:58:A6:BD X509v3 Authority Key Identifier: keyid:6E:36:D5:1E:D3:7E:76:65:2D:33:95:40:36:B7:24:B0:15:FE:65:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E36D51ED37E76652D33954036B724B015FE6535.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.186.0/24 Signature Algorithm: sha256WithRSAEncryption a4:eb:e6:bb:41:72:18:22:aa:9a:83:5b:25:3a:9c:33:25:5d: a5:04:bc:24:54:76:64:70:2a:16:e2:4f:62:ab:a1:eb:14:fc: 72:e2:e1:bf:44:e2:01:bc:2b:ca:58:d7:16:ad:13:b6:4c:d2: ee:8f:54:45:30:b6:17:70:a3:0f:1e:df:f9:4e:5f:8d:5b:bb: 6c:d8:eb:4e:35:b3:27:ef:24:46:63:7f:49:38:03:23:9a:45: d0:c7:2b:a1:bf:9c:9b:fa:a5:6b:21:5c:15:fb:5c:64:ad:5c: 1a:42:59:70:54:f0:37:e2:d0:27:27:37:de:df:08:89:cf:d0: d8:14:10:2e:21:61:94:da:a1:37:7e:27:e7:7a:93:98:f9:43: d3:c2:b1:f0:e9:f9:d8:0a:c9:9d:31:8b:43:df:0d:10:f0:1a: fe:98:5d:80:53:66:56:05:88:30:e2:73:b5:33:6c:d4:e6:27: 42:d1:a8:b9:84:ec:83:83:d4:47:66:01:af:32:5b:18:dd:43: 0b:8b:d1:a0:9a:46:c2:eb:e1:a4:5a:6c:66:8f:7b:53:0c:73: 02:c9:79:5c:4b:de:d2:ee:48:0c:91:8d:25:e0:4e:62:60:f7: fe:64:af:d5:ca:b1:4a:ac:e2:0f:dd:3f:71:a4:83:93:1b:2f: 43:82:a6:9e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGtrPe702h59cXFaJfj6FrGIw/2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUzNkQ1MUVEMzdFNzY2NTJEMzM5NTQwMzZCNzI0QjAx NUZFNjUzNTAeFw0yNjA1MDMwMjA1NTFaFw0yNzA1MDIwMjEwNTFaMDMxMTAvBgNV BAMTKDA2RTk0NjRDODY4NTUzMDBCN0IwNkUyMEQxODIwQUUxNDA1OEE2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNkcym/OFSICaMSwUh13cJhwNC ABupDjWGH/84RhSvIfeQ475u12wnQNvw9ia06KDdwuirqKDInisTmzPE9X/45wV8 pZfMzwZ0aPwZuZEjoUd7GaiJGouvjZ/7OUb/CfvWAr2guaVbTtcHEo+SxbXdorB6 3QiqM1r663Gx/Kp/EcpgqCJhMdlsAk5epGSMckq6MPkXmBq+EnR+QONVqmntwb9K o/okbje8ysScvK9ijXU3inTLp9hHkN5MXeChYu+akEDu6fA+VPcRud+UEYvBOPWS JBX+PgT8nJvuRk9wlUG/OsjxKwno0qqxmjR2Qm3uAT/5exGQAZUVWrQoOePDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUBulGTIaFUwC3sG4g0YIK4UBYpr0wHwYDVR0j BBgwFoAUbjbVHtN+dmUtM5VANrcksBX+ZTUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQzNThiMDAtMzFjZC00MWEzLTk1MzYtZGJiMTkzZTdmNGQwLzAvNkUzNkQ1MUVE MzdFNzY2NTJEMzM5NTQwMzZCNzI0QjAxNUZFNjUzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RTM2RDUxRUQzN0U3NjY1MkQzMzk1NDAzNkI3MjRCMDE1RkU2 NTM1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0MzU4YjAwLTMxY2QtNDFhMy05 NTM2LWRiYjE5M2U3ZjRkMC8wLzMxMzAzMzJlMzEzMzM5MmUzMTM4MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM2MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABni7owDQYJ KoZIhvcNAQELBQADggEBAKTr5rtBchgiqpqDWyU6nDMlXaUEvCRUdmRwKhbiT2Kr oesU/HLi4b9E4gG8K8pY1xatE7ZM0u6PVEUwthdwow8e3/lOX41bu2zY6041syfv JEZjf0k4AyOaRdDHK6G/nJv6pWshXBX7XGStXBpCWXBU8Dfi0CcnN97fCInP0NgU EC4hYZTaoTd+J+d6k5j5Q9PCsfDp+dgKyZ0xi0PfDRDwGv6YXYBTZlYFiDDic7Uz bNTmJ0LRqLmE7IOD1EdmAa8yWxjdQwuL0aCaRsLr4aRabGaPe1MMcwLJeVxL3tLu SAyRjSXgTmJg9/5kr9XKsUqs4g/dP3Gkg5MbL0OCpp4= -----END CERTIFICATE-----Generated at Wed May 13 06:26:55 2026 by rpki-client