$ rpki-client -vvf rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa File: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (raw, json) Hash identifier: 3KlRb2Xxps0pa33onoIOEPbzzvYPuOJ6GZ6dlFF3dyg= Subject key identifier: 48:F5:DE:4A:70:1C:A2:75:ED:05:5D:60:5C:40:3E:E7:97:AC:35:52 Certificate issuer: /CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Certificate serial: 319D958E744F384FFAFE005E644DE683BFF5C4AE Authority key identifier: CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa Signing time: Sun 03 May 2026 02:29:34 +0000 ROA not before: Sun 03 May 2026 02:24:34 +0000 ROA not after: Sun 02 May 2027 02:29:34 +0000 asID: 137286 IP address blocks: 103.90.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9d:95:8e:74:4f:38:4f:fa:fe:00:5e:64:4d:e6:83:bf:f5:c4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Validity Not Before: May 3 02:24:34 2026 GMT Not After : May 2 02:29:34 2027 GMT Subject: CN=48F5DE4A701CA275ED055D605C403EE797AC3552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:bc:70:a5:96:7f:5e:a0:e9:d6:30:2e:93: 35:f9:2f:c1:e9:98:52:ec:02:8b:ff:86:b9:18:b7: b8:29:95:22:5f:9f:37:d1:cc:34:29:91:eb:39:de: 34:2f:6b:24:87:19:09:a6:ef:c1:8b:78:f2:e5:21: f4:f6:7b:9b:9f:7a:de:8b:74:e2:aa:00:86:12:41: 26:82:44:f9:1e:a7:d9:61:22:b5:09:b6:1b:64:f8: a9:d0:89:63:68:05:fc:8f:02:c5:76:a0:d8:54:ba: 68:0b:d4:43:38:0d:41:7d:a6:ed:84:cd:a9:32:c5: b2:3f:b0:67:54:d7:04:df:67:62:4a:7d:8f:31:38: 68:d9:0f:04:d1:6c:06:28:5a:ce:41:61:e1:66:bc: 8a:4e:3e:d8:b2:30:e9:48:a7:17:b9:8f:87:09:bb: fb:3d:85:ce:f5:e2:48:ec:d0:7b:1f:a4:b9:52:13: a2:de:ae:07:46:34:b2:aa:e8:ff:9f:6f:54:98:47: 4d:c0:cb:f0:c6:54:9f:62:4c:33:d2:56:c2:7c:b1: 45:08:3d:12:9a:28:d2:0a:fa:8e:99:cb:4f:1b:89: e6:26:37:e2:9c:e1:5f:b8:c2:2a:ef:1f:fd:e6:a7: 4d:29:fd:27:41:67:54:ad:c4:47:97:79:a9:69:3e: 14:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F5:DE:4A:70:1C:A2:75:ED:05:5D:60:5C:40:3E:E7:97:AC:35:52 X509v3 Authority Key Identifier: keyid:CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.248.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:d4:e5:10:15:dd:61:a9:d9:12:b4:c3:1d:1c:f9:0f:d4:ea: ba:ea:ef:5e:ac:46:52:73:f2:26:47:74:1b:d8:f1:72:39:74: 44:73:44:07:d7:cd:c2:95:39:82:ad:41:23:e9:91:c7:52:57: f0:47:f2:a6:11:ca:c5:39:75:55:9b:c8:7d:06:99:f7:96:99: fe:ec:e8:ff:1c:8d:7e:13:a7:55:70:6e:b2:11:37:41:3a:77: 7d:0a:22:03:c4:48:3b:81:2e:24:80:22:66:00:ec:4e:78:6c: 83:53:7b:3e:a8:72:15:23:61:fb:e0:8a:c4:29:d4:a5:d0:98: 9f:d4:67:09:58:1b:1c:de:ea:40:34:db:3f:ad:90:b4:f1:9a: 08:cc:6c:db:18:79:2c:2b:bb:15:8d:e3:a2:84:79:08:d5:07: 67:ec:2d:66:8e:c0:d6:e4:61:ce:48:81:f8:df:57:f8:41:fc: c0:54:61:44:b2:af:e2:2f:c7:c5:1d:90:88:b0:6a:ac:62:0a: 32:2a:c1:1e:64:44:4c:83:14:25:43:8e:e9:58:f0:19:28:bc: 80:8b:77:d5:ba:8a:35:48:cf:e7:ac:75:ff:55:94:75:ef:e6: 48:5e:48:17:35:01:86:36:2a:7d:c1:39:1e:4f:26:1f:f5:3d: f6:f9:66:1b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMZ2VjnRPOE/6/gBeZE3mg7/1xK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZF RDdFODU0QjAeFw0yNjA1MDMwMjI0MzRaFw0yNzA1MDIwMjI5MzRaMDMxMTAvBgNV BAMTKDQ4RjVERTRBNzAxQ0EyNzVFRDA1NUQ2MDVDNDAzRUU3OTdBQzM1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gLxwpZZ/XqDp1jAukzX5L8Hp mFLsAov/hrkYt7gplSJfnzfRzDQpkes53jQvaySHGQmm78GLePLlIfT2e5ufet6L dOKqAIYSQSaCRPkep9lhIrUJthtk+KnQiWNoBfyPAsV2oNhUumgL1EM4DUF9pu2E zakyxbI/sGdU1wTfZ2JKfY8xOGjZDwTRbAYoWs5BYeFmvIpOPtiyMOlIpxe5j4cJ u/s9hc714kjs0HsfpLlSE6LergdGNLKq6P+fb1SYR03Ay/DGVJ9iTDPSVsJ8sUUI PRKaKNIK+o6Zy08bieYmN+Kc4V+4wirvH/3mp00p/SdBZ1StxEeXealpPhTbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSPXeSnAconXtBV1gXEA+55esNVIwHwYDVR0j BBgwFoAUzsciPcMWLWi1sXP1R5Zwxu1+hUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQwMmRhYTUtZmIwYy00YTI0LTk4ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RD MzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZFRDdFODU0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUM3MjIzREMzMTYyRDY4QjVCMTczRjU0Nzk2NzBDNkVEN0U4 NTRCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ0MDJkYWE1LWZiMGMtNGEyNC05 ODg5LTMzYmQ1MGRiNGZlMC8wLzMxMzAzMzJlMzkzMDJlMzIzNDM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM3MzIzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1r4MA0GCSqG SIb3DQEBCwUAA4IBAQCb1OUQFd1hqdkStMMdHPkP1Oq66u9erEZSc/ImR3Qb2PFy OXREc0QH183ClTmCrUEj6ZHHUlfwR/KmEcrFOXVVm8h9Bpn3lpn+7Oj/HI1+E6dV cG6yETdBOnd9CiIDxEg7gS4kgCJmAOxOeGyDU3s+qHIVI2H74IrEKdSl0Jif1GcJ WBsc3upANNs/rZC08ZoIzGzbGHksK7sVjeOihHkI1Qdn7C1mjsDW5GHOSIH431f4 QfzAVGFEsq/iL8fFHZCIsGqsYgoyKsEeZERMgxQlQ47pWPAZKLyAi3fVuoo1SM/n rHX/VZR17+ZIXkgXNQGGNip9wTkeTyYf9T32+WYb -----END CERTIFICATE-----Generated at Wed May 13 04:54:31 2026 by rpki-client