$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3139302e302f32342d3234203d3e203435373331.roa File: 3130332e32302e3139302e302f32342d3234203d3e203435373331.roa (raw, json) Hash identifier: vh/OAKDmJtj9EbMMod6wkTOiMyrPRqy4DLk/7nwblHk= Subject key identifier: 03:4E:E1:C0:6A:6F:30:2B:0D:C9:39:D6:53:1A:6F:0A:46:8A:CC:5C Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 742A8AFCE31BC615594AC8E9A1EB1A7444CBE31C Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3139302e302f32342d3234203d3e203435373331.roa Signing time: Sun 03 May 2026 02:47:51 +0000 ROA not before: Sun 03 May 2026 02:42:51 +0000 ROA not after: Sun 02 May 2027 02:47:51 +0000 asID: 45731 IP address blocks: 103.20.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2a:8a:fc:e3:1b:c6:15:59:4a:c8:e9:a1:eb:1a:74:44:cb:e3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:42:51 2026 GMT Not After : May 2 02:47:51 2027 GMT Subject: CN=034EE1C06A6F302B0DC939D6531A6F0A468ACC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:7b:8d:6a:5c:2e:a9:35:d7:60:d2:dc:74: 64:ea:59:f0:0e:d8:95:77:4d:49:46:fc:fe:35:a8: 06:2a:60:fa:b4:f4:89:6c:34:ae:10:c1:ea:59:cc: 99:ea:72:d2:70:38:c8:cc:f9:e9:26:91:9d:58:0d: 45:a3:20:24:e5:96:8e:ff:f9:64:0c:9d:1e:86:d2: f1:69:88:d3:47:04:d1:8f:1d:1f:c9:73:24:be:15: 8e:f5:d1:98:6f:93:4f:18:27:f6:fc:be:74:b8:95: 9c:1c:10:c6:87:56:14:4a:c7:16:0d:ab:fa:89:71: 71:dd:53:54:38:d9:04:26:eb:7e:c8:64:e0:23:de: 27:94:30:b4:fd:8f:26:89:d2:d2:68:92:9c:5a:09: a1:c9:e4:2c:44:77:bb:e7:84:05:61:fb:12:3f:d5: a7:69:9e:2c:db:a4:ff:0f:c2:98:97:09:9b:6a:0d: 3b:3e:54:31:2a:a2:af:e2:a8:71:c9:72:66:0c:2b: 98:39:0e:f6:b7:f4:b6:f7:bc:e0:a9:d6:88:99:d2: 5a:ab:33:57:d5:6e:63:bc:e2:a1:e6:c0:df:50:ff: 9d:95:c9:c1:7d:d5:8d:ec:2d:29:65:03:51:65:88: ec:6b:be:39:98:24:cb:0c:e1:64:0a:a5:e2:a6:a5: 46:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4E:E1:C0:6A:6F:30:2B:0D:C9:39:D6:53:1A:6F:0A:46:8A:CC:5C X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3139302e302f32342d3234203d3e203435373331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.190.0/24 Signature Algorithm: sha256WithRSAEncryption 23:8b:9e:f9:91:ac:c9:d7:6a:36:a3:78:0a:e5:c9:37:8d:79: 96:72:dc:03:34:85:21:86:f7:2c:23:b4:0d:cd:4b:d3:9c:d4: 82:29:0f:91:9a:a4:f6:f7:78:23:fb:b0:85:f5:f2:79:e7:ab: 52:3f:19:7e:cb:c7:3f:34:d9:a6:96:7d:22:fa:ab:d4:0e:b3: bc:f8:e1:09:13:a9:ca:60:f0:4e:47:d5:7a:ea:dc:6d:32:bd: 40:8c:4f:2c:5f:8d:65:73:39:a1:ac:51:4a:26:e0:a4:5b:8d: b1:21:4c:f5:b9:69:dc:5c:0f:89:f5:eb:08:59:d3:3d:8a:08: 32:9b:81:70:a3:c7:5c:9f:b5:d7:e1:08:d4:0a:d8:51:be:82: 11:3f:89:23:0a:96:d4:4e:5f:d6:45:66:1c:32:8c:65:ce:18: 66:30:ce:d6:dc:81:50:a5:94:99:02:c8:43:8e:3a:16:22:28: 30:38:46:4d:cc:a3:9d:0d:2c:05:21:25:9f:13:25:09:5e:53: 33:ac:4a:a8:44:10:45:0b:5b:47:d6:fd:c3:2f:fa:e8:aa:8a: 91:f0:a2:d8:e8:71:09:f3:19:d3:19:fa:7c:21:18:17:af:e5: 3d:0e:65:54:96:ad:68:b0:91:e2:42:f8:47:cb:d4:79:b1:c1: eb:0d:93:23 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdCqK/OMbxhVZSsjpoesadETL4xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQyNTFaFw0yNzA1MDIwMjQ3NTFaMDMxMTAvBgNV BAMTKDAzNEVFMUMwNkE2RjMwMkIwREM5MzlENjUzMUE2RjBBNDY4QUNDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVfHuNalwuqTXXYNLcdGTqWfAO 2JV3TUlG/P41qAYqYPq09IlsNK4QwepZzJnqctJwOMjM+ekmkZ1YDUWjICTllo7/ +WQMnR6G0vFpiNNHBNGPHR/JcyS+FY710Zhvk08YJ/b8vnS4lZwcEMaHVhRKxxYN q/qJcXHdU1Q42QQm637IZOAj3ieUMLT9jyaJ0tJokpxaCaHJ5CxEd7vnhAVh+xI/ 1adpnizbpP8PwpiXCZtqDTs+VDEqoq/iqHHJcmYMK5g5Dva39Lb3vOCp1oiZ0lqr M1fVbmO84qHmwN9Q/52VycF91Y3sLSllA1FliOxrvjmYJMsM4WQKpeKmpUYNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUA07hwGpvMCsNyTnWUxpvCkaKzFwwHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzAzMzJlMzIzMDJlMzEzOTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTM3MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcUvjANBgkqhkiG 9w0BAQsFAAOCAQEAI4ue+ZGsyddqNqN4CuXJN415lnLcAzSFIYb3LCO0Dc1L05zU gikPkZqk9vd4I/uwhfXyeeerUj8ZfsvHPzTZppZ9Ivqr1A6zvPjhCROpymDwTkfV eurcbTK9QIxPLF+NZXM5oaxRSibgpFuNsSFM9blp3FwPifXrCFnTPYoIMpuBcKPH XJ+11+EI1ArYUb6CET+JIwqW1E5f1kVmHDKMZc4YZjDO1tyBUKWUmQLIQ446FiIo MDhGTcyjnQ0sBSElnxMlCV5TM6xKqEQQRQtbR9b9wy/66KqKkfCi2OhxCfMZ0xn6 fCEYF6/lPQ5lVJataLCR4kL4R8vUebHB6w2TIw== -----END CERTIFICATE-----Generated at Wed May 13 02:19:56 2026 by rpki-client