$ rpki-client -vvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa File: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (raw, json) Hash identifier: Zn0CgMhZBE1Ox5HRkdKzvhOJuMe+bbXdGHM8Z1fRLu4= Subject key identifier: 99:00:5C:EA:35:10:D0:AE:08:5F:7D:1B:B2:B9:71:E4:AB:28:69:48 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 4578C93053415F408B2DBAD6085E18361613AA99 Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa Signing time: Sun 03 May 2026 02:51:29 +0000 ROA not before: Sun 03 May 2026 02:46:29 +0000 ROA not after: Sun 02 May 2027 02:51:29 +0000 asID: 141898 IP address blocks: 103.158.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:78:c9:30:53:41:5f:40:8b:2d:ba:d6:08:5e:18:36:16:13:aa:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: May 3 02:46:29 2026 GMT Not After : May 2 02:51:29 2027 GMT Subject: CN=99005CEA3510D0AE085F7D1BB2B971E4AB286948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:27:59:df:b4:38:7e:17:51:fd:2c:7d:f0: 5e:2c:ec:cf:f6:37:b6:bc:c5:70:3b:fc:f6:a7:a9: 4b:a3:97:db:67:b7:9e:64:fa:83:84:75:db:8e:c3: a8:0b:9b:d7:2d:5a:71:43:e1:61:ca:ac:91:f0:53: 2a:dd:61:e7:88:d2:14:d4:f4:31:37:18:e3:e4:15: 58:3a:de:8e:1c:bb:8f:62:63:6a:9b:5e:1c:93:81: 6b:c6:3b:f8:55:45:15:3e:42:fa:c4:65:a5:94:94: b0:7e:ef:f3:e3:5c:ca:ec:18:0c:ce:9b:81:d2:00: 31:1e:f8:86:5b:d0:08:05:44:d4:bd:fc:1e:d6:47: 08:dc:d4:bc:c3:e6:bf:df:dc:22:72:56:ee:02:b1: 56:6a:88:93:79:f5:28:86:32:df:bf:e1:71:1a:6d: cb:9d:2f:cc:d1:a9:88:2c:09:00:41:0e:3d:ea:85: 55:ec:8f:99:71:1d:ce:1a:dc:21:6e:8c:e4:14:9e: f2:3b:09:a0:f9:b3:a0:53:d5:26:57:87:ab:0a:29: bc:bd:bc:70:0c:2d:cf:ac:4a:29:ad:2b:d8:1c:72: 76:8a:ed:6f:c9:38:de:6b:e8:de:4c:57:70:3c:9e: 77:eb:a8:b2:97:66:eb:f8:8a:61:95:07:13:96:e1: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:00:5C:EA:35:10:D0:AE:08:5F:7D:1B:B2:B9:71:E4:AB:28:69:48 X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.234.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:bb:88:6b:46:57:f9:3f:f1:0e:31:8e:16:16:ba:f2:d1:48: 0f:0a:02:56:c1:c6:02:7e:52:41:aa:6c:12:f3:0c:59:a7:b6: 2a:b3:c4:a5:b4:72:45:27:fe:92:c4:be:6a:c8:60:fb:8e:de: 1f:a5:63:5d:bd:b3:ea:00:36:37:82:b0:12:d7:65:34:10:be: 26:a7:c1:78:67:fc:b1:5d:38:88:e9:e8:5a:cd:8f:1a:31:69: 85:7a:9e:f9:7f:c6:d9:4b:50:ac:96:a7:77:88:26:be:1d:1c: f1:38:9a:50:15:c5:b1:4a:a8:17:18:7c:73:e2:1b:8b:58:bb: 80:28:26:13:0d:05:87:78:3a:d2:7d:d8:8d:a6:98:6e:20:30: 25:7c:f1:5e:65:f1:c2:13:90:4b:69:b8:ff:e7:ef:d9:72:64: 45:b1:f9:55:8b:32:4c:06:90:bd:75:7b:c7:bb:c4:7d:5d:87: e3:98:65:89:11:a3:ca:70:f0:d7:77:c7:39:ff:e5:7f:e0:c0: 3c:d6:16:1f:90:01:cb:30:8a:4a:28:92:73:88:c0:9b:45:71: c7:d2:ba:87:06:b3:f9:73:90:7a:2f:aa:3e:d4:da:7f:e2:1f: 2e:7f:1f:f4:c3:e6:d3:d8:3e:84:84:1d:ac:6a:44:ec:56:2b: b6:64:8d:a4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIURXjJMFNBX0CLLbrWCF4YNhYTqpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjA1MDMwMjQ2MjlaFw0yNzA1MDIwMjUxMjlaMDMxMTAvBgNV BAMTKDk5MDA1Q0VBMzUxMEQwQUUwODVGN0QxQkIyQjk3MUU0QUIyODY5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKSdZ37Q4fhdR/Sx98F4s7M/2 N7a8xXA7/PanqUujl9tnt55k+oOEdduOw6gLm9ctWnFD4WHKrJHwUyrdYeeI0hTU 9DE3GOPkFVg63o4cu49iY2qbXhyTgWvGO/hVRRU+QvrEZaWUlLB+7/PjXMrsGAzO m4HSADEe+IZb0AgFRNS9/B7WRwjc1LzD5r/f3CJyVu4CsVZqiJN59SiGMt+/4XEa bcudL8zRqYgsCQBBDj3qhVXsj5lxHc4a3CFujOQUnvI7CaD5s6BT1SZXh6sKKby9 vHAMLc+sSimtK9gccnaK7W/JON5r6N5MV3A8nnfrqLKXZuv4imGVBxOW4SxJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUmQBc6jUQ0K4IX30bsrlx5KsoaUgwHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkwMzZlMDdjLTgyODMtNDNkMy05 MTY0LTNlMGU2Y2FjZjQ5OS8wLzMxMzAzMzJlMzEzNTM4MmUzMjMzMzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzODM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnuowDQYJ KoZIhvcNAQELBQADggEBAA+7iGtGV/k/8Q4xjhYWuvLRSA8KAlbBxgJ+UkGqbBLz DFmntiqzxKW0ckUn/pLEvmrIYPuO3h+lY129s+oANjeCsBLXZTQQvianwXhn/LFd OIjp6FrNjxoxaYV6nvl/xtlLUKyWp3eIJr4dHPE4mlAVxbFKqBcYfHPiG4tYu4Ao JhMNBYd4OtJ92I2mmG4gMCV88V5l8cITkEtpuP/n79lyZEWx+VWLMkwGkL11e8e7 xH1dh+OYZYkRo8pw8Nd3xzn/5X/gwDzWFh+QAcswikooknOIwJtFccfSuocGs/lz kHovqj7U2n/iHy5/H/TD5tPYPoSEHaxqROxWK7ZkjaQ= -----END CERTIFICATE-----Generated at Wed May 13 04:09:45 2026 by rpki-client