$ rpki-client -vvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa File: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (raw, json) Hash identifier: mQrrkGIS8HoF4AiDSmw6SD2SG/T7/MXDAFnexE70y7o= Subject key identifier: FF:57:CF:5C:2C:F2:65:89:BE:0B:81:F2:CD:F7:92:10:47:B2:F3:50 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 2A6B5C1BB952CCF3E9672C2E482AD2DA4B5C65F0 Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa Signing time: Sun 03 May 2026 02:51:29 +0000 ROA not before: Sun 03 May 2026 02:46:29 +0000 ROA not after: Sun 02 May 2027 02:51:29 +0000 asID: 141132 IP address blocks: 103.158.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6b:5c:1b:b9:52:cc:f3:e9:67:2c:2e:48:2a:d2:da:4b:5c:65:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: May 3 02:46:29 2026 GMT Not After : May 2 02:51:29 2027 GMT Subject: CN=FF57CF5C2CF26589BE0B81F2CDF7921047B2F350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d7:0a:f7:da:76:7d:82:92:46:e4:74:f1:bc: c7:35:d8:2d:e7:07:8d:73:d0:8b:bf:26:a4:c2:d1: 32:0d:db:db:da:71:bd:08:60:70:33:3e:af:46:af: 19:ca:7c:5c:4e:b2:00:2f:5d:c4:8b:e5:f3:3b:2a: 80:be:f7:76:af:f6:a6:54:e8:d9:19:c3:23:e4:4e: 84:8c:28:0c:cb:5d:46:f7:8a:79:e9:e6:91:cf:05: 58:0e:c9:2a:e2:ab:cf:c9:0d:c9:83:96:f9:bf:c8: ec:9a:b5:93:1e:df:ac:b4:fb:98:30:ff:c9:bf:97: 29:42:eb:4b:30:ea:cf:3e:4d:37:f4:2b:25:f1:e6: 77:c3:f0:71:1c:67:ee:a9:b9:8c:d4:68:13:3d:5f: 0b:0c:c4:65:4e:5e:aa:54:c4:5f:67:2e:eb:96:bc: 81:08:85:5d:8f:8d:2a:17:ba:ab:60:03:eb:69:97: e1:7f:94:2f:94:f8:c8:cf:c3:fd:6a:70:ed:2b:20: 63:65:ec:33:fa:16:cd:c7:64:ea:eb:13:30:62:e4: e8:90:dc:bb:62:5b:d0:ed:1b:24:4f:b1:b0:86:86: 3c:63:25:4a:62:3e:19:4f:07:86:80:31:bc:fc:83: 59:69:ee:51:83:ed:c7:eb:d1:f8:fc:71:9c:5d:4b: 84:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:57:CF:5C:2C:F2:65:89:BE:0B:81:F2:CD:F7:92:10:47:B2:F3:50 X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.234.0/24 Signature Algorithm: sha256WithRSAEncryption 25:d3:83:3d:f1:11:fc:51:56:3e:4e:4f:98:2f:5a:6b:93:4a: 35:8e:07:b0:82:dd:75:0c:6a:34:58:f3:21:77:95:a6:a7:82: 6c:5d:41:64:1b:e3:74:27:91:d1:6e:0a:76:a9:d8:5b:6d:f1: cf:8b:90:3e:fa:a8:7c:da:4c:1f:d3:48:bb:1c:f7:af:be:74: 31:29:d9:1e:1e:26:34:04:a2:5c:dc:55:ef:8f:3e:47:10:82: 4b:94:96:0d:fb:0f:70:9a:44:b8:c1:83:72:a3:2c:81:34:a5: 59:a1:45:b1:fd:e6:13:0e:aa:c8:9f:6b:ae:dd:4e:cd:1f:79: d3:0b:34:9d:13:6c:e8:c2:50:92:25:0f:a9:ca:ff:8c:0a:92: e5:56:d9:79:b0:f3:1e:60:74:a4:47:3e:19:00:e3:21:3e:22: 99:bf:c6:22:4f:9c:73:2c:e0:36:97:c6:64:88:bd:f1:27:47: 0e:5c:d5:c9:67:77:11:08:92:a0:ce:dd:50:d5:67:29:8e:96: 26:66:6a:c5:69:9d:74:2c:21:50:e1:67:28:ba:58:09:fe:b9: ca:3a:27:c3:47:df:cd:e1:1e:47:a0:31:8b:b3:59:af:da:8d: f1:9b:f1:a4:bb:e7:df:26:54:1c:87:01:08:49:c9:a9:53:8b: d3:65:9d:af -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKmtcG7lSzPPpZywuSCrS2ktcZfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjA1MDMwMjQ2MjlaFw0yNzA1MDIwMjUxMjlaMDMxMTAvBgNV BAMTKEZGNTdDRjVDMkNGMjY1ODlCRTBCODFGMkNERjc5MjEwNDdCMkYzNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR1wr32nZ9gpJG5HTxvMc12C3n B41z0Iu/JqTC0TIN29vacb0IYHAzPq9GrxnKfFxOsgAvXcSL5fM7KoC+93av9qZU 6NkZwyPkToSMKAzLXUb3innp5pHPBVgOySriq8/JDcmDlvm/yOyatZMe36y0+5gw /8m/lylC60sw6s8+TTf0KyXx5nfD8HEcZ+6puYzUaBM9XwsMxGVOXqpUxF9nLuuW vIEIhV2PjSoXuqtgA+tpl+F/lC+U+MjPw/1qcO0rIGNl7DP6Fs3HZOrrEzBi5OiQ 3LtiW9DtGyRPsbCGhjxjJUpiPhlPB4aAMbz8g1lp7lGD7cfr0fj8cZxdS4RrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU/1fPXCzyZYm+C4HyzfeSEEey81AwHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkwMzZlMDdjLTgyODMtNDNkMy05 MTY0LTNlMGU2Y2FjZjQ5OS8wLzMxMzAzMzJlMzEzNTM4MmUzMjMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMzMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnuowDQYJ KoZIhvcNAQELBQADggEBACXTgz3xEfxRVj5OT5gvWmuTSjWOB7CC3XUMajRY8yF3 laangmxdQWQb43QnkdFuCnap2Ftt8c+LkD76qHzaTB/TSLsc96++dDEp2R4eJjQE olzcVe+PPkcQgkuUlg37D3CaRLjBg3KjLIE0pVmhRbH95hMOqsifa67dTs0fedML NJ0TbOjCUJIlD6nK/4wKkuVW2Xmw8x5gdKRHPhkA4yE+Ipm/xiJPnHMs4DaXxmSI vfEnRw5c1clndxEIkqDO3VDVZymOliZmasVpnXQsIVDhZyi6WAn+uco6J8NH383h HkegMYuzWa/ajfGb8aS7598mVByHAQhJyalTi9Nlna8= -----END CERTIFICATE-----Generated at Wed May 13 05:43:40 2026 by rpki-client