$ rpki-client -vvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa File: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (raw, json) Hash identifier: +Yvf7pOmzIGa62dYtF9IiIRwOM/GLeNEJw6+0hLCuFs= Subject key identifier: 17:48:A5:B6:B7:AD:11:9E:1E:FD:6F:67:D1:82:39:E2:A9:A2:EA:78 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 221024BD820CDEDD329CCFA89B34C9862DA03A3D Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa Signing time: Sun 03 May 2026 02:51:28 +0000 ROA not before: Sun 03 May 2026 02:46:28 +0000 ROA not after: Sun 02 May 2027 02:51:28 +0000 asID: 141898 IP address blocks: 103.158.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:10:24:bd:82:0c:de:dd:32:9c:cf:a8:9b:34:c9:86:2d:a0:3a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: May 3 02:46:28 2026 GMT Not After : May 2 02:51:28 2027 GMT Subject: CN=1748A5B6B7AD119E1EFD6F67D18239E2A9A2EA78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:1b:e9:34:23:8e:06:34:e6:4c:9a:a3:33: dc:bd:6a:58:d4:75:f1:e5:8e:1f:c1:fe:06:b3:6a: b0:11:db:8f:81:7f:43:55:2f:94:16:6e:fc:74:0f: 56:1c:03:cd:ee:a3:30:fc:c9:c6:6b:67:8c:4a:0e: ab:21:60:59:fd:e3:92:68:b0:33:e9:39:a9:cf:2a: 36:12:17:a8:e7:be:b1:23:e3:b4:ae:ac:e5:dd:dd: 0f:ba:7d:fc:a6:69:0d:ea:ef:60:bc:dc:8d:af:04: 5d:2e:39:e6:a8:e3:66:bd:95:6a:cc:1b:07:57:57: 7e:8c:c3:9f:f1:2a:7d:05:1c:56:4a:56:01:35:1e: ae:95:66:85:65:93:29:bf:74:bb:0a:e6:d0:13:89: dc:7d:5d:b2:b2:85:bb:3a:76:1e:8b:23:83:2c:15: 6b:a0:33:da:26:cb:39:00:9b:ce:4c:f0:9d:07:56: 38:f0:05:17:31:23:b6:c1:32:f2:20:ae:43:7d:71: 4d:27:1e:6d:ed:61:92:14:67:d9:a7:ed:f1:01:5b: d7:6a:a8:7d:c2:e6:60:00:8e:4c:ad:65:b2:32:50: cb:6f:72:cf:8b:ef:87:92:e7:5e:e4:a5:7d:c7:4e: 5c:c4:da:73:7a:55:ae:f2:e4:52:6b:2a:e8:92:50: 23:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:48:A5:B6:B7:AD:11:9E:1E:FD:6F:67:D1:82:39:E2:A9:A2:EA:78 X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.235.0/24 Signature Algorithm: sha256WithRSAEncryption 74:ce:0c:f3:95:da:7c:ab:da:74:7f:4d:30:0d:f9:76:1c:bb: c2:28:c9:dc:3a:c8:ee:f7:20:ff:3e:11:70:1b:19:66:f2:d0: 1d:f6:30:01:a4:8e:ea:54:84:20:4a:25:65:69:4d:b8:7f:cf: 83:2a:e5:e5:d5:a8:10:2d:25:5a:41:f8:5d:8c:da:7d:2e:01: 9a:c9:de:e9:77:56:4f:2b:8b:0a:ac:1a:3a:ae:0f:d6:db:a3: af:2c:85:5f:87:37:f3:f0:ed:29:3c:f3:cb:43:51:05:78:24: 33:9e:ca:03:9d:9f:18:1b:50:6b:8c:66:80:85:3d:18:ef:54: 12:fa:03:86:b2:c3:48:92:c3:02:b8:3c:2b:f3:68:12:79:c2: c6:86:a9:65:cf:26:12:7c:8b:34:42:d7:47:b4:2d:ed:42:f7: f5:a2:59:f2:fc:95:fe:fd:60:84:f1:f6:98:bf:02:a8:00:91: 6c:c8:3f:e4:2f:1f:58:1b:f5:22:62:07:c2:98:b2:2e:66:10: 2d:73:08:11:fa:f4:2a:ce:5a:03:40:85:15:ff:5b:fb:48:fc: 4a:44:d2:70:20:b3:8f:ba:83:01:47:ed:8e:cd:fe:b9:6c:83: 40:16:be:65:73:78:62:48:cf:2a:78:4c:c0:54:8f:93:c7:ed: 05:a2:a2:19 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIhAkvYIM3t0ynM+omzTJhi2gOj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjA1MDMwMjQ2MjhaFw0yNzA1MDIwMjUxMjhaMDMxMTAvBgNV BAMTKDE3NDhBNUI2QjdBRDExOUUxRUZENkY2N0QxODIzOUUyQTlBMkVBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUVhvpNCOOBjTmTJqjM9y9aljU dfHljh/B/gazarAR24+Bf0NVL5QWbvx0D1YcA83uozD8ycZrZ4xKDqshYFn945Jo sDPpOanPKjYSF6jnvrEj47SurOXd3Q+6ffymaQ3q72C83I2vBF0uOeao42a9lWrM GwdXV36Mw5/xKn0FHFZKVgE1Hq6VZoVlkym/dLsK5tATidx9XbKyhbs6dh6LI4Ms FWugM9omyzkAm85M8J0HVjjwBRcxI7bBMvIgrkN9cU0nHm3tYZIUZ9mn7fEBW9dq qH3C5mAAjkytZbIyUMtvcs+L74eS517kpX3HTlzE2nN6Va7y5FJrKuiSUCPnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUF0iltretEZ4e/W9n0YI54qmi6ngwHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkwMzZlMDdjLTgyODMtNDNkMy05 MTY0LTNlMGU2Y2FjZjQ5OS8wLzMxMzAzMzJlMzEzNTM4MmUzMjMzMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzODM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnuswDQYJ KoZIhvcNAQELBQADggEBAHTODPOV2nyr2nR/TTAN+XYcu8Ioydw6yO73IP8+EXAb GWby0B32MAGkjupUhCBKJWVpTbh/z4Mq5eXVqBAtJVpB+F2M2n0uAZrJ3ul3Vk8r iwqsGjquD9bbo68shV+HN/Pw7Sk888tDUQV4JDOeygOdnxgbUGuMZoCFPRjvVBL6 A4ayw0iSwwK4PCvzaBJ5wsaGqWXPJhJ8izRC10e0Le1C9/WiWfL8lf79YITx9pi/ AqgAkWzIP+QvH1gb9SJiB8KYsi5mEC1zCBH69CrOWgNAhRX/W/tI/EpE0nAgs4+6 gwFH7Y7N/rlsg0AWvmVzeGJIzyp4TMBUj5PH7QWiohk= -----END CERTIFICATE-----Generated at Wed May 13 11:59:46 2026 by rpki-client