$ rpki-client -vvf rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa File: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (raw, json) Hash identifier: eG51QjU9Y0bXD38UtepL5wxZWUtA5GvOYkJVu27CnrU= Subject key identifier: 04:3C:3A:22:7D:91:1F:2D:61:8C:2D:6A:4C:2A:13:73:1D:D1:33:12 Certificate issuer: /CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Certificate serial: 55D20977804C682932C2235262B8746C3115B20D Authority key identifier: 03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa Signing time: Sun 03 May 2026 02:51:38 +0000 ROA not before: Sun 03 May 2026 02:46:38 +0000 ROA not after: Sun 02 May 2027 02:51:38 +0000 asID: 138102 IP address blocks: 103.125.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d2:09:77:80:4c:68:29:32:c2:23:52:62:b8:74:6c:31:15:b2:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Validity Not Before: May 3 02:46:38 2026 GMT Not After : May 2 02:51:38 2027 GMT Subject: CN=043C3A227D911F2D618C2D6A4C2A13731DD13312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:b9:3d:25:b6:62:c5:49:01:b9:bb:c1:1a: 62:d4:27:bf:30:49:af:3f:80:d1:1f:ad:df:52:ee: c1:fa:d0:cf:d5:7b:87:7d:15:be:50:51:0d:90:80: 74:85:7b:2b:d8:97:ff:9f:90:03:4e:d2:2b:24:e2: 83:93:f5:1b:62:1e:9f:ea:e7:22:83:80:87:21:91: 63:50:53:77:5d:01:7a:c9:95:73:be:40:c1:c1:74: a0:26:e1:a8:79:dc:54:be:df:a8:1e:48:39:82:ee: 7b:5b:e9:a2:eb:de:f5:9d:d4:8d:c4:39:19:06:ce: 96:06:7c:d6:c1:8e:7a:6a:20:4f:7f:13:a1:d7:af: db:62:10:c9:5e:ba:33:d3:b1:a7:6d:34:73:62:80: 33:0d:3f:a6:08:d6:7c:3c:69:10:da:af:32:9b:36: c2:47:fd:bb:6d:7d:fb:42:bb:e8:7b:da:9e:3f:ea: 0c:71:9e:48:46:e5:89:3f:cb:41:fb:69:38:97:ac: 97:97:7a:91:23:9a:45:0b:d7:f6:d9:fd:3f:a5:ca: 3a:18:fe:bb:5e:a2:8b:04:11:41:0d:02:f1:d7:9e: ac:fb:b1:e6:ce:7d:4a:b2:52:e9:00:63:8d:65:69: af:32:02:c0:49:60:2e:0c:3f:15:b2:d3:82:0a:c0: 8c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3C:3A:22:7D:91:1F:2D:61:8C:2D:6A:4C:2A:13:73:1D:D1:33:12 X509v3 Authority Key Identifier: keyid:03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.119.0/24 Signature Algorithm: sha256WithRSAEncryption af:5f:a7:82:3b:05:10:c5:50:3b:a8:5a:77:46:c1:8f:f0:1b: bb:18:89:b8:60:25:be:d3:82:ca:16:36:d8:57:73:31:8a:bf: 39:45:05:a5:75:b6:1b:cb:d2:2f:35:30:c6:32:c8:3a:e4:18: 89:9a:a3:f8:60:d3:bb:9d:62:10:d3:25:22:29:6b:8b:13:31: 7a:42:9e:74:48:e4:09:0d:a3:d5:8e:75:54:42:20:b3:9c:07: f9:0a:5e:31:68:36:10:85:0e:66:f8:23:b8:67:20:51:f5:52: 05:fd:fa:97:45:d6:a4:88:02:2d:59:26:2a:62:17:c1:52:b2: 0c:60:22:49:29:55:b3:f4:bf:8a:2e:f9:7b:d0:93:1b:7b:e4: 49:73:cf:6c:8b:fc:e2:d9:74:ee:76:03:dc:f6:e2:ee:78:81: cd:5d:d3:a0:0b:65:ad:95:13:25:08:f9:a9:9d:c9:42:f8:b2: 28:ff:bf:cf:62:fc:ec:5a:53:02:92:66:dc:43:9f:7c:62:5d: 9f:d5:fc:a6:71:18:8d:95:f7:73:9a:dc:12:d1:cb:d0:ce:d1: 26:95:e8:24:32:88:a6:dc:b4:f6:43:f7:b3:10:f3:6a:f1:80: 10:bc:21:41:39:ba:89:e8:d9:b9:41:68:4e:13:cc:a7:d3:11: d7:32:df:6d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUVdIJd4BMaCkywiNSYrh0bDEVsg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgz QUQ1REVFODAeFw0yNjA1MDMwMjQ2MzhaFw0yNzA1MDIwMjUxMzhaMDMxMTAvBgNV BAMTKDA0M0MzQTIyN0Q5MTFGMkQ2MThDMkQ2QTRDMkExMzczMUREMTMzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3LLk9JbZixUkBubvBGmLUJ78w Sa8/gNEfrd9S7sH60M/Ve4d9Fb5QUQ2QgHSFeyvYl/+fkANO0isk4oOT9RtiHp/q 5yKDgIchkWNQU3ddAXrJlXO+QMHBdKAm4ah53FS+36geSDmC7ntb6aLr3vWd1I3E ORkGzpYGfNbBjnpqIE9/E6HXr9tiEMleujPTsadtNHNigDMNP6YI1nw8aRDarzKb NsJH/bttfftCu+h72p4/6gxxnkhG5Yk/y0H7aTiXrJeXepEjmkUL1/bZ/T+lyjoY /rteoosEEUENAvHXnqz7sebOfUqyUukAY41laa8yAsBJYC4MPxWy04IKwIxlAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUBDw6In2RHy1hjC1qTCoTcx3RMxIwHwYDVR0j BBgwFoAUA1YxLUzGWRSIOW0kymAQWDrV3ugwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTBkZTIzMWYtZmI4YS00MjdhLWFhMzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0 Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgzQUQ1REVFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzU2MzEyRDRDQzY1OTE0ODgzOTZEMjRDQTYwMTA1ODNBRDVE RUU4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkwZGUyMzFmLWZiOGEtNDI3YS1h YTM2LTBhM2ZjOTcyMzI4ZC8wLzMxMzAzMzJlMzEzMjM1MmUzMTMxMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMwMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfXcwDQYJ KoZIhvcNAQELBQADggEBAK9fp4I7BRDFUDuoWndGwY/wG7sYibhgJb7TgsoWNthX czGKvzlFBaV1thvL0i81MMYyyDrkGImao/hg07udYhDTJSIpa4sTMXpCnnRI5AkN o9WOdVRCILOcB/kKXjFoNhCFDmb4I7hnIFH1UgX9+pdF1qSIAi1ZJipiF8FSsgxg IkkpVbP0v4ou+XvQkxt75Elzz2yL/OLZdO52A9z24u54gc1d06ALZa2VEyUI+amd yUL4sij/v89i/OxaUwKSZtxDn3xiXZ/V/KZxGI2V93Oa3BLRy9DO0SaV6CQyiKbc tPZD97MQ82rxgBC8IUE5uono2blBaE4TzKfTEdcy320= -----END CERTIFICATE-----Generated at Wed May 13 03:56:11 2026 by rpki-client