$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa File: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (raw, json) Hash identifier: u3QjwTKhA3xZ6qBaPve22SqHeKd1Tl3v9fzrQkdIYDM= Subject key identifier: 1F:A9:AB:EF:FE:C6:89:43:D1:65:B0:2A:51:28:CA:8B:CC:AD:E2:CC Certificate issuer: /CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Certificate serial: 0D569DEB4746F7C0C9E04485321F925A2E9E310E Authority key identifier: 3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa Signing time: Sun 03 May 2026 03:02:42 +0000 ROA not before: Sun 03 May 2026 02:57:42 +0000 ROA not after: Sun 02 May 2027 03:02:42 +0000 asID: 136119 IP address blocks: 103.94.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:56:9d:eb:47:46:f7:c0:c9:e0:44:85:32:1f:92:5a:2e:9e:31:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Validity Not Before: May 3 02:57:42 2026 GMT Not After : May 2 03:02:42 2027 GMT Subject: CN=1FA9ABEFFEC68943D165B02A5128CA8BCCADE2CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:be:b5:3b:5d:54:24:5c:4b:1d:8d:9b:9c: 48:3f:00:cc:ea:ba:cd:9e:69:4a:f5:40:22:54:5f: fc:f8:ea:b1:08:9e:c8:e8:2f:b2:ff:7c:82:b9:3f: c2:4b:66:24:1f:76:ca:26:e5:d1:ab:2c:3d:a0:d7: b8:42:f9:f3:c2:79:38:21:9f:37:a7:5a:ec:84:e1: 0c:dc:40:94:e3:ff:4f:d4:fa:6c:d0:13:7e:8a:0c: a0:fc:41:8b:f0:67:f8:14:dc:48:06:17:5b:f6:04: 20:21:87:09:6a:66:96:b4:1c:b4:aa:76:6d:46:d9: 8d:9f:4a:d1:bd:7a:69:46:7d:24:8e:48:8e:a7:63: 92:f7:f5:30:d7:9f:55:86:86:d3:95:e9:1d:63:7c: 3e:2b:3d:43:95:50:46:6d:3c:44:c2:59:6f:c5:cf: dc:ef:27:36:16:de:c6:76:c5:06:e2:0b:b5:96:f4: 09:b5:6c:2c:38:36:b8:dc:1b:36:49:fc:a1:44:1e: d1:b1:38:1b:a8:b4:4a:03:80:7f:8c:a3:78:62:3b: e6:6f:be:57:fc:71:1f:0f:75:ae:3b:69:6a:53:98: 85:c5:54:41:f2:11:35:36:ce:03:aa:28:5c:68:bd: e7:20:7f:2a:d9:e8:10:1c:dc:db:6f:ff:2e:e4:fd: 8b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A9:AB:EF:FE:C6:89:43:D1:65:B0:2A:51:28:CA:8B:CC:AD:E2:CC X509v3 Authority Key Identifier: keyid:3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.94.168.0/22 Signature Algorithm: sha256WithRSAEncryption 04:e5:5b:89:47:3f:4d:b5:09:87:ba:3e:76:62:7f:1d:6b:a6: de:ef:13:81:9c:5b:af:d7:2f:15:35:8a:f4:62:05:cd:7f:74: 45:b0:90:fc:a9:55:f1:a8:f0:f4:04:4d:7a:15:5e:98:f0:9f: 55:e8:5d:4b:d8:4b:36:b0:7f:2d:6c:06:ac:3d:7e:bd:d4:a2: 23:8a:32:e1:83:c0:e4:9c:64:ca:0d:7c:9d:56:78:cb:76:ce: 21:84:02:39:a8:3c:1b:24:b3:89:cd:48:2c:dd:de:cb:28:86: 03:c0:47:25:22:01:cb:f7:3f:04:fb:de:74:4f:0e:59:16:5a: fd:fd:a7:06:02:e8:b4:fa:50:88:b1:86:77:8a:16:06:63:68: 79:8f:83:ff:fd:92:57:a8:e9:27:bf:4b:60:a6:5d:cd:e5:77: 18:8b:c4:fd:19:09:99:a2:3c:04:f5:c5:03:8a:00:2b:05:22: f9:9e:53:0b:8a:32:0d:76:ad:09:29:46:02:d2:c9:36:6c:f1: ca:9a:a0:ef:3b:41:32:6e:bd:a0:4e:2a:d3:6e:d6:d5:12:a6: 7e:91:14:65:31:79:bb:82:33:87:fb:28:e8:68:cb:c4:40:13: 94:ef:b4:43:33:4f:b1:c7:6a:71:b1:a6:16:81:0d:39:81:c8: 06:d3:4c:82 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDVad60dG98DJ4ESFMh+SWi6eMQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdF M0U4OEZBQzAeFw0yNjA1MDMwMjU3NDJaFw0yNzA1MDIwMzAyNDJaMDMxMTAvBgNV BAMTKDFGQTlBQkVGRkVDNjg5NDNEMTY1QjAyQTUxMjhDQThCQ0NBREUyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8B761O11UJFxLHY2bnEg/AMzq us2eaUr1QCJUX/z46rEInsjoL7L/fIK5P8JLZiQfdsom5dGrLD2g17hC+fPCeTgh nzenWuyE4QzcQJTj/0/U+mzQE36KDKD8QYvwZ/gU3EgGF1v2BCAhhwlqZpa0HLSq dm1G2Y2fStG9emlGfSSOSI6nY5L39TDXn1WGhtOV6R1jfD4rPUOVUEZtPETCWW/F z9zvJzYW3sZ2xQbiC7WW9Am1bCw4NrjcGzZJ/KFEHtGxOBuotEoDgH+Mo3hiO+Zv vlf8cR8Pda47aWpTmIXFVEHyETU2zgOqKFxovecgfyrZ6BAc3Ntv/y7k/YvTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUH6mr7/7GiUPRZbAqUSjKi8yt4swwHwYDVR0j BBgwFoAUP8/wkMeSATBAvhBnaIwst+Poj6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRhYmMwYmEtOTIyMi00YzQ1LTgzNDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBD NzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdFM0U4OEZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNGRjA5MEM3OTIwMTMwNDBCRTEwNjc2ODhDMkNCN0UzRTg4 RkFDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JkYWJjMGJhLTkyMjItNGM0NS04 MzQyLWViODY0M2M0OTY3ZC8wLzMxMzAzMzJlMzkzNDJlMzEzNjM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ16oMA0GCSqG SIb3DQEBCwUAA4IBAQAE5VuJRz9NtQmHuj52Yn8da6be7xOBnFuv1y8VNYr0YgXN f3RFsJD8qVXxqPD0BE16FV6Y8J9V6F1L2Es2sH8tbAasPX691KIjijLhg8DknGTK DXydVnjLds4hhAI5qDwbJLOJzUgs3d7LKIYDwEclIgHL9z8E+950Tw5ZFlr9/acG Aui0+lCIsYZ3ihYGY2h5j4P//ZJXqOknv0tgpl3N5XcYi8T9GQmZojwE9cUDigAr BSL5nlMLijINdq0JKUYC0sk2bPHKmqDvO0Eybr2gTirTbtbVEqZ+kRRlMXm7gjOH +yjoaMvEQBOU77RDM0+xx2pxsaYWgQ05gcgG00yC -----END CERTIFICATE-----Generated at Wed May 13 11:21:24 2026 by rpki-client