$ rpki-client -vvf rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa File: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (raw, json) Hash identifier: tUZ9VWyUlsFczruGbwl8Yg390oqsEtKgB6XaTjzW6Po= Subject key identifier: 95:0B:D9:69:4B:8A:4F:0B:90:84:69:46:49:64:3A:96:CE:D8:A7:D3 Certificate issuer: /CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Certificate serial: 64B6F83522E9FFE21C13923F9F9F5630D4264374 Authority key identifier: 99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa Signing time: Sun 03 May 2026 03:03:00 +0000 ROA not before: Sun 03 May 2026 02:58:00 +0000 ROA not after: Sun 02 May 2027 03:03:00 +0000 asID: 149948 IP address blocks: 103.190.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b6:f8:35:22:e9:ff:e2:1c:13:92:3f:9f:9f:56:30:d4:26:43:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Validity Not Before: May 3 02:58:00 2026 GMT Not After : May 2 03:03:00 2027 GMT Subject: CN=950BD9694B8A4F0B9084694649643A96CED8A7D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7a:d4:95:cd:c9:0d:86:b7:0e:2d:f9:90:1c: 0d:12:97:c4:0f:49:fd:ba:07:f9:13:28:d8:fb:06: a5:3d:26:a3:61:1b:f8:c9:eb:b7:40:00:be:6e:e2: 39:70:e6:d2:40:da:82:70:37:79:7f:7f:0f:a6:22: 0c:37:ff:7e:11:60:0f:8a:95:e5:39:aa:aa:05:e2: ac:f9:b1:d3:21:38:59:e2:7b:51:6b:9e:84:fb:0c: 4e:10:a1:bc:e2:f2:b8:41:6b:c3:c8:c3:6f:31:da: ce:93:01:db:97:a5:c3:68:7b:2a:45:b2:7f:25:39: 11:a6:61:4c:dd:d9:91:e6:b1:e2:2e:d1:62:d2:d5: 6d:6f:67:bc:b3:75:97:43:48:2d:b6:a5:d5:fe:fb: 8e:cd:6a:de:5d:b5:4f:dc:42:b1:5f:bd:2c:50:bd: fb:94:dc:d1:bb:12:84:b5:a2:f1:8b:47:bb:73:f5: 91:1e:01:c6:1c:17:33:e3:8d:c2:8c:8b:fc:48:11: 25:db:0a:22:ec:1e:5d:d4:95:1f:8b:15:7f:e6:32: 68:cf:18:2a:ea:fe:e9:44:6d:8e:cb:65:d1:a6:05: 41:20:48:84:51:15:04:12:32:f2:a0:5c:72:58:f9: 1e:94:34:4a:d8:e4:50:0f:29:69:c5:b2:0a:3b:f0: 4e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0B:D9:69:4B:8A:4F:0B:90:84:69:46:49:64:3A:96:CE:D8:A7:D3 X509v3 Authority Key Identifier: keyid:99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.28.0/24 Signature Algorithm: sha256WithRSAEncryption 63:11:07:2f:d6:9d:4c:2d:b6:03:90:6f:78:db:5a:d5:2c:2d: f3:fd:b4:31:15:35:1f:8b:bb:4a:92:11:4f:9d:06:c1:cc:9e: 37:6d:3c:26:35:f5:43:bc:e1:70:04:d5:31:5a:3d:4e:d5:e3: fa:82:c3:a5:26:0d:ea:89:7e:01:28:a1:6a:da:6e:fb:3c:b0: ad:d4:1a:4e:2e:42:c0:be:a0:7e:c0:3a:7a:57:b7:34:4b:2e: b9:43:3d:28:61:c1:0c:a4:9d:f2:be:f7:88:e8:63:e3:f9:fe: e1:65:80:c0:86:00:5c:fa:c1:bb:aa:2d:31:f2:b2:bc:5e:bf: 51:33:3c:70:ef:00:a6:30:46:79:8e:b0:e4:99:85:15:ea:19: 93:15:a5:d7:39:c6:af:8f:a9:99:4c:bd:c3:ad:bf:71:89:22: 7d:47:71:7d:9c:0d:0b:a4:5d:b0:41:9d:43:a6:11:a2:d5:5e: ae:86:02:39:15:d3:c7:c2:f8:51:26:13:d5:15:f1:2e:57:8e: c0:21:f2:67:2b:62:4b:e5:3a:18:15:6e:41:00:16:67:f1:0d: 83:82:52:5e:d5:2e:25:aa:59:95:a7:7c:58:b5:d4:70:f9:9f: b2:5c:96:4e:1a:e6:8e:d9:f1:6f:39:ff:1c:2d:97:48:9b:48: e4:7a:06:2b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZLb4NSLp/+IcE5I/n59WMNQmQ3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2 MjdBRTExNDAeFw0yNjA1MDMwMjU4MDBaFw0yNzA1MDIwMzAzMDBaMDMxMTAvBgNV BAMTKDk1MEJEOTY5NEI4QTRGMEI5MDg0Njk0NjQ5NjQzQTk2Q0VEOEE3RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1etSVzckNhrcOLfmQHA0Sl8QP Sf26B/kTKNj7BqU9JqNhG/jJ67dAAL5u4jlw5tJA2oJwN3l/fw+mIgw3/34RYA+K leU5qqoF4qz5sdMhOFnie1FrnoT7DE4Qobzi8rhBa8PIw28x2s6TAduXpcNoeypF sn8lORGmYUzd2ZHmseIu0WLS1W1vZ7yzdZdDSC22pdX++47Nat5dtU/cQrFfvSxQ vfuU3NG7EoS1ovGLR7tz9ZEeAcYcFzPjjcKMi/xIESXbCiLsHl3UlR+LFX/mMmjP GCrq/ulEbY7LZdGmBUEgSIRRFQQSMvKgXHJY+R6UNErY5FAPKWnFsgo78E4rAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUlQvZaUuKTwuQhGlGSWQ6ls7Yp9MwHwYDVR0j BBgwFoAUmcFY2NudEoZFa97++7OeUmJ64RQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVlMTQzODItZDU4Ny00ZTg2LThlN2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhE QjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2MjdBRTExNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUMxNThEOERCOUQxMjg2NDU2QkRFRkVGQkIzOUU1MjYyN0FF MTE0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JlZTE0MzgyLWQ1ODctNGU4Ni04 ZTdlLTZhMjY0YTU4ZWEwNi8wLzMxMzAzMzJlMzEzOTMwMmUzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ74cMA0GCSqG SIb3DQEBCwUAA4IBAQBjEQcv1p1MLbYDkG9421rVLC3z/bQxFTUfi7tKkhFPnQbB zJ43bTwmNfVDvOFwBNUxWj1O1eP6gsOlJg3qiX4BKKFq2m77PLCt1BpOLkLAvqB+ wDp6V7c0Sy65Qz0oYcEMpJ3yvveI6GPj+f7hZYDAhgBc+sG7qi0x8rK8Xr9RMzxw 7wCmMEZ5jrDkmYUV6hmTFaXXOcavj6mZTL3Drb9xiSJ9R3F9nA0LpF2wQZ1DphGi 1V6uhgI5FdPHwvhRJhPVFfEuV47AIfJnK2JL5ToYFW5BABZn8Q2DglJe1S4lqlmV p3xYtdRw+Z+yXJZOGuaO2fFvOf8cLZdIm0jkegYr -----END CERTIFICATE-----Generated at Wed May 13 02:50:58 2026 by rpki-client