$ rpki-client -vvf rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa File: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (raw, json) Hash identifier: 1WfqYJr02F29QOUCZ6xp1/2AhdQJ8yOTJYEJy36lRu4= Subject key identifier: 67:D5:85:20:E7:14:71:EF:3A:C5:91:01:3A:0D:F7:D0:5F:A3:05:3D Certificate issuer: /CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Certificate serial: 3E7F9FB4398613F595C9AA13CFD76D2409E5403E Authority key identifier: 99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa Signing time: Sun 03 May 2026 03:03:00 +0000 ROA not before: Sun 03 May 2026 02:58:00 +0000 ROA not after: Sun 02 May 2027 03:03:00 +0000 asID: 149948 IP address blocks: 103.190.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7f:9f:b4:39:86:13:f5:95:c9:aa:13:cf:d7:6d:24:09:e5:40:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Validity Not Before: May 3 02:58:00 2026 GMT Not After : May 2 03:03:00 2027 GMT Subject: CN=67D58520E71471EF3AC591013A0DF7D05FA3053D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:51:4b:84:b1:d0:59:6b:9f:8f:c3:ef:a2:ea: 8f:f7:76:ea:86:8e:8c:08:bb:86:81:b5:7d:d9:8d: 72:eb:2c:22:8c:6c:00:bd:9c:b4:6a:17:a5:d2:ef: bb:82:c3:f1:09:2a:0c:6d:bc:bf:6c:2e:ca:14:66: 26:6e:c9:97:c9:87:4c:ec:c3:ad:3f:22:db:23:0d: c1:f3:76:64:1d:b1:bf:06:56:f3:2c:b8:75:94:f0: 75:72:99:49:23:a8:df:46:a6:c6:8a:c8:16:fb:6f: 46:e6:65:a9:3a:24:ae:a2:d5:aa:a5:c3:cd:fb:db: 2a:07:0b:16:e9:e8:96:52:8c:a9:95:00:0c:19:93: 7e:83:9a:d5:01:16:92:2c:ed:0c:be:53:95:eb:d8: 4a:02:e1:d8:04:27:c6:89:28:a0:13:99:27:07:12: 5d:d8:a3:2a:42:cf:25:41:79:10:80:45:21:eb:80: 71:e1:dd:5d:19:57:b0:86:15:49:42:6b:56:7b:87: 9b:8a:5c:ca:9a:5e:3b:03:9b:43:74:d5:28:c6:37: 72:28:36:90:be:38:88:b1:ab:7c:06:cd:94:f3:ba: a1:8b:1b:cd:a5:62:12:82:bb:44:fc:7a:d9:08:9f: de:b0:dd:79:27:43:ef:be:9f:3f:b5:7c:fb:29:87: 58:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D5:85:20:E7:14:71:EF:3A:C5:91:01:3A:0D:F7:D0:5F:A3:05:3D X509v3 Authority Key Identifier: keyid:99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.29.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:37:36:c8:fd:a6:16:2a:30:a9:1c:60:60:06:2f:d8:3a:21: 11:f3:76:b8:76:50:5f:4b:3b:c8:a1:37:5c:de:64:cd:f2:91: b2:de:c5:4d:4d:16:a3:b6:c8:1f:a7:25:cd:ec:aa:e6:b7:9d: 3a:5e:26:86:ad:f0:ac:37:1f:42:06:e1:b1:b6:1e:19:82:4f: 65:ac:2a:33:9a:b8:92:82:a2:70:3c:76:0e:7e:ed:9c:29:82: b8:5f:bf:63:78:29:fa:8d:e0:a3:71:aa:17:d4:c4:2f:30:4b: fa:24:d8:c2:92:3e:0c:b4:e3:cf:5b:da:a2:2b:06:8d:8d:8c: 21:91:f7:8e:a0:2e:c9:c9:0b:48:b5:21:0b:62:d1:e4:5b:2c: b2:d0:bb:92:6a:2b:09:74:2b:1a:4b:5e:4e:67:09:d0:e6:e3: 2d:7e:0b:89:0e:bc:7b:30:e7:3e:98:bb:09:c8:f6:05:4a:df: f6:ef:c9:34:fd:e3:21:1f:19:5c:7b:77:93:c9:77:c4:44:63: 3b:e6:22:04:01:b2:3a:a5:64:5c:16:91:b6:00:b3:74:3e:49: 6a:b4:2c:12:4e:55:d4:3a:7f:7b:23:2e:0a:05:dd:96:a3:0c: b7:bf:b7:11:d8:57:69:53:6d:7b:f8:17:40:a3:db:1b:5b:ef: 34:d3:02:55 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPn+ftDmGE/WVyaoTz9dtJAnlQD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2 MjdBRTExNDAeFw0yNjA1MDMwMjU4MDBaFw0yNzA1MDIwMzAzMDBaMDMxMTAvBgNV BAMTKDY3RDU4NTIwRTcxNDcxRUYzQUM1OTEwMTNBMERGN0QwNUZBMzA1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHUUuEsdBZa5+Pw++i6o/3duqG jowIu4aBtX3ZjXLrLCKMbAC9nLRqF6XS77uCw/EJKgxtvL9sLsoUZiZuyZfJh0zs w60/ItsjDcHzdmQdsb8GVvMsuHWU8HVymUkjqN9GpsaKyBb7b0bmZak6JK6i1aql w8372yoHCxbp6JZSjKmVAAwZk36DmtUBFpIs7Qy+U5Xr2EoC4dgEJ8aJKKATmScH El3YoypCzyVBeRCARSHrgHHh3V0ZV7CGFUlCa1Z7h5uKXMqaXjsDm0N01SjGN3Io NpC+OIixq3wGzZTzuqGLG82lYhKCu0T8etkIn96w3XknQ+++nz+1fPsph1gbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZ9WFIOcUce86xZEBOg330F+jBT0wHwYDVR0j BBgwFoAUmcFY2NudEoZFa97++7OeUmJ64RQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVlMTQzODItZDU4Ny00ZTg2LThlN2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhE QjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2MjdBRTExNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUMxNThEOERCOUQxMjg2NDU2QkRFRkVGQkIzOUU1MjYyN0FF MTE0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JlZTE0MzgyLWQ1ODctNGU4Ni04 ZTdlLTZhMjY0YTU4ZWEwNi8wLzMxMzAzMzJlMzEzOTMwMmUzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ74dMA0GCSqG SIb3DQEBCwUAA4IBAQB9NzbI/aYWKjCpHGBgBi/YOiER83a4dlBfSzvIoTdc3mTN 8pGy3sVNTRajtsgfpyXN7Krmt506XiaGrfCsNx9CBuGxth4Zgk9lrCozmriSgqJw PHYOfu2cKYK4X79jeCn6jeCjcaoX1MQvMEv6JNjCkj4MtOPPW9qiKwaNjYwhkfeO oC7JyQtItSELYtHkWyyy0LuSaisJdCsaS15OZwnQ5uMtfguJDrx7MOc+mLsJyPYF St/278k0/eMhHxlce3eTyXfERGM75iIEAbI6pWRcFpG2ALN0PklqtCwSTlXUOn97 Iy4KBd2Wowy3v7cR2FdpU217+BdAo9sbW+800wJV -----END CERTIFICATE-----Generated at Wed May 13 02:50:47 2026 by rpki-client