$ rpki-client -vvf rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa File: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (raw, json) Hash identifier: nlhGLBRQhzgZ/MpT9mzD1/9LbZWhXsE7bI4qUYh5tIM= Subject key identifier: 74:36:00:78:7D:7B:0C:C0:E2:41:17:C5:E7:09:F7:4F:C6:B7:95:88 Certificate issuer: /CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E Certificate serial: 4977A891C7105F9CAA852915D365556B8F22E9F1 Authority key identifier: AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa Signing time: Sun 03 May 2026 03:10:07 +0000 ROA not before: Sun 03 May 2026 03:05:07 +0000 ROA not after: Sun 02 May 2027 03:10:07 +0000 asID: 138086 IP address blocks: 103.90.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:77:a8:91:c7:10:5f:9c:aa:85:29:15:d3:65:55:6b:8f:22:e9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E Validity Not Before: May 3 03:05:07 2026 GMT Not After : May 2 03:10:07 2027 GMT Subject: CN=743600787D7B0CC0E24117C5E709F74FC6B79588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:df:0c:67:06:22:0d:fe:9a:f4:ae:e3:fd:f0: 76:bf:e6:14:a6:24:a9:df:74:9e:71:bd:51:6b:11: 8d:52:11:8b:8b:7f:9e:9d:42:ac:48:a0:74:f3:d6: 5d:2f:26:ca:89:46:6f:1a:f3:a1:e5:07:c0:17:a1: 70:f0:2e:f2:0c:f2:8a:ce:5f:cf:35:55:79:48:d1: 4f:e8:ea:0f:82:a8:04:6a:c0:79:98:d5:0a:f0:23: 80:70:80:83:a2:db:97:eb:c2:21:77:ea:e7:a2:22: 46:4a:cd:4d:4f:f1:c3:a3:ee:8a:7b:9b:85:93:d5: 54:37:d6:ec:ed:96:b9:ea:76:35:2a:f6:ff:2d:b7: 7b:21:ed:97:fe:75:d2:d8:6c:d4:b3:b4:1a:24:ad: a3:c4:06:38:5f:2a:47:a2:dc:7a:75:fc:06:97:6e: a3:f9:81:87:8e:f0:19:29:8d:13:fd:87:ca:68:73: 10:0a:56:c0:86:c2:58:82:17:1a:28:6d:ac:91:31: 25:34:a6:85:0f:a1:cc:40:51:19:0a:f5:8b:e8:95: 11:20:21:2e:16:a7:d2:6f:7e:f3:b5:1a:30:25:8e: 53:9e:4a:13:c8:a3:ba:05:80:69:ce:78:71:28:e5: 59:e6:85:e4:a7:18:57:ee:6f:20:7a:b1:95:a5:31: dc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:36:00:78:7D:7B:0C:C0:E2:41:17:C5:E7:09:F7:4F:C6:B7:95:88 X509v3 Authority Key Identifier: keyid:AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.255.0/24 Signature Algorithm: sha256WithRSAEncryption 63:c3:b7:ad:a7:10:9b:de:e3:77:5e:39:9c:9d:fa:fd:f8:09: 7d:9e:a8:29:9a:4e:98:62:17:a7:8f:33:d0:54:43:0f:80:45: 06:c4:4b:88:5c:8e:7f:59:23:30:2a:4e:03:d2:62:9e:85:4b: dd:b6:ec:dc:6b:63:29:e9:7c:11:c1:09:0a:30:5e:c1:c6:71: eb:f4:02:fd:9c:96:1f:28:63:bd:25:f4:95:53:6d:39:65:0a: af:41:d9:61:4f:0b:6a:5c:a5:d5:22:ac:15:b5:72:06:53:0d: ec:cc:c5:47:55:c9:d9:d1:a0:ab:4f:fa:21:c4:aa:2a:36:fc: f2:62:14:ca:52:0b:13:7f:a7:24:05:c2:4e:42:9c:6c:56:be: 21:8c:44:d3:b1:15:de:a1:3c:e9:d7:e4:09:e7:52:a8:02:fa: c6:2e:ba:b5:81:fd:56:8c:c4:ed:ae:3d:7d:bd:b8:d3:22:1b: 0c:10:91:3c:e4:2e:22:d5:a2:e4:6d:7b:3d:c1:26:bb:9c:bc: 38:27:b3:2d:2a:f6:ed:4d:40:fb:86:7f:f9:09:e6:5d:cb:4e: 5e:d2:b4:3d:39:76:de:d2:c9:34:72:c5:42:5b:da:be:1c:3a: 71:c3:25:3c:71:8e:31:eb:9d:23:63:25:c8:6d:53:55:e3:1b: 5a:7f:91:40 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSXeokccQX5yqhSkV02VVa48i6fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGQUJFMzgwQTY1MDlGMEFFMTlGNUY5RUQ4N0MxRjBB MEE1NkMxRTAeFw0yNjA1MDMwMzA1MDdaFw0yNzA1MDIwMzEwMDdaMDMxMTAvBgNV BAMTKDc0MzYwMDc4N0Q3QjBDQzBFMjQxMTdDNUU3MDlGNzRGQzZCNzk1ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3wxnBiIN/pr0ruP98Ha/5hSm JKnfdJ5xvVFrEY1SEYuLf56dQqxIoHTz1l0vJsqJRm8a86HlB8AXoXDwLvIM8orO X881VXlI0U/o6g+CqARqwHmY1QrwI4BwgIOi25frwiF36ueiIkZKzU1P8cOj7op7 m4WT1VQ31uztlrnqdjUq9v8tt3sh7Zf+ddLYbNSztBokraPEBjhfKkei3Hp1/AaX bqP5gYeO8BkpjRP9h8pocxAKVsCGwliCFxoobayRMSU0poUPocxAURkK9YvolREg IS4Wp9JvfvO1GjAljlOeShPIo7oFgGnOeHEo5VnmheSnGFfubyB6sZWlMdxDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUdDYAeH17DMDiQRfF5wn3T8a3lYgwHwYDVR0j BBgwFoAUrfq+OAplCfCuGfX57YfB8KClbB4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc3NGIxOGMtZjI2My00ZmUxLThkZjgtMWU3YzY4YmZiZWZjLzAvQURGQUJFMzgw QTY1MDlGMEFFMTlGNUY5RUQ4N0MxRjBBMEE1NkMxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREZBQkUzODBBNjUwOUYwQUUxOUY1RjlFRDg3QzFGMEEwQTU2 QzFFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q3NzRiMThjLWYyNjMtNGZlMS04 ZGY4LTFlN2M2OGJmYmVmYy8wLzMxMzAzMzJlMzkzMDJlMzIzNTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1r/MA0GCSqG SIb3DQEBCwUAA4IBAQBjw7etpxCb3uN3Xjmcnfr9+Al9nqgpmk6YYhenjzPQVEMP gEUGxEuIXI5/WSMwKk4D0mKehUvdtuzca2Mp6XwRwQkKMF7BxnHr9AL9nJYfKGO9 JfSVU205ZQqvQdlhTwtqXKXVIqwVtXIGUw3szMVHVcnZ0aCrT/ohxKoqNvzyYhTK UgsTf6ckBcJOQpxsVr4hjETTsRXeoTzp1+QJ51KoAvrGLrq1gf1WjMTtrj19vbjT IhsMEJE85C4i1aLkbXs9wSa7nLw4J7MtKvbtTUD7hn/5CeZdy05e0rQ9OXbe0sk0 csVCW9q+HDpxwyU8cY4x650jYyXIbVNV4xtaf5FA -----END CERTIFICATE-----Generated at Wed May 13 07:36:01 2026 by rpki-client