$ rpki-client -vvf rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa File: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (raw, json) Hash identifier: bpEJI5kwOdxD/qKqncYynaKSifhTOw7KVCK2hYNC5Sk= Subject key identifier: AA:FC:2A:8C:6F:E2:A7:88:FE:72:6A:BB:FC:6D:92:72:B5:89:F0:DD Certificate issuer: /CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Certificate serial: 21B537F8CDF5C62D5E5F3875AEA51311CE1B7FD7 Authority key identifier: 93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa Signing time: Sun 03 May 2026 03:17:38 +0000 ROA not before: Sun 03 May 2026 03:12:38 +0000 ROA not after: Sun 02 May 2027 03:17:38 +0000 asID: 149914 IP address blocks: 103.191.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b5:37:f8:cd:f5:c6:2d:5e:5f:38:75:ae:a5:13:11:ce:1b:7f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Validity Not Before: May 3 03:12:38 2026 GMT Not After : May 2 03:17:38 2027 GMT Subject: CN=AAFC2A8C6FE2A788FE726ABBFC6D9272B589F0DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:88:5b:37:23:f0:69:e3:19:7e:5a:a3:37: 72:56:09:ec:fb:0d:e3:03:36:6d:8b:a1:6a:01:3b: 9f:32:5b:eb:22:e0:9e:1b:7c:27:f4:27:c6:90:fe: c2:e8:41:db:a4:47:90:8e:74:cf:bc:19:55:c6:6b: 5e:9a:96:84:72:89:76:0f:75:ed:c5:a3:41:42:54: 8d:7c:5e:1d:32:d3:12:f3:12:f8:18:6a:80:c1:04: 8a:8f:28:03:a1:6d:49:41:7b:a1:66:83:88:ae:a4: 80:71:87:8d:78:46:34:c6:f4:ed:ef:53:cd:8a:32: 05:50:da:94:bf:87:ba:85:72:ed:8e:17:0c:43:ee: ce:a8:76:b8:ac:ba:b6:12:00:1c:59:16:42:30:8f: b4:13:c6:f4:7b:18:b2:59:dd:01:e8:41:a4:c1:44: 01:e8:1e:de:ec:5a:8e:9f:38:fd:39:37:b4:3d:16: 3b:91:d3:39:2c:2e:6f:53:ff:d6:17:8a:83:a8:af: 1c:f0:0c:43:95:1b:48:15:6e:4c:10:c1:33:e2:93: a3:84:8b:02:1d:8f:c5:1f:06:c9:15:6a:9f:2e:fe: a6:82:1d:7b:96:a0:04:36:be:b1:38:0d:f0:79:61: e7:69:a5:b8:35:29:32:44:9f:7b:2a:06:8c:e0:7b: b9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FC:2A:8C:6F:E2:A7:88:FE:72:6A:BB:FC:6D:92:72:B5:89:F0:DD X509v3 Authority Key Identifier: keyid:93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.71.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:f9:69:af:79:bc:ff:00:f3:2b:a9:61:14:44:53:64:01:52: 6e:f2:4d:5d:9b:4e:10:60:d2:cb:30:cd:69:08:84:af:0e:27: 8d:10:51:15:82:46:39:79:9a:c2:e2:a6:54:22:1f:ba:a3:81: b0:75:67:31:b4:cd:fa:5d:05:a5:e5:bf:6a:16:03:6c:f7:d4: 05:43:30:89:d9:44:bc:01:22:ec:ea:d2:dc:be:95:8d:6d:2d: 85:c3:9f:6d:66:0f:c2:28:f2:4d:41:fc:79:6f:86:25:d9:1a: 47:3e:2e:98:f5:f2:03:d5:d8:03:4d:7d:7b:6d:a6:85:c0:0a: bb:42:f6:32:ce:78:6f:32:ca:25:05:7f:02:48:18:0e:e3:3e: 98:e3:10:48:29:1c:2c:d2:10:ce:00:a1:94:1e:87:45:7c:96: 34:db:aa:47:71:16:98:e7:f2:3c:25:ad:99:e6:14:f4:65:38: 77:b0:60:1c:d1:8f:4f:1c:b9:bd:5f:ae:93:5a:18:92:97:9b: 8f:28:4c:28:80:07:cf:98:ad:a2:c1:b8:60:b8:bb:44:d2:78: 53:4a:bd:a8:33:5d:fb:f8:3f:db:8b:44:c4:96:f5:9e:35:2d: 4a:c9:3e:9d:9f:c9:47:20:73:f5:34:56:07:fa:af:3d:f3:87: 99:16:4f:b8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIbU3+M31xi1eXzh1rqUTEc4bf9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJCMUZD RjUwNzE3QzAeFw0yNjA1MDMwMzEyMzhaFw0yNzA1MDIwMzE3MzhaMDMxMTAvBgNV BAMTKEFBRkMyQThDNkZFMkE3ODhGRTcyNkFCQkZDNkQ5MjcyQjU4OUYwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYohbNyPwaeMZflqjN3JWCez7 DeMDNm2LoWoBO58yW+si4J4bfCf0J8aQ/sLoQdukR5COdM+8GVXGa16aloRyiXYP de3Fo0FCVI18Xh0y0xLzEvgYaoDBBIqPKAOhbUlBe6Fmg4iupIBxh414RjTG9O3v U82KMgVQ2pS/h7qFcu2OFwxD7s6odrisurYSABxZFkIwj7QTxvR7GLJZ3QHoQaTB RAHoHt7sWo6fOP05N7Q9FjuR0zksLm9T/9YXioOorxzwDEOVG0gVbkwQwTPik6OE iwIdj8UfBskVap8u/qaCHXuWoAQ2vrE4DfB5Yedppbg1KTJEn3sqBozge7kXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqvwqjG/ip4j+cmq7/G2ScrWJ8N0wHwYDVR0j BBgwFoAUk1+QvNFd0H96r9whrjcrH89QcXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQwZTFmMjAtYjBjZC00NjliLTkxMDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNE MTVERDA3RjdBQUZEQzIxQUUzNzJCMUZDRjUwNzE3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzVGOTBCQ0QxNUREMDdGN0FBRkRDMjFBRTM3MkIxRkNGNTA3 MTdDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y0MGUxZjIwLWIwY2QtNDY5Yi05 MTA2LTFlYTAwMDc5NWY5Zi8wLzMxMzAzMzJlMzEzOTMxMmUzNzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ79HMA0GCSqG SIb3DQEBCwUAA4IBAQAM+Wmvebz/APMrqWEURFNkAVJu8k1dm04QYNLLMM1pCISv DieNEFEVgkY5eZrC4qZUIh+6o4GwdWcxtM36XQWl5b9qFgNs99QFQzCJ2US8ASLs 6tLcvpWNbS2Fw59tZg/CKPJNQfx5b4Yl2RpHPi6Y9fID1dgDTX17baaFwAq7QvYy znhvMsolBX8CSBgO4z6Y4xBIKRws0hDOAKGUHodFfJY026pHcRaY5/I8Ja2Z5hT0 ZTh3sGAc0Y9PHLm9X66TWhiSl5uPKEwogAfPmK2iwbhguLtE0nhTSr2oM137+D/b i0TElvWeNS1KyT6dn8lHIHP1NFYH+q8984eZFk+4 -----END CERTIFICATE-----Generated at Wed May 13 08:28:54 2026 by rpki-client