$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa File: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (raw, json) Hash identifier: OvSsEeapnu+/oiKYJIcMYudEmuSdyI2NmSImX5jHoH4= Subject key identifier: CC:99:AA:81:58:0B:9C:0F:76:78:D8:30:77:B3:0F:94:E3:52:8B:9C Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Certificate serial: 2071FE866ADB566EA67CF6E7BD63170C8D72E5A1 Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa Signing time: Sun 03 May 2026 02:23:39 +0000 ROA not before: Sun 03 May 2026 02:18:39 +0000 ROA not after: Sun 02 May 2027 02:23:39 +0000 asID: 131749 IP address blocks: 103.31.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 13:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:71:fe:86:6a:db:56:6e:a6:7c:f6:e7:bd:63:17:0c:8d:72:e5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Validity Not Before: May 3 02:18:39 2026 GMT Not After : May 2 02:23:39 2027 GMT Subject: CN=CC99AA81580B9C0F7678D83077B30F94E3528B9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4d:90:21:10:00:dc:02:b1:c7:6d:83:fc:bf: 69:b3:58:17:72:ba:9e:92:1a:81:ad:a1:78:3e:91: 4c:d8:04:ee:ae:f3:a6:48:68:7e:ae:b5:ca:d1:14: f0:e2:7b:93:d8:82:eb:18:31:e1:16:c8:91:34:83: 1b:fb:a3:b5:d4:05:02:f8:e5:6d:68:c2:7b:b1:02: 75:29:f5:92:27:ae:64:f8:a4:e2:29:9c:af:1e:1f: eb:fa:9e:9a:54:3b:ec:34:b2:c4:bf:35:d4:87:67: ee:50:de:fd:b9:87:dc:4b:3b:be:c7:f2:73:3a:ce: 2c:f0:53:fb:82:73:8a:94:c5:9c:15:23:b3:6e:22: 89:8d:ed:aa:e4:d7:e5:af:72:ee:cf:f9:a4:d6:17: 9b:a4:91:cc:8f:d1:24:ca:4e:59:68:f9:a4:c3:e5: 5c:da:3a:8d:bb:e5:83:86:79:60:91:63:62:38:46: fb:e5:d3:98:4c:17:b3:f7:51:e5:7d:65:c9:b3:4d: 94:99:cd:6d:72:30:38:6c:6b:e6:9c:ab:3b:57:85: 4e:15:ca:d6:8f:68:4d:95:cb:89:d4:e4:67:19:3f: e7:32:c0:30:55:f6:98:83:3e:45:e4:f2:41:97:93: 59:73:4a:08:22:1f:e2:d9:b2:bf:e6:c8:bd:00:d7: 31:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:99:AA:81:58:0B:9C:0F:76:78:D8:30:77:B3:0F:94:E3:52:8B:9C X509v3 Authority Key Identifier: keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.134.0/24 Signature Algorithm: sha256WithRSAEncryption ae:fc:72:2d:9b:a3:32:a7:2d:6e:1d:ad:02:0e:df:8f:c1:7d: df:e9:34:4c:d1:40:b3:c5:ef:91:87:ae:6b:09:68:38:b4:61: a4:ab:b3:b0:39:3b:82:32:46:06:84:aa:2c:a9:3b:37:16:6e: f0:85:c1:7c:d4:c6:6e:36:85:8b:e7:62:96:09:92:79:8f:50: 1c:f9:62:f0:13:e2:0d:8a:b7:b4:b3:fe:a3:0f:58:73:9b:3f: 4d:ff:32:1c:e5:87:36:70:35:30:87:1b:a8:a3:85:23:83:05: 6a:a7:30:9b:7b:73:61:fc:a6:72:a8:8f:5c:ec:27:1d:77:e1: f1:d7:02:f2:d6:f9:24:c3:3d:38:c5:41:e4:53:12:ec:8d:3e: fd:16:cf:87:0e:4c:91:44:c6:0c:95:0f:bf:b0:6d:28:b7:15: 36:f2:c1:9a:4e:54:5d:41:54:83:d9:0a:9e:66:8d:b6:bb:49: de:d5:e8:78:a7:46:5b:5d:a2:7a:9a:f2:91:40:94:3c:22:ff: 98:95:f6:20:9e:ec:8b:88:45:35:15:35:0a:10:a8:a7:44:c0: 18:60:3f:40:35:9c:77:98:cb:06:36:31:72:ea:7d:78:28:2f: 9b:38:21:6e:db:c8:5a:ab:29:b5:ac:67:44:c6:82:90:ab:f9: d3:a0:fb:a6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIHH+hmrbVm6mfPbnvWMXDI1y5aEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMxODA4 NkE4MzJDOTAeFw0yNjA1MDMwMjE4MzlaFw0yNzA1MDIwMjIzMzlaMDMxMTAvBgNV BAMTKENDOTlBQTgxNTgwQjlDMEY3Njc4RDgzMDc3QjMwRjk0RTM1MjhCOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTTZAhEADcArHHbYP8v2mzWBdy up6SGoGtoXg+kUzYBO6u86ZIaH6utcrRFPDie5PYgusYMeEWyJE0gxv7o7XUBQL4 5W1ownuxAnUp9ZInrmT4pOIpnK8eH+v6nppUO+w0ssS/NdSHZ+5Q3v25h9xLO77H 8nM6zizwU/uCc4qUxZwVI7NuIomN7ark1+Wvcu7P+aTWF5ukkcyP0STKTllo+aTD 5VzaOo275YOGeWCRY2I4Rvvl05hMF7P3UeV9ZcmzTZSZzW1yMDhsa+acqztXhU4V ytaPaE2Vy4nU5GcZP+cywDBV9piDPkXk8kGXk1lzSggiH+LZsr/myL0A1zEpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzJmqgVgLnA92eNgwd7MPlONSi5wwHwYDVR0j BBgwFoAU+OtvTpHd1H+o4EgbYNTBgIaoMskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAwZjRmMzctYzdmYi00N2QwLThhODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5 MURERDQ3RkE4RTA0ODFCNjBENEMxODA4NkE4MzJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVCNkY0RTkxRERENDdGQThFMDQ4MUI2MEQ0QzE4MDg2QTgz MkM5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMxMzAzMzJlMzMzMTJlMzEzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZx+GMA0GCSqG SIb3DQEBCwUAA4IBAQCu/HItm6Mypy1uHa0CDt+PwX3f6TRM0UCzxe+Rh65rCWg4 tGGkq7OwOTuCMkYGhKosqTs3Fm7whcF81MZuNoWL52KWCZJ5j1Ac+WLwE+INire0 s/6jD1hzmz9N/zIc5Yc2cDUwhxuoo4UjgwVqpzCbe3Nh/KZyqI9c7Ccdd+Hx1wLy 1vkkwz04xUHkUxLsjT79Fs+HDkyRRMYMlQ+/sG0otxU28sGaTlRdQVSD2QqeZo22 u0ne1eh4p0ZbXaJ6mvKRQJQ8Iv+YlfYgnuyLiEU1FTUKEKinRMAYYD9ANZx3mMsG NjFy6n14KC+bOCFu28haqym1rGdExoKQq/nToPum -----END CERTIFICATE-----Generated at Fri May 8 07:10:35 2026 by rpki-client