$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa File: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (raw, json) Hash identifier: C54NnNs4f4gmLL9qO83WVBxOgZKL0rmUD589emvzz4I= Subject key identifier: BF:49:BC:52:06:21:53:A7:36:CA:3C:AB:C3:13:F1:73:A1:22:50:8C Certificate issuer: /CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28 Certificate serial: 2220DB036F05F8BC1DA3585373D900EC71419EA7 Authority key identifier: C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa Signing time: Sun 03 May 2026 02:12:34 +0000 ROA not before: Sun 03 May 2026 02:07:34 +0000 ROA not after: Sun 02 May 2027 02:12:34 +0000 asID: 136126 IP address blocks: 103.95.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:20:db:03:6f:05:f8:bc:1d:a3:58:53:73:d9:00:ec:71:41:9e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28 Validity Not Before: May 3 02:07:34 2026 GMT Not After : May 2 02:12:34 2027 GMT Subject: CN=BF49BC52062153A736CA3CABC313F173A122508C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b0:14:96:ac:88:a7:cc:35:b9:d4:4b:0b:b3: e4:78:64:b8:43:8f:e8:da:62:5e:22:5a:e0:2d:48: a3:44:63:ee:32:35:c4:34:f1:b6:ca:b2:ae:c6:b8: de:c4:7c:56:f9:a0:4a:16:f6:5c:2f:93:d5:64:f4: 36:3b:e1:76:99:d5:e6:8c:40:16:89:6b:6b:31:34: 6a:fe:74:23:b1:fd:7e:87:f8:bf:de:ce:6f:d3:8b: 23:34:b8:b4:a9:1d:a3:58:c1:51:d4:18:31:2b:e1: a5:7f:22:b7:bf:19:fb:10:95:e8:6c:d4:f5:23:0e: 71:2e:f8:9c:89:50:39:1b:10:37:d7:ad:1c:80:95: 39:4f:10:48:ec:29:8d:91:f0:10:f4:d5:3b:6b:d1: 44:d9:ef:6c:4f:c6:73:76:a8:c8:6d:2d:13:63:f9: 8a:e1:f3:26:c4:4a:ef:f6:d0:9b:30:8f:62:08:67: d2:a5:c4:fd:2e:09:aa:db:b9:6c:4a:9d:ac:c6:a5: aa:58:c7:7c:ca:95:c1:c8:b2:ae:c2:a3:e4:43:bd: 13:b7:3a:30:31:cb:f9:bf:39:18:4a:c2:16:ec:b9: d3:a7:c6:aa:f2:3d:32:50:09:33:eb:b0:53:ca:84: c5:0c:5c:ad:0d:ee:8f:76:47:2c:0b:83:07:53:24: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:49:BC:52:06:21:53:A7:36:CA:3C:AB:C3:13:F1:73:A1:22:50:8C X509v3 Authority Key Identifier: keyid:C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.160.0/23 Signature Algorithm: sha256WithRSAEncryption a1:22:c6:cd:b2:4f:99:ab:b1:4f:96:26:60:ad:0e:83:a7:8c: f1:28:be:48:ab:ab:e1:0c:04:c3:db:d0:53:b0:b7:4c:6c:7f: 4f:2d:1d:2b:e5:81:da:ce:09:0a:3b:10:bf:ee:67:18:95:b2: 1d:0a:46:c3:31:9a:6d:ca:49:c5:22:6e:93:8b:e7:95:99:06: 1b:78:96:61:db:c6:e4:4d:a7:de:0b:20:50:29:d7:6f:8c:fd: ca:15:66:83:68:ac:8f:a9:20:ad:68:f1:57:fa:12:de:c5:c4: 2c:25:dd:46:ed:12:24:25:24:49:6b:5e:67:93:41:60:d6:99: 8b:7e:39:1d:0a:04:a9:f3:3e:f6:79:cc:06:3e:f5:07:a4:5c: bb:ad:4f:15:4d:62:09:05:3f:4b:76:f0:ba:9a:61:04:c5:3a: 03:84:5b:0b:5f:b4:e1:70:43:7e:ea:90:e2:d7:ab:32:be:7d: 06:05:57:33:11:24:06:29:85:77:90:e9:eb:5a:8b:24:5d:47: cb:98:c8:00:0d:24:ca:4f:a8:b3:93:69:a6:96:97:e3:78:fc: fc:9e:d6:11:ea:47:83:72:0d:e2:ce:36:4e:f6:9b:96:3a:78: c3:c7:12:7f:f4:73:5d:8e:a2:73:4c:4f:54:c0:d2:9c:09:bc: 8a:6d:e1:34 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIiDbA28F+Lwdo1hTc9kA7HFBnqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4 QjQzNUIyODAeFw0yNjA1MDMwMjA3MzRaFw0yNzA1MDIwMjEyMzRaMDMxMTAvBgNV BAMTKEJGNDlCQzUyMDYyMTUzQTczNkNBM0NBQkMzMTNGMTczQTEyMjUwOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvsBSWrIinzDW51EsLs+R4ZLhD j+jaYl4iWuAtSKNEY+4yNcQ08bbKsq7GuN7EfFb5oEoW9lwvk9Vk9DY74XaZ1eaM QBaJa2sxNGr+dCOx/X6H+L/ezm/TiyM0uLSpHaNYwVHUGDEr4aV/Ire/GfsQlehs 1PUjDnEu+JyJUDkbEDfXrRyAlTlPEEjsKY2R8BD01Ttr0UTZ72xPxnN2qMhtLRNj +Yrh8ybESu/20Jswj2IIZ9KlxP0uCarbuWxKnazGpapYx3zKlcHIsq7Co+RDvRO3 OjAxy/m/ORhKwhbsudOnxqryPTJQCTPrsFPKhMUMXK0N7o92RywLgwdTJNwbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUv0m8UgYhU6c2yjyrwxPxc6EiUIwwHwYDVR0j BBgwFoAUyNBFR8M0kCYiyNfPKfPx3ItDWygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3NWQzNzEtMThjNy00OGRmLThmNjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdD MzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4QjQzNUIyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEQwNDU0N0MzMzQ5MDI2MjJDOEQ3Q0YyOUYzRjFEQzhCNDM1 QjI4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBhNzVkMzcxLTE4YzctNDhkZi04 ZjYxLTFkNDA0YjY0NjQxMy8wLzMxMzAzMzJlMzkzNTJlMzEzNjMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1+gMA0GCSqG SIb3DQEBCwUAA4IBAQChIsbNsk+Zq7FPliZgrQ6Dp4zxKL5Iq6vhDATD29BTsLdM bH9PLR0r5YHazgkKOxC/7mcYlbIdCkbDMZptyknFIm6Ti+eVmQYbeJZh28bkTafe CyBQKddvjP3KFWaDaKyPqSCtaPFX+hLexcQsJd1G7RIkJSRJa15nk0Fg1pmLfjkd CgSp8z72ecwGPvUHpFy7rU8VTWIJBT9LdvC6mmEExToDhFsLX7ThcEN+6pDi16sy vn0GBVczESQGKYV3kOnrWoskXUfLmMgADSTKT6izk2mmlpfjePz8ntYR6keDcg3i zjZO9puWOnjDxxJ/9HNdjqJzTE9UwNKcCbyKbeE0 -----END CERTIFICATE-----Generated at Wed May 13 05:36:23 2026 by rpki-client