$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34342e302f32332d3234203d3e203233363739.roa File: 3130332e33312e34342e302f32332d3234203d3e203233363739.roa (raw, json) Hash identifier: EhgGLYi7JRfNFebMJNOewwBAPEsVaUcERRTlt09wpAg= Subject key identifier: 3D:9C:6B:BE:D8:63:63:15:99:BF:52:47:D7:E3:33:2C:A5:11:A9:D7 Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Certificate serial: 1CE414664D3FDFB49EE743E125D5AA77120335F9 Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34342e302f32332d3234203d3e203233363739.roa Signing time: Sun 03 May 2026 02:18:47 +0000 ROA not before: Sun 03 May 2026 02:13:47 +0000 ROA not after: Sun 02 May 2027 02:18:47 +0000 asID: 23679 IP address blocks: 103.31.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e4:14:66:4d:3f:df:b4:9e:e7:43:e1:25:d5:aa:77:12:03:35:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Validity Not Before: May 3 02:13:47 2026 GMT Not After : May 2 02:18:47 2027 GMT Subject: CN=3D9C6BBED863631599BF5247D7E3332CA511A9D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:5f:b1:ec:03:1e:63:b0:17:aa:fd:1c:91: c7:a6:42:3e:a2:57:2d:3f:0e:d8:7b:86:a0:ce:9c: 56:72:1f:af:c8:c5:84:71:88:b5:5a:36:f7:62:b7: 15:23:c8:b0:66:78:f7:36:bb:e0:79:e2:a1:b9:3e: 39:9b:91:a4:7e:0d:aa:bf:07:93:8e:50:99:e1:0d: 66:75:ed:07:20:5d:98:2b:55:4d:a2:53:67:d3:b0: 00:4a:b7:13:27:86:5e:d4:ce:72:be:38:98:05:fb: 86:9d:55:88:07:d4:87:ed:09:d3:4c:27:8d:83:67: fc:e5:01:30:1a:c7:98:de:07:e4:87:ba:53:57:6f: 9d:81:93:e6:9b:44:56:3a:97:f8:91:1d:9d:fb:61: ea:65:25:6c:cf:69:83:e2:97:df:04:9e:a6:f4:17: 5a:a1:cf:b9:ec:b2:ff:ef:11:e9:fe:20:fe:26:87: 44:39:47:77:e0:3c:67:90:f4:b2:45:6e:da:7f:b8: 02:af:24:03:25:c5:03:9d:a0:52:b6:4d:d6:ae:46: 02:92:5b:e8:6b:44:15:e7:ea:26:56:ee:a3:ae:0d: 86:36:3e:ee:74:ef:28:63:f4:4f:dc:11:ac:3b:56: dc:c4:6a:46:69:07:1a:a8:44:b9:13:2d:a2:2b:f0: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9C:6B:BE:D8:63:63:15:99:BF:52:47:D7:E3:33:2C:A5:11:A9:D7 X509v3 Authority Key Identifier: keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34342e302f32332d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.44.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:9d:56:10:ea:64:27:37:27:2f:49:07:b0:eb:30:8d:f6:be: d2:49:ce:68:51:32:08:5a:45:8c:d9:6a:5d:39:09:8c:d3:6c: cc:c7:1d:ab:0a:d2:73:39:2b:56:5a:5b:14:5d:06:19:dc:6f: 6f:39:ac:bf:48:71:12:0c:bc:4a:e9:1c:d3:39:7b:86:2a:9b: 13:09:49:ca:06:bc:6b:64:45:85:61:88:c8:ac:c2:6c:78:e0: 48:45:9f:2c:65:88:f2:c1:c3:28:a6:2a:fc:51:36:e8:d4:09: 23:8b:dc:6d:6b:b1:83:9c:7f:b7:ac:46:66:54:1a:94:bb:23: 1e:74:d9:63:cd:eb:82:82:d9:f6:80:ff:fa:cd:f3:55:5e:5a: 0f:67:ce:31:48:d2:5c:80:11:97:31:f1:d2:16:58:ad:34:54: a2:6f:60:d0:44:88:4f:cc:fb:53:0d:92:a1:1f:08:c4:7f:72: 63:50:83:fa:c2:df:59:53:ef:88:d4:c5:79:5b:e9:38:3e:4b: 50:56:bc:55:43:22:49:fa:20:ad:8f:cb:c2:47:df:16:52:ef: dc:78:1c:2c:0b:92:66:86:df:f4:8f:a5:42:7c:94:a2:ef:0a: f7:4a:cb:e0:79:d6:79:3a:12:81:c6:c4:6f:3e:75:8e:30:44: a2:6d:9e:de -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUHOQUZk0/37Se50PhJdWqdxIDNfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA5RUE5NUZGMTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlC RDg5MEE4NzAeFw0yNjA1MDMwMjEzNDdaFw0yNzA1MDIwMjE4NDdaMDMxMTAvBgNV BAMTKDNEOUM2QkJFRDg2MzYzMTU5OUJGNTI0N0Q3RTMzMzJDQTUxMUE5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0F+x7AMeY7AXqv0ckcemQj6i Vy0/Dth7hqDOnFZyH6/IxYRxiLVaNvditxUjyLBmePc2u+B54qG5PjmbkaR+Daq/ B5OOUJnhDWZ17QcgXZgrVU2iU2fTsABKtxMnhl7UznK+OJgF+4adVYgH1IftCdNM J42DZ/zlATAax5jeB+SHulNXb52Bk+abRFY6l/iRHZ37YeplJWzPaYPil98Enqb0 F1qhz7nssv/vEen+IP4mh0Q5R3fgPGeQ9LJFbtp/uAKvJAMlxQOdoFK2TdauRgKS W+hrRBXn6iZW7qOuDYY2Pu507yhj9E/cEaw7VtzEakZpBxqoRLkTLaIr8MM1AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUPZxrvthjYxWZv1JH1+MzLKURqdcwHwYDVR0j BBgwFoAU0J6pX/EMAWbClUyZeopJib2JCocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAxNDMyY2MtM2JjOS00ODU4LWI1MDYtMjE4YWFiMGIwODljLzAvRDA5RUE5NUZG MTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlCRDg5MEE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDlFQTk1RkYxMEMwMTY2QzI5NTRDOTk3QThBNDk4OUJEODkw QTg3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzAzMzJlMzMzMTJlMzQzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMyMzMzNjM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnHywwDQYJKoZIhvcN AQELBQADggEBAIqdVhDqZCc3Jy9JB7DrMI32vtJJzmhRMghaRYzZal05CYzTbMzH HasK0nM5K1ZaWxRdBhncb285rL9IcRIMvErpHNM5e4YqmxMJScoGvGtkRYVhiMis wmx44EhFnyxliPLBwyimKvxRNujUCSOL3G1rsYOcf7esRmZUGpS7Ix502WPN64KC 2faA//rN81VeWg9nzjFI0lyAEZcx8dIWWK00VKJvYNBEiE/M+1MNkqEfCMR/cmNQ g/rC31lT74jUxXlb6Tg+S1BWvFVDIkn6IK2Py8JH3xZS79x4HCwLkmaG3/SPpUJ8 lKLvCvdKy+B51nk6EoHGxG8+dY4wRKJtnt4= -----END CERTIFICATE-----Generated at Wed May 13 05:55:19 2026 by rpki-client