$ rpki-client -vvf rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230362e302f32342d3234203d3e203435373138.roa File: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (raw, json) Hash identifier: ZPFkeP+nvfKboy4qow1VO85p4mUkgACDVOD+VqK2Ihg= Subject key identifier: F3:17:3D:3E:E3:37:8F:BF:87:06:CE:7B:D9:1D:0B:82:B7:CA:A6:B5 Certificate issuer: /CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Certificate serial: 43A931959A673FB0776F8A8615AF5C5CC83DD7EC Authority key identifier: 7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230362e302f32342d3234203d3e203435373138.roa Signing time: Sun 03 May 2026 02:19:08 +0000 ROA not before: Sun 03 May 2026 02:14:08 +0000 ROA not after: Sun 02 May 2027 02:19:08 +0000 asID: 45718 IP address blocks: 103.31.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a9:31:95:9a:67:3f:b0:77:6f:8a:86:15:af:5c:5c:c8:3d:d7:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Validity Not Before: May 3 02:14:08 2026 GMT Not After : May 2 02:19:08 2027 GMT Subject: CN=F3173D3EE3378FBF8706CE7BD91D0B82B7CAA6B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cd:9f:dd:49:31:e1:4c:d7:eb:81:2b:b3:62: 90:81:d8:a6:56:b7:8c:fd:2b:61:c3:45:19:cc:cb: 12:e2:83:56:e5:de:61:13:b2:fe:aa:c6:d3:8e:db: 1c:28:f7:01:99:f3:25:31:25:2d:eb:be:ce:fa:f3: c1:bb:4a:62:8a:42:69:33:a5:6a:b0:52:6d:04:2c: 57:19:2a:c6:22:53:d5:58:dc:83:8f:9f:83:84:c9: 5a:f3:3c:a6:6a:75:0c:88:e6:b0:b9:a8:7e:8c:69: 8e:5f:b5:b3:65:6f:2c:5d:a7:ad:b0:34:08:c5:99: ed:41:dc:13:60:7e:81:e7:c1:c4:cb:23:65:ff:ec: 5a:c0:5b:45:5e:35:5f:70:b6:94:e1:c6:af:89:c0: 18:c3:6e:fa:c7:2a:73:b3:0e:17:de:fb:7c:61:2d: f6:40:bc:72:a9:62:bf:d4:fb:36:56:0c:7e:60:57: 2e:da:3f:43:42:96:75:a6:12:89:5c:d0:75:36:19: 6a:9c:a5:8f:e9:f8:c7:ba:ca:49:5c:d3:a8:86:de: 98:ed:b8:6e:4a:d1:4a:84:bd:ad:94:0f:86:0c:3a: 65:cf:72:95:ce:92:86:99:b7:c9:d3:99:d2:41:fa: f0:dc:71:86:c0:72:0f:40:fc:07:a2:4b:9e:6e:58: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:17:3D:3E:E3:37:8F:BF:87:06:CE:7B:D9:1D:0B:82:B7:CA:A6:B5 X509v3 Authority Key Identifier: keyid:7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230362e302f32342d3234203d3e203435373138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.206.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:d0:74:bb:90:7d:2c:1e:9a:5e:e1:c3:af:e5:66:5f:9d:29: 86:6a:26:f8:bc:f9:3e:af:23:4a:58:a1:15:db:ae:a3:3b:62: be:e1:02:69:aa:5a:98:a5:31:33:59:52:64:62:c5:9f:bb:d3: 9d:19:eb:d1:25:86:e4:5a:a5:c2:87:80:8a:70:21:a2:3f:1f: 9d:43:1c:e8:a9:3d:3a:c9:5f:6f:83:9a:2b:8b:89:0d:41:c0: db:f9:37:14:a8:b0:0d:4f:f9:5c:b7:cf:7c:fe:53:14:e7:6f: 3a:ed:01:e4:e4:6e:38:1e:dc:f9:4a:85:d4:f2:d6:8e:72:54: 71:24:95:7c:4a:7d:68:34:72:54:f9:e1:e3:e1:c2:6f:47:37: cd:2a:f3:8f:f8:81:8d:54:55:0f:66:58:2b:68:e6:c5:04:5b: 41:48:57:8d:bc:1e:4d:28:f6:17:64:b0:d3:30:ab:55:94:63: bf:3e:10:3a:07:25:cc:02:18:77:c9:8f:32:67:f8:40:4a:fc: 14:90:79:23:6d:f3:25:8a:f6:7c:32:e7:0d:d2:18:65:ce:7c: e2:9f:cc:bc:0a:36:12:64:3b:72:06:fa:57:df:66:b6:c0:5e: 16:a5:e3:07:b6:9d:61:59:94:c3:46:80:70:a1:30:35:42:ac: 27:5f:d6:79 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQ6kxlZpnP7B3b4qGFa9cXMg91+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1 NENCRTlGMTAeFw0yNjA1MDMwMjE0MDhaFw0yNzA1MDIwMjE5MDhaMDMxMTAvBgNV BAMTKEYzMTczRDNFRTMzNzhGQkY4NzA2Q0U3QkQ5MUQwQjgyQjdDQUE2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVzZ/dSTHhTNfrgSuzYpCB2KZW t4z9K2HDRRnMyxLig1bl3mETsv6qxtOO2xwo9wGZ8yUxJS3rvs7688G7SmKKQmkz pWqwUm0ELFcZKsYiU9VY3IOPn4OEyVrzPKZqdQyI5rC5qH6MaY5ftbNlbyxdp62w NAjFme1B3BNgfoHnwcTLI2X/7FrAW0VeNV9wtpThxq+JwBjDbvrHKnOzDhfe+3xh LfZAvHKpYr/U+zZWDH5gVy7aP0NClnWmEolc0HU2GWqcpY/p+Me6yklc06iG3pjt uG5K0UqEva2UD4YMOmXPcpXOkoaZt8nTmdJB+vDccYbAcg9A/AeiS55uWEvpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU8xc9PuM3j7+HBs572R0LgrfKprUwHwYDVR0j BBgwFoAUfJ04KHq0wIAPZ+UW2wR2BFTL6fEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0OWMyMTAtZjM2NS00MzJmLWE3Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3 QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1NENCRTlGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzlEMzgyODdBQjRDMDgwMEY2N0U1MTZEQjA0NzYwNDU0Q0JF OUYxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwNDljMjEwLWYzNjUtNDMyZi1h N2NhLTBiNWViODZiMDFjNi8wLzMxMzAzMzJlMzMzMTJlMzIzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTM3MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcfzjANBgkqhkiG 9w0BAQsFAAOCAQEAfdB0u5B9LB6aXuHDr+VmX50phmom+Lz5Pq8jSlihFduuozti vuECaapamKUxM1lSZGLFn7vTnRnr0SWG5FqlwoeAinAhoj8fnUMc6Kk9Oslfb4Oa K4uJDUHA2/k3FKiwDU/5XLfPfP5TFOdvOu0B5ORuOB7c+UqF1PLWjnJUcSSVfEp9 aDRyVPnh4+HCb0c3zSrzj/iBjVRVD2ZYK2jmxQRbQUhXjbweTSj2F2Sw0zCrVZRj vz4QOgclzAIYd8mPMmf4QEr8FJB5I23zJYr2fDLnDdIYZc584p/MvAo2EmQ7cgb6 V99mtsBeFqXjB7adYVmUw0aAcKEwNUKsJ1/WeQ== -----END CERTIFICATE-----Generated at Wed May 13 13:02:49 2026 by rpki-client