$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32332d3233203d3e20323135373237.roa File: 3130332e39362e35322e302f32332d3233203d3e20323135373237.roa (raw, json) Hash identifier: Qx+7jCeA4ACEoLOWICApKLjJLJEDMdzGbyJBoCyvwDU= Subject key identifier: 3A:D2:AF:42:3E:27:19:96:77:B9:FD:24:E7:38:38:31:9F:22:38:E0 Certificate issuer: /CN=95C2241DAF3580597A730032BDD8356019AA8598 Certificate serial: 0681664B81A00753812F4C0CFCAD7E9C3C407E32 Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32332d3233203d3e20323135373237.roa Signing time: Sun 03 May 2026 02:44:47 +0000 ROA not before: Sun 03 May 2026 02:39:47 +0000 ROA not after: Sun 02 May 2027 02:44:47 +0000 asID: 215727 IP address blocks: 103.96.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:81:66:4b:81:a0:07:53:81:2f:4c:0c:fc:ad:7e:9c:3c:40:7e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598 Validity Not Before: May 3 02:39:47 2026 GMT Not After : May 2 02:44:47 2027 GMT Subject: CN=3AD2AF423E27199677B9FD24E73838319F2238E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a3:19:f6:fe:40:f2:8f:aa:56:42:67:aa:cb: 32:95:26:66:3c:f4:4d:4e:17:83:6c:9c:38:01:12: 6d:26:b8:7b:28:eb:e6:fc:c1:7a:44:fc:0b:19:90: 2e:02:01:20:3a:0d:f6:e2:ec:58:b6:5f:31:3d:da: 25:e8:c7:df:e4:bf:29:77:0d:28:f6:e2:5f:ab:d3: 6b:3e:d0:69:fc:13:64:85:3e:ce:bd:61:39:bd:0c: c3:a8:c9:c5:a9:97:4b:f6:d7:f7:cf:da:0d:66:84: 05:b9:1d:46:a0:40:e5:f6:76:61:fd:b4:ca:20:b8: 69:ca:55:7d:f3:54:ad:aa:34:4c:7c:5d:fb:83:ac: 95:91:b1:b0:19:42:4a:ee:12:79:f1:22:a7:6f:08: 21:94:70:35:85:1e:98:9f:35:5c:cd:cb:14:70:84: 60:e7:b0:37:07:b3:07:d5:b5:8f:48:3a:8f:64:7e: a2:63:b8:dd:8a:93:07:01:a3:63:df:48:76:53:f8: 3e:de:da:d1:8b:b2:20:15:ad:3a:fb:44:80:77:d5: af:68:5f:bb:1e:d1:ac:8d:9e:50:a4:18:d8:fe:49: 5c:77:0f:cd:dc:2e:48:7b:e2:4f:5c:86:d4:f1:ca: 46:a3:16:68:78:b9:4b:be:e4:d0:0d:3c:e5:58:17: ca:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D2:AF:42:3E:27:19:96:77:B9:FD:24:E7:38:38:31:9F:22:38:E0 X509v3 Authority Key Identifier: keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32332d3233203d3e20323135373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.52.0/23 Signature Algorithm: sha256WithRSAEncryption ab:b1:71:fd:82:8d:6a:6d:6f:f3:6a:5d:80:6e:cd:0a:ef:22: 45:74:d2:45:1e:05:95:2c:41:e8:96:8a:5d:e0:b3:fe:c0:4f: c7:d0:69:57:07:74:c6:6c:69:68:7e:c5:d0:bd:45:e2:65:72: 53:29:fd:eb:6d:2b:0c:30:f2:ba:8c:0b:de:37:e4:68:01:97: f3:c5:7b:eb:44:d3:58:b7:1f:1c:0e:ee:11:3e:55:21:f3:c8: 9a:17:25:9c:02:8e:62:e6:d7:fc:37:c0:54:07:d7:06:65:b4: 2f:56:4c:80:a8:11:a5:59:17:68:61:dc:1f:6a:ee:e9:e5:80: c0:61:ac:ce:ee:b5:52:cd:7d:fb:7b:16:4e:50:a3:d5:89:81: 9d:23:e7:f3:2b:b7:7a:10:5a:79:47:be:fc:ae:e0:e2:2b:93: ab:3f:1e:ea:e6:77:e8:1e:44:d0:0f:db:64:33:ff:78:46:55: 3e:a6:09:8b:2b:ea:72:ce:87:73:ed:f9:ca:ce:62:25:bb:86: 08:87:c6:ba:1e:93:43:73:2b:26:5a:3c:a8:d7:fe:6e:80:9e: 3d:d2:6c:7e:2f:a8:86:d8:2e:6c:16:c8:fd:54:20:ab:ae:38: 2c:09:e6:ce:98:ef:4a:81:47:9a:14:5a:4b:e2:88:8a:61:2d: cc:60:eb:d1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBoFmS4GgB1OBL0wM/K1+nDxAfjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx OUFBODU5ODAeFw0yNjA1MDMwMjM5NDdaFw0yNzA1MDIwMjQ0NDdaMDMxMTAvBgNV BAMTKDNBRDJBRjQyM0UyNzE5OTY3N0I5RkQyNEU3MzgzODMxOUYyMjM4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUoxn2/kDyj6pWQmeqyzKVJmY8 9E1OF4NsnDgBEm0muHso6+b8wXpE/AsZkC4CASA6Dfbi7Fi2XzE92iXox9/kvyl3 DSj24l+r02s+0Gn8E2SFPs69YTm9DMOoycWpl0v21/fP2g1mhAW5HUagQOX2dmH9 tMoguGnKVX3zVK2qNEx8XfuDrJWRsbAZQkruEnnxIqdvCCGUcDWFHpifNVzNyxRw hGDnsDcHswfVtY9IOo9kfqJjuN2KkwcBo2PfSHZT+D7e2tGLsiAVrTr7RIB31a9o X7se0ayNnlCkGNj+SVx3D83cLkh74k9chtTxykajFmh4uUu+5NANPOVYF8q3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOtKvQj4nGZZ3uf0k5zg4MZ8iOOAwHwYDVR0j BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4 NTk4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdhMWM0YzFmLTcxNDEtNDdkNi1h N2Y4LWUzNWZmZTExNzQwNC8wLzMxMzAzMzJlMzkzNjJlMzUzMjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMyMzEzNTM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdgNDANBgkqhkiG 9w0BAQsFAAOCAQEAq7Fx/YKNam1v82pdgG7NCu8iRXTSRR4FlSxB6JaKXeCz/sBP x9BpVwd0xmxpaH7F0L1F4mVyUyn9620rDDDyuowL3jfkaAGX88V760TTWLcfHA7u ET5VIfPImhclnAKOYubX/DfAVAfXBmW0L1ZMgKgRpVkXaGHcH2ru6eWAwGGszu61 Us19+3sWTlCj1YmBnSPn8yu3ehBaeUe+/K7g4iuTqz8e6uZ36B5E0A/bZDP/eEZV PqYJiyvqcs6Hc+35ys5iJbuGCIfGuh6TQ3MrJlo8qNf+boCePdJsfi+ohtgubBbI /VQgq644LAnmzpjvSoFHmhRaS+KIimEtzGDr0Q== -----END CERTIFICATE-----Generated at Wed May 13 02:27:10 2026 by rpki-client