$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32342d3234203d3e20313530393232.roa File: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (raw, json) Hash identifier: dzNpcw838jqHTmD5WMvONS88+Ve5iK9R+so7TDu1v9o= Subject key identifier: 9E:D3:80:FC:5C:B7:F6:EF:DB:B7:43:E7:29:FC:4E:FE:B1:8F:46:0E Certificate issuer: /CN=95C2241DAF3580597A730032BDD8356019AA8598 Certificate serial: 0D8538688A89521E8D3FEB063E224AB8F0631033 Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32342d3234203d3e20313530393232.roa Signing time: Sun 03 May 2026 02:44:49 +0000 ROA not before: Sun 03 May 2026 02:39:49 +0000 ROA not after: Sun 02 May 2027 02:44:49 +0000 asID: 150922 IP address blocks: 103.96.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:85:38:68:8a:89:52:1e:8d:3f:eb:06:3e:22:4a:b8:f0:63:10:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598 Validity Not Before: May 3 02:39:49 2026 GMT Not After : May 2 02:44:49 2027 GMT Subject: CN=9ED380FC5CB7F6EFDBB743E729FC4EFEB18F460E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c0:61:8f:cc:79:7b:4d:ee:43:6d:e8:64:13: a4:a7:88:84:3b:1a:8f:cf:89:6e:93:7d:65:0c:e1: 75:21:93:b8:4a:14:5f:46:a4:65:7c:53:52:6d:fa: 81:74:fb:8b:cd:92:5a:3a:14:90:ae:e1:f2:b1:6b: 41:28:f1:dd:8d:18:41:2e:eb:a5:1b:fc:9f:76:fc: a9:9b:81:b8:ac:16:83:87:68:0e:d5:81:e3:e7:5b: 1e:64:df:eb:70:29:c5:06:6f:25:98:d8:68:b9:ad: 41:b7:f0:b8:1d:cb:e3:47:03:0e:ab:32:52:69:8f: 36:8e:cb:05:9d:69:37:82:b2:52:54:9f:2d:54:80: 97:2a:99:18:f7:1e:d8:3b:6e:c1:5f:81:89:29:9d: 97:0e:7f:5a:30:49:ac:69:f1:be:d3:b5:77:f2:f7: 92:d8:17:21:79:a1:4a:86:4f:ea:1d:2e:31:32:e5: ee:f5:6b:63:b7:7d:0e:be:14:78:21:12:19:8b:af: 59:b7:0d:79:58:11:b1:1a:db:ac:05:7c:90:6d:96: 7e:2b:c1:a5:fb:b6:28:c5:78:ac:22:21:40:48:10: 24:3d:ac:8a:7b:06:7d:6d:ef:06:a7:bc:17:5b:1f: 9d:87:ed:ed:b9:71:d4:4f:8b:c3:50:8c:42:bc:72: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D3:80:FC:5C:B7:F6:EF:DB:B7:43:E7:29:FC:4E:FE:B1:8F:46:0E X509v3 Authority Key Identifier: keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32342d3234203d3e20313530393232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.52.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:5f:51:21:0f:ec:96:ef:5a:30:49:54:43:7e:14:af:bc:e4: 1b:da:77:a1:7c:d0:72:9c:ac:83:36:cd:df:94:bf:27:25:00: 90:10:32:93:51:08:05:1a:80:55:a7:10:f2:93:31:c9:db:0e: f6:b3:01:e6:9a:c6:d8:3b:d9:e4:d9:d2:a4:12:37:ad:08:23: ca:89:5e:a2:18:44:98:e5:da:e5:b2:54:be:c2:43:0c:e1:74: 4f:fb:bc:a1:22:e6:c2:e7:bc:c8:75:b3:90:3e:c2:1b:bd:51: 24:9d:78:dd:80:06:f4:90:10:a6:dc:f3:bd:88:85:bf:5e:25: aa:0a:e1:11:1c:72:2e:e7:d0:13:f7:9a:d9:8d:27:d0:c9:af: a2:bb:64:a8:1b:12:30:77:fd:e1:1e:a5:a3:77:ed:80:c1:bb: f5:ad:86:db:8e:0d:e9:14:6b:6a:14:df:8e:9e:34:49:6c:56: bb:88:06:5b:44:29:fa:81:73:b1:ee:15:76:0b:46:26:69:10: b3:ff:c3:11:ee:0e:a9:47:3e:e3:4b:a6:a9:22:3b:9f:79:27: d2:2e:2f:3c:10:aa:12:c1:5d:0b:40:d0:01:02:6a:ee:5d:a8: 7a:1e:53:c2:cb:58:e0:92:74:50:fb:de:39:1f:8e:86:c1:ea: 7c:db:d7:ed -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDYU4aIqJUh6NP+sGPiJKuPBjEDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx OUFBODU5ODAeFw0yNjA1MDMwMjM5NDlaFw0yNzA1MDIwMjQ0NDlaMDMxMTAvBgNV BAMTKDlFRDM4MEZDNUNCN0Y2RUZEQkI3NDNFNzI5RkM0RUZFQjE4RjQ2MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZwGGPzHl7Te5DbehkE6SniIQ7 Go/PiW6TfWUM4XUhk7hKFF9GpGV8U1Jt+oF0+4vNklo6FJCu4fKxa0Eo8d2NGEEu 66Ub/J92/KmbgbisFoOHaA7VgePnWx5k3+twKcUGbyWY2Gi5rUG38Lgdy+NHAw6r MlJpjzaOywWdaTeCslJUny1UgJcqmRj3Htg7bsFfgYkpnZcOf1owSaxp8b7TtXfy 95LYFyF5oUqGT+odLjEy5e71a2O3fQ6+FHghEhmLr1m3DXlYEbEa26wFfJBtln4r waX7tijFeKwiIUBIECQ9rIp7Bn1t7wanvBdbH52H7e25cdRPi8NQjEK8cnjvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUntOA/Fy39u/bt0PnKfxO/rGPRg4wHwYDVR0j BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4 NTk4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdhMWM0YzFmLTcxNDEtNDdkNi1h N2Y4LWUzNWZmZTExNzQwNC8wLzMxMzAzMzJlMzkzNjJlMzUzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDM5MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdgNDANBgkqhkiG 9w0BAQsFAAOCAQEAal9RIQ/slu9aMElUQ34Ur7zkG9p3oXzQcpysgzbN35S/JyUA kBAyk1EIBRqAVacQ8pMxydsO9rMB5prG2DvZ5NnSpBI3rQgjyoleohhEmOXa5bJU vsJDDOF0T/u8oSLmwue8yHWzkD7CG71RJJ143YAG9JAQptzzvYiFv14lqgrhERxy LufQE/ea2Y0n0MmvortkqBsSMHf94R6lo3ftgMG79a2G244N6RRrahTfjp40SWxW u4gGW0Qp+oFzse4VdgtGJmkQs//DEe4OqUc+40umqSI7n3kn0i4vPBCqEsFdC0DQ AQJq7l2oeh5TwstY4JJ0UPveOR+OhsHqfNvX7Q== -----END CERTIFICATE-----Generated at Wed May 13 02:40:00 2026 by rpki-client