$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32342d3234203d3e20313534343130.roa File: 3130332e39362e35322e302f32342d3234203d3e20313534343130.roa (raw, json) Hash identifier: DZZr3wFG43up9aE69tnG8Ls9OH8+Et1zoRrcXN9QSWM= Subject key identifier: CC:D3:AC:AC:F0:C8:84:E3:F5:06:63:BC:7A:7A:43:D4:71:A9:CB:4B Certificate issuer: /CN=95C2241DAF3580597A730032BDD8356019AA8598 Certificate serial: 481AB64C7FFACC97CF5B9A80D3FFA1C2EC8C652B Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32342d3234203d3e20313534343130.roa Signing time: Sun 03 May 2026 02:44:48 +0000 ROA not before: Sun 03 May 2026 02:39:48 +0000 ROA not after: Sun 02 May 2027 02:44:48 +0000 asID: 154410 IP address blocks: 103.96.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1a:b6:4c:7f:fa:cc:97:cf:5b:9a:80:d3:ff:a1:c2:ec:8c:65:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598 Validity Not Before: May 3 02:39:48 2026 GMT Not After : May 2 02:44:48 2027 GMT Subject: CN=CCD3ACACF0C884E3F50663BC7A7A43D471A9CB4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:73:66:58:19:4e:96:8b:87:20:e6:68:1b:55: 0f:a9:13:22:a0:47:3e:37:04:b7:e9:75:d4:05:97: e8:9f:6d:f6:a8:42:34:fe:40:ca:78:d9:15:af:6d: 25:c7:bf:73:2c:82:20:fc:ee:e6:ec:7f:22:e0:d9: 69:a5:e6:54:4b:a0:7f:ed:49:0f:c5:54:1f:8a:99: 95:1d:60:3e:87:6d:cb:f9:3c:7d:82:52:40:1c:11: 10:b4:4c:67:2c:98:f3:0d:ec:db:de:8a:83:47:be: 08:28:9c:03:43:89:32:5d:b6:08:a3:c6:47:68:18: 9d:3d:c0:25:1f:18:12:11:91:ca:cd:c6:e7:f6:a4: 32:0f:94:89:72:46:fb:b1:66:62:bf:bc:b2:0e:20: 68:0d:e9:4a:65:42:98:15:f2:09:fc:23:f2:7c:6a: 6f:7a:20:dc:7e:bc:e4:01:4a:64:1e:35:7d:01:fb: a5:03:67:42:1e:14:1d:25:0b:1c:5d:8a:7a:37:12: 6b:3e:95:86:2a:5b:e5:4a:cd:61:60:40:83:70:0c: 69:c9:7d:99:2a:5f:7c:60:a8:4e:78:71:61:a0:ba: 5b:7a:1d:7b:2d:63:e3:2e:24:cf:84:ba:ac:31:cc: 50:67:6a:3a:25:7b:94:34:90:26:56:4c:fe:0b:e4: e0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D3:AC:AC:F0:C8:84:E3:F5:06:63:BC:7A:7A:43:D4:71:A9:CB:4B X509v3 Authority Key Identifier: keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32342d3234203d3e20313534343130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.52.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:4a:fa:76:23:57:13:d9:ca:29:cd:a8:77:bf:e2:3d:e0:62: 95:a7:a9:d0:45:2f:ec:d6:5f:39:5f:df:e3:08:79:c4:05:cb: fa:75:c4:78:32:69:11:ba:97:09:ad:b4:2b:37:48:9b:17:10: 53:ee:53:97:37:d9:3f:b6:68:81:47:12:3d:8f:1d:43:83:1a: 4a:a0:dd:75:05:36:17:66:5e:d2:ec:1d:15:ec:da:84:b6:e6: 31:63:80:30:9b:77:b7:f0:03:3c:e3:81:a2:7d:66:72:ae:43: 6c:6e:c8:be:a4:d9:23:36:ed:e7:1a:5f:e9:cd:ad:a5:02:b5: f1:77:ab:8b:54:ff:43:2f:0a:23:be:ed:89:27:a7:be:31:21: 45:af:46:42:6c:b9:68:55:19:55:8b:96:4a:36:4c:38:fe:fd: 17:68:23:00:88:07:f9:65:3e:b6:46:0b:e2:b5:63:18:79:0c: 66:ea:2b:b8:16:c4:51:f8:d1:b7:ad:18:ec:9f:4c:a4:38:3e: 76:d3:0f:d4:13:28:37:1f:da:80:39:61:9e:66:4b:91:a0:5e: 9e:dd:1d:14:72:9c:61:9d:f4:91:f9:86:18:36:fe:0b:a9:78: c3:de:d9:43:89:df:5c:68:43:83:27:40:df:d9:ef:54:58:b2: 2b:97:53:b1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSBq2TH/6zJfPW5qA0/+hwuyMZSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx OUFBODU5ODAeFw0yNjA1MDMwMjM5NDhaFw0yNzA1MDIwMjQ0NDhaMDMxMTAvBgNV BAMTKENDRDNBQ0FDRjBDODg0RTNGNTA2NjNCQzdBN0E0M0Q0NzFBOUNCNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbc2ZYGU6Wi4cg5mgbVQ+pEyKg Rz43BLfpddQFl+ifbfaoQjT+QMp42RWvbSXHv3MsgiD87ubsfyLg2Wml5lRLoH/t SQ/FVB+KmZUdYD6Hbcv5PH2CUkAcERC0TGcsmPMN7NveioNHvggonANDiTJdtgij xkdoGJ09wCUfGBIRkcrNxuf2pDIPlIlyRvuxZmK/vLIOIGgN6UplQpgV8gn8I/J8 am96INx+vOQBSmQeNX0B+6UDZ0IeFB0lCxxdino3Ems+lYYqW+VKzWFgQINwDGnJ fZkqX3xgqE54cWGgult6HXstY+MuJM+EuqwxzFBnajole5Q0kCZWTP4L5OAxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUzNOsrPDIhOP1BmO8enpD1HGpy0swHwYDVR0j BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4 NTk4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdhMWM0YzFmLTcxNDEtNDdkNi1h N2Y4LWUzNWZmZTExNzQwNC8wLzMxMzAzMzJlMzkzNjJlMzUzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzNDM0MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdgNDANBgkqhkiG 9w0BAQsFAAOCAQEAD0r6diNXE9nKKc2od7/iPeBilaep0EUv7NZfOV/f4wh5xAXL +nXEeDJpEbqXCa20KzdImxcQU+5TlzfZP7ZogUcSPY8dQ4MaSqDddQU2F2Ze0uwd FezahLbmMWOAMJt3t/ADPOOBon1mcq5DbG7IvqTZIzbt5xpf6c2tpQK18Xeri1T/ Qy8KI77tiSenvjEhRa9GQmy5aFUZVYuWSjZMOP79F2gjAIgH+WU+tkYL4rVjGHkM ZuoruBbEUfjRt60Y7J9MpDg+dtMP1BMoNx/agDlhnmZLkaBent0dFHKcYZ30kfmG GDb+C6l4w97ZQ4nfXGhDgydA39nvVFiyK5dTsQ== -----END CERTIFICATE-----Generated at Wed May 13 04:19:20 2026 by rpki-client