$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130332e302f32342d3234203d3e203338353234.roa File: 3130332e33382e3130332e302f32342d3234203d3e203338353234.roa (raw, json) Hash identifier: B2vw/AfmcZ8F1gnKj13GYr8zILcXXSb57t0GLRagVN4= Subject key identifier: 5B:FC:BB:13:B4:25:94:9A:43:9C:41:C3:8C:34:53:FB:93:D5:56:0F Certificate issuer: /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Certificate serial: 5034D5689D5995E66711F9006825F46F144C8F0A Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130332e302f32342d3234203d3e203338353234.roa Signing time: Sun 03 May 2026 02:46:21 +0000 ROA not before: Sun 03 May 2026 02:41:21 +0000 ROA not after: Sun 02 May 2027 02:46:21 +0000 asID: 38524 IP address blocks: 103.38.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:34:d5:68:9d:59:95:e6:67:11:f9:00:68:25:f4:6f:14:4c:8f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Validity Not Before: May 3 02:41:21 2026 GMT Not After : May 2 02:46:21 2027 GMT Subject: CN=5BFCBB13B425949A439C41C38C3453FB93D5560F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a6:ee:e5:42:44:8b:eb:5e:16:bb:fe:28:f6: 87:68:c8:4c:06:7c:21:60:33:f3:03:c8:16:ba:cb: 65:9c:c7:36:72:d5:62:0c:11:ae:e6:bd:11:b3:bd: d6:0a:e9:57:40:ae:31:4d:51:a2:7a:6c:71:f3:2f: 3d:c8:f0:a2:50:e8:c6:b9:95:c0:f8:43:23:71:54: 08:15:54:04:c9:64:d7:9f:f5:aa:2f:58:f1:a8:3d: 3e:6b:ba:9e:e3:13:fb:2e:e9:30:95:2e:bb:8d:5b: 26:94:fd:a9:51:b8:1a:c3:5d:e9:ec:77:ef:60:fd: 64:c3:33:45:a7:a5:1e:d6:ee:0c:0f:e7:c6:31:5e: 6a:e4:94:36:3c:00:60:dc:7b:3a:f3:3b:f2:1d:75: 0c:9a:8d:b4:dd:3a:a3:f1:ac:60:f6:08:81:29:0a: 5a:9f:63:84:de:02:38:26:e2:d5:ed:36:9c:5c:6b: 87:62:c0:09:88:7e:20:0c:e8:ee:b9:48:e1:a1:4d: 50:e2:71:07:5f:07:94:bd:6a:72:23:40:12:d5:79: 3e:47:41:8c:ce:63:f3:18:d6:f5:b1:54:7a:75:e6: 63:2b:97:ee:44:07:64:d7:ce:c6:1c:9a:36:52:ac: e5:7f:58:c2:ae:a3:4c:4b:cd:32:4d:ea:e8:33:db: 2a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FC:BB:13:B4:25:94:9A:43:9C:41:C3:8C:34:53:FB:93:D5:56:0F X509v3 Authority Key Identifier: keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130332e302f32342d3234203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.38.103.0/24 Signature Algorithm: sha256WithRSAEncryption aa:df:b5:0c:37:32:5b:7e:9a:57:fa:82:14:99:a9:2d:47:c4: a4:1c:a0:6f:a9:fd:17:fc:ca:8c:aa:97:da:60:3b:92:fa:41: 54:76:40:e6:01:fe:99:0f:7a:3a:2c:5a:62:70:81:d1:07:c7: 1f:22:b0:8b:04:36:96:74:fe:47:1c:76:6f:3f:19:43:a3:36: 5a:e5:60:37:0f:53:ff:d7:32:f6:d3:1b:cc:af:0f:29:ba:19: 1c:2f:ba:01:4d:8b:7d:85:b8:16:5e:60:78:25:22:94:60:c2: 46:55:f0:21:d0:ca:28:7c:e4:b3:39:a8:9b:d4:2e:9f:3b:38: 3e:d7:61:a1:f3:29:05:5f:13:44:af:20:cc:58:25:89:95:76: d2:ad:6f:ab:a3:42:1d:82:6f:4b:02:06:57:0f:96:36:45:4d: 06:85:28:27:de:b5:f8:59:1c:b6:72:0a:f2:81:7a:71:b3:10: 08:47:4a:cb:75:57:b6:5d:63:17:0a:c4:14:da:68:17:ce:fc: bd:cb:21:da:2c:fb:f8:97:e8:92:10:d1:5a:c3:5e:b6:d2:34: 61:7d:44:ef:6a:2c:5f:d0:37:52:7f:fb:01:be:1e:e7:b1:92: e2:41:52:b5:53:07:c9:cf:23:61:b9:14:72:9c:af:e3:24:0a: a8:3d:26:d3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUDTVaJ1ZleZnEfkAaCX0bxRMjwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQzNkU2MDdGMzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVC NjI4RkY4NjAeFw0yNjA1MDMwMjQxMjFaFw0yNzA1MDIwMjQ2MjFaMDMxMTAvBgNV BAMTKDVCRkNCQjEzQjQyNTk0OUE0MzlDNDFDMzhDMzQ1M0ZCOTNENTU2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLpu7lQkSL614Wu/4o9odoyEwG fCFgM/MDyBa6y2WcxzZy1WIMEa7mvRGzvdYK6VdArjFNUaJ6bHHzLz3I8KJQ6Ma5 lcD4QyNxVAgVVATJZNef9aovWPGoPT5rup7jE/su6TCVLruNWyaU/alRuBrDXens d+9g/WTDM0WnpR7W7gwP58YxXmrklDY8AGDcezrzO/IddQyajbTdOqPxrGD2CIEp ClqfY4TeAjgm4tXtNpxca4diwAmIfiAM6O65SOGhTVDicQdfB5S9anIjQBLVeT5H QYzOY/MY1vWxVHp15mMrl+5EB2TXzsYcmjZSrOV/WMKuo0xLzTJN6ugz2yoRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUW/y7E7QllJpDnEHDjDRT+5PVVg8wHwYDVR0j BBgwFoAUlDbmB/N19yu9lliPu3zm1bYo/4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZmOTY5ZmMtMzljNy00NGNkLTg3MTYtOWNlNGM2ZDVhYzkxLzAvOTQzNkU2MDdG Mzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVCNjI4RkY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDM2RTYwN0YzNzVGNzJCQkQ5NjU4OEZCQjdDRTZENUI2MjhG Rjg2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMxMzAzMzJlMzMzODJlMzEzMDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcmZzANBgkqhkiG 9w0BAQsFAAOCAQEAqt+1DDcyW36aV/qCFJmpLUfEpBygb6n9F/zKjKqX2mA7kvpB VHZA5gH+mQ96OixaYnCB0QfHHyKwiwQ2lnT+Rxx2bz8ZQ6M2WuVgNw9T/9cy9tMb zK8PKboZHC+6AU2LfYW4Fl5geCUilGDCRlXwIdDKKHzkszmom9Qunzs4PtdhofMp BV8TRK8gzFgliZV20q1vq6NCHYJvSwIGVw+WNkVNBoUoJ961+FkctnIK8oF6cbMQ CEdKy3VXtl1jFwrEFNpoF878vcsh2iz7+JfokhDRWsNettI0YX1E72osX9A3Un/7 Ab4e57GS4kFStVMHyc8jYbkUcpyv4yQKqD0m0w== -----END CERTIFICATE-----Generated at Wed May 13 03:55:26 2026 by rpki-client