$ rpki-client -vvf rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa File: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (raw, json) Hash identifier: oaMZvvPhg7sQ6sU35Q1iSLRP325On6qyrsdfo7OOPY8= Subject key identifier: 97:CA:36:D0:48:96:97:B5:4D:59:43:47:D8:5A:A4:A7:F9:F3:C0:1D Certificate issuer: /CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Certificate serial: 2D80E77826661110C13CAB925BDDBBFFC39FBCED Authority key identifier: 38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa Signing time: Sun 03 May 2026 02:53:40 +0000 ROA not before: Sun 03 May 2026 02:48:40 +0000 ROA not after: Sun 02 May 2027 02:53:40 +0000 asID: 138080 IP address blocks: 103.131.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:80:e7:78:26:66:11:10:c1:3c:ab:92:5b:dd:bb:ff:c3:9f:bc:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Validity Not Before: May 3 02:48:40 2026 GMT Not After : May 2 02:53:40 2027 GMT Subject: CN=97CA36D0489697B54D594347D85AA4A7F9F3C01D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:61:bb:83:c7:f7:79:07:dd:d9:26:80:7b: a8:d4:df:81:4f:ca:72:45:00:2e:e4:4d:4a:05:8f: 85:0f:a6:3a:28:a9:c3:a6:06:f2:e6:62:6b:45:5d: a9:5a:21:f1:54:f2:65:d0:e1:a4:83:cc:1f:2c:cb: 97:99:46:e5:81:97:8c:7c:42:c6:38:1a:f3:8f:e1: f2:1d:e1:81:79:8d:0a:38:72:28:94:ea:a6:b7:f1: 2a:f9:6d:39:1d:cd:59:85:d5:41:dd:9d:ad:61:22: f0:8e:38:53:80:b6:fc:f7:12:59:66:4a:9e:d7:27: f2:68:19:c9:b8:d7:7f:46:4c:8d:50:d6:61:1c:59: e3:dd:1e:3a:3f:87:56:c2:24:58:12:b8:5d:db:ca: cb:06:7b:f2:3b:45:83:8d:4d:03:5e:a3:89:3d:2a: 72:45:a0:aa:a1:9a:97:df:cb:e3:b0:85:e4:11:1a: ef:90:79:18:ef:09:1c:6d:b9:b1:7b:23:ee:55:e3: 9a:ba:f8:cc:88:6f:18:c4:4f:d0:4c:7c:22:5c:5d: a4:a5:a9:4c:6d:3d:5e:cb:c1:97:7c:90:95:bf:a7: bc:0b:35:d8:cd:df:ed:2f:08:8e:b7:de:ec:7b:fd: 0f:9a:f4:5a:af:44:3a:ed:f0:00:4b:df:3b:76:52: c1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CA:36:D0:48:96:97:B5:4D:59:43:47:D8:5A:A4:A7:F9:F3:C0:1D X509v3 Authority Key Identifier: keyid:38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.16.0/23 Signature Algorithm: sha256WithRSAEncryption ad:9d:d4:6d:44:af:99:86:92:5b:00:8b:54:1f:98:c6:63:fb: da:20:2f:1a:74:f4:be:14:44:c8:a5:8d:f6:3f:33:0a:02:2d: 4e:eb:51:a3:f0:f4:69:e9:73:df:54:08:1e:90:7a:75:f6:0b: ac:ea:96:de:f3:94:7a:ef:ca:3f:37:1d:2d:71:83:80:f2:44: 0c:56:6d:12:7f:7d:97:b4:c4:37:42:60:3f:17:f6:7b:d1:43: 63:2d:34:d6:d6:3d:e6:85:e2:8d:e3:ba:59:c3:3e:92:70:c8: 0f:02:1b:ac:04:58:96:c1:f0:fc:94:c3:4d:45:18:13:87:58: c9:37:75:09:d9:9e:70:76:a9:63:3c:6f:06:cc:4e:aa:3b:0e: 0a:d1:a6:4e:09:49:0c:70:75:79:0b:34:8a:85:fe:17:41:31: 15:2d:3a:66:09:5e:11:87:9c:65:d1:da:23:40:41:89:b8:90: 90:e7:53:0f:f8:36:49:25:30:1d:1e:1f:34:a0:8a:04:ff:a7: 47:cc:43:d0:04:7b:69:4e:03:ba:94:f1:43:98:b8:28:ed:95: c8:cf:df:03:e6:3b:81:17:8a:0a:e6:cb:2c:a7:63:3a:04:8c: 0f:83:10:74:d4:1a:7d:b4:92:f2:74:4b:3a:d6:19:7d:7d:50: a8:8e:f6:d1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULYDneCZmERDBPKuSW927/8OfvO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFC NEE1QUZEMjAeFw0yNjA1MDMwMjQ4NDBaFw0yNzA1MDIwMjUzNDBaMDMxMTAvBgNV BAMTKDk3Q0EzNkQwNDg5Njk3QjU0RDU5NDM0N0Q4NUFBNEE3RjlGM0MwMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfx2G7g8f3eQfd2SaAe6jU34FP ynJFAC7kTUoFj4UPpjooqcOmBvLmYmtFXalaIfFU8mXQ4aSDzB8sy5eZRuWBl4x8 QsY4GvOP4fId4YF5jQo4ciiU6qa38Sr5bTkdzVmF1UHdna1hIvCOOFOAtvz3Ellm Sp7XJ/JoGcm4139GTI1Q1mEcWePdHjo/h1bCJFgSuF3byssGe/I7RYONTQNeo4k9 KnJFoKqhmpffy+OwheQRGu+QeRjvCRxtubF7I+5V45q6+MyIbxjET9BMfCJcXaSl qUxtPV7LwZd8kJW/p7wLNdjN3+0vCI633ux7/Q+a9FqvRDrt8ABL3zt2UsFLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUl8o20EiWl7VNWUNH2Fqkp/nzwB0wHwYDVR0j BBgwFoAUOJnJLdDUL5PX2oVANP2IurSlr9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkwNGY2NzAtN2RhYy00Y2Y0LTk5MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkRE MEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFCNEE1QUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODk5QzkyREQwRDQyRjkzRDdEQTg1NDAzNEZEODhCQUI0QTVB RkQyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk5MDRmNjcwLTdkYWMtNGNmNC05 OTFkLTUwNTM5ZTNkM2Y1ZS8wLzMxMzAzMzJlMzEzMzMxMmUzMTM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4MQMA0GCSqG SIb3DQEBCwUAA4IBAQCtndRtRK+ZhpJbAItUH5jGY/vaIC8adPS+FETIpY32PzMK Ai1O61Gj8PRp6XPfVAgekHp19gus6pbe85R678o/Nx0tcYOA8kQMVm0Sf32XtMQ3 QmA/F/Z70UNjLTTW1j3mheKN47pZwz6ScMgPAhusBFiWwfD8lMNNRRgTh1jJN3UJ 2Z5wdqljPG8GzE6qOw4K0aZOCUkMcHV5CzSKhf4XQTEVLTpmCV4Rh5xl0dojQEGJ uJCQ51MP+DZJJTAdHh80oIoE/6dHzEPQBHtpTgO6lPFDmLgo7ZXIz98D5juBF4oK 5sssp2M6BIwPgxB01Bp9tJLydEs61hl9fVCojvbR -----END CERTIFICATE-----Generated at Wed May 13 07:34:48 2026 by rpki-client