$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e31302e302f32342d3234203d3e20313335343838.roa File: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (raw, json) Hash identifier: 1LTG4MgFRMZ7zoAbplTKMa6nhkiFff/vlGz+LTJuyUg= Subject key identifier: 2C:76:04:B8:27:DA:C6:FA:A7:02:7B:A1:D8:2B:0B:E3:B3:BA:4D:43 Certificate issuer: /CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F Certificate serial: 3C7E170F7B111DCC0215A6EA780CBD3281FC4609 Authority key identifier: EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e31302e302f32342d3234203d3e20313335343838.roa Signing time: Sun 03 May 2026 02:56:10 +0000 ROA not before: Sun 03 May 2026 02:51:10 +0000 ROA not after: Sun 02 May 2027 02:56:10 +0000 asID: 135488 IP address blocks: 103.95.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7e:17:0f:7b:11:1d:cc:02:15:a6:ea:78:0c:bd:32:81:fc:46:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F Validity Not Before: May 3 02:51:10 2026 GMT Not After : May 2 02:56:10 2027 GMT Subject: CN=2C7604B827DAC6FAA7027BA1D82B0BE3B3BA4D43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c5:c0:d5:4a:b2:1f:a0:f4:eb:8b:6f:3a:9a: 7b:7e:42:e9:3e:92:ea:11:8e:22:12:4a:4b:91:d9: 82:c6:16:f8:3e:85:33:5d:cd:50:c1:57:5a:43:0d: 6f:f0:9c:49:5f:c2:e0:4d:20:48:11:ba:67:83:82: 19:8f:9c:0e:33:44:99:54:b6:74:8a:cc:94:e0:4e: 17:83:80:82:13:b7:e2:26:11:f2:9c:39:ba:e5:10: 0d:15:2d:ae:f2:78:f6:e3:b2:04:05:fe:2a:20:b5: 3b:ab:10:20:ee:94:40:64:fa:c2:06:68:eb:52:84: 60:19:96:38:ac:3b:0a:e4:ce:81:69:2f:e5:9b:cc: 35:a4:25:38:f8:2a:5e:93:75:58:18:58:3b:25:80: 96:7e:d9:9b:ca:3f:c3:1c:69:1a:bf:ae:30:12:38: 24:11:e7:de:4b:34:e5:46:48:cf:f8:7b:74:a3:c8: 3e:49:b7:63:cb:d2:c2:7c:58:d9:82:ba:e4:de:fd: c6:7f:85:1e:85:42:25:c8:57:9e:5c:c8:90:e6:9c: 2a:02:0b:1a:b5:b3:45:8e:0d:90:1b:6e:74:73:8d: 63:cd:d2:ba:0b:5b:1c:82:e3:8b:51:c3:7a:90:8c: 6b:2b:6c:79:20:52:45:c2:bb:f6:54:67:19:a3:2a: 2e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:76:04:B8:27:DA:C6:FA:A7:02:7B:A1:D8:2B:0B:E3:B3:BA:4D:43 X509v3 Authority Key Identifier: keyid:EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e31302e302f32342d3234203d3e20313335343838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.10.0/24 Signature Algorithm: sha256WithRSAEncryption 99:97:55:e5:09:49:98:f8:b1:97:34:96:5a:ab:a1:52:77:97: e0:7b:84:83:ca:94:97:df:22:2e:75:b2:36:bf:7a:18:cf:98: cb:77:00:87:e1:2c:cf:44:ff:3d:28:d6:66:83:e2:28:86:c0: 5d:a2:e1:5c:b9:cf:fb:1d:f2:39:0f:46:26:bb:5f:d8:45:6e: 6a:63:cc:ec:dc:c7:e3:4a:7c:f0:ae:b5:ed:85:62:92:a9:50: 7f:0f:7a:9f:7c:3f:a9:19:88:be:7c:a0:44:b7:47:eb:a0:70: 95:cd:2d:2d:1f:18:24:e7:cb:21:19:e8:3a:d2:9c:9b:26:6f: a9:79:90:20:bb:ae:22:52:76:4b:ea:87:2e:29:1b:55:a5:3e: 87:40:3f:78:82:49:e1:c8:a6:51:66:c5:d5:60:e0:92:2b:a6: 8a:46:d3:90:36:d7:7e:de:5a:3e:21:04:33:56:72:88:7a:5a: 37:19:9f:0a:75:62:2e:1d:57:c3:b5:4b:22:c1:ab:96:d1:2f: 50:84:77:27:34:78:07:1c:1a:ba:c9:f9:0c:a4:5f:87:bf:5f: 6d:74:9f:c3:b1:84:59:0c:ec:ed:98:61:67:ba:6b:6a:d7:03: 34:99:8d:d5:2b:37:4a:93:f7:98:9f:29:ee:eb:73:c0:8a:3f: 69:73:cb:18 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPH4XD3sRHcwCFabqeAy9MoH8RgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0Q0QxQUM1ODEwMDQ0MTlBNzQ2OEQwM0ZGODFFQUEy NUQ5RTMzRjAeFw0yNjA1MDMwMjUxMTBaFw0yNzA1MDIwMjU2MTBaMDMxMTAvBgNV BAMTKDJDNzYwNEI4MjdEQUM2RkFBNzAyN0JBMUQ4MkIwQkUzQjNCQTRENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIxcDVSrIfoPTri286mnt+Quk+ kuoRjiISSkuR2YLGFvg+hTNdzVDBV1pDDW/wnElfwuBNIEgRumeDghmPnA4zRJlU tnSKzJTgTheDgIITt+ImEfKcObrlEA0VLa7yePbjsgQF/iogtTurECDulEBk+sIG aOtShGAZljisOwrkzoFpL+WbzDWkJTj4Kl6TdVgYWDslgJZ+2ZvKP8McaRq/rjAS OCQR595LNOVGSM/4e3SjyD5Jt2PL0sJ8WNmCuuTe/cZ/hR6FQiXIV55cyJDmnCoC Cxq1s0WODZAbbnRzjWPN0roLWxyC44tRw3qQjGsrbHkgUkXCu/ZUZxmjKi7JAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULHYEuCfaxvqnAnuh2CsL47O6TUMwHwYDVR0j BBgwFoAU70zRrFgQBEGadGjQP/geqiXZ4z8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM2NDY1ZWMtOTE2MC00NTliLThkMTEtOTQ4ZmMyNmRhMWMwLzAvRUY0Q0QxQUM1 ODEwMDQ0MTlBNzQ2OEQwM0ZGODFFQUEyNUQ5RTMzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjRDRDFBQzU4MTAwNDQxOUE3NDY4RDAzRkY4MUVBQTI1RDlF MzNGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EzNjQ2NWVjLTkxNjAtNDU5Yi04 ZDExLTk0OGZjMjZkYTFjMC8wLzMxMzAzMzJlMzkzNTJlMzEzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdfCjANBgkqhkiG 9w0BAQsFAAOCAQEAmZdV5QlJmPixlzSWWquhUneX4HuEg8qUl98iLnWyNr96GM+Y y3cAh+Esz0T/PSjWZoPiKIbAXaLhXLnP+x3yOQ9GJrtf2EVuamPM7NzH40p88K61 7YVikqlQfw96n3w/qRmIvnygRLdH66Bwlc0tLR8YJOfLIRnoOtKcmyZvqXmQILuu IlJ2S+qHLikbVaU+h0A/eIJJ4cimUWbF1WDgkiumikbTkDbXft5aPiEEM1ZyiHpa NxmfCnViLh1Xw7VLIsGrltEvUIR3JzR4Bxwausn5DKRfh79fbXSfw7GEWQzs7Zhh Z7pratcDNJmN1Ss3SpP3mJ8p7utzwIo/aXPLGA== -----END CERTIFICATE-----Generated at Wed May 13 05:24:39 2026 by rpki-client