$ rpki-client -vvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39312e302f32342d3234203d3e203538333831.roa File: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (raw, json) Hash identifier: F62HpzCPf0jVzJzqHRtqYgkpCr6Z0Ln+rY5et4Po02Y= Subject key identifier: 87:B9:D9:6F:5C:4E:13:02:A7:F3:9C:EA:89:B4:91:03:2A:8F:7E:07 Certificate issuer: /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Certificate serial: 7D6F9897983D958B22E940C89789BD10E189C3BB Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39312e302f32342d3234203d3e203538333831.roa Signing time: Sun 03 May 2026 02:24:46 +0000 ROA not before: Sun 03 May 2026 02:19:46 +0000 ROA not after: Sun 02 May 2027 02:24:46 +0000 asID: 58381 IP address blocks: 103.20.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:6f:98:97:98:3d:95:8b:22:e9:40:c8:97:89:bd:10:e1:89:c3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Validity Not Before: May 3 02:19:46 2026 GMT Not After : May 2 02:24:46 2027 GMT Subject: CN=87B9D96F5C4E1302A7F39CEA89B491032A8F7E07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:97:04:fc:c5:dd:90:5f:a6:80:9b:41:a9: 97:a9:7d:08:62:e5:cb:55:80:42:e0:c4:f1:3f:8a: 17:1b:9e:93:11:f7:45:1f:60:a9:d0:35:03:d0:46: 9a:c5:b0:9b:d9:bb:52:e4:28:23:dd:79:17:0d:5b: 35:04:7b:20:00:c2:bf:2a:84:cf:00:52:76:ea:bd: d4:e4:34:e6:2a:41:d2:4f:94:cb:ec:c6:fe:fc:43: f0:03:41:a3:bd:34:1c:28:69:91:8b:46:39:c1:a3: 7d:73:92:4f:e2:cd:cd:da:2e:e2:e2:3b:e5:80:d3: 45:ee:4f:8b:c0:bd:f4:16:9a:1a:02:58:c3:de:3a: 3e:aa:28:4c:08:ab:16:9c:4b:5d:e3:d3:d5:24:e9: a0:18:46:71:42:f4:a9:58:c8:91:ad:7e:bc:ba:41: 1e:bd:18:87:b4:56:2b:97:54:cc:9a:46:05:a6:09: 33:1e:a9:e1:17:93:fd:fa:00:f9:2b:4d:67:59:35: 0a:43:bc:78:0a:b4:26:ad:ea:59:27:fb:8c:a8:1b: 73:3d:b9:1c:d7:5f:58:b6:3c:26:11:be:5e:a5:39: 42:f3:41:25:e4:51:10:5d:7a:e7:97:b8:e3:c7:dd: 31:03:6f:74:01:b6:dd:ab:47:57:a1:aa:6a:38:5f: 66:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B9:D9:6F:5C:4E:13:02:A7:F3:9C:EA:89:B4:91:03:2A:8F:7E:07 X509v3 Authority Key Identifier: keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39312e302f32342d3234203d3e203538333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.91.0/24 Signature Algorithm: sha256WithRSAEncryption 42:1b:ee:3b:70:0b:04:c4:93:bd:f0:ef:03:15:7c:2d:6b:71: 6f:b1:e7:50:a1:05:b2:53:8b:7b:07:83:8c:ba:96:b2:4c:3d: 91:8f:55:2f:24:0a:fc:8b:5b:6d:a6:6b:64:15:75:d9:36:86: e4:b6:11:19:4c:9a:11:32:35:26:0f:d9:87:bf:d3:14:1b:9d: a0:4f:c0:07:4a:37:8d:5d:d7:04:46:43:cd:81:1d:0f:4e:a9: 10:e0:59:fb:e3:21:ef:58:c2:c3:ac:0d:e2:9f:e1:b7:09:4e: d4:eb:45:09:a2:b9:f3:41:32:15:c4:ba:b8:33:a0:4c:82:93: 5d:da:4c:87:aa:1b:e1:72:16:02:d0:06:df:d9:7e:36:08:1f: 01:a0:6a:75:ed:c8:39:d2:06:57:6e:5b:a2:3d:c7:6a:0e:35: f4:ee:90:c0:af:37:23:2d:3c:da:65:a8:11:62:79:28:4c:1f: 88:b1:83:40:2b:e0:be:08:03:13:9b:14:a2:61:76:6a:60:7d: 71:aa:95:51:b0:f7:ff:eb:16:41:24:58:ed:f7:77:73:ae:7e: 57:16:f5:df:07:d8:65:a9:af:92:99:c4:bf:9c:13:24:2f:23: a7:f0:fb:5e:bb:92:e8:3c:9f:5f:3b:28:b0:50:34:1f:8e:47: 92:3f:c9:eb -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUfW+Yl5g9lYsi6UDIl4m9EOGJw7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJC REE5OUNCMDAeFw0yNjA1MDMwMjE5NDZaFw0yNzA1MDIwMjI0NDZaMDMxMTAvBgNV BAMTKDg3QjlEOTZGNUM0RTEzMDJBN0YzOUNFQTg5QjQ5MTAzMkE4RjdFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCppcE/MXdkF+mgJtBqZepfQhi 5ctVgELgxPE/ihcbnpMR90UfYKnQNQPQRprFsJvZu1LkKCPdeRcNWzUEeyAAwr8q hM8AUnbqvdTkNOYqQdJPlMvsxv78Q/ADQaO9NBwoaZGLRjnBo31zkk/izc3aLuLi O+WA00XuT4vAvfQWmhoCWMPeOj6qKEwIqxacS13j09Uk6aAYRnFC9KlYyJGtfry6 QR69GIe0ViuXVMyaRgWmCTMeqeEXk/36APkrTWdZNQpDvHgKtCat6lkn+4yoG3M9 uRzXX1i2PCYRvl6lOULzQSXkURBdeueXuOPH3TEDb3QBtt2rR1ehqmo4X2adAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUh7nZb1xOEwKn85zqibSRAyqPfgcwHwYDVR0j BBgwFoAUD7Qksg1qRYDm0yM/zy658r2pnLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM4ZDI3NTUtMzgwZC00NzdlLWJmMjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIw RDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJCREE5OUNCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI0MjRCMjBENkE0NTgwRTZEMzIzM0ZDRjJFQjlGMkJEQTk5 Q0IwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMzOGQyNzU1LTM4MGQtNDc3ZS1i ZjI1LTBhZjI5MDI2YmQ3MC8wLzMxMzAzMzJlMzIzMDJlMzkzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzMzM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnFFswDQYJKoZIhvcN AQELBQADggEBAEIb7jtwCwTEk73w7wMVfC1rcW+x51ChBbJTi3sHg4y6lrJMPZGP VS8kCvyLW22ma2QVddk2huS2ERlMmhEyNSYP2Ye/0xQbnaBPwAdKN41d1wRGQ82B HQ9OqRDgWfvjIe9YwsOsDeKf4bcJTtTrRQmiufNBMhXEurgzoEyCk13aTIeqG+Fy FgLQBt/ZfjYIHwGganXtyDnSBlduW6I9x2oONfTukMCvNyMtPNplqBFieShMH4ix g0Ar4L4IAxObFKJhdmpgfXGqlVGw9//rFkEkWO33d3OuflcW9d8H2GWpr5KZxL+c EyQvI6fw+167kug8n187KLBQNB+OR5I/yes= -----END CERTIFICATE-----Generated at Wed May 6 02:08:30 2026 by rpki-client