$ rpki-client -vvf rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/3130332e3231312e342e302f32332d3234203d3e2034383030.roa File: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (raw, json) Hash identifier: RNPhf9/lBBG4ePFry8t6M8E2VZ4dh3VKskTCATQigd0= Subject key identifier: 14:31:2B:32:C7:0E:BD:54:02:5B:BF:9F:97:DC:45:F8:A5:EB:29:04 Certificate issuer: /CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Certificate serial: 089F70CB75773D3C4685004DD8C691BE010A8526 Authority key identifier: BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/3130332e3231312e342e302f32332d3234203d3e2034383030.roa Signing time: Sun 03 May 2026 02:24:48 +0000 ROA not before: Sun 03 May 2026 02:19:48 +0000 ROA not after: Sun 02 May 2027 02:24:48 +0000 asID: 4800 IP address blocks: 103.211.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9f:70:cb:75:77:3d:3c:46:85:00:4d:d8:c6:91:be:01:0a:85:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Validity Not Before: May 3 02:19:48 2026 GMT Not After : May 2 02:24:48 2027 GMT Subject: CN=14312B32C70EBD54025BBF9F97DC45F8A5EB2904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:48:77:25:03:db:63:42:12:45:b4:42:f7: ef:38:45:48:9d:0d:78:8b:e5:a9:1e:53:d6:a4:13: f1:29:04:d8:24:30:8b:a2:b5:f4:04:72:5b:c6:33: fb:db:b8:9a:da:00:34:81:3a:2c:91:ce:67:91:19: 7a:2e:cf:d8:46:ac:b9:a4:9a:cc:6f:1e:ad:bf:be: f5:7b:b6:72:5d:b3:50:7b:fe:63:84:b7:f9:d6:97: 7a:ab:37:8f:f9:49:2c:75:28:f9:b6:25:13:dd:d8: 57:cb:73:65:cc:ed:90:7f:4f:3a:a0:12:07:54:31: c8:aa:3b:f5:d8:c6:e2:c8:3c:47:a1:bd:17:10:4f: b9:b0:fd:e2:85:ba:03:84:cc:07:a7:d3:e4:a9:3f: cf:71:27:54:8a:7d:35:68:d1:37:72:bd:6f:fd:04: e8:ba:11:f4:cd:0e:e0:12:d2:18:00:a4:53:86:17: e7:b0:69:2f:96:83:30:3c:97:f2:fa:ca:f6:41:0e: 72:21:bc:53:e3:a3:3b:0c:f2:42:e0:ff:6f:da:97: ed:0d:11:b7:61:41:35:c7:fb:d2:2e:3a:bd:46:b0: 39:fe:dc:ab:95:10:3c:ef:2f:e7:4c:4d:46:49:4b: 9e:be:df:01:98:4c:20:e2:db:44:65:81:a1:4c:72: 20:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:31:2B:32:C7:0E:BD:54:02:5B:BF:9F:97:DC:45:F8:A5:EB:29:04 X509v3 Authority Key Identifier: keyid:BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/3130332e3231312e342e302f32332d3234203d3e2034383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.4.0/23 Signature Algorithm: sha256WithRSAEncryption bb:46:ab:cd:41:18:7a:5e:13:d2:16:64:0f:13:06:6c:18:f1: 06:31:e5:98:35:62:74:96:f6:21:7b:b8:1d:aa:56:16:be:0a: 4c:a2:79:14:b7:e3:01:6a:b7:87:79:7d:f4:ec:7d:ac:0e:a3: dc:71:43:c3:1c:8d:6a:2a:c8:d7:05:06:3c:7c:42:1c:1a:a1: b6:eb:28:b3:b6:cf:4f:cc:e4:c0:fc:a3:69:10:19:99:ae:cd: 0b:1e:cb:c7:82:73:c0:41:e2:e8:cd:f1:ae:de:e1:a1:93:ad: 39:6a:b8:29:54:1d:69:cc:da:38:ea:67:85:ba:f9:87:55:ca: ef:16:0e:c3:72:f5:2d:30:be:26:a1:5b:15:05:ce:58:b2:f3: f1:d8:05:bc:04:ce:fd:86:a2:b5:e8:fe:e1:d8:08:c3:9b:72: 1d:68:18:b1:d8:99:5e:f0:af:4e:98:d0:a3:92:1b:3d:48:62: f3:f4:b2:36:c3:ce:60:3d:20:6a:f8:5d:67:51:8a:a4:26:e5: f8:09:20:19:44:b9:b4:ca:50:d6:11:80:db:e2:14:cc:e9:14: e5:9f:1c:57:aa:94:8e:3f:76:e0:78:9d:cb:2f:5f:6d:1c:59: 8c:9e:0c:84:c8:f7:32:4b:81:b9:41:25:5a:63:07:73:98:02: 0d:aa:40:3f -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUCJ9wy3V3PTxGhQBN2MaRvgEKhSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzczRUZF NEQ1QTM3RDAeFw0yNjA1MDMwMjE5NDhaFw0yNzA1MDIwMjI0NDhaMDMxMTAvBgNV BAMTKDE0MzEyQjMyQzcwRUJENTQwMjVCQkY5Rjk3REM0NUY4QTVFQjI5MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+m0h3JQPbY0ISRbRC9+84RUid DXiL5akeU9akE/EpBNgkMIuitfQEclvGM/vbuJraADSBOiyRzmeRGXouz9hGrLmk msxvHq2/vvV7tnJds1B7/mOEt/nWl3qrN4/5SSx1KPm2JRPd2FfLc2XM7ZB/Tzqg EgdUMciqO/XYxuLIPEehvRcQT7mw/eKFugOEzAen0+SpP89xJ1SKfTVo0TdyvW/9 BOi6EfTNDuAS0hgApFOGF+ewaS+WgzA8l/L6yvZBDnIhvFPjozsM8kLg/2/al+0N EbdhQTXH+9IuOr1GsDn+3KuVEDzvL+dMTUZJS56+3wGYTCDi20RlgaFMciA9AgMB AAGjggItMIICKTAdBgNVHQ4EFgQUFDErMscOvVQCW7+fl9xF+KXrKQQwHwYDVR0j BBgwFoAUuvSl8VzkGWRtaP/Jxzxz7+TVo30wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNhZDM3NTctOTNhMC00YjMzLTkxMjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1 Q0U0MTk2NDZENjhGRkM5QzczQzczRUZFNEQ1QTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUY0QTVGMTVDRTQxOTY0NkQ2OEZGQzlDNzNDNzNFRkU0RDVB MzdELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvMzEzMDMzMmUzMjMxMzEyZTM0MmUzMDJmMzIzMzJk MzIzNDIwM2QzZTIwMzQzODMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn0wQwDQYJKoZIhvcNAQEL BQADggEBALtGq81BGHpeE9IWZA8TBmwY8QYx5Zg1YnSW9iF7uB2qVha+CkyieRS3 4wFqt4d5ffTsfawOo9xxQ8McjWoqyNcFBjx8QhwaobbrKLO2z0/M5MD8o2kQGZmu zQsey8eCc8BB4ujN8a7e4aGTrTlquClUHWnM2jjqZ4W6+YdVyu8WDsNy9S0wviah WxUFzliy8/HYBbwEzv2GorXo/uHYCMObch1oGLHYmV7wr06Y0KOSGz1IYvP0sjbD zmA9IGr4XWdRiqQm5fgJIBlEubTKUNYRgNviFMzpFOWfHFeqlI4/duB4ncsvX20c WYyeDITI9zJLgblBJVpjB3OYAg2qQD8= -----END CERTIFICATE-----Generated at Wed May 13 04:19:51 2026 by rpki-client