$ rpki-client -vvf rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa File: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (raw, json) Hash identifier: VGpXcnOrawhL5wvpMkIuZux+7CXlQbXJwmOIfZPLitg= Subject key identifier: 2C:0D:4A:DF:E9:8B:D3:E3:9D:20:4D:6C:96:F6:CB:9D:8A:8E:D8:AF Certificate issuer: /CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Certificate serial: 53B3395FCA879AFF6524AC7DA82264919B8E0F22 Authority key identifier: BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa Signing time: Sun 03 May 2026 02:24:56 +0000 ROA not before: Sun 03 May 2026 02:19:56 +0000 ROA not after: Sun 02 May 2027 02:24:56 +0000 asID: 139423 IP address blocks: 103.144.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b3:39:5f:ca:87:9a:ff:65:24:ac:7d:a8:22:64:91:9b:8e:0f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Validity Not Before: May 3 02:19:56 2026 GMT Not After : May 2 02:24:56 2027 GMT Subject: CN=2C0D4ADFE98BD3E39D204D6C96F6CB9D8A8ED8AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:de:80:d1:01:7d:86:e9:fa:b3:da:03:73:91: 4c:08:fd:44:10:f6:86:2f:47:3c:8e:d2:67:97:fc: 8f:b8:3b:39:ca:a5:65:a8:8b:bb:cf:1d:44:43:47: 5c:82:cd:8d:34:cd:8f:bf:75:a6:3a:bd:ad:3d:bb: 07:9f:a2:68:96:ab:2e:68:d3:66:66:29:5e:46:73: 30:ee:85:d1:97:eb:70:2a:ab:25:4a:be:42:ab:66: af:f2:1b:3b:91:7b:6a:44:6f:85:1a:42:29:cf:50: 63:9f:b6:21:f8:40:74:c5:ed:9b:44:74:1a:93:7e: 97:32:b5:7b:03:4c:43:09:35:dc:4e:34:9b:62:c5: a3:b5:dd:77:83:e0:f1:45:dc:e4:14:76:75:3e:b7: 21:64:22:40:65:e9:f0:d0:e4:5e:ac:fd:a9:bc:7f: 59:81:44:25:3c:42:b6:de:18:0d:da:0b:3a:08:4e: 13:6b:d9:2f:34:b9:ac:eb:ec:5b:98:83:f5:48:4b: da:af:e1:a3:8b:88:eb:e3:23:78:cf:3b:1b:1d:d5: 33:a6:94:5d:be:51:48:ba:e7:85:76:99:23:5a:44: 89:a4:61:c4:31:79:41:7d:e1:ba:0d:47:0e:c5:c0: 0f:13:87:d7:a6:26:40:cd:b9:40:23:a6:bb:d0:4c: 28:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0D:4A:DF:E9:8B:D3:E3:9D:20:4D:6C:96:F6:CB:9D:8A:8E:D8:AF X509v3 Authority Key Identifier: keyid:BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.20.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:95:85:c9:98:7b:36:9a:21:46:7e:36:d5:69:e0:14:0d:e1: d8:a4:72:68:6a:2d:16:cd:4c:d4:c2:2a:f5:b6:99:69:41:e7: bf:03:9a:d5:7d:b3:5c:4a:a6:c0:e9:fe:73:1a:4e:36:e6:39: da:e4:95:5d:9a:90:4f:61:38:d7:3d:b2:fa:d4:a5:a1:99:39: 3c:2b:89:80:d7:cb:92:21:4a:a9:dc:57:8f:fd:10:5e:81:7d: 4f:a0:0a:f1:d8:73:39:95:23:71:ea:e6:07:d1:57:d5:e5:d6: d6:1b:e1:38:4e:ef:ed:22:e1:c3:ae:1f:ec:66:b6:66:2a:49: 16:61:80:54:20:c1:eb:90:39:7d:37:5c:e0:d8:c6:b0:4e:e3: 5d:09:af:80:6b:dc:ac:62:3c:0a:96:67:f4:72:1b:1a:56:c8: c5:9e:cc:95:4c:95:4f:16:df:4a:fe:67:76:c9:a4:4c:d3:76: 7b:18:ba:e6:41:d6:a7:99:a1:c6:80:0f:37:f5:76:2d:6d:71: f9:59:67:d9:80:a5:84:6f:a9:77:1a:fd:47:19:cf:67:e3:ec: 12:0a:16:31:eb:af:37:a7:18:56:fc:42:99:75:48:e4:74:64: 63:fc:e3:04:05:18:e9:56:00:a4:7e:65:7b:ad:dd:9e:0a:b2: e2:5f:a3:3f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUU7M5X8qHmv9lJKx9qCJkkZuODyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0 NUY3ODYxQTAeFw0yNjA1MDMwMjE5NTZaFw0yNzA1MDIwMjI0NTZaMDMxMTAvBgNV BAMTKDJDMEQ0QURGRTk4QkQzRTM5RDIwNEQ2Qzk2RjZDQjlEOEE4RUQ4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3oDRAX2G6fqz2gNzkUwI/UQQ 9oYvRzyO0meX/I+4OznKpWWoi7vPHURDR1yCzY00zY+/daY6va09uwefomiWqy5o 02ZmKV5GczDuhdGX63AqqyVKvkKrZq/yGzuRe2pEb4UaQinPUGOftiH4QHTF7ZtE dBqTfpcytXsDTEMJNdxONJtixaO13XeD4PFF3OQUdnU+tyFkIkBl6fDQ5F6s/am8 f1mBRCU8QrbeGA3aCzoIThNr2S80uazr7FuYg/VIS9qv4aOLiOvjI3jPOxsd1TOm lF2+UUi654V2mSNaRImkYcQxeUF94boNRw7FwA8Th9emJkDNuUAjprvQTCgrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULA1K3+mL0+OdIE1slvbLnYqO2K8wHwYDVR0j BBgwFoAUvnF3BGSNcbm9HqiLVtx4j0X3hhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQxZmYzZTItNzZiNi00ODMzLTg2YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2 NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0NUY3ODYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTcxNzcwNDY0OEQ3MUI5QkQxRUE4OEI1NkRDNzg4RjQ1Rjc4 NjFBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM0MWZmM2UyLTc2YjYtNDgzMy04 NmI1LTgyZjNmYTRlYmNiNy8wLzMxMzAzMzJlMzEzNDM0MmUzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5AUMA0GCSqG SIb3DQEBCwUAA4IBAQCalYXJmHs2miFGfjbVaeAUDeHYpHJoai0WzUzUwir1tplp Qee/A5rVfbNcSqbA6f5zGk425jna5JVdmpBPYTjXPbL61KWhmTk8K4mA18uSIUqp 3FeP/RBegX1PoArx2HM5lSNx6uYH0VfV5dbWG+E4Tu/tIuHDrh/sZrZmKkkWYYBU IMHrkDl9N1zg2MawTuNdCa+Aa9ysYjwKlmf0chsaVsjFnsyVTJVPFt9K/md2yaRM 03Z7GLrmQdanmaHGgA839XYtbXH5WWfZgKWEb6l3Gv1HGc9n4+wSChYx6683pxhW /EKZdUjkdGRj/OMEBRjpVgCkfmV7rd2eCrLiX6M/ -----END CERTIFICATE-----Generated at Wed May 13 02:15:25 2026 by rpki-client