$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36352e302f32342d3234203d3e203539313538.roa File: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (raw, json) Hash identifier: h0Ywdp2xV/0uaBG2V+ZPA5ElWunEb3BnR0JL9D5MtcM= Subject key identifier: BB:4A:B9:40:7B:26:06:69:A9:77:34:3E:D4:02:10:C4:B9:A5:8C:1A Certificate issuer: /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Certificate serial: 24CB2DA456C946B8D13584C3A69477ADFBB8BA82 Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36352e302f32342d3234203d3e203539313538.roa Signing time: Sun 03 May 2026 02:31:15 +0000 ROA not before: Sun 03 May 2026 02:26:15 +0000 ROA not after: Sun 02 May 2027 02:31:15 +0000 asID: 59158 IP address blocks: 103.224.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:cb:2d:a4:56:c9:46:b8:d1:35:84:c3:a6:94:77:ad:fb:b8:ba:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Validity Not Before: May 3 02:26:15 2026 GMT Not After : May 2 02:31:15 2027 GMT Subject: CN=BB4AB9407B260669A977343ED40210C4B9A58C1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:60:bc:39:de:dd:e7:c9:0e:da:c4:7e:9e:a5: 8a:ed:6d:35:59:19:e4:8f:40:ca:b8:c3:58:1e:60: 23:20:8c:ef:6d:02:68:a9:fa:e5:7d:6b:04:2e:9e: fb:31:c9:bf:79:e3:88:10:f3:e0:07:c6:0c:6f:31: 72:b7:6b:6d:e0:c1:57:78:a9:be:3b:7b:a6:5d:50: df:7c:20:e0:98:0e:dc:22:14:43:33:25:8b:8c:07: 10:63:23:3e:53:75:71:b8:d3:1c:6a:b5:4e:9e:01: 49:10:7b:7a:1d:97:da:58:3c:f3:ca:e9:bc:2e:c7: 0b:e8:5e:d2:ae:2c:3c:ac:02:e6:93:b8:5b:23:2b: 1b:ff:b2:f2:c3:ae:be:83:b2:35:a1:32:23:36:3d: d0:63:48:74:5e:33:40:5b:23:b7:52:68:19:43:19: 01:85:93:45:1e:a1:10:71:5c:b9:54:68:a9:54:ac: df:7c:f4:da:77:9b:ba:d9:5e:3d:6a:87:9e:4f:7c: ef:76:b6:61:5d:8c:41:30:35:9c:8c:35:ee:d7:47: 97:7c:4c:8a:d5:73:9a:cd:3b:69:c6:d2:1b:f1:ea: e7:dd:cb:2d:10:91:41:70:90:a6:5d:0c:b6:82:1d: df:fc:18:f3:fc:8e:e3:9c:06:30:1f:b8:2a:29:c5: 31:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4A:B9:40:7B:26:06:69:A9:77:34:3E:D4:02:10:C4:B9:A5:8C:1A X509v3 Authority Key Identifier: keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36352e302f32342d3234203d3e203539313538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.224.65.0/24 Signature Algorithm: sha256WithRSAEncryption 84:82:8a:4c:41:8c:92:4a:3f:7d:9f:aa:53:e4:31:17:38:43: 55:8a:52:ac:04:f2:9b:49:61:d4:7a:73:5d:4a:43:8f:05:b2: c9:f1:56:88:a4:12:e3:7a:2e:45:cb:36:1d:b2:d6:b5:6f:77: 09:7a:1b:28:63:bf:a6:26:b9:bf:8b:96:5f:ee:0f:e4:b6:20: a8:26:bc:55:d4:03:a3:6f:fd:5f:2a:f5:51:c5:04:e0:1d:bf: d8:fc:43:12:f6:43:04:73:f1:b3:af:ec:0e:14:53:4b:90:00: 45:bf:5a:7c:3b:41:30:08:9c:30:69:c7:7a:1b:ef:57:60:ce: 12:66:00:a7:b4:3b:62:4a:12:85:99:38:cb:8d:8d:dd:ff:99: 68:27:4e:04:18:5d:41:62:b7:02:ef:4e:14:da:93:28:f8:17: 2d:bb:27:be:8f:54:1f:62:d4:32:55:ce:0f:ac:7d:16:9f:6b: 82:c3:ba:c2:13:fc:63:59:f2:fa:d2:b0:34:95:62:89:61:e3: b6:d4:f1:bd:11:a5:6a:15:3d:6c:db:cd:1f:29:0d:ca:e7:ef: b3:6f:53:02:d8:bf:ef:67:1b:66:4e:bc:80:15:bb:9f:37:88: 72:60:30:10:91:40:55:e0:cb:36:18:d0:d6:d1:db:05:ab:ad: fe:31:f8:47 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJMstpFbJRrjRNYTDppR3rfu4uoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNG Q0Q5QThBRTAeFw0yNjA1MDMwMjI2MTVaFw0yNzA1MDIwMjMxMTVaMDMxMTAvBgNV BAMTKEJCNEFCOTQwN0IyNjA2NjlBOTc3MzQzRUQ0MDIxMEM0QjlBNThDMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYLw53t3nyQ7axH6epYrtbTVZ GeSPQMq4w1geYCMgjO9tAmip+uV9awQunvsxyb9544gQ8+AHxgxvMXK3a23gwVd4 qb47e6ZdUN98IOCYDtwiFEMzJYuMBxBjIz5TdXG40xxqtU6eAUkQe3odl9pYPPPK 6bwuxwvoXtKuLDysAuaTuFsjKxv/svLDrr6DsjWhMiM2PdBjSHReM0BbI7dSaBlD GQGFk0UeoRBxXLlUaKlUrN989Np3m7rZXj1qh55PfO92tmFdjEEwNZyMNe7XR5d8 TIrVc5rNO2nG0hvx6ufdyy0QkUFwkKZdDLaCHd/8GPP8juOcBjAfuCopxTFvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUu0q5QHsmBmmpdzQ+1AIQxLmljBowHwYDVR0j BBgwFoAUTL6OBwyTDnsCvlZXxVKObPzZqK4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4ZDU0YWUtODcwZC00MzQ4LWFiNTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcw QzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNGQ0Q5QThBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0JFOEUwNzBDOTMwRTdCMDJCRTU2NTdDNTUyOEU2Q0ZDRDlB OEFFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRhOGQ1NGFlLTg3MGQtNDM0OC1h YjU4LTMwMDkwYTc2MGEzNi8wLzMxMzAzMzJlMzIzMjM0MmUzNjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzOTMxMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfgQTANBgkqhkiG 9w0BAQsFAAOCAQEAhIKKTEGMkko/fZ+qU+QxFzhDVYpSrATym0lh1HpzXUpDjwWy yfFWiKQS43ouRcs2HbLWtW93CXobKGO/pia5v4uWX+4P5LYgqCa8VdQDo2/9Xyr1 UcUE4B2/2PxDEvZDBHPxs6/sDhRTS5AARb9afDtBMAicMGnHehvvV2DOEmYAp7Q7 YkoShZk4y42N3f+ZaCdOBBhdQWK3Au9OFNqTKPgXLbsnvo9UH2LUMlXOD6x9Fp9r gsO6whP8Y1ny+tKwNJViiWHjttTxvRGlahU9bNvNHykNyufvs29TAti/72cbZk68 gBW7nzeIcmAwEJFAVeDLNhjQ1tHbBaut/jH4Rw== -----END CERTIFICATE-----Generated at Wed May 13 05:55:33 2026 by rpki-client