$ rpki-client -vvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa File: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (raw, json) Hash identifier: VcvKBq3lW4jCz1VqqWJZKeok+nVenIiG7/VoGPMLxZA= Subject key identifier: 2B:1B:A1:D5:94:D3:56:52:50:DF:C5:87:97:77:12:73:7D:87:4E:B1 Certificate issuer: /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Certificate serial: 5C3A20C5ED956DE4C0DF9145E308262010D2F5A1 Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa Signing time: Sun 03 May 2026 02:52:20 +0000 ROA not before: Sun 03 May 2026 02:47:20 +0000 ROA not after: Sun 02 May 2027 02:52:20 +0000 asID: 55685 IP address blocks: 103.108.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:3a:20:c5:ed:95:6d:e4:c0:df:91:45:e3:08:26:20:10:d2:f5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Validity Not Before: May 3 02:47:20 2026 GMT Not After : May 2 02:52:20 2027 GMT Subject: CN=2B1BA1D594D3565250DFC587977712737D874EB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:a9:7f:04:f4:35:aa:c7:c5:9b:27:d4:09: 5c:66:31:cf:b8:98:0a:66:d8:48:e5:61:63:88:e9: 3c:d8:e9:97:c6:3d:6b:03:f1:e8:9d:7d:bb:60:b8: d4:d8:d7:c7:9d:f9:65:36:c5:8a:db:1e:bb:ce:d4: 46:c9:47:77:9f:02:94:f4:bd:dd:cf:27:87:5e:be: 2c:7e:82:fc:e5:c6:15:ac:b7:77:37:43:a3:63:72: 75:cb:83:0c:3a:23:65:43:4f:7c:c5:e5:79:43:0e: 53:3a:f5:3d:6c:c2:f2:81:17:c2:46:71:29:81:bf: be:f7:20:cf:e7:ad:a0:d4:18:22:06:68:62:b8:bd: bf:ce:95:45:90:36:8f:a5:66:49:8d:5b:b0:6e:67: cd:b8:70:b4:d7:7f:f5:f8:c7:be:16:77:f5:59:01: 7c:2a:1b:b3:0e:75:20:7c:77:fc:85:5f:d6:56:3b: a9:07:52:32:16:50:48:63:06:b5:47:f2:b5:64:9c: ea:88:f5:aa:34:73:3e:ba:b5:b5:5b:61:c1:b0:0c: c0:72:b0:d8:9f:86:98:f6:24:f0:ee:f9:c7:19:68: 05:86:c9:ca:99:0d:a3:b3:21:ae:90:50:d8:e8:00: a4:49:87:c2:71:e0:52:d7:ae:7f:03:a3:8b:1b:8e: 95:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1B:A1:D5:94:D3:56:52:50:DF:C5:87:97:77:12:73:7D:87:4E:B1 X509v3 Authority Key Identifier: keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.128.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:24:b3:3e:38:10:ff:10:21:4e:a1:c0:07:35:60:aa:de:e4: 39:5d:1b:d7:55:44:7f:96:ed:22:6e:29:16:d0:12:68:14:1f: fe:ce:05:c6:a0:45:77:3c:42:3c:7f:cb:7b:15:ad:6e:b6:22: ba:eb:19:04:70:94:73:3f:17:3f:8d:88:60:7a:b5:91:f9:89: cc:e3:f4:fa:c2:9a:51:f3:48:68:56:e2:65:90:fa:36:0d:83: 74:8d:9b:c6:78:ce:63:18:b1:66:78:8a:c6:e1:00:b4:2a:8e: 29:f3:c9:57:09:88:18:6a:59:29:48:ab:fb:de:fb:d2:34:bb: 8d:7a:0f:02:99:73:94:07:84:c2:7b:b6:ec:84:41:16:30:3e: f1:01:15:93:c2:d9:fe:73:a9:b8:82:31:07:e9:54:a7:a0:dd: a4:65:48:1b:53:78:91:d5:cd:d6:44:6c:23:10:11:f9:77:14: 6f:0d:13:af:6c:ab:5b:86:8b:02:da:87:8d:57:4d:45:5e:ae: 75:60:f3:b7:89:18:df:04:6c:1c:75:ad:82:d1:ad:f9:97:f9: 5b:51:84:1c:7c:2d:e3:20:26:d0:21:d5:a7:56:6e:6c:59:e8: 45:c0:75:51:17:2a:18:11:57:00:49:ba:66:0f:d6:c4:ac:22: 39:c8:dc:0e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXDogxe2VbeTA35FF4wgmIBDS9aEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5QkNG NkIxQTFGQjAeFw0yNjA1MDMwMjQ3MjBaFw0yNzA1MDIwMjUyMjBaMDMxMTAvBgNV BAMTKDJCMUJBMUQ1OTREMzU2NTI1MERGQzU4Nzk3NzcxMjczN0Q4NzRFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjK6l/BPQ1qsfFmyfUCVxmMc+4 mApm2EjlYWOI6TzY6ZfGPWsD8eidfbtguNTY18ed+WU2xYrbHrvO1EbJR3efApT0 vd3PJ4devix+gvzlxhWst3c3Q6NjcnXLgww6I2VDT3zF5XlDDlM69T1swvKBF8JG cSmBv773IM/nraDUGCIGaGK4vb/OlUWQNo+lZkmNW7BuZ824cLTXf/X4x74Wd/VZ AXwqG7MOdSB8d/yFX9ZWO6kHUjIWUEhjBrVH8rVknOqI9ao0cz66tbVbYcGwDMBy sNifhpj2JPDu+ccZaAWGycqZDaOzIa6QUNjoAKRJh8Jx4FLXrn8Do4sbjpUtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKxuh1ZTTVlJQ38WHl3cSc32HTrEwHwYDVR0j BBgwFoAUM8qzMF42Q+g+Zz8Jggm5vPaxofswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI4MDg5YTctMGE2OC00ZDY3LWFkYWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1 RTM2NDNFODNFNjczRjA5ODIwOUI5QkNGNkIxQTFGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBQjMzMDVFMzY0M0U4M0U2NzNGMDk4MjA5QjlCQ0Y2QjFB MUZCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzEzMDM4MmUzMTMyMzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2yAMA0GCSqG SIb3DQEBCwUAA4IBAQCbJLM+OBD/ECFOocAHNWCq3uQ5XRvXVUR/lu0ibikW0BJo FB/+zgXGoEV3PEI8f8t7Fa1utiK66xkEcJRzPxc/jYhgerWR+YnM4/T6wppR80ho VuJlkPo2DYN0jZvGeM5jGLFmeIrG4QC0Ko4p88lXCYgYalkpSKv73vvSNLuNeg8C mXOUB4TCe7bshEEWMD7xARWTwtn+c6m4gjEH6VSnoN2kZUgbU3iR1c3WRGwjEBH5 dxRvDROvbKtbhosC2oeNV01FXq51YPO3iRjfBGwcda2C0a35l/lbUYQcfC3jICbQ IdWnVm5sWehFwHVRFyoYEVcASbpmD9bErCI5yNwO -----END CERTIFICATE-----Generated at Wed May 13 05:14:46 2026 by rpki-client