$ rpki-client -vvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34322e302f32342d3234203d3e203535363835.roa File: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: IR8ZgV48rlpVwGRZA2UdoKib4w9/NmfFD1YyStawg/A= Subject key identifier: 41:3A:91:EB:36:55:A3:46:35:45:C7:9F:92:32:5A:39:CF:D2:38:05 Certificate issuer: /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Certificate serial: 3D48F94BFE79713E8D608DD43E7016F3B419360C Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34322e302f32342d3234203d3e203535363835.roa Signing time: Sun 03 May 2026 02:52:22 +0000 ROA not before: Sun 03 May 2026 02:47:22 +0000 ROA not after: Sun 02 May 2027 02:52:22 +0000 asID: 55685 IP address blocks: 103.247.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:48:f9:4b:fe:79:71:3e:8d:60:8d:d4:3e:70:16:f3:b4:19:36:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Validity Not Before: May 3 02:47:22 2026 GMT Not After : May 2 02:52:22 2027 GMT Subject: CN=413A91EB3655A3463545C79F92325A39CFD23805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:aa:4f:65:bd:4d:00:96:f8:6f:01:9b:88:4b: 51:c4:da:a5:64:5b:3f:46:74:a0:50:67:a8:60:57: 01:2b:7e:86:60:91:f8:f2:52:2b:ed:2d:a9:29:fa: ed:c3:f6:31:26:b5:73:1d:45:62:5f:c8:51:13:38: 4f:6c:d9:f8:bb:89:f4:f0:19:68:5b:eb:e7:68:87: 89:aa:78:42:8c:e1:bd:e4:4e:22:eb:c6:ef:05:0c: cf:20:42:2a:8d:10:b2:b1:93:17:f5:e7:43:0e:53: 90:e0:8d:58:ba:1a:d1:17:bf:34:ab:fd:f5:bf:72: a2:d8:8d:8e:f7:98:1c:02:eb:08:82:ee:4e:fe:2a: 63:7a:c6:cb:b5:ae:57:7b:bd:1d:17:5e:2e:a8:42: c8:a2:9f:45:7b:7a:15:ae:71:34:99:99:6c:74:48: c5:17:42:37:8b:7a:a6:9d:76:95:75:6f:a3:37:83: e8:14:a1:3e:35:d5:ee:c2:85:3b:6a:d0:96:03:cc: d1:a4:20:8b:c6:26:b7:11:61:4f:45:fa:0d:df:63: e1:63:34:08:ca:2e:40:bd:1c:6e:ae:3a:31:81:00: d3:b8:f2:db:5d:16:73:28:7e:d7:8c:f1:96:27:cb: e3:ca:34:2c:4e:3f:d0:8e:7b:44:4f:cd:62:32:3c: 28:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3A:91:EB:36:55:A3:46:35:45:C7:9F:92:32:5A:39:CF:D2:38:05 X509v3 Authority Key Identifier: keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34322e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.42.0/24 Signature Algorithm: sha256WithRSAEncryption 07:b4:ff:9e:25:66:b9:26:e3:74:ae:fa:e6:f5:5d:62:6a:67: 3b:8a:94:42:74:76:1d:1b:d8:76:f1:e6:5c:b7:1b:13:37:e4: 70:85:e8:63:3c:a1:76:e3:55:eb:66:45:7d:5f:dc:12:6a:ab: 14:0f:42:d7:c2:26:b7:53:70:23:cc:49:95:9b:f5:39:d4:81: c2:bc:82:1d:de:8a:60:7c:ed:37:0b:54:da:4f:26:39:cf:59: f5:26:f2:3a:81:e0:90:f6:ee:c9:56:19:3d:b2:93:03:44:f2: 52:1e:6f:4c:e3:75:90:60:9f:3e:9f:e4:d6:2f:92:30:45:4f: 17:c8:c5:a5:e0:80:ba:4d:ee:3c:2c:e2:5a:f7:48:fa:45:d3: de:14:17:7a:c1:27:ff:c7:86:29:e8:5e:ce:47:42:2d:2e:71: 29:6d:18:cf:8c:2b:65:fb:e2:43:e8:7d:93:74:49:06:fe:00: 76:93:98:d1:ba:db:4a:c9:fd:3a:2b:49:c1:17:44:94:3c:25: fe:0b:e5:1b:42:dd:b5:4c:b9:f1:49:0a:87:d8:e7:1a:35:a3: 77:7f:df:90:79:f0:81:b4:8c:59:18:19:f2:f7:1b:a2:b6:1a: 31:91:52:af:93:39:01:16:68:f1:f3:1a:29:e6:98:c7:4c:af: a8:05:ef:cd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPUj5S/55cT6NYI3UPnAW87QZNgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5QkNG NkIxQTFGQjAeFw0yNjA1MDMwMjQ3MjJaFw0yNzA1MDIwMjUyMjJaMDMxMTAvBgNV BAMTKDQxM0E5MUVCMzY1NUEzNDYzNTQ1Qzc5RjkyMzI1QTM5Q0ZEMjM4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qk9lvU0AlvhvAZuIS1HE2qVk Wz9GdKBQZ6hgVwErfoZgkfjyUivtLakp+u3D9jEmtXMdRWJfyFETOE9s2fi7ifTw GWhb6+doh4mqeEKM4b3kTiLrxu8FDM8gQiqNELKxkxf150MOU5DgjVi6GtEXvzSr /fW/cqLYjY73mBwC6wiC7k7+KmN6xsu1rld7vR0XXi6oQsiin0V7ehWucTSZmWx0 SMUXQjeLeqaddpV1b6M3g+gUoT411e7ChTtq0JYDzNGkIIvGJrcRYU9F+g3fY+Fj NAjKLkC9HG6uOjGBANO48ttdFnMofteM8ZYny+PKNCxOP9COe0RPzWIyPCiPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUQTqR6zZVo0Y1RcefkjJaOc/SOAUwHwYDVR0j BBgwFoAUM8qzMF42Q+g+Zz8Jggm5vPaxofswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI4MDg5YTctMGE2OC00ZDY3LWFkYWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1 RTM2NDNFODNFNjczRjA5ODIwOUI5QkNGNkIxQTFGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBQjMzMDVFMzY0M0U4M0U2NzNGMDk4MjA5QjlCQ0Y2QjFB MUZCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzIzNDM3MmUzNDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3KjANBgkqhkiG 9w0BAQsFAAOCAQEAB7T/niVmuSbjdK765vVdYmpnO4qUQnR2HRvYdvHmXLcbEzfk cIXoYzyhduNV62ZFfV/cEmqrFA9C18Imt1NwI8xJlZv1OdSBwryCHd6KYHztNwtU 2k8mOc9Z9SbyOoHgkPbuyVYZPbKTA0TyUh5vTON1kGCfPp/k1i+SMEVPF8jFpeCA uk3uPCziWvdI+kXT3hQXesEn/8eGKehezkdCLS5xKW0Yz4wrZfviQ+h9k3RJBv4A dpOY0brbSsn9OitJwRdElDwl/gvlG0LdtUy58UkKh9jnGjWjd3/fkHnwgbSMWRgZ 8vcborYaMZFSr5M5ARZo8fMaKeaYx0yvqAXvzQ== -----END CERTIFICATE-----Generated at Wed May 13 04:48:17 2026 by rpki-client