$ rpki-client -vvf rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa File: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (raw, json) Hash identifier: cwuI5/SSK6CyR1JmdzwFEJUddA+iJMuPYmNhyqVybOU= Subject key identifier: 4B:59:14:F7:23:6C:29:42:E8:29:57:97:4D:2F:E1:0A:01:74:C1:DF Certificate issuer: /CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Certificate serial: 0AF1E3B66716C16136B8DDD249C6D16237333E99 Authority key identifier: 3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa Signing time: Sun 03 May 2026 02:58:26 +0000 ROA not before: Sun 03 May 2026 02:53:26 +0000 ROA not after: Sun 02 May 2027 02:58:26 +0000 asID: 133361 IP address blocks: 103.37.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f1:e3:b6:67:16:c1:61:36:b8:dd:d2:49:c6:d1:62:37:33:3e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Validity Not Before: May 3 02:53:26 2026 GMT Not After : May 2 02:58:26 2027 GMT Subject: CN=4B5914F7236C2942E82957974D2FE10A0174C1DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:6f:45:ed:52:1e:b5:5e:e9:6a:74:e8:e5: b7:dc:37:ef:d7:d2:35:0a:8d:27:77:ea:ca:21:cd: 7b:c5:61:23:bc:39:21:3e:0f:4a:cd:5f:26:87:29: d3:bc:9c:5d:9b:bd:e4:37:2b:d5:65:39:c9:bb:2e: 00:b5:07:90:1e:ed:60:b3:67:2c:57:f7:ec:c5:96: 24:f2:18:c7:b3:66:c8:b7:28:ce:0b:ca:63:23:f9: 58:10:df:87:87:84:e6:7a:6a:b3:07:03:b5:15:97: eb:6b:08:82:6a:c8:c7:a4:4b:96:30:cc:5e:16:16: e3:bf:f0:fd:47:d5:1a:cf:01:93:6e:9e:8e:3b:5c: c3:c7:99:2b:8f:60:cd:be:60:17:bc:5d:9a:77:ee: 46:fb:76:e9:bb:e2:ee:74:a1:21:fa:3c:cc:62:f0: 3b:f2:40:a3:22:fc:68:9e:2f:ac:2f:11:cd:86:0b: 00:61:a8:90:31:c5:48:26:34:d9:35:35:76:53:08: 1b:eb:3a:e6:73:a3:55:0e:1e:b1:be:8b:a9:55:42: 71:0b:c4:e6:63:1c:b3:fc:0b:5c:59:a4:02:84:34: fd:2c:c6:5b:09:78:c9:17:75:a4:53:05:9a:a3:c0: fb:da:da:ce:b4:10:27:a6:91:d5:80:d9:65:ea:8f: b4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:59:14:F7:23:6C:29:42:E8:29:57:97:4D:2F:E1:0A:01:74:C1:DF X509v3 Authority Key Identifier: keyid:3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.37.229.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:15:eb:82:2c:3c:a9:32:7b:0a:b6:d7:c3:84:71:ff:f3:51: 0a:97:01:ff:f9:43:26:b4:46:a1:02:23:0b:2a:81:3f:ec:ba: d3:b1:a1:d4:10:0c:3b:5c:1d:dd:49:f2:33:85:ab:57:30:43: 1e:57:2c:8f:c8:d9:0f:30:9c:0f:f0:13:1c:f5:dd:93:dc:e4: 97:48:81:7f:8c:d2:2a:c6:b0:52:e5:a9:57:10:07:de:9b:32: aa:46:e3:86:04:06:92:f2:c4:a7:53:dd:23:33:1a:66:af:be: d6:84:b0:20:a0:e5:5d:31:18:d6:0b:5f:82:5e:a7:1a:6a:0c: 82:50:e3:33:aa:90:f8:06:84:fe:be:7c:cf:1a:ff:0b:ae:13: f7:46:b1:1b:19:41:ed:44:fe:47:ed:53:2a:81:83:42:2a:13: f5:2a:af:8b:8d:16:1a:fc:f5:5d:c1:25:b0:44:fc:6c:12:32: 2c:73:54:86:cc:dc:b8:85:81:5e:93:21:3a:ec:46:0e:e4:a1: f4:1a:ea:43:92:0d:3c:f9:d5:97:a3:98:67:e7:a0:5b:aa:50: 13:4d:73:1b:a0:85:7c:6b:6f:ec:83:b2:ee:c2:29:a6:68:f0: cb:bd:f3:6e:db:41:0b:4c:52:8c:82:af:db:44:d6:ae:56:2e: f9:23:75:31 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCvHjtmcWwWE2uN3SScbRYjczPpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNDVERTBGRDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQw REJFRUY0NzAeFw0yNjA1MDMwMjUzMjZaFw0yNzA1MDIwMjU4MjZaMDMxMTAvBgNV BAMTKDRCNTkxNEY3MjM2QzI5NDJFODI5NTc5NzREMkZFMTBBMDE3NEMxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0eW9F7VIetV7panTo5bfcN+/X 0jUKjSd36sohzXvFYSO8OSE+D0rNXyaHKdO8nF2bveQ3K9VlOcm7LgC1B5Ae7WCz ZyxX9+zFliTyGMezZsi3KM4LymMj+VgQ34eHhOZ6arMHA7UVl+trCIJqyMekS5Yw zF4WFuO/8P1H1RrPAZNuno47XMPHmSuPYM2+YBe8XZp37kb7dum74u50oSH6PMxi 8DvyQKMi/GieL6wvEc2GCwBhqJAxxUgmNNk1NXZTCBvrOuZzo1UOHrG+i6lVQnEL xOZjHLP8C1xZpAKENP0sxlsJeMkXdaRTBZqjwPva2s60ECemkdWA2WXqj7RTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUS1kU9yNsKULoKVeXTS/hCgF0wd8wHwYDVR0j BBgwFoAUP+Rd4P2S4r2Du/92ZQy1tA2+70cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWIzMTNkMTctNWI5Yi00ZDIzLTk0MjQtNzQ1Nzk1MDhiYTU0LzAvM0ZFNDVERTBG RDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQwREJFRUY0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU0NURFMEZEOTJFMkJEODNCQkZGNzY2NTBDQjVCNDBEQkVF RjQ3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FiMzEzZDE3LTViOWItNGQyMy05 NDI0LTc0NTc5NTA4YmE1NC8wLzMxMzAzMzJlMzMzNzJlMzIzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzMzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyXlMA0GCSqG SIb3DQEBCwUAA4IBAQB7FeuCLDypMnsKttfDhHH/81EKlwH/+UMmtEahAiMLKoE/ 7LrTsaHUEAw7XB3dSfIzhatXMEMeVyyPyNkPMJwP8BMc9d2T3OSXSIF/jNIqxrBS 5alXEAfemzKqRuOGBAaS8sSnU90jMxpmr77WhLAgoOVdMRjWC1+CXqcaagyCUOMz qpD4BoT+vnzPGv8LrhP3RrEbGUHtRP5H7VMqgYNCKhP1Kq+LjRYa/PVdwSWwRPxs EjIsc1SGzNy4hYFekyE67EYO5KH0GupDkg08+dWXo5hn56BbqlATTXMboIV8a2/s g7LuwimmaPDLvfNu20ELTFKMgq/bRNauVi75I3Ux -----END CERTIFICATE-----Generated at Wed May 13 13:02:26 2026 by rpki-client