$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa File: 3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa (raw, json) Hash identifier: U02e5KxNF9MHIRapu80B9THLjIPZwCj+D7pGERVzSdk= Subject key identifier: 79:1C:88:31:43:F3:FC:5C:B0:48:C8:E4:6F:3D:D4:19:5A:05:D0:96 Certificate issuer: /CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Certificate serial: 54E5E5BF2C939F1138F8DE83376E2F1951F79B5B Authority key identifier: 33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa Signing time: Sun 03 May 2026 03:03:03 +0000 ROA not before: Sun 03 May 2026 02:58:03 +0000 ROA not after: Sun 02 May 2027 03:03:03 +0000 asID: 59276 IP address blocks: 103.226.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e5:e5:bf:2c:93:9f:11:38:f8:de:83:37:6e:2f:19:51:f7:9b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Validity Not Before: May 3 02:58:03 2026 GMT Not After : May 2 03:03:03 2027 GMT Subject: CN=791C883143F3FC5CB048C8E46F3DD4195A05D096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:29:82:14:ae:a4:27:93:23:58:40:6e:6f: ed:a9:7f:c0:f3:15:8a:b5:9b:26:6a:54:63:2a:f7: 1e:75:94:72:fe:6c:ef:74:20:59:77:d8:05:2b:fd: 29:3a:0e:b9:4d:69:0a:14:20:de:d6:4c:7f:e2:d9: 26:b8:8b:df:2e:8b:38:b3:f4:ae:76:ba:7b:b6:db: 8f:c3:6f:a8:b1:ae:46:48:a8:b8:5a:63:1d:7d:82: 19:eb:26:e8:d9:31:5d:a9:c6:c2:cf:36:04:62:1f: ee:2a:46:8e:08:0a:2a:13:5e:2b:cd:cb:65:25:52: 5d:a2:76:41:32:cc:24:d9:67:ff:2f:8f:5a:76:12: fb:23:a7:a7:26:d9:ce:36:bf:bb:8f:97:45:0c:5d: 21:11:34:fa:9c:ef:eb:63:a6:1e:64:43:84:69:98: 66:78:de:84:f9:0a:18:f7:22:0f:d4:4c:4e:80:92: 1e:2e:ea:a6:86:73:27:31:ff:26:7e:2e:49:cb:db: 43:58:23:ae:57:c4:19:80:31:31:7c:84:c8:62:ea: 1c:39:70:fe:ae:30:59:c6:9e:4d:17:21:cc:50:72: 92:13:67:be:eb:ae:05:30:fd:fe:45:17:2f:78:bf: 45:4d:96:a1:1d:48:a7:9e:93:0c:78:72:0e:1d:5f: 46:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1C:88:31:43:F3:FC:5C:B0:48:C8:E4:6F:3D:D4:19:5A:05:D0:96 X509v3 Authority Key Identifier: keyid:33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.226.232.0/22 Signature Algorithm: sha256WithRSAEncryption ba:d7:ae:d4:a9:4a:24:7a:2c:62:0f:9f:c3:8b:16:56:e5:1d: 3a:97:68:c1:16:2d:37:83:00:37:b1:d7:72:a9:8f:e0:6c:26: f4:21:47:b5:25:f7:f2:4c:15:08:7b:c1:7a:3c:90:9d:6e:7c: b4:09:c9:31:67:cf:ab:23:44:01:07:8e:9b:af:74:d2:70:6c: 8e:76:f7:35:e8:60:b0:45:9d:14:3c:db:c5:9f:fa:2a:7f:81: c1:88:52:36:78:af:32:8b:85:0d:09:52:6e:c7:32:a9:f1:c2: bc:dd:fc:ee:26:69:79:2c:f1:89:df:f4:d4:17:b2:4a:b8:0a: 9b:3c:41:de:48:7f:b5:e5:a3:4f:e4:5d:c3:07:7b:15:64:02: 13:b7:6b:06:e9:01:09:e7:ae:20:ff:e1:0e:28:99:82:5f:ee: c0:82:35:0f:6a:17:4a:d6:fa:18:02:22:9c:71:0f:3f:ee:43: 76:dd:e1:db:ec:7e:45:8e:ad:94:28:64:58:dc:9b:ee:c9:30: c8:84:b2:82:13:a0:f4:23:2c:c5:54:59:68:aa:f8:d9:9b:6a: ca:dd:c4:91:68:75:97:79:de:60:2e:0f:ce:53:f0:c4:e3:a4: c9:8e:eb:96:0c:28:12:af:0e:95:7c:ff:9b:22:f1:3a:48:ca: ad:8e:eb:51 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVOXlvyyTnxE4+N6DN24vGVH3m1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURFQTVB NkUzMEU0RDAeFw0yNjA1MDMwMjU4MDNaFw0yNzA1MDIwMzAzMDNaMDMxMTAvBgNV BAMTKDc5MUM4ODMxNDNGM0ZDNUNCMDQ4QzhFNDZGM0RENDE5NUEwNUQwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHimCFK6kJ5MjWEBub+2pf8Dz FYq1myZqVGMq9x51lHL+bO90IFl32AUr/Sk6DrlNaQoUIN7WTH/i2Sa4i98uiziz 9K52unu224/Db6ixrkZIqLhaYx19ghnrJujZMV2pxsLPNgRiH+4qRo4ICioTXivN y2UlUl2idkEyzCTZZ/8vj1p2Evsjp6cm2c42v7uPl0UMXSERNPqc7+tjph5kQ4Rp mGZ43oT5Chj3Ig/UTE6Akh4u6qaGcycx/yZ+LknL20NYI65XxBmAMTF8hMhi6hw5 cP6uMFnGnk0XIcxQcpITZ77rrgUw/f5FFy94v0VNlqEdSKeekwx4cg4dX0bHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUeRyIMUPz/FywSMjkbz3UGVoF0JYwHwYDVR0j BBgwFoAUM9zYVd5uhmqDpXCrqKHepabjDk0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY1NDJiYzQtNzRkYy00NWRkLWI2NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVE RTZFODY2QTgzQTU3MEFCQThBMURFQTVBNkUzMEU0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0RDRDg1NURFNkU4NjZBODNBNTcwQUJBOEExREVBNUE2RTMw RTRELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JmNTQyYmM0LTc0ZGMtNDVkZC1i NjU5LTc0NWNhMmFjYTMzMy8wLzMxMzAzMzJlMzIzMjM2MmUzMjMzMzIyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNTM5MzIzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+LoMA0GCSqG SIb3DQEBCwUAA4IBAQC6167UqUokeixiD5/DixZW5R06l2jBFi03gwA3sddyqY/g bCb0IUe1JffyTBUIe8F6PJCdbny0CckxZ8+rI0QBB46br3TScGyOdvc16GCwRZ0U PNvFn/oqf4HBiFI2eK8yi4UNCVJuxzKp8cK83fzuJml5LPGJ3/TUF7JKuAqbPEHe SH+15aNP5F3DB3sVZAITt2sG6QEJ564g/+EOKJmCX+7AgjUPahdK1voYAiKccQ8/ 7kN23eHb7H5Fjq2UKGRY3JvuyTDIhLKCE6D0IyzFVFloqvjZm2rK3cSRaHWXed5g Lg/OU/DE46TJjuuWDCgSrw6VfP+bIvE6SMqtjutR -----END CERTIFICATE-----Generated at Wed May 13 07:01:31 2026 by rpki-client