$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa File: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (raw, json) Hash identifier: uqKW3vXwMrHK/2SgTQdiTOjsX9kzPieFPKMfbMm8/NQ= Subject key identifier: 31:BE:C9:B8:88:3A:42:35:F7:D2:3D:7D:6A:91:20:F8:A9:CF:A6:21 Certificate issuer: /CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Certificate serial: 649D4A0357327EDCA97F17933F8BD235A42ADE39 Authority key identifier: 33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa Signing time: Sun 03 May 2026 03:03:03 +0000 ROA not before: Sun 03 May 2026 02:58:03 +0000 ROA not after: Sun 02 May 2027 03:03:03 +0000 asID: 59276 IP address blocks: 103.226.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9d:4a:03:57:32:7e:dc:a9:7f:17:93:3f:8b:d2:35:a4:2a:de:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Validity Not Before: May 3 02:58:03 2026 GMT Not After : May 2 03:03:03 2027 GMT Subject: CN=31BEC9B8883A4235F7D23D7D6A9120F8A9CFA621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:70:b6:62:79:0a:99:1a:bf:fb:9b:72:99:e8: 85:99:65:b8:01:bc:e3:0a:79:e3:35:69:e1:65:cb: 8d:bf:b6:81:43:53:8b:ad:27:e4:c7:f8:f6:8f:d8: 0f:8b:c1:c8:18:5d:df:f5:2b:99:02:35:9d:54:8e: f2:a8:f7:70:69:e5:af:a3:59:27:9c:c8:a4:6c:ea: de:3b:2f:1f:e5:6c:23:ea:e2:97:f3:c2:94:78:dc: 28:3c:bd:ef:2e:51:25:ce:b5:6c:0f:84:b9:8e:8b: b6:e6:a5:6f:9d:e8:71:63:d0:49:32:93:64:17:2a: b5:c1:c4:bd:69:3c:70:f3:ba:07:4c:10:85:4d:00: 7e:a7:1d:a9:44:68:d0:d2:1a:bf:5a:d7:e3:18:16: 43:62:55:a8:02:5b:1e:7e:36:2f:03:3d:2e:38:7f: 01:62:04:5b:79:e5:bc:6f:d9:14:0f:0a:fd:e5:93: c2:c7:cd:55:c8:fa:7e:07:38:d1:c4:1c:71:6f:ce: c5:91:a6:f4:ef:96:19:4c:dc:ec:09:23:23:38:8c: 52:55:69:49:ff:2c:86:5a:75:17:c6:1c:83:68:6e: 6d:a9:fb:71:fb:11:19:68:aa:44:53:ee:2c:15:70: 6f:b3:7c:9e:b9:65:45:7e:50:63:5f:13:9f:1d:39: 16:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BE:C9:B8:88:3A:42:35:F7:D2:3D:7D:6A:91:20:F8:A9:CF:A6:21 X509v3 Authority Key Identifier: keyid:33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.226.233.0/24 Signature Algorithm: sha256WithRSAEncryption b2:4c:8c:9f:ca:51:ec:d6:9a:fd:67:44:c0:ed:45:b7:12:e3: 9f:bd:3b:d2:ae:31:6a:a6:2a:c5:e4:9a:97:fa:71:a4:11:5f: 70:69:2a:d0:40:6d:1b:09:22:cc:97:7a:97:2a:74:c5:35:75: f3:40:9e:b3:d6:a0:90:35:12:59:7c:eb:ba:4d:e0:a0:6b:75: e9:62:cc:86:32:e8:7f:4b:ca:21:27:d7:3b:a3:4f:47:fe:3b: 20:cc:7a:7c:14:a1:82:22:72:95:01:de:42:2f:b3:5c:e5:5f: 99:ed:59:1a:d3:cd:88:e0:e9:08:da:7a:fb:c4:04:df:91:ff: fd:1f:80:8d:7b:ec:29:38:c4:9e:b4:1e:f0:f8:d9:c9:f4:4e: ec:bb:64:e2:d8:af:af:c8:c9:ce:be:70:77:90:09:65:73:97: 27:05:32:1a:5a:bc:cb:2c:ac:27:8d:0f:2b:ca:4a:a2:ed:b8: 8d:a2:2f:c7:1e:22:ee:1d:17:71:0b:e8:63:cb:81:1f:00:08: 96:4e:53:9a:6e:d5:20:e6:04:2f:e6:c5:ca:8e:d2:ba:64:b4: d8:eb:f0:4e:8e:74:d3:15:4a:d0:98:25:e7:ff:cb:b9:b9:5d: 54:86:ed:39:95:93:6b:1c:1c:1e:18:3f:c0:0f:d5:17:af:4b: 86:7f:76:3f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZJ1KA1cyftypfxeTP4vSNaQq3jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURFQTVB NkUzMEU0RDAeFw0yNjA1MDMwMjU4MDNaFw0yNzA1MDIwMzAzMDNaMDMxMTAvBgNV BAMTKDMxQkVDOUI4ODgzQTQyMzVGN0QyM0Q3RDZBOTEyMEY4QTlDRkE2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvcLZieQqZGr/7m3KZ6IWZZbgB vOMKeeM1aeFly42/toFDU4utJ+TH+PaP2A+LwcgYXd/1K5kCNZ1UjvKo93Bp5a+j WSecyKRs6t47Lx/lbCPq4pfzwpR43Cg8ve8uUSXOtWwPhLmOi7bmpW+d6HFj0Eky k2QXKrXBxL1pPHDzugdMEIVNAH6nHalEaNDSGr9a1+MYFkNiVagCWx5+Ni8DPS44 fwFiBFt55bxv2RQPCv3lk8LHzVXI+n4HONHEHHFvzsWRpvTvlhlM3OwJIyM4jFJV aUn/LIZadRfGHINobm2p+3H7ERloqkRT7iwVcG+zfJ65ZUV+UGNfE58dORbfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUMb7JuIg6QjX30j19apEg+KnPpiEwHwYDVR0j BBgwFoAUM9zYVd5uhmqDpXCrqKHepabjDk0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY1NDJiYzQtNzRkYy00NWRkLWI2NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVE RTZFODY2QTgzQTU3MEFCQThBMURFQTVBNkUzMEU0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0RDRDg1NURFNkU4NjZBODNBNTcwQUJBOEExREVBNUE2RTMw RTRELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JmNTQyYmM0LTc0ZGMtNDVkZC1i NjU5LTc0NWNhMmFjYTMzMy8wLzMxMzAzMzJlMzIzMjM2MmUzMjMzMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzIzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+LpMA0GCSqG SIb3DQEBCwUAA4IBAQCyTIyfylHs1pr9Z0TA7UW3EuOfvTvSrjFqpirF5JqX+nGk EV9waSrQQG0bCSLMl3qXKnTFNXXzQJ6z1qCQNRJZfOu6TeCga3XpYsyGMuh/S8oh J9c7o09H/jsgzHp8FKGCInKVAd5CL7Nc5V+Z7Vka082I4OkI2nr7xATfkf/9H4CN e+wpOMSetB7w+NnJ9E7su2Ti2K+vyMnOvnB3kAllc5cnBTIaWrzLLKwnjQ8rykqi 7biNoi/HHiLuHRdxC+hjy4EfAAiWTlOabtUg5gQv5sXKjtK6ZLTY6/BOjnTTFUrQ mCXn/8u5uV1Uhu05lZNrHBweGD/AD9UXr0uGf3Y/ -----END CERTIFICATE-----Generated at Wed May 13 10:04:07 2026 by rpki-client