$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32322d3232203d3e203338313439.roa File: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (raw, json) Hash identifier: L+jEfJ+TYr8U2lsRIwq0B2JrZizijZUOAoo1oHmW+1s= Subject key identifier: 3D:BF:F4:41:F9:69:55:9A:F3:CE:F0:F9:37:9B:DE:F7:C5:FB:FE:12 Certificate issuer: /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Certificate serial: 50CD4752DDA640B52DA9A5D4459C63AC7101B82D Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32322d3232203d3e203338313439.roa Signing time: Sun 03 May 2026 03:10:36 +0000 ROA not before: Sun 03 May 2026 03:05:36 +0000 ROA not after: Sun 02 May 2027 03:10:36 +0000 asID: 38149 IP address blocks: 103.3.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:cd:47:52:dd:a6:40:b5:2d:a9:a5:d4:45:9c:63:ac:71:01:b8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Validity Not Before: May 3 03:05:36 2026 GMT Not After : May 2 03:10:36 2027 GMT Subject: CN=3DBFF441F969559AF3CEF0F9379BDEF7C5FBFE12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bf:5d:c9:3a:2a:fc:25:a6:bc:37:08:f1:6a: ac:37:09:2c:fa:7a:cc:48:c8:ab:9b:58:45:22:b7: 67:2f:f1:8d:4b:dd:a6:8c:47:92:6a:70:e8:d8:5d: 50:31:70:71:eb:3d:5b:56:45:59:d0:4e:50:29:16: 88:c1:9d:c7:3c:94:4a:ff:36:b3:ef:f9:58:10:cd: cf:b0:fa:e4:3a:0b:f1:b9:6c:43:52:2d:ec:d7:0c: 70:92:61:c2:c6:57:9a:cf:d5:58:25:0e:ca:3a:52: 14:5c:64:14:0f:33:38:78:84:ea:e9:c3:5f:7e:5a: ee:b8:02:12:cb:89:b9:19:f3:10:80:37:1e:7b:85: a4:7e:ea:4c:ab:63:31:96:96:dd:71:53:19:e0:a5: ec:93:3c:c7:74:85:ec:5b:91:5a:60:8e:ad:76:76: 70:e4:83:87:e1:9d:87:23:1d:db:19:56:0f:4a:0f: f7:ba:e8:19:15:3e:73:f0:b2:fc:d3:fa:ff:5f:52: d4:55:91:b8:41:98:0b:bb:67:ff:9a:a9:c2:71:fd: 33:34:75:bc:02:7c:87:2a:a5:5b:ab:3e:6b:16:17: 5b:7f:98:b5:27:c2:29:42:e4:53:b0:32:02:25:b7: 9d:01:61:4a:db:e1:ec:94:e5:38:13:58:d1:a0:6d: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BF:F4:41:F9:69:55:9A:F3:CE:F0:F9:37:9B:DE:F7:C5:FB:FE:12 X509v3 Authority Key Identifier: keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32322d3232203d3e203338313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.212.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:c0:df:dd:ef:69:1f:eb:97:d2:5b:5d:0c:12:2e:d5:68:1a: fd:90:29:29:55:eb:12:55:07:9e:05:ae:47:4d:e3:7e:60:30: 85:69:d2:7a:fc:e7:e4:cd:d5:ff:7b:2e:9e:bb:36:97:f7:65: e0:d7:73:9c:56:bf:45:83:86:3d:fe:ef:ae:4e:45:dd:78:0e: 9a:14:1b:46:03:f9:47:c9:3e:f4:27:c5:73:8b:0f:6a:e4:63: c0:a7:c7:fe:08:8d:07:98:ec:5b:6e:36:b2:00:86:23:09:75: dd:e1:1b:0e:71:ff:cd:14:6c:46:65:f1:a6:1c:f3:97:69:f7: da:a3:4e:82:90:8e:35:bc:52:df:39:8e:22:47:bd:9c:5f:19: 50:75:66:a2:a0:b7:78:d4:15:98:68:ad:7e:1d:eb:b6:fe:6d: 3c:46:3f:1b:7c:3e:00:93:57:6b:25:a7:54:52:de:3c:c5:fa: 07:a5:bb:5c:c6:f6:1c:48:ac:9b:24:27:cb:4e:d1:6b:21:e0: 37:19:12:df:70:e8:08:1f:77:b7:ad:6b:6d:ad:ab:4d:fe:39: f0:5d:57:c0:88:6a:3a:de:5f:af:8f:05:4d:99:0c:ca:2f:60: 1c:3e:30:de:93:66:d6:ea:90:c2:f9:33:68:14:19:b1:0e:fb: 4a:ad:0e:5a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUUM1HUt2mQLUtqaXURZxjrHEBuC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3 NEY0QUFDNDAeFw0yNjA1MDMwMzA1MzZaFw0yNzA1MDIwMzEwMzZaMDMxMTAvBgNV BAMTKDNEQkZGNDQxRjk2OTU1OUFGM0NFRjBGOTM3OUJERUY3QzVGQkZFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFv13JOir8Jaa8Nwjxaqw3CSz6 esxIyKubWEUit2cv8Y1L3aaMR5JqcOjYXVAxcHHrPVtWRVnQTlApFojBncc8lEr/ NrPv+VgQzc+w+uQ6C/G5bENSLezXDHCSYcLGV5rP1VglDso6UhRcZBQPMzh4hOrp w19+Wu64AhLLibkZ8xCANx57haR+6kyrYzGWlt1xUxngpeyTPMd0hexbkVpgjq12 dnDkg4fhnYcjHdsZVg9KD/e66BkVPnPwsvzT+v9fUtRVkbhBmAu7Z/+aqcJx/TM0 dbwCfIcqpVurPmsWF1t/mLUnwilC5FOwMgIlt50BYUrb4eyU5TgTWNGgbd6HAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUPb/0QflpVZrzzvD5N5ve98X7/hIwHwYDVR0j BBgwFoAUm+HxuoCRYxpAm+k5vbBzMnT0qsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhlM2IzOWMtZGExMS00NWVlLWFhYjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4 MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3NEY0QUFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkUxRjFCQTgwOTE2MzFBNDA5QkU5MzlCREIwNzMzMjc0RjRB QUM0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMxMzAzMzJlMzMyZTMyMzEzMjJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDMzMzgzMTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnA9QwDQYJKoZIhvcN AQELBQADggEBAJzA393vaR/rl9JbXQwSLtVoGv2QKSlV6xJVB54FrkdN435gMIVp 0nr85+TN1f97Lp67Npf3ZeDXc5xWv0WDhj3+765ORd14DpoUG0YD+UfJPvQnxXOL D2rkY8Cnx/4IjQeY7FtuNrIAhiMJdd3hGw5x/80UbEZl8aYc85dp99qjToKQjjW8 Ut85jiJHvZxfGVB1ZqKgt3jUFZhorX4d67b+bTxGPxt8PgCTV2slp1RS3jzF+gel u1zG9hxIrJskJ8tO0Wsh4DcZEt9w6Agfd7eta22tq03+OfBdV8CIajreX6+PBU2Z DMovYBw+MN6TZtbqkML5M2gUGbEO+0qtDlo= -----END CERTIFICATE-----Generated at Wed May 13 03:59:59 2026 by rpki-client