$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa File: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (raw, json) Hash identifier: 34SELdnrb0ReXu8mxgFx5LIh/fNfXuwnNwVvGgL+Ivc= Subject key identifier: 05:7D:1E:54:E1:19:94:34:B5:8C:1E:92:D3:6F:8A:7D:EB:CE:A3:62 Certificate issuer: /CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Certificate serial: 46B37A4054888BB213AED26D6AC60A5C7C14A521 Authority key identifier: BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa Signing time: Sun 03 May 2026 02:23:34 +0000 ROA not before: Sun 03 May 2026 02:18:34 +0000 ROA not after: Sun 02 May 2027 02:23:34 +0000 asID: 137331 IP address blocks: 103.133.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b3:7a:40:54:88:8b:b2:13:ae:d2:6d:6a:c6:0a:5c:7c:14:a5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Validity Not Before: May 3 02:18:34 2026 GMT Not After : May 2 02:23:34 2027 GMT Subject: CN=057D1E54E1199434B58C1E92D36F8A7DEBCEA362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a6:22:6c:11:84:1a:d6:5f:fc:95:57:ae:8e: 96:c6:34:93:77:c6:19:c4:91:b0:2d:b7:83:bc:dc: d1:73:fe:00:cf:82:2d:ad:c0:61:ec:11:1b:25:ac: ae:b9:0d:88:ad:36:92:36:d4:57:f9:00:8d:3a:30: de:d2:86:6d:43:8a:a9:6a:94:9c:51:14:e4:66:cb: ed:11:1e:7d:fe:00:b4:50:d0:bd:61:12:16:1f:4c: 08:fd:3b:29:d9:58:8d:68:b0:d7:0b:ce:4b:fd:f2: cf:a1:ca:8a:33:a5:7a:32:41:c6:72:65:9f:b1:ce: c6:6d:34:73:88:0f:db:0d:aa:2b:55:c1:92:54:d2: dd:45:79:8d:2b:0a:49:92:92:c1:ca:15:29:29:f9: ba:25:6d:91:31:5a:1b:3e:0c:74:dd:94:20:88:17: 34:53:bb:d8:c1:33:fb:49:f9:8e:45:2c:b5:25:b9: 5d:e7:b6:64:a2:73:d4:99:a5:51:4b:78:9b:87:c2: 4e:f3:ee:96:1d:f0:04:72:5e:b9:65:f3:9d:92:6b: e3:ca:eb:72:d1:9e:1a:bf:05:c8:6c:4b:74:e1:ec: 34:c5:4d:d2:57:d6:c8:05:01:5e:08:a3:d2:b7:a0: 19:bf:4e:07:56:5e:0c:b7:9a:48:36:93:9e:d2:f2: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7D:1E:54:E1:19:94:34:B5:8C:1E:92:D3:6F:8A:7D:EB:CE:A3:62 X509v3 Authority Key Identifier: keyid:BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.133.222.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:66:63:9e:cd:64:5b:8d:17:d0:06:e9:6f:83:da:48:cb:7c: 19:97:8e:e6:10:85:41:44:b1:4e:3a:d3:42:ef:c8:c1:e5:5b: 4a:c1:3e:1b:e2:c0:e8:d1:2b:eb:b6:71:d7:51:a7:5f:d2:0d: 41:6b:dc:74:bb:27:a1:f2:4d:4c:96:b8:81:e2:40:0d:7d:0e: 1e:fc:2e:5b:b0:ca:11:19:20:4a:56:66:8b:77:7b:7a:af:a2: d3:ab:93:73:c9:7e:cc:40:f4:ed:c3:2e:31:a3:e1:85:21:81: c0:eb:33:f7:18:73:fb:ac:eb:43:b4:f9:68:a6:7a:de:9c:93: 52:1d:ca:ad:e4:99:72:b1:9e:af:33:e6:45:0e:03:59:35:51: d6:0e:ce:93:e5:42:5b:13:06:b0:c5:36:3c:2d:a7:92:1a:a0: ee:9c:e5:35:d8:01:32:1c:2c:51:d7:6c:96:29:fc:8e:62:15: 59:d5:ec:90:be:ce:e9:80:89:af:40:de:82:67:f6:7f:d6:6f: 42:98:35:63:05:13:94:61:65:fc:af:ff:f7:b1:a7:d7:96:2e: 77:33:0e:5f:31:cd:dc:99:14:8a:13:0f:a5:97:05:b6:c0:06: 82:6f:07:52:00:d4:3b:a8:12:31:e7:c1:1a:e0:04:1c:de:07: c5:0e:5e:fc -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIURrN6QFSIi7ITrtJtasYKXHwUpSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQzMTQy QkRGM0M2NzAeFw0yNjA1MDMwMjE4MzRaFw0yNzA1MDIwMjIzMzRaMDMxMTAvBgNV BAMTKDA1N0QxRTU0RTExOTk0MzRCNThDMUU5MkQzNkY4QTdERUJDRUEzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQpiJsEYQa1l/8lVeujpbGNJN3 xhnEkbAtt4O83NFz/gDPgi2twGHsERslrK65DYitNpI21Ff5AI06MN7Shm1Diqlq lJxRFORmy+0RHn3+ALRQ0L1hEhYfTAj9OynZWI1osNcLzkv98s+hyoozpXoyQcZy ZZ+xzsZtNHOID9sNqitVwZJU0t1FeY0rCkmSksHKFSkp+bolbZExWhs+DHTdlCCI FzRTu9jBM/tJ+Y5FLLUluV3ntmSic9SZpVFLeJuHwk7z7pYd8ARyXrll852Sa+PK 63LRnhq/BchsS3Th7DTFTdJX1sgFAV4Io9K3oBm/TgdWXgy3mkg2k57S8nlNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUBX0eVOEZlDS1jB6S02+KfevOo2IwHwYDVR0j BBgwFoAUulo4pND7iqqN0Y4fs5pDFCvfPGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkODBkOTYtZWYxYi00NGIyLTkwM2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTRE MEZCOEFBQThERDE4RTFGQjM5QTQzMTQyQkRGM0M2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTVBMzhBNEQwRkI4QUFBOEREMThFMUZCMzlBNDMxNDJCREYz QzY3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJmZDgwZDk2LWVmMWItNDRiMi05 MDNhLTdmNmRhOTQxYTgzNi8wLzMxMzAzMzJlMzEzMzMzMmUzMjMyMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnhd4wDQYJ KoZIhvcNAQELBQADggEBAD9mY57NZFuNF9AG6W+D2kjLfBmXjuYQhUFEsU4600Lv yMHlW0rBPhviwOjRK+u2cddRp1/SDUFr3HS7J6HyTUyWuIHiQA19Dh78LluwyhEZ IEpWZot3e3qvotOrk3PJfsxA9O3DLjGj4YUhgcDrM/cYc/us60O0+Wimet6ck1Id yq3kmXKxnq8z5kUOA1k1UdYOzpPlQlsTBrDFNjwtp5IaoO6c5TXYATIcLFHXbJYp /I5iFVnV7JC+zumAia9A3oJn9n/Wb0KYNWMFE5RhZfyv//exp9eWLnczDl8xzdyZ FIoTD6WXBbbABoJvB1IA1DuoEjHnwRrgBBzeB8UOXvw= -----END CERTIFICATE-----Generated at Tue May 5 16:57:05 2026 by rpki-client