$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33332e302f32342d3234203d3e20313530323238.roa File: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (raw, json) Hash identifier: cciT2cLODhuCXSq6f7ZeF3BxK19X9kDtH1Tm4E9hM34= Subject key identifier: 1A:F0:BC:66:88:68:2B:70:4B:3B:07:67:E1:49:CF:F0:40:00:B1:03 Certificate issuer: /CN=D713503939D2573A44FA29703CDDCC704F03A75E Certificate serial: 5A784EE4577DDD75661D46D33ECB10C130948059 Authority key identifier: D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33332e302f32342d3234203d3e20313530323238.roa Signing time: Sun 03 May 2026 02:27:04 +0000 ROA not before: Sun 03 May 2026 02:22:04 +0000 ROA not after: Sun 02 May 2027 02:27:04 +0000 asID: 150228 IP address blocks: 103.17.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 16:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:78:4e:e4:57:7d:dd:75:66:1d:46:d3:3e:cb:10:c1:30:94:80:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D713503939D2573A44FA29703CDDCC704F03A75E Validity Not Before: May 3 02:22:04 2026 GMT Not After : May 2 02:27:04 2027 GMT Subject: CN=1AF0BC6688682B704B3B0767E149CFF04000B103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:21:59:1e:f8:00:cd:bb:9e:43:b1:ab:0c:57: 90:dc:9b:61:65:d4:94:73:e7:8d:f4:c8:b5:6e:ca: 9a:c7:2d:0b:e6:49:14:f9:6f:c5:b0:a5:24:ae:db: 86:b6:a9:b3:5c:5d:77:28:09:dd:98:5d:ab:31:0f: 7a:e6:f5:ed:03:fa:a5:3b:1b:7e:3f:b3:06:9e:5d: 5f:8a:0a:05:59:e4:45:0c:90:d4:12:1b:40:f5:27: 8f:5d:bd:f0:a4:1a:02:ae:56:0e:07:1d:fe:8c:1a: 9f:b9:3d:52:25:af:66:11:fb:9f:ec:6c:72:ee:c9: 4c:ee:64:d9:63:1d:eb:9a:08:07:d8:6a:4e:7f:33: 5a:77:fa:16:99:71:40:c6:f5:e9:42:8c:0a:22:44: 11:5a:21:23:95:bc:56:77:f2:b5:15:65:58:15:85: 6b:fe:23:0c:e5:dd:84:6d:20:f9:37:26:6c:d5:22: 6e:69:0a:d7:85:c0:9a:2d:37:92:5f:60:e7:fb:d1: 08:1c:90:08:fe:8a:14:7d:47:a0:1c:8e:04:dd:9d: 12:82:44:5e:22:99:af:f5:e3:01:6e:21:67:4b:41: 50:eb:b5:c1:e5:a3:82:ae:96:80:99:85:09:b2:51: 40:ab:f4:ec:dd:49:21:0d:1d:31:cc:f7:28:ba:3f: 74:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F0:BC:66:88:68:2B:70:4B:3B:07:67:E1:49:CF:F0:40:00:B1:03 X509v3 Authority Key Identifier: keyid:D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33332e302f32342d3234203d3e20313530323238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.33.0/24 Signature Algorithm: sha256WithRSAEncryption 95:64:1a:1c:0d:7b:05:73:62:e6:52:48:06:1c:2a:0d:82:bd: b0:ff:f4:0d:ee:59:30:c0:56:48:7c:52:c4:ab:7a:44:ef:38: 80:59:c7:cc:f5:8f:25:0b:1d:b6:5c:e9:32:38:22:66:6e:45: 43:b3:a5:b8:6b:eb:17:8b:16:93:e1:b5:e7:18:7d:7a:9f:cd: 73:79:cb:77:73:2e:49:ec:a7:22:3d:50:7e:10:6f:2c:b8:ff: b8:f9:5f:7b:a4:54:58:2f:62:86:f9:1c:29:12:6f:e2:d2:72: d8:c8:5a:6c:4a:04:fe:36:04:42:12:3a:d4:40:17:70:54:7c: f9:29:a0:49:1f:66:49:fc:f1:35:5e:85:23:80:a4:26:e1:13: f7:e6:65:41:b2:2e:c2:79:6e:dc:65:c4:95:43:be:d6:44:f7: e3:5a:8d:57:81:d5:20:f3:4a:6d:b3:f8:eb:a0:ab:6d:8d:1b: 4b:48:ea:f8:bc:7d:ff:98:c9:8d:7d:f8:65:1a:69:80:34:42: a9:c4:b6:05:47:38:f9:c6:3b:ed:4c:bd:19:a2:2a:cb:34:c5: 70:17:98:93:c6:7c:0a:f1:11:79:e7:5c:a8:dd:b3:1a:ca:49: ca:61:c4:71:1f:de:10:f3:fc:d9:5b:e6:93:37:61:b1:fd:f9: 7c:98:a5:82 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWnhO5Fd93XVmHUbTPssQwTCUgFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NERENDNzA0 RjAzQTc1RTAeFw0yNjA1MDMwMjIyMDRaFw0yNzA1MDIwMjI3MDRaMDMxMTAvBgNV BAMTKDFBRjBCQzY2ODg2ODJCNzA0QjNCMDc2N0UxNDlDRkYwNDAwMEIxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTIVke+ADNu55DsasMV5Dcm2Fl 1JRz5430yLVuyprHLQvmSRT5b8WwpSSu24a2qbNcXXcoCd2YXasxD3rm9e0D+qU7 G34/swaeXV+KCgVZ5EUMkNQSG0D1J49dvfCkGgKuVg4HHf6MGp+5PVIlr2YR+5/s bHLuyUzuZNljHeuaCAfYak5/M1p3+haZcUDG9elCjAoiRBFaISOVvFZ38rUVZVgV hWv+Iwzl3YRtIPk3JmzVIm5pCteFwJotN5JfYOf70QgckAj+ihR9R6AcjgTdnRKC RF4ima/14wFuIWdLQVDrtcHlo4KuloCZhQmyUUCr9OzdSSENHTHM9yi6P3QXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUGvC8ZohoK3BLOwdn4UnP8EAAsQMwHwYDVR0j BBgwFoAU1xNQOTnSVzpE+ilwPN3McE8Dp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I5MDU3NjYtNDQwZS00YmNiLWFlNzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkz OUQyNTczQTQ0RkEyOTcwM0NERENDNzA0RjAzQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEzNTAzOTM5RDI1NzNBNDRGQTI5NzAzQ0REQ0M3MDRGMDNB NzVFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiOTA1NzY2LTQ0MGUtNGJjYi1h ZTcyLTNlNzg4MzFjZTlkYy8wLzMxMzAzMzJlMzEzNzJlMzMzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcRITANBgkqhkiG 9w0BAQsFAAOCAQEAlWQaHA17BXNi5lJIBhwqDYK9sP/0De5ZMMBWSHxSxKt6RO84 gFnHzPWPJQsdtlzpMjgiZm5FQ7OluGvrF4sWk+G15xh9ep/Nc3nLd3MuSeynIj1Q fhBvLLj/uPlfe6RUWC9ihvkcKRJv4tJy2MhabEoE/jYEQhI61EAXcFR8+SmgSR9m SfzxNV6FI4CkJuET9+ZlQbIuwnlu3GXElUO+1kT341qNV4HVIPNKbbP466CrbY0b S0jq+Lx9/5jJjX34ZRppgDRCqcS2BUc4+cY77Uy9GaIqyzTFcBeYk8Z8CvEReedc qN2zGspJymHEcR/eEPP82Vvmkzdhsf35fJilgg== -----END CERTIFICATE-----Generated at Tue May 5 10:24:30 2026 by rpki-client