$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313337333330.roa File: 3130332e3131322e3133382e302f32342d3234203d3e20313337333330.roa (raw, json) Hash identifier: CFj4/xqiyCgDBvZu4PUl5jyRbrqvtaU8HRy+7DeAPfo= Subject key identifier: CF:D1:B6:A5:90:7F:D8:F4:51:F1:4F:14:E3:72:28:D1:49:16:11:42 Certificate issuer: /CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1 Certificate serial: 71470AFBCD82F2CA94D4BE59EBD62124CC350AC6 Authority key identifier: 42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313337333330.roa Signing time: Sun 16 Aug 2026 15:03:34 +0000 ROA not before: Sun 16 Aug 2026 14:58:34 +0000 ROA not after: Sun 15 Aug 2027 15:03:34 +0000 asID: 137330 IP address blocks: 103.112.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 09:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:47:0a:fb:cd:82:f2:ca:94:d4:be:59:eb:d6:21:24:cc:35:0a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1 Validity Not Before: Aug 16 14:58:34 2026 GMT Not After : Aug 15 15:03:34 2027 GMT Subject: CN=CFD1B6A5907FD8F451F14F14E37228D149161142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ab:3a:ed:62:fd:28:2a:2d:7a:a9:c0:37:70: 5a:2b:2f:43:03:8e:4c:2c:81:7e:e5:f8:b1:b8:5e: 95:58:0e:f7:9f:aa:54:c8:09:59:df:d0:e7:71:61: 48:33:28:ea:e4:31:b5:51:e0:05:4c:0c:8f:69:c3: 8d:b9:33:77:89:76:32:d5:e0:dc:0d:e7:ab:61:57: 22:8b:92:a0:a7:f3:6f:be:0a:39:e3:dc:3e:fd:de: c8:0e:cf:ac:fc:a6:e8:ef:5f:10:a8:12:8d:24:05: 56:6f:ec:1d:1a:3c:33:ad:d2:3b:4e:6f:40:6f:e2: ac:1f:aa:98:d5:f3:02:2e:2e:16:2e:04:98:91:81: e5:14:d2:3a:f2:36:9f:e7:fd:69:bf:2d:aa:b2:78: 85:01:01:6c:0a:19:f8:4d:55:c7:03:6c:5e:ba:e5: 38:2d:b7:30:60:ed:0b:97:0b:b9:fc:6a:a7:e4:51: f6:fd:61:dc:16:7c:c5:8e:e1:4f:4e:de:24:58:18: 68:08:90:b9:a6:10:52:77:85:75:8e:75:97:94:c8: d4:c6:5e:e4:ca:a2:ce:85:7b:fc:44:67:1f:64:fb: 7b:ea:fe:2e:d2:08:e1:dd:aa:b4:c9:fa:57:86:cb: 12:01:15:65:8f:a0:f5:5c:58:51:12:1a:e9:a1:67: a4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D1:B6:A5:90:7F:D8:F4:51:F1:4F:14:E3:72:28:D1:49:16:11:42 X509v3 Authority Key Identifier: keyid:42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.138.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:d0:8b:cd:30:7b:46:99:eb:12:ef:f1:17:7e:bc:be:25:71: b8:e4:21:a4:2a:95:3a:59:9c:4f:48:c0:fd:5b:ac:f9:98:43: 89:9a:9d:ef:6c:95:4e:64:a9:68:9e:c5:ff:73:15:64:5c:b3: dc:e5:1b:79:35:2c:57:86:4e:27:8c:c3:60:57:01:c2:b3:f3: 82:30:ce:65:bb:ef:f0:28:fc:34:c5:44:4d:24:f2:26:61:5c: 83:a3:9d:04:c6:2f:03:24:1a:f7:53:b8:06:47:02:f9:4d:24: 94:d0:e4:7b:08:85:14:b0:ba:db:c8:0c:b2:6c:46:26:c7:31: 50:53:b7:d6:e9:ef:c7:2c:66:88:f7:c4:24:be:cd:66:29:3e: 72:b3:68:a3:ed:02:7d:cd:92:e4:d7:d7:29:e5:a1:3f:aa:f9: e1:c2:91:75:db:59:9a:b0:53:4c:70:b3:9f:d3:a6:c9:7c:31: ac:f9:10:5e:af:a4:11:10:cc:e9:5f:df:7c:67:30:ab:b7:6d: b5:af:d7:fc:04:90:6b:01:12:68:12:b0:29:21:51:62:42:1e: 05:8d:40:83:3b:46:f3:1c:ad:69:28:2c:ab:ef:84:6f:ed:d3: b4:13:cd:72:07:74:e4:23:9a:99:41:c3:56:ef:68:43:89:1a: 17:53:cf:12 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUcUcK+82C8sqU1L5Z69YhJMw1CsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJCQ0M5M0MxNUFDNEQxODUxQTIyNDBDOUY3QkUyRjlD OUY1MUVGMTAeFw0yNjA4MTYxNDU4MzRaFw0yNzA4MTUxNTAzMzRaMDMxMTAvBgNV BAMTKENGRDFCNkE1OTA3RkQ4RjQ1MUYxNEYxNEUzNzIyOEQxNDkxNjExNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHqzrtYv0oKi16qcA3cForL0MD jkwsgX7l+LG4XpVYDvefqlTICVnf0OdxYUgzKOrkMbVR4AVMDI9pw425M3eJdjLV 4NwN56thVyKLkqCn82++Cjnj3D793sgOz6z8pujvXxCoEo0kBVZv7B0aPDOt0jtO b0Bv4qwfqpjV8wIuLhYuBJiRgeUU0jryNp/n/Wm/LaqyeIUBAWwKGfhNVccDbF66 5TgttzBg7QuXC7n8aqfkUfb9YdwWfMWO4U9O3iRYGGgIkLmmEFJ3hXWOdZeUyNTG XuTKos6Fe/xEZx9k+3vq/i7SCOHdqrTJ+leGyxIBFWWPoPVcWFESGumhZ6TRAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUz9G2pZB/2PRR8U8U43Io0UkWEUIwHwYDVR0j BBgwFoAUQrzJPBWsTRhRoiQMn3vi+cn1HvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMzNGZmMDgtZDIxZi00MjBiLTg3ZGYtNTMxMDNiNmRjMjUzLzAvNDJCQ0M5M0Mx NUFDNEQxODUxQTIyNDBDOUY3QkUyRjlDOUY1MUVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MkJDQzkzQzE1QUM0RDE4NTFBMjI0MEM5RjdCRTJGOUM5RjUx RUYxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMxMzAzMzJlMzEzMTMyMmUzMTMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABncIowDQYJ KoZIhvcNAQELBQADggEBADvQi80we0aZ6xLv8Rd+vL4lcbjkIaQqlTpZnE9IwP1b rPmYQ4mane9slU5kqWiexf9zFWRcs9zlG3k1LFeGTieMw2BXAcKz84IwzmW77/Ao /DTFRE0k8iZhXIOjnQTGLwMkGvdTuAZHAvlNJJTQ5HsIhRSwutvIDLJsRibHMVBT t9bp78csZoj3xCS+zWYpPnKzaKPtAn3NkuTX1ynloT+q+eHCkXXbWZqwU0xws5/T psl8Maz5EF6vpBEQzOlf33xnMKu3bbWv1/wEkGsBEmgSsCkhUWJCHgWNQIM7RvMc rWkoLKvvhG/t07QTzXIHdOQjmplBw1bvaEOJGhdTzxI= -----END CERTIFICATE-----Generated at Thu Sep 3 22:30:26 2026 by rpki-client