$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36382e302f32342d3234203d3e20313430343433.roa File: 3130332e33392e36382e302f32342d3234203d3e20313430343433.roa (raw, json) Hash identifier: oNnCfXSu3tUmHIX6NnfrMVOSxL11JsD7CORjwjLKd18= Subject key identifier: EE:88:4F:DC:F9:B1:AC:C1:43:BE:1C:75:F8:8C:93:64:D1:3F:2F:F4 Certificate issuer: /CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Certificate serial: 4991F783EF86A046A5F8062044035D9E9F58871B Authority key identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36382e302f32342d3234203d3e20313430343433.roa Signing time: Thu 15 Oct 2026 07:36:16 +0000 ROA not before: Thu 15 Oct 2026 07:31:16 +0000 ROA not after: Thu 14 Oct 2027 07:36:16 +0000 asID: 140443 IP address blocks: 103.39.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:91:f7:83:ef:86:a0:46:a5:f8:06:20:44:03:5d:9e:9f:58:87:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Validity Not Before: Oct 15 07:31:16 2026 GMT Not After : Oct 14 07:36:16 2027 GMT Subject: CN=EE884FDCF9B1ACC143BE1C75F88C9364D13F2FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:97:64:b1:a2:8f:c3:91:5a:7c:77:29:52: db:d4:20:89:ce:6f:ff:6b:3c:bc:c3:7f:67:27:ad: 3b:69:d6:54:f4:1d:98:db:2e:a8:2a:23:82:07:ac: e7:48:24:4a:84:5a:f1:7c:ed:db:31:6e:f3:06:47: cd:87:ab:b8:8a:09:89:5a:f9:5d:59:7b:58:07:a9: e0:d6:38:c1:25:7a:0c:17:23:2f:4a:b2:5c:53:d7: 55:36:68:17:c7:45:8c:d7:17:6f:40:02:f6:9e:0a: 92:bd:e1:a8:ad:36:d2:74:0e:a2:ea:c9:7a:85:83: 1f:6a:e0:66:3a:8b:65:bf:2b:1a:bb:2f:3a:6d:e2: ba:95:94:a9:d0:1e:aa:db:c6:11:e0:23:de:78:f0: bf:06:c4:39:70:6c:5b:ba:2e:5a:5e:63:97:6c:0a: ae:43:83:bb:25:e4:10:6e:21:6a:43:cb:5c:ce:c4: 8d:9a:a8:64:65:82:fc:1c:79:4d:05:bd:cf:3a:07: 4d:a5:b1:30:86:95:c4:ff:cf:07:4b:77:21:c5:66: 36:f2:3e:be:ca:74:fa:d6:5d:9a:f2:be:d2:55:35: 2d:4a:38:86:40:93:dc:5b:3b:0f:c7:33:d8:e0:53: 7b:e2:94:50:c7:c6:8e:0d:ab:0f:89:18:db:16:dc: 89:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:88:4F:DC:F9:B1:AC:C1:43:BE:1C:75:F8:8C:93:64:D1:3F:2F:F4 X509v3 Authority Key Identifier: keyid:F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36382e302f32342d3234203d3e20313430343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.68.0/24 Signature Algorithm: sha256WithRSAEncryption 46:7c:2f:e1:e4:d1:b5:0b:b7:51:56:50:dd:66:0a:fd:57:0e: 19:36:14:f7:33:46:99:98:52:0b:9b:7c:44:f8:75:6e:d4:9f: 12:bc:2a:56:47:6a:5b:44:a8:a9:ce:c6:23:37:2a:b1:0d:df: 0c:52:ef:d3:cd:16:99:b1:70:cb:f6:12:37:a2:e5:70:f6:fb: ab:65:81:69:ce:f9:cf:a7:14:ac:e0:e1:7e:c6:4a:32:a3:42: 5d:20:83:41:ad:48:f7:fc:55:a5:f9:31:71:38:02:7c:60:77: 9f:ae:db:bb:cc:29:93:f2:11:6e:82:71:18:83:b3:53:dc:8f: c0:7d:e0:70:b8:89:0b:52:d0:93:bd:e0:bf:27:30:fc:f3:97: 27:66:1d:a4:5f:24:75:c0:ca:bd:a5:33:68:fa:cc:95:ff:24: 46:a5:a9:06:34:75:13:73:8f:9d:5a:e4:75:de:d9:1d:ef:f9: 29:5e:a6:3e:d7:ac:5b:fb:bf:f4:42:49:4d:13:3d:aa:0a:99: ff:06:2a:2f:93:f1:75:bb:85:1c:73:fd:f6:43:c4:13:4b:ec: a5:6f:25:09:14:a0:4b:04:6a:50:64:64:9d:f4:34:30:02:2a: d4:50:c5:b6:98:a3:45:20:d9:59:a6:64:83:b1:60:7d:af:23: ac:28:9c:4c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSZH3g++GoEal+AYgRANdnp9YhxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIzM0RE MDYxRDlBNDAeFw0yNjEwMTUwNzMxMTZaFw0yNzEwMTQwNzM2MTZaMDMxMTAvBgNV BAMTKEVFODg0RkRDRjlCMUFDQzE0M0JFMUM3NUY4OEM5MzY0RDEzRjJGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWLJdksaKPw5FafHcpUtvUIInO b/9rPLzDf2cnrTtp1lT0HZjbLqgqI4IHrOdIJEqEWvF87dsxbvMGR82Hq7iKCYla +V1Ze1gHqeDWOMElegwXIy9KslxT11U2aBfHRYzXF29AAvaeCpK94aitNtJ0DqLq yXqFgx9q4GY6i2W/Kxq7Lzpt4rqVlKnQHqrbxhHgI9548L8GxDlwbFu6LlpeY5ds Cq5Dg7sl5BBuIWpDy1zOxI2aqGRlgvwceU0Fvc86B02lsTCGlcT/zwdLdyHFZjby Pr7KdPrWXZryvtJVNS1KOIZAk9xbOw/HM9jgU3vilFDHxo4Nqw+JGNsW3ImDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7ohP3PmxrMFDvhx1+IyTZNE/L/QwHwYDVR0j BBgwFoAU+PZoZTLnu3BOgCttO0izPdBh2aQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIyNmJlN2ItMmUyOC00OTUwLWFhNGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUz MkU3QkI3MDRFODAyQjZEM0I0OEIzM0REMDYxRDlBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEY2Njg2NTMyRTdCQjcwNEU4MDJCNkQzQjQ4QjMzREQwNjFE OUE0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIyMjZiZTdiLTJlMjgtNDk1MC1h YTRjLTIxODVlNjQ3ZGIzZi8wLzMxMzAzMzJlMzMzOTJlMzYzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMDM0MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcnRDANBgkqhkiG 9w0BAQsFAAOCAQEARnwv4eTRtQu3UVZQ3WYK/VcOGTYU9zNGmZhSC5t8RPh1btSf ErwqVkdqW0Soqc7GIzcqsQ3fDFLv080WmbFwy/YSN6LlcPb7q2WBac75z6cUrODh fsZKMqNCXSCDQa1I9/xVpfkxcTgCfGB3n67bu8wpk/IRboJxGIOzU9yPwH3gcLiJ C1LQk73gvycw/POXJ2YdpF8kdcDKvaUzaPrMlf8kRqWpBjR1E3OPnVrkdd7ZHe/5 KV6mPtesW/u/9EJJTRM9qgqZ/wYqL5PxdbuFHHP99kPEE0vspW8lCRSgSwRqUGRk nfQ0MAIq1FDFtpijRSDZWaZkg7Fgfa8jrCicTA== -----END CERTIFICATE-----Generated at Mon Nov 2 08:26:05 2026 by rpki-client