$ rpki-client -vvvf rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/3130332e3135322e3234322e302f32332d3233203d3e203538383230.roa File: 3130332e3135322e3234322e302f32332d3233203d3e203538383230.roa (raw, json) Hash identifier: UfSTsOVMmUHhlSuicPfv/acnVZkznnLyaQTNx0s5r/I= Subject key identifier: D8:51:CB:7B:B5:BF:36:88:ED:CF:6E:C4:5C:6E:F2:D1:2B:3F:B5:1E Certificate issuer: /CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Certificate serial: 661D7FBA33F1504C3AC4C962BFF569A0028C4E4B Authority key identifier: D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/3130332e3135322e3234322e302f32332d3233203d3e203538383230.roa Signing time: Mon 10 Aug 2026 15:09:40 +0000 ROA not before: Mon 10 Aug 2026 15:04:40 +0000 ROA not after: Mon 09 Aug 2027 15:09:40 +0000 asID: 58820 IP address blocks: 103.152.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1d:7f:ba:33:f1:50:4c:3a:c4:c9:62:bf:f5:69:a0:02:8c:4e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Validity Not Before: Aug 10 15:04:40 2026 GMT Not After : Aug 9 15:09:40 2027 GMT Subject: CN=D851CB7BB5BF3688EDCF6EC45C6EF2D12B3FB51E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:41:91:d4:45:bf:9a:a1:9b:94:8d:77:64:b7: a8:9f:67:3d:a5:0a:95:1d:af:c7:0a:2b:ae:28:42: e8:a6:e9:6b:be:4d:4c:69:4d:3f:70:d2:5f:d8:e1: bb:e1:09:90:af:a5:80:94:54:e9:32:b0:e3:f2:33: f5:b2:c9:57:6f:e1:02:cd:77:e4:7d:7f:cc:0c:94: 76:c7:28:be:a6:d9:3c:3b:84:f4:d8:ff:e0:ee:71: 0c:c1:5a:9f:92:a8:c7:82:c2:cc:e1:a7:85:26:e7: 98:c0:91:94:fe:04:0a:50:db:0b:19:22:b3:e9:b9: 3b:a4:23:70:48:56:22:32:c5:2d:06:9a:88:b7:e9: 60:7e:b9:f9:c1:36:25:45:e0:93:a5:7e:37:73:48: 64:1f:8e:6e:c2:f1:a8:d6:fc:b6:18:f3:80:80:90: c3:28:4d:b6:5b:37:1d:12:b1:39:a9:78:fc:8d:94: 95:f5:0e:88:9b:71:44:25:3a:d8:9d:97:66:a2:0b: ee:b7:32:30:5b:5a:0f:cd:7a:fe:bb:99:3e:6b:d4: 97:33:17:4c:1e:a7:1b:f8:e8:b9:52:39:7f:73:84: 54:35:89:fc:de:32:dd:d1:d2:36:af:9b:35:38:8c: fc:9a:9b:7b:f6:dd:ed:32:ed:ae:ee:34:69:ab:2f: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:51:CB:7B:B5:BF:36:88:ED:CF:6E:C4:5C:6E:F2:D1:2B:3F:B5:1E X509v3 Authority Key Identifier: keyid:D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/3130332e3135322e3234322e302f32332d3233203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.242.0/23 Signature Algorithm: sha256WithRSAEncryption 18:50:62:32:62:60:da:a5:3f:ab:74:46:b1:f4:54:12:20:f5: 1c:ce:0f:ae:4a:6d:86:84:26:17:b7:c4:7c:af:be:e9:82:08: f7:52:45:70:42:6f:59:ec:52:63:41:0f:25:43:d9:5f:bb:72: 80:54:e3:ef:86:ee:25:b7:ff:07:78:5e:df:2e:c9:b2:07:b0: 21:fc:33:b9:52:54:5a:8e:e0:07:05:37:15:00:7a:1a:79:ab: 32:ad:02:ba:76:11:11:d3:6d:b4:da:ad:85:bb:91:b0:bf:bf: a9:69:bd:2f:2c:d9:dd:21:a6:ab:b9:57:70:ee:2e:eb:9d:74: 5e:d0:36:ed:ed:2f:9f:4e:f7:79:20:d2:fe:12:88:a8:bf:1d: 1a:40:9c:e3:01:f0:1c:40:28:05:56:24:2d:ad:17:36:1a:47: 46:ce:88:df:4a:21:da:67:8b:ab:d2:ed:f6:7c:f4:ac:ed:81: 8a:56:bb:26:7f:0d:d8:84:52:84:37:09:72:ca:4b:b9:70:ad: 9e:8d:ad:b8:c0:b4:f0:b1:db:91:c7:1d:0d:9d:85:c8:45:62: 79:b4:73:20:ee:d1:e3:03:e4:2f:2d:77:d4:bf:db:27:18:1b: 90:66:1c:39:b6:64:c8:b6:a0:37:db:e4:4a:5d:87:66:cb:db: 15:a7:d8:f3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZh1/ujPxUEw6xMliv/VpoAKMTkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4 NTIzRTE0QjAeFw0yNjA4MTAxNTA0NDBaFw0yNzA4MDkxNTA5NDBaMDMxMTAvBgNV BAMTKEQ4NTFDQjdCQjVCRjM2ODhFRENGNkVDNDVDNkVGMkQxMkIzRkI1MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXQZHURb+aoZuUjXdkt6ifZz2l CpUdr8cKK64oQuim6Wu+TUxpTT9w0l/Y4bvhCZCvpYCUVOkysOPyM/WyyVdv4QLN d+R9f8wMlHbHKL6m2Tw7hPTY/+DucQzBWp+SqMeCwszhp4Um55jAkZT+BApQ2wsZ IrPpuTukI3BIViIyxS0Gmoi36WB+ufnBNiVF4JOlfjdzSGQfjm7C8ajW/LYY84CA kMMoTbZbNx0SsTmpePyNlJX1DoibcUQlOtidl2aiC+63MjBbWg/Nev67mT5r1Jcz F0wepxv46LlSOX9zhFQ1ifzeMt3R0javmzU4jPyam3v23e0y7a7uNGmrL0TnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2FHLe7W/Nojtz27EXG7y0Ss/tR4wHwYDVR0j BBgwFoAU17PSmhxY8qdk73HZDus0oIUj4UswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjRiYTY3NzgtYjE2ZC00YmE4LTk4NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUEx QzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4NTIzRTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0IzRDI5QTFDNThGMkE3NjRFRjcxRDkwRUVCMzRBMDg1MjNF MTRCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI0YmE2Nzc4LWIxNmQtNGJhOC05 ODRmLTM0ZTQxOWZjOWM0OS8wLzMxMzAzMzJlMzEzNTMyMmUzMjM0MzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNTM4MzgzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5jyMA0GCSqG SIb3DQEBCwUAA4IBAQAYUGIyYmDapT+rdEax9FQSIPUczg+uSm2GhCYXt8R8r77p ggj3UkVwQm9Z7FJjQQ8lQ9lfu3KAVOPvhu4lt/8HeF7fLsmyB7Ah/DO5UlRajuAH BTcVAHoaeasyrQK6dhER02202q2Fu5Gwv7+pab0vLNndIaaruVdw7i7rnXRe0Dbt 7S+fTvd5INL+Eoiovx0aQJzjAfAcQCgFViQtrRc2GkdGzojfSiHaZ4ur0u32fPSs 7YGKVrsmfw3YhFKENwlyyku5cK2eja24wLTwsduRxx0NnYXIRWJ5tHMg7tHjA+Qv LXfUv9snGBuQZhw5tmTItqA32+RKXYdmy9sVp9jz -----END CERTIFICATE-----Generated at Fri Sep 4 02:48:14 2026 by rpki-client