$ rpki-client -vvvf rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/3130332e3135322e3234322e302f32342d3234203d3e20313339343536.roa File: 3130332e3135322e3234322e302f32342d3234203d3e20313339343536.roa (raw, json) Hash identifier: QnjSCWkwabhUboJKZ28QBKGbgaSMy7Q0+XqOshpVH5I= Subject key identifier: 54:9F:75:B1:58:D1:93:ED:F3:14:EC:53:E0:FD:7D:98:85:E2:05:25 Certificate issuer: /CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Certificate serial: 32B477566C109E222723923615AC17DE39399E0D Authority key identifier: D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/3130332e3135322e3234322e302f32342d3234203d3e20313339343536.roa Signing time: Mon 10 Aug 2026 15:09:17 +0000 ROA not before: Mon 10 Aug 2026 15:04:17 +0000 ROA not after: Mon 09 Aug 2027 15:09:17 +0000 asID: 139456 IP address blocks: 103.152.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b4:77:56:6c:10:9e:22:27:23:92:36:15:ac:17:de:39:39:9e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Validity Not Before: Aug 10 15:04:17 2026 GMT Not After : Aug 9 15:09:17 2027 GMT Subject: CN=549F75B158D193EDF314EC53E0FD7D9885E20525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2a:c5:a6:47:08:1f:72:17:07:28:a1:50:7c: f6:f7:6f:80:ea:6c:3e:ea:c6:d4:1d:01:36:cd:17: 50:36:dd:68:5f:68:45:23:3f:4d:5f:ed:21:df:54: 94:83:1c:6a:0c:3b:69:99:50:27:54:9f:5f:14:9e: bf:78:c9:e4:60:9c:89:06:24:46:2e:43:f1:53:2a: 56:51:78:01:c9:11:b3:9f:aa:56:63:c6:97:64:52: 1e:e7:9e:2c:64:24:41:3b:7d:3e:ae:c3:e2:e6:89: 80:40:31:55:36:58:63:f6:43:f2:15:93:f7:81:fe: 16:c4:3f:c5:bc:f6:39:44:86:20:43:76:10:19:b5: 99:37:80:9f:17:9d:5a:bd:6b:a7:45:55:bf:54:7f: d3:6b:6d:56:5d:bf:fc:68:a1:8b:30:cd:c0:c8:cf: d3:14:12:fb:e9:5d:f3:1e:05:aa:60:56:ef:a0:52: 76:44:54:13:ef:c7:85:b3:e3:a4:a2:ca:52:00:8e: 61:91:f6:5d:9e:ce:24:a3:49:80:04:c9:bf:ac:46: 3f:b6:ea:cd:bd:94:a4:6c:ff:0e:48:1a:d0:0e:4f: ab:f0:21:35:b0:0d:36:99:07:97:54:ea:12:c2:7a: 14:81:2c:68:d9:ec:c3:88:54:86:94:d4:00:3b:23: 62:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9F:75:B1:58:D1:93:ED:F3:14:EC:53:E0:FD:7D:98:85:E2:05:25 X509v3 Authority Key Identifier: keyid:D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/3130332e3135322e3234322e302f32342d3234203d3e20313339343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.242.0/24 Signature Algorithm: sha256WithRSAEncryption 79:05:f0:b9:cb:5f:34:00:d2:f2:05:9b:10:35:59:e9:cc:0c: ea:9a:a6:41:32:ab:6a:f6:20:f1:41:97:3c:eb:9c:60:1b:ef: 5b:31:ef:37:2c:43:43:a6:2f:b1:69:1b:5c:aa:b2:e8:46:74: 02:e7:ed:12:64:b8:a0:77:3c:34:be:e9:6b:46:a4:91:bc:2e: 15:8d:bf:7a:69:19:be:02:f1:eb:51:de:77:2c:67:4d:06:0c: c3:88:10:28:c5:fc:02:25:b0:a4:f9:35:64:3f:e2:f1:d1:4e: c5:cc:18:0c:bb:50:b0:78:99:09:3f:d3:13:62:7f:00:13:91: fe:da:3c:3f:2b:dc:45:16:a3:68:41:c8:fc:71:e7:4e:49:85: c6:f7:7e:87:02:26:3f:e9:47:54:73:96:e6:5b:90:94:11:05: 81:fc:e5:64:d1:2e:51:f6:ef:11:63:08:eb:41:14:16:bd:27: 44:4a:4c:de:51:61:1a:de:18:86:93:20:9f:46:36:5e:ca:20: a6:9a:3f:4e:0e:a3:c5:f8:e4:1a:db:01:32:95:e4:b7:61:e3: 5b:ab:97:a8:94:66:5a:88:df:92:60:27:3b:20:98:55:ce:53: 7a:53:9e:e6:8f:3f:dd:ae:80:46:87:ca:04:cb:ea:7e:c5:2e: 5d:94:d8:c5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMrR3VmwQniInI5I2FawX3jk5ng0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4 NTIzRTE0QjAeFw0yNjA4MTAxNTA0MTdaFw0yNzA4MDkxNTA5MTdaMDMxMTAvBgNV BAMTKDU0OUY3NUIxNThEMTkzRURGMzE0RUM1M0UwRkQ3RDk4ODVFMjA1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKsWmRwgfchcHKKFQfPb3b4Dq bD7qxtQdATbNF1A23WhfaEUjP01f7SHfVJSDHGoMO2mZUCdUn18Unr94yeRgnIkG JEYuQ/FTKlZReAHJEbOfqlZjxpdkUh7nnixkJEE7fT6uw+LmiYBAMVU2WGP2Q/IV k/eB/hbEP8W89jlEhiBDdhAZtZk3gJ8XnVq9a6dFVb9Uf9NrbVZdv/xooYswzcDI z9MUEvvpXfMeBapgVu+gUnZEVBPvx4Wz46SiylIAjmGR9l2eziSjSYAEyb+sRj+2 6s29lKRs/w5IGtAOT6vwITWwDTaZB5dU6hLCehSBLGjZ7MOIVIaU1AA7I2KBAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUVJ91sVjRk+3zFOxT4P19mIXiBSUwHwYDVR0j BBgwFoAU17PSmhxY8qdk73HZDus0oIUj4UswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjRiYTY3NzgtYjE2ZC00YmE4LTk4NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUEx QzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4NTIzRTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0IzRDI5QTFDNThGMkE3NjRFRjcxRDkwRUVCMzRBMDg1MjNF MTRCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI0YmE2Nzc4LWIxNmQtNGJhOC05 ODRmLTM0ZTQxOWZjOWM0OS8wLzMxMzAzMzJlMzEzNTMyMmUzMjM0MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzNDM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmPIwDQYJ KoZIhvcNAQELBQADggEBAHkF8LnLXzQA0vIFmxA1WenMDOqapkEyq2r2IPFBlzzr nGAb71sx7zcsQ0OmL7FpG1yqsuhGdALn7RJkuKB3PDS+6WtGpJG8LhWNv3ppGb4C 8etR3ncsZ00GDMOIECjF/AIlsKT5NWQ/4vHRTsXMGAy7ULB4mQk/0xNifwATkf7a PD8r3EUWo2hByPxx505Jhcb3focCJj/pR1RzluZbkJQRBYH85WTRLlH27xFjCOtB FBa9J0RKTN5RYRreGIaTIJ9GNl7KIKaaP04Oo8X45BrbATKV5Ldh41url6iUZlqI 35JgJzsgmFXOU3pTnuaPP92ugEaHygTL6n7FLl2U2MU= -----END CERTIFICATE-----Generated at Fri Sep 4 00:16:29 2026 by rpki-client