$ rpki-client -vvvf rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/3130332e3135322e3234332e302f32342d3234203d3e20313339343536.roa File: 3130332e3135322e3234332e302f32342d3234203d3e20313339343536.roa (raw, json) Hash identifier: 1SUvsGX664dyT73KTnssj6SLYMQJcE1PRfUOLl0J8A0= Subject key identifier: DA:04:64:8B:C8:30:80:85:2C:4E:1D:F2:E2:15:18:40:C7:CE:C7:C3 Certificate issuer: /CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Certificate serial: 55B2B4B2A9A3B030D1E89515C19E936C54BE07E2 Authority key identifier: D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/3130332e3135322e3234332e302f32342d3234203d3e20313339343536.roa Signing time: Mon 10 Aug 2026 15:09:29 +0000 ROA not before: Mon 10 Aug 2026 15:04:29 +0000 ROA not after: Mon 09 Aug 2027 15:09:29 +0000 asID: 139456 IP address blocks: 103.152.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:b2:b4:b2:a9:a3:b0:30:d1:e8:95:15:c1:9e:93:6c:54:be:07:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Validity Not Before: Aug 10 15:04:29 2026 GMT Not After : Aug 9 15:09:29 2027 GMT Subject: CN=DA04648BC83080852C4E1DF2E2151840C7CEC7C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:a6:37:be:5b:de:b3:94:52:42:9e:55:e2: bb:ea:b4:16:34:1f:40:e1:90:68:f9:20:cb:14:3a: e9:7a:0d:ec:05:b5:d1:99:eb:f8:e4:cc:44:e9:fd: 60:c1:02:59:2d:90:e1:55:77:ce:22:0d:72:1e:25: 53:c3:36:56:97:54:34:5f:2a:15:83:f6:7a:73:ba: f6:de:e7:a8:ce:38:6b:41:16:2a:64:2d:9b:87:dc: cb:c0:7b:a6:2e:b2:cb:35:65:10:29:73:75:46:b4: 54:ec:7d:26:e7:3c:c2:cc:12:89:ce:42:0f:e5:31: 2f:1a:a7:6f:8b:8a:c3:d9:54:76:ba:67:47:08:4d: 32:16:db:93:41:82:84:f5:ec:35:6b:0b:94:38:5e: 17:e5:f1:a6:bb:0c:63:96:f4:32:d3:25:d5:15:6c: 16:bc:74:25:e4:2c:74:46:dd:93:5c:18:f6:5e:12: cb:1d:f7:01:96:dd:b9:9f:4b:b7:19:3d:b9:e0:f2: b3:98:2c:bb:8d:5d:10:34:5b:13:e3:83:c7:d4:e2: 56:01:4c:6d:64:40:c2:97:26:cf:79:ec:03:82:f5: 18:1c:95:3f:da:49:bb:f2:6c:37:af:0b:1b:82:2a: 2b:29:f7:98:05:bf:aa:c3:92:70:c2:f5:4c:13:8c: 62:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:04:64:8B:C8:30:80:85:2C:4E:1D:F2:E2:15:18:40:C7:CE:C7:C3 X509v3 Authority Key Identifier: keyid:D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/3130332e3135322e3234332e302f32342d3234203d3e20313339343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.243.0/24 Signature Algorithm: sha256WithRSAEncryption 39:15:6c:76:56:87:fb:58:b5:27:90:a2:e8:c5:21:6a:fe:af: ff:c9:02:1f:a7:97:6c:59:ac:0e:26:37:b0:3b:00:73:e0:1f: 37:07:fb:b2:69:5e:6b:0f:77:42:32:d2:f2:0d:ba:9d:8a:bc: 56:82:45:04:36:cf:1f:cf:2a:58:e2:db:00:c5:e6:89:d4:5d: 7a:66:e4:14:e4:df:10:c4:af:73:ca:f9:9d:bf:28:54:e1:8d: ad:14:74:cd:56:7e:56:bc:99:8c:98:1e:cc:a0:a8:e3:62:e5: 82:ad:f8:6f:da:1e:c2:02:9c:6c:0b:7f:d7:26:f1:fe:3b:6d: 06:8c:3e:a9:c2:5f:66:c6:dd:5a:97:e2:f0:f8:ad:54:05:22: 48:fe:35:e2:32:68:37:cf:49:44:64:f2:7e:e4:ab:d9:29:c8: 33:7a:e7:df:0f:34:30:c7:28:b3:94:62:8d:83:bc:2f:32:f8: c2:e7:73:6e:b6:df:9a:95:8b:73:25:6e:e1:47:4b:2a:2e:ec: a7:82:f8:a9:c1:c9:f0:b6:a7:68:dc:cd:bd:42:fe:0e:e5:39: 7d:67:7c:bd:a3:9b:a8:8e:1e:17:ed:75:b4:9d:39:83:6f:39: 31:83:0a:dd:ce:75:20:6a:c7:fd:20:1b:25:45:cb:f3:35:a4: 22:e7:a8:c2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUVbK0sqmjsDDR6JUVwZ6TbFS+B+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4 NTIzRTE0QjAeFw0yNjA4MTAxNTA0MjlaFw0yNzA4MDkxNTA5MjlaMDMxMTAvBgNV BAMTKERBMDQ2NDhCQzgzMDgwODUyQzRFMURGMkUyMTUxODQwQzdDRUM3QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cqY3vlves5RSQp5V4rvqtBY0 H0DhkGj5IMsUOul6DewFtdGZ6/jkzETp/WDBAlktkOFVd84iDXIeJVPDNlaXVDRf KhWD9npzuvbe56jOOGtBFipkLZuH3MvAe6Yusss1ZRApc3VGtFTsfSbnPMLMEonO Qg/lMS8ap2+LisPZVHa6Z0cITTIW25NBgoT17DVrC5Q4Xhfl8aa7DGOW9DLTJdUV bBa8dCXkLHRG3ZNcGPZeEssd9wGW3bmfS7cZPbng8rOYLLuNXRA0WxPjg8fU4lYB TG1kQMKXJs957AOC9RgclT/aSbvybDevCxuCKisp95gFv6rDknDC9UwTjGLPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU2gRki8gwgIUsTh3y4hUYQMfOx8MwHwYDVR0j BBgwFoAU17PSmhxY8qdk73HZDus0oIUj4UswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjRiYTY3NzgtYjE2ZC00YmE4LTk4NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUEx QzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4NTIzRTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0IzRDI5QTFDNThGMkE3NjRFRjcxRDkwRUVCMzRBMDg1MjNF MTRCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI0YmE2Nzc4LWIxNmQtNGJhOC05 ODRmLTM0ZTQxOWZjOWM0OS8wLzMxMzAzMzJlMzEzNTMyMmUzMjM0MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzNDM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmPMwDQYJ KoZIhvcNAQELBQADggEBADkVbHZWh/tYtSeQoujFIWr+r//JAh+nl2xZrA4mN7A7 AHPgHzcH+7JpXmsPd0Iy0vINup2KvFaCRQQ2zx/PKlji2wDF5onUXXpm5BTk3xDE r3PK+Z2/KFThja0UdM1Wfla8mYyYHsygqONi5YKt+G/aHsICnGwLf9cm8f47bQaM PqnCX2bG3VqX4vD4rVQFIkj+NeIyaDfPSURk8n7kq9kpyDN6598PNDDHKLOUYo2D vC8y+MLnc26235qVi3MlbuFHSyou7KeC+KnByfC2p2jczb1C/g7lOX1nfL2jm6iO HhftdbSdOYNvOTGDCt3OdSBqx/0gGyVFy/M1pCLnqMI= -----END CERTIFICATE-----Generated at Fri Sep 4 00:16:29 2026 by rpki-client