$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33382e302f32332d3233203d3e203538383230.roa File: 3130332e3138352e33382e302f32332d3233203d3e203538383230.roa (raw, json) Hash identifier: 96CDSdZcSo+UEQAQF3sCpQRuZ8lYkqGXZBprM0AA1aw= Subject key identifier: F8:9C:43:AE:0C:CC:1A:7B:70:B9:01:47:D7:47:E4:7E:11:D9:6B:59 Certificate issuer: /CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Certificate serial: 43FD22E86D5AD2BEFB18AE98C3FBA1ABD5CFF54F Authority key identifier: D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33382e302f32332d3233203d3e203538383230.roa Signing time: Sun 09 Aug 2026 08:39:47 +0000 ROA not before: Sun 09 Aug 2026 08:34:47 +0000 ROA not after: Sun 08 Aug 2027 08:39:47 +0000 asID: 58820 IP address blocks: 103.185.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fd:22:e8:6d:5a:d2:be:fb:18:ae:98:c3:fb:a1:ab:d5:cf:f5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Validity Not Before: Aug 9 08:34:47 2026 GMT Not After : Aug 8 08:39:47 2027 GMT Subject: CN=F89C43AE0CCC1A7B70B90147D747E47E11D96B59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:3a:16:01:35:04:04:4d:5d:ae:fb:5a:6a: 5f:9d:d6:f7:58:a3:d6:f5:47:2b:30:25:0e:2c:3b: 49:7a:c7:36:42:92:a7:06:63:a0:92:58:42:85:f6: 20:1a:16:a3:4e:f4:ed:a6:cb:8e:2c:9b:68:42:1e: db:07:1f:8b:1b:6a:be:6c:73:ca:39:ac:80:a7:48: 37:10:0c:29:d7:e9:d1:3b:56:41:d8:87:3c:74:04: 39:c4:73:88:ee:c9:4f:71:6d:fc:73:b9:22:f9:e0: 00:e4:e3:19:a2:22:a8:1b:ca:3b:2e:07:71:f9:29: 55:98:3b:d6:ca:81:c4:41:6e:fa:60:fa:a0:e2:57: 68:30:5d:a2:81:d5:ce:20:b2:80:80:41:ad:0e:98: 7f:67:b6:e9:03:a0:18:0b:fb:72:df:3b:ed:d1:93: 8f:30:d4:4e:34:a4:23:f3:28:38:4c:0f:48:05:03: 22:98:7a:1e:3e:ba:28:b2:69:40:ea:c3:88:85:da: 56:22:23:9b:74:1e:99:25:4e:c8:02:47:a5:b4:d4: 0a:b9:80:fd:ec:61:e6:c0:a3:be:e4:9c:43:0b:ba: 63:91:b2:9d:29:db:dd:7f:39:c4:0f:f2:ea:7f:d5: 0d:56:94:e3:73:87:08:2c:3a:60:25:63:cc:2e:cc: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9C:43:AE:0C:CC:1A:7B:70:B9:01:47:D7:47:E4:7E:11:D9:6B:59 X509v3 Authority Key Identifier: keyid:D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33382e302f32332d3233203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.38.0/23 Signature Algorithm: sha256WithRSAEncryption 09:7c:9e:9f:fe:6f:f9:41:22:d3:5c:b0:b4:5a:fd:6e:e5:0b: c4:c3:78:8b:f8:ed:a3:c9:15:43:d0:56:34:45:22:0d:55:a7: b8:4d:94:27:d1:9d:cd:0b:eb:e0:2f:f2:8c:41:75:ec:27:ea: c6:8f:36:b6:c0:3a:79:23:95:74:08:bd:77:a6:c4:fc:e2:9c: ed:7d:a3:56:ef:63:30:09:20:36:6d:30:e8:9a:14:f6:d3:ba: 00:a6:bb:f6:2b:6f:86:26:ab:14:17:55:15:e5:97:11:bd:8c: a2:3c:e7:b1:31:73:1f:29:d4:12:77:02:58:0a:d6:f3:ae:bb: 7a:42:66:26:17:d4:19:29:9e:d2:51:a6:ad:c9:c6:02:90:47: ed:97:fc:02:5a:de:69:ae:78:ac:26:81:1c:b5:ae:1f:dc:8c: 84:80:9d:24:12:19:e4:1c:bb:79:c4:8c:55:36:31:f6:d2:dd: 2e:6b:c3:84:a5:ce:72:b3:47:8c:a3:13:79:5f:20:34:be:3d: 6e:3e:9e:76:a9:35:c4:05:23:a9:6c:42:73:b8:ac:9d:76:15: 65:21:25:57:a2:d7:c2:84:83:a4:b5:03:9e:73:47:bf:da:61: 1d:12:47:e3:ab:fa:0c:bb:60:ea:35:98:f2:ce:c1:10:e7:16: 3a:56:8c:87 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQ/0i6G1a0r77GK6Yw/uhq9XP9U8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2 QzdGN0UxNTAeFw0yNjA4MDkwODM0NDdaFw0yNzA4MDgwODM5NDdaMDMxMTAvBgNV BAMTKEY4OUM0M0FFMENDQzFBN0I3MEI5MDE0N0Q3NDdFNDdFMTFEOTZCNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XToWATUEBE1drvtaal+d1vdY o9b1RyswJQ4sO0l6xzZCkqcGY6CSWEKF9iAaFqNO9O2my44sm2hCHtsHH4sbar5s c8o5rICnSDcQDCnX6dE7VkHYhzx0BDnEc4juyU9xbfxzuSL54ADk4xmiIqgbyjsu B3H5KVWYO9bKgcRBbvpg+qDiV2gwXaKB1c4gsoCAQa0OmH9ntukDoBgL+3LfO+3R k48w1E40pCPzKDhMD0gFAyKYeh4+uiiyaUDqw4iF2lYiI5t0HpklTsgCR6W01Aq5 gP3sYebAo77knEMLumORsp0p291/OcQP8up/1Q1WlONzhwgsOmAlY8wuzOThAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU+JxDrgzMGntwuQFH10fkfhHZa1kwHwYDVR0j BBgwFoAU0P9Q0iFxVJ2P+pqrPoH4dmx/fhUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwNWFiNjYtNjZhZi00MGE0LTg5YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIy MTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2QzdGN0UxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEZGNTBEMjIxNzE1NDlEOEZGQTlBQUIzRTgxRjg3NjZDN0Y3 RTE1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJlMDVhYjY2LTY2YWYtNDBhNC04 OWE1LTgwNjk0MDI4MzlhOS8wLzMxMzAzMzJlMzEzODM1MmUzMzM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzUzODM4MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe5JjANBgkqhkiG 9w0BAQsFAAOCAQEACXyen/5v+UEi01ywtFr9buULxMN4i/jto8kVQ9BWNEUiDVWn uE2UJ9GdzQvr4C/yjEF17Cfqxo82tsA6eSOVdAi9d6bE/OKc7X2jVu9jMAkgNm0w 6JoU9tO6AKa79itvhiarFBdVFeWXEb2MojznsTFzHynUEncCWArW8667ekJmJhfU GSme0lGmrcnGApBH7Zf8Alreaa54rCaBHLWuH9yMhICdJBIZ5By7ecSMVTYx9tLd LmvDhKXOcrNHjKMTeV8gNL49bj6edqk1xAUjqWxCc7isnXYVZSElV6LXwoSDpLUD nnNHv9phHRJH46v6DLtg6jWY8s7BEOcWOlaMhw== -----END CERTIFICATE-----Generated at Fri Sep 4 00:17:49 2026 by rpki-client