$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa File: 3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa (raw, json) Hash identifier: i4hw81zG+wpHIKAE6dBIhlDgt2/jr9hvRjD+c7DxBOA= Subject key identifier: AF:2B:A1:04:30:A7:25:AD:B9:4E:E9:DE:81:43:02:7C:AF:0E:97:B5 Certificate issuer: /CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265 Certificate serial: 40D5FAB86230F930AD691B71A6845DDAD035D2D4 Authority key identifier: CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa Signing time: Tue 20 Oct 2026 03:58:12 +0000 ROA not before: Tue 20 Oct 2026 03:53:12 +0000 ROA not after: Tue 19 Oct 2027 03:58:12 +0000 asID: 55664 IP address blocks: 103.236.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d5:fa:b8:62:30:f9:30:ad:69:1b:71:a6:84:5d:da:d0:35:d2:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265 Validity Not Before: Oct 20 03:53:12 2026 GMT Not After : Oct 19 03:58:12 2027 GMT Subject: CN=AF2BA10430A725ADB94EE9DE8143027CAF0E97B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:94:5c:13:a6:4f:af:ac:70:66:37:07:ad:ed: 1b:8a:cb:b2:cf:82:0d:88:52:c4:b6:24:14:8b:f8: 23:f2:13:8d:35:5b:e9:20:68:55:1d:95:c6:59:5b: d7:08:2b:b1:ee:86:c5:7d:d0:b2:6c:1f:9b:d1:8d: 21:9f:be:55:92:27:b3:89:17:b6:57:84:91:40:1f: a3:95:5b:bc:5f:73:a2:d5:a1:48:ab:0b:37:dc:50: 3e:9f:76:b9:ae:01:25:7b:4f:b8:20:4c:32:2c:35: b4:0c:9d:49:ca:d8:a4:73:fc:08:38:b1:ca:7b:ec: e9:98:d1:c2:90:e2:16:22:bd:ec:40:dd:6c:67:77: 28:6a:41:1c:a3:75:5b:b9:f1:85:04:94:26:95:c2: 37:75:2a:51:8f:9d:32:94:47:b4:b8:00:89:69:fa: 6c:b7:14:01:f4:ba:05:79:34:06:1a:42:aa:b9:43: 9b:eb:76:e4:94:d5:b8:8b:9d:b6:91:9b:22:d1:c5: fe:e8:85:52:d1:72:75:41:5f:dc:1f:b2:37:64:1b: 6e:28:e5:90:5a:f3:22:ef:97:3d:4b:b2:a0:74:a3: 69:9c:7c:87:71:2b:7f:53:35:06:a8:38:ee:f1:33: 6e:c7:2f:7c:89:27:c7:50:0c:79:37:a6:a2:cb:04: 0c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2B:A1:04:30:A7:25:AD:B9:4E:E9:DE:81:43:02:7C:AF:0E:97:B5 X509v3 Authority Key Identifier: keyid:CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.148.0/24 Signature Algorithm: sha256WithRSAEncryption 29:2d:01:21:8f:3a:ab:23:c8:e8:d2:1c:6f:0b:1d:f3:7d:5b: ae:7b:ca:75:f6:d1:db:a8:02:ae:bd:09:a4:1f:08:ae:2d:34: 5d:e2:ff:dc:5f:1b:af:b7:98:f1:d0:d6:be:a8:d5:1e:7b:11: bd:49:20:52:9d:35:80:26:1c:7d:d6:01:d2:7d:8d:b1:ad:10: 7f:08:b5:d1:fb:20:54:c2:8d:3d:41:ed:7a:90:4f:36:39:54: 8c:17:05:fa:5a:10:be:b2:ec:7a:5c:20:d3:c0:1b:10:ca:60: bb:d9:0c:4b:51:20:56:a8:a3:71:69:3e:eb:ce:61:25:9e:6f: 60:43:a8:fe:89:70:f2:e0:6b:15:15:ae:39:98:48:78:38:df: c2:44:32:7c:01:03:dc:e8:af:e0:e7:06:db:6b:88:3e:e3:ae: a7:64:bf:56:4e:e1:be:d0:bf:42:68:c3:57:38:75:09:64:ce: 7d:0e:9a:8e:af:c3:e5:1f:b5:c2:b1:87:48:c5:20:b1:13:19: f1:38:b9:6a:d7:e7:75:bc:72:f1:63:41:ba:b2:68:31:e4:6f: bd:4c:69:43:fb:ef:47:6a:ec:5f:d8:5c:be:89:af:cb:32:c5: 7b:d4:5e:13:f3:bd:6c:d4:50:89:d3:18:ba:ab:4d:72:e1:29: 4c:dd:9b:76 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQNX6uGIw+TCtaRtxpoRd2tA10tQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZENDZGNTlCRkNFOEUwNzk5N0ZGMzg4RTdEM0Q4RDZF RjdFNjI2NTAeFw0yNjEwMjAwMzUzMTJaFw0yNzEwMTkwMzU4MTJaMDMxMTAvBgNV BAMTKEFGMkJBMTA0MzBBNzI1QURCOTRFRTlERTgxNDMwMjdDQUYwRTk3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOlFwTpk+vrHBmNwet7RuKy7LP gg2IUsS2JBSL+CPyE401W+kgaFUdlcZZW9cIK7HuhsV90LJsH5vRjSGfvlWSJ7OJ F7ZXhJFAH6OVW7xfc6LVoUirCzfcUD6fdrmuASV7T7ggTDIsNbQMnUnK2KRz/Ag4 scp77OmY0cKQ4hYivexA3WxndyhqQRyjdVu58YUElCaVwjd1KlGPnTKUR7S4AIlp +my3FAH0ugV5NAYaQqq5Q5vrduSU1biLnbaRmyLRxf7ohVLRcnVBX9wfsjdkG24o 5ZBa8yLvlz1LsqB0o2mcfIdxK39TNQaoOO7xM27HL3yJJ8dQDHk3pqLLBAwtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUryuhBDCnJa25TunegUMCfK8Ol7UwHwYDVR0j BBgwFoAUz9RvWb/OjgeZf/OI59PY1u9+YmUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmEzNzc5ODktNzE2Zi00OGE1LTkwOGUtMTk4NDAwMmYzMjNkLzAvQ0ZENDZGNTlC RkNFOEUwNzk5N0ZGMzg4RTdEM0Q4RDZFRjdFNjI2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkQ0NkY1OUJGQ0U4RTA3OTk3RkYzODhFN0QzRDhENkVGN0U2 MjY1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZhMzc3OTg5LTcxNmYtNDhhNS05 MDhlLTE5ODQwMDJmMzIzZC8wLzMxMzAzMzJlMzIzMzM2MmUzMTM0MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+yUMA0GCSqG SIb3DQEBCwUAA4IBAQApLQEhjzqrI8jo0hxvCx3zfVuue8p19tHbqAKuvQmkHwiu LTRd4v/cXxuvt5jx0Na+qNUeexG9SSBSnTWAJhx91gHSfY2xrRB/CLXR+yBUwo09 Qe16kE82OVSMFwX6WhC+sux6XCDTwBsQymC72QxLUSBWqKNxaT7rzmElnm9gQ6j+ iXDy4GsVFa45mEh4ON/CRDJ8AQPc6K/g5wbba4g+466nZL9WTuG+0L9CaMNXOHUJ ZM59DpqOr8PlH7XCsYdIxSCxExnxOLlq1+d1vHLxY0G6smgx5G+9TGlD++9Hauxf 2Fy+ia/LMsV71F4T871s1FCJ0xi6q01y4SlM3Zt2 -----END CERTIFICATE-----Generated at Mon Nov 2 22:08:42 2026 by rpki-client