$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133332e302f32342d3234203d3e20313339343536.roa File: 3130332e3136372e3133332e302f32342d3234203d3e20313339343536.roa (raw, json) Hash identifier: 1J0/I4tqmUll60RJxwp6bFaa6UPkoQKQXxUGs5DsE7s= Subject key identifier: 1E:5E:63:8C:1C:63:42:7C:72:C0:7A:C6:F9:62:FA:9E:99:3E:20:68 Certificate issuer: /CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Certificate serial: 7D440023482227E1C6B015BE946DB2BCD61F2EA2 Authority key identifier: EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133332e302f32342d3234203d3e20313339343536.roa Signing time: Mon 10 Aug 2026 15:11:42 +0000 ROA not before: Mon 10 Aug 2026 15:06:42 +0000 ROA not after: Mon 09 Aug 2027 15:11:42 +0000 asID: 139456 IP address blocks: 103.167.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 09:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:44:00:23:48:22:27:e1:c6:b0:15:be:94:6d:b2:bc:d6:1f:2e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Validity Not Before: Aug 10 15:06:42 2026 GMT Not After : Aug 9 15:11:42 2027 GMT Subject: CN=1E5E638C1C63427C72C07AC6F962FA9E993E2068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b7:21:34:3f:66:1d:57:d6:a3:29:ed:12:ad: c5:74:f5:3f:51:d0:3d:7e:9c:0a:39:f7:ea:d4:79: 01:f5:bc:2c:47:34:22:e3:cc:a2:ab:9a:e7:c8:f1: f3:3a:55:0a:76:c4:cf:56:1c:db:33:a6:93:9c:53: 6a:06:c8:2f:80:12:b2:97:a0:7f:28:0e:0a:f8:e1: 8a:5d:4e:b9:2f:8a:27:81:04:e7:61:ab:2d:6d:e4: dd:0c:ec:e1:33:74:58:7a:22:57:7e:f6:ec:d3:86: b8:87:d3:57:4d:c6:bc:38:ba:ec:c9:d2:4f:6f:aa: 10:af:37:38:79:31:b6:96:29:03:a6:79:41:0b:ff: 6b:7e:1c:c3:8b:cd:11:e2:51:a9:bb:d9:70:77:a7: 3f:39:8d:51:7c:6d:32:fe:52:b3:17:12:61:b7:fc: 15:66:65:19:51:d6:3b:53:b8:9b:3f:0b:aa:76:83: 30:d6:b1:fc:10:e4:44:f6:f0:8b:25:cc:50:bd:83: 25:63:7a:fc:31:e4:52:74:76:e6:6e:3c:03:5c:7f: 16:6f:02:c6:4b:25:72:e8:3f:8d:b4:21:73:18:ba: fc:eb:95:c5:26:68:86:84:d9:0b:c7:4a:2e:86:ca: 92:42:d2:39:37:cd:2a:84:80:1d:7a:30:18:0c:a1: 21:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5E:63:8C:1C:63:42:7C:72:C0:7A:C6:F9:62:FA:9E:99:3E:20:68 X509v3 Authority Key Identifier: keyid:EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133332e302f32342d3234203d3e20313339343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.133.0/24 Signature Algorithm: sha256WithRSAEncryption 72:fe:f2:b6:f3:11:95:8f:12:da:b1:62:b7:31:3e:8a:09:15: 53:31:1f:c8:09:49:2c:a4:67:b3:50:86:d5:26:23:15:13:40: d6:60:f1:50:6c:93:ef:2a:1a:ee:f2:44:2c:c6:5b:84:d1:29: 86:ff:8a:80:10:6b:f8:f6:bb:a2:12:8f:cd:21:b1:d6:d2:47: 44:da:d7:bc:24:b0:bf:85:8f:c4:24:7e:7e:c4:a0:7c:1c:f3: 50:a9:66:fb:c6:63:a4:40:fc:f0:b2:af:0d:90:b8:8d:06:12: 6a:62:81:85:7c:30:ce:9b:57:18:84:8f:a9:83:48:68:b8:0e: a3:74:fc:5c:eb:9f:67:9b:c2:c7:64:13:61:e5:a2:94:43:8c: 6d:1c:0a:a3:5b:c9:d2:d0:2c:88:3e:06:99:98:5c:37:ce:5d: fb:fd:14:96:18:5d:d9:e5:ba:aa:f2:e5:11:ea:2b:31:f6:d4: c7:25:f6:03:3f:de:e4:cd:eb:e7:4b:4b:b0:8e:7b:55:f9:28: e0:df:82:17:4a:56:75:71:22:c0:89:c0:61:a8:e8:24:c4:77: 49:2e:2f:25:86:bf:42:77:6b:09:15:3e:bb:a8:4e:18:84:69: e0:ae:17:97:d4:93:ae:e1:db:9a:c7:66:55:be:96:2c:39:36: 70:11:cf:f5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUfUQAI0giJ+HGsBW+lG2yvNYfLqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdC MUI0QkNBOTAeFw0yNjA4MTAxNTA2NDJaFw0yNzA4MDkxNTExNDJaMDMxMTAvBgNV BAMTKDFFNUU2MzhDMUM2MzQyN0M3MkMwN0FDNkY5NjJGQTlFOTkzRTIwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtyE0P2YdV9ajKe0SrcV09T9R 0D1+nAo59+rUeQH1vCxHNCLjzKKrmufI8fM6VQp2xM9WHNszppOcU2oGyC+AErKX oH8oDgr44YpdTrkviieBBOdhqy1t5N0M7OEzdFh6Ild+9uzThriH01dNxrw4uuzJ 0k9vqhCvNzh5MbaWKQOmeUEL/2t+HMOLzRHiUam72XB3pz85jVF8bTL+UrMXEmG3 /BVmZRlR1jtTuJs/C6p2gzDWsfwQ5ET28IslzFC9gyVjevwx5FJ0duZuPANcfxZv AsZLJXLoP420IXMYuvzrlcUmaIaE2QvHSi6GypJC0jk3zSqEgB16MBgMoSGHAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUHl5jjBxjQnxywHrG+WL6npk+IGgwHwYDVR0j BBgwFoAU79QpB7KB552Ts6Vb535pV7G0vKkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVkNDcyMDItZGU2MC00N2YzLWEyYTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdC MjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdCMUI0QkNBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkQ0MjkwN0IyODFFNzlEOTNCM0E1NUJFNzdFNjk1N0IxQjRC Q0E5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZlZDQ3MjAyLWRlNjAtNDdmMy1h MmE3LTYwOGE3NGExZTg3NC8wLzMxMzAzMzJlMzEzNjM3MmUzMTMzMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzNDM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnp4UwDQYJ KoZIhvcNAQELBQADggEBAHL+8rbzEZWPEtqxYrcxPooJFVMxH8gJSSykZ7NQhtUm IxUTQNZg8VBsk+8qGu7yRCzGW4TRKYb/ioAQa/j2u6ISj80hsdbSR0Ta17wksL+F j8Qkfn7EoHwc81CpZvvGY6RA/PCyrw2QuI0GEmpigYV8MM6bVxiEj6mDSGi4DqN0 /Fzrn2ebwsdkE2HlopRDjG0cCqNbydLQLIg+BpmYXDfOXfv9FJYYXdnluqry5RHq KzH21Mcl9gM/3uTN6+dLS7COe1X5KODfghdKVnVxIsCJwGGo6CTEd0kuLyWGv0J3 awkVPruoThiEaeCuF5fUk67h25rHZlW+liw5NnARz/U= -----END CERTIFICATE-----Generated at Thu Sep 3 22:30:26 2026 by rpki-client