$ rpki-client -vvvf rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/3130332e3132392e3135322e302f32342d3234203d3e20313338303635.roa File: 3130332e3132392e3135322e302f32342d3234203d3e20313338303635.roa (raw, json) Hash identifier: hrqst1riYBHBOimxTLlvZyjkc9izcyyKFw/2744oA1A= Subject key identifier: D6:14:36:E0:A9:6D:05:18:68:2B:04:4D:45:00:85:C7:9F:F8:FB:19 Certificate issuer: /CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Certificate serial: 3F22D9C1E862AE9497D739E6794AA884357442AD Authority key identifier: 23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/3130332e3132392e3135322e302f32342d3234203d3e20313338303635.roa Signing time: Wed 05 Aug 2026 10:31:16 +0000 ROA not before: Wed 05 Aug 2026 10:26:16 +0000 ROA not after: Wed 04 Aug 2027 10:31:16 +0000 asID: 138065 IP address blocks: 103.129.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:22:d9:c1:e8:62:ae:94:97:d7:39:e6:79:4a:a8:84:35:74:42:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Validity Not Before: Aug 5 10:26:16 2026 GMT Not After : Aug 4 10:31:16 2027 GMT Subject: CN=D61436E0A96D0518682B044D450085C79FF8FB19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:90:52:40:15:a5:6e:53:70:9c:8a:98:91: 77:26:a5:a8:6c:b8:ad:64:88:70:8e:67:b8:62:32: 4a:a7:a7:01:83:3e:29:01:d3:6a:ab:82:c8:cc:35: 7f:e5:c8:c1:e5:4d:8d:d9:6d:b4:8f:79:92:ae:ce: 85:ef:ac:27:4c:3e:c3:34:cb:3c:3c:92:2b:13:03: a3:df:d4:1c:ed:7a:71:10:bf:d8:ad:b8:09:44:60: 37:c2:db:19:a8:5d:9f:d6:b4:39:46:7a:1d:b7:83: b3:f5:df:05:4f:e1:57:37:c2:f5:55:98:f4:83:4a: 75:56:da:38:9f:23:d3:31:32:ad:83:49:c7:cd:ed: d8:11:8b:a6:0c:3b:59:a7:b2:63:8c:44:36:8d:dc: b1:1b:f6:91:50:cb:88:9a:4a:30:69:43:6c:c5:08: e1:03:42:72:84:2d:32:7d:67:68:0d:56:e8:9b:a8: 44:94:63:1d:67:90:71:a5:38:2d:ff:3c:1c:6d:61: 48:30:69:58:75:16:74:40:b0:47:cf:eb:b3:43:94: 52:30:c9:89:1f:76:af:f1:11:36:5d:55:60:26:de: f2:14:71:0a:d9:b0:53:f0:3f:59:d6:50:29:bf:e9: e1:3f:e1:95:36:b5:ad:5f:cf:35:67:56:e0:b5:e1: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:14:36:E0:A9:6D:05:18:68:2B:04:4D:45:00:85:C7:9F:F8:FB:19 X509v3 Authority Key Identifier: keyid:23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/3130332e3132392e3135322e302f32342d3234203d3e20313338303635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.152.0/24 Signature Algorithm: sha256WithRSAEncryption ac:d7:2b:f3:53:fb:23:ab:eb:31:70:21:6e:45:e2:29:d8:f8: 4a:9b:d7:40:eb:a5:b7:f2:6d:67:32:54:00:81:50:30:3a:4e: c5:8f:98:12:01:c0:60:98:e7:f0:72:78:61:63:48:5c:a1:dd: 13:3f:78:fd:ef:c1:c8:5b:d1:34:02:86:df:f7:71:1e:b4:5c: b4:45:37:f0:d0:21:b2:66:04:95:b1:e1:bc:c9:1d:75:49:26: 7f:10:a0:32:52:f2:2a:4a:57:17:56:4d:49:de:9b:ec:77:ab: 82:73:07:65:92:3d:6e:9f:76:f6:5c:e3:2f:12:42:bb:77:f0: b8:12:ff:96:75:0a:66:07:45:d9:a7:5f:b8:a5:fa:12:62:61: e4:36:ef:cd:5b:6c:99:9b:19:a4:74:b5:5d:6e:81:9b:92:34: 1c:f7:51:e4:f3:56:ba:ed:ed:22:3b:90:97:50:42:ff:7e:16: c4:9c:af:e7:ed:0d:c7:dd:a0:ff:98:91:e4:aa:89:6b:5c:0a: fc:7a:e6:c9:a3:80:62:48:12:b0:05:c7:96:2c:ee:3a:22:88: 21:5e:f5:28:59:84:e7:82:58:d6:2d:99:15:ee:9e:df:fa:6e: 52:0f:bf:19:30:a6:41:6f:4f:ca:c3:92:18:42:25:51:00:aa: 4d:a6:0d:6c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPyLZwehirpSX1znmeUqohDV0Qq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQwREND QUQ4MTg5MTAeFw0yNjA4MDUxMDI2MTZaFw0yNzA4MDQxMDMxMTZaMDMxMTAvBgNV BAMTKEQ2MTQzNkUwQTk2RDA1MTg2ODJCMDQ0RDQ1MDA4NUM3OUZGOEZCMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0l5BSQBWlblNwnIqYkXcmpahs uK1kiHCOZ7hiMkqnpwGDPikB02qrgsjMNX/lyMHlTY3ZbbSPeZKuzoXvrCdMPsM0 yzw8kisTA6Pf1BztenEQv9ituAlEYDfC2xmoXZ/WtDlGeh23g7P13wVP4Vc3wvVV mPSDSnVW2jifI9MxMq2DScfN7dgRi6YMO1mnsmOMRDaN3LEb9pFQy4iaSjBpQ2zF COEDQnKELTJ9Z2gNVuibqESUYx1nkHGlOC3/PBxtYUgwaVh1FnRAsEfP67NDlFIw yYkfdq/xETZdVWAm3vIUcQrZsFPwP1nWUCm/6eE/4ZU2ta1fzzVnVuC14dc9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU1hQ24KltBRhoKwRNRQCFx5/4+xkwHwYDVR0j BBgwFoAUIzLo3GAvF0qfYyrmH3bQ3MrYGJEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ3YzZlY2ItMGJhZS00NWMzLWFhZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2 MDJGMTc0QTlGNjMyQUU2MUY3NkQwRENDQUQ4MTg5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzMyRThEQzYwMkYxNzRBOUY2MzJBRTYxRjc2RDBEQ0NBRDgx ODkxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk0N2M2ZWNiLTBiYWUtNDVjMy1h YWRhLTQzYTZhMTcxYzA0Ni8wLzMxMzAzMzJlMzEzMjM5MmUzMTM1MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM2MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABngZgwDQYJ KoZIhvcNAQELBQADggEBAKzXK/NT+yOr6zFwIW5F4inY+Eqb10DrpbfybWcyVACB UDA6TsWPmBIBwGCY5/ByeGFjSFyh3RM/eP3vwchb0TQCht/3cR60XLRFN/DQIbJm BJWx4bzJHXVJJn8QoDJS8ipKVxdWTUnem+x3q4JzB2WSPW6fdvZc4y8SQrt38LgS /5Z1CmYHRdmnX7il+hJiYeQ2781bbJmbGaR0tV1ugZuSNBz3UeTzVrrt7SI7kJdQ Qv9+FsScr+ftDcfdoP+YkeSqiWtcCvx65smjgGJIErAFx5Ys7joiiCFe9ShZhOeC WNYtmRXunt/6blIPvxkwpkFvT8rDkhhCJVEAqk2mDWw= -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:09 2026 by rpki-client