$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/3130332e3136372e3133362e302f32342d3234203d3e20313339343536.roa File: 3130332e3136372e3133362e302f32342d3234203d3e20313339343536.roa (raw, json) Hash identifier: 7OHSfmWI/nR+ShqhwFBj8vsSyoyMS+f+Xt96lod6jAU= Subject key identifier: C5:3B:DC:37:D5:CC:E9:73:3E:AD:97:0A:CF:EE:27:40:00:56:22:15 Certificate issuer: /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Certificate serial: 69607DD61D780BFDD4232169EF98FCC27241D2F7 Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/3130332e3136372e3133362e302f32342d3234203d3e20313339343536.roa Signing time: Mon 10 Aug 2026 15:06:20 +0000 ROA not before: Mon 10 Aug 2026 15:01:20 +0000 ROA not after: Mon 09 Aug 2027 15:06:20 +0000 asID: 139456 IP address blocks: 103.167.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 06:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:60:7d:d6:1d:78:0b:fd:d4:23:21:69:ef:98:fc:c2:72:41:d2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Validity Not Before: Aug 10 15:01:20 2026 GMT Not After : Aug 9 15:06:20 2027 GMT Subject: CN=C53BDC37D5CCE9733EAD970ACFEE274000562215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fd:1a:e1:22:97:a6:d4:99:65:84:67:d1:61: 28:ee:13:e1:d2:c4:d9:dd:a4:fd:50:6c:4a:de:aa: 34:df:64:66:f6:52:f4:e2:9d:07:54:3a:a2:c0:b1: 1c:ab:9e:98:1b:3b:fb:e1:03:78:14:52:66:45:4e: fa:69:d2:3c:98:66:bc:05:03:e7:65:6e:88:ee:36: 13:a6:98:ff:b1:4b:50:f5:12:ad:47:f0:83:8a:6c: b2:58:33:ec:41:4d:06:4b:46:78:ff:44:9b:29:ed: 4a:44:a0:1f:2b:84:c8:f7:75:2d:7d:12:66:f2:fe: 3c:22:4f:88:82:3b:09:15:bb:d4:86:92:6c:d0:f8: f5:8e:f0:42:99:07:51:ef:ac:57:0a:75:6b:48:aa: 34:3a:83:85:6e:b1:d9:32:55:14:f7:4c:78:f8:2d: 63:dc:f2:56:9d:3f:0c:6a:45:40:c2:f7:b4:31:43: 9a:d3:32:f1:fd:e6:28:19:53:14:1a:1b:87:fc:be: 25:72:1f:18:7d:7c:9c:29:74:8b:46:79:6f:c2:26: 84:73:f3:94:ca:4e:54:0c:ad:04:8f:5a:c4:13:42: 10:c0:0d:08:77:5f:33:54:4f:9c:83:f0:92:51:b7: a2:b3:b7:d6:1a:09:74:70:64:53:6e:6e:bc:37:7d: 91:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3B:DC:37:D5:CC:E9:73:3E:AD:97:0A:CF:EE:27:40:00:56:22:15 X509v3 Authority Key Identifier: keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/3130332e3136372e3133362e302f32342d3234203d3e20313339343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.136.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:25:e8:c0:e9:72:e3:d2:31:41:32:57:e3:fa:96:62:65:bc: 79:8a:2d:20:30:82:80:85:d1:48:55:73:06:3e:ab:21:d3:42: 77:00:88:0d:4f:19:bf:56:d5:17:2a:df:95:04:d8:b8:47:b7: 10:5e:74:7a:9b:db:6a:71:5a:cb:e3:4f:2d:1e:a4:86:f8:93: a2:12:5e:9a:e2:d6:f2:89:d4:98:8a:a0:c9:19:2a:11:fd:dc: 4f:16:cb:b5:9a:c4:12:fc:f1:a6:4c:d3:df:7b:ee:68:ae:08: 52:b4:1f:73:bf:23:07:37:ca:25:7c:f7:06:e8:98:51:21:95: 97:ed:58:08:6e:d1:ad:94:97:bc:b2:3a:d8:73:81:d6:7e:2b: 32:ed:d0:f7:08:d4:ff:d9:36:ea:01:b3:89:09:c5:b4:66:1f: 2f:d8:59:1e:7a:5f:17:9d:ad:c9:36:3b:28:fc:55:2d:fd:f4: 80:60:9a:6b:20:0a:0c:0a:21:91:a5:72:92:09:b8:c4:ff:3c: 45:f6:3c:fe:fc:d1:8f:8b:73:46:4b:9b:81:c8:95:9b:15:5e: 0d:00:54:0e:e6:1d:c3:8b:da:e4:db:93:d1:c5:bc:6c:8c:32: 0d:f1:e5:d1:af:76:05:2a:74:b5:50:3c:5b:cd:7a:0c:25:80: 62:c5:c5:59 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUaWB91h14C/3UIyFp75j8wnJB0vcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMw NTI0Q0ZGMDAeFw0yNjA4MTAxNTAxMjBaFw0yNzA4MDkxNTA2MjBaMDMxMTAvBgNV BAMTKEM1M0JEQzM3RDVDQ0U5NzMzRUFEOTcwQUNGRUUyNzQwMDA1NjIyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe/RrhIpem1JllhGfRYSjuE+HS xNndpP1QbEreqjTfZGb2UvTinQdUOqLAsRyrnpgbO/vhA3gUUmZFTvpp0jyYZrwF A+dlbojuNhOmmP+xS1D1Eq1H8IOKbLJYM+xBTQZLRnj/RJsp7UpEoB8rhMj3dS19 Emby/jwiT4iCOwkVu9SGkmzQ+PWO8EKZB1HvrFcKdWtIqjQ6g4VusdkyVRT3THj4 LWPc8ladPwxqRUDC97QxQ5rTMvH95igZUxQaG4f8viVyHxh9fJwpdItGeW/CJoRz 85TKTlQMrQSPWsQTQhDADQh3XzNUT5yD8JJRt6Kzt9YaCXRwZFNubrw3fZFFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUxTvcN9XM6XM+rZcKz+4nQABWIhUwHwYDVR0j BBgwFoAUzHouxqeAW9MDBsPWStKSrAUkz/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRmYjM5OTItMWQyZi00NmNlLTg4NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZB NzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMwNTI0Q0ZGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzdBMkVDNkE3ODA1QkQzMDMwNkMzRDY0QUQyOTJBQzA1MjRD RkYwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzlkZmIzOTkyLTFkMmYtNDZjZS04 ODZhLThlMjJhMzI2MTFmOC8wLzMxMzAzMzJlMzEzNjM3MmUzMTMzMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzNDM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnp4gwDQYJ KoZIhvcNAQELBQADggEBAIol6MDpcuPSMUEyV+P6lmJlvHmKLSAwgoCF0UhVcwY+ qyHTQncAiA1PGb9W1Rcq35UE2LhHtxBedHqb22pxWsvjTy0epIb4k6ISXpri1vKJ 1JiKoMkZKhH93E8Wy7WaxBL88aZM09977miuCFK0H3O/Iwc3yiV89wbomFEhlZft WAhu0a2Ul7yyOthzgdZ+KzLt0PcI1P/ZNuoBs4kJxbRmHy/YWR56Xxedrck2Oyj8 VS399IBgmmsgCgwKIZGlcpIJuMT/PEX2PP780Y+Lc0ZLm4HIlZsVXg0AVA7mHcOL 2uTbk9HFvGyMMg3x5dGvdgUqdLVQPFvNegwlgGLFxVk= -----END CERTIFICATE-----Generated at Thu Sep 3 22:30:25 2026 by rpki-client