$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/3130332e3136372e3133372e302f32342d3234203d3e20313339343536.roa File: 3130332e3136372e3133372e302f32342d3234203d3e20313339343536.roa (raw, json) Hash identifier: 5hNgNzCE1uulr0uDc5RCxjLA0Zo4ik7pC2wAL54DJWs= Subject key identifier: BD:70:63:93:77:79:FF:A7:4D:89:F4:F5:0E:87:04:32:42:76:3A:83 Certificate issuer: /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Certificate serial: 6235C7E8DD1FDA71054141024FB4BA0BE03A8B99 Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/3130332e3136372e3133372e302f32342d3234203d3e20313339343536.roa Signing time: Mon 10 Aug 2026 15:06:30 +0000 ROA not before: Mon 10 Aug 2026 15:01:30 +0000 ROA not after: Mon 09 Aug 2027 15:06:30 +0000 asID: 139456 IP address blocks: 103.167.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 06:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:35:c7:e8:dd:1f:da:71:05:41:41:02:4f:b4:ba:0b:e0:3a:8b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Validity Not Before: Aug 10 15:01:30 2026 GMT Not After : Aug 9 15:06:30 2027 GMT Subject: CN=BD7063937779FFA74D89F4F50E87043242763A83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:51:94:d7:23:9c:f3:e7:47:9f:9c:6b:0b:35: 54:04:49:ac:44:71:3b:d9:69:95:d8:66:50:aa:87: 72:5e:6c:cc:f5:94:a4:56:87:50:b7:e3:5e:f7:69: 61:6d:c3:36:dc:6d:41:9b:ce:ad:d7:ac:1e:15:34: 3e:79:8a:51:4c:f1:a2:48:f0:ba:78:b7:56:48:e8: d3:62:c1:4b:cc:07:57:cb:51:83:d4:be:c2:0f:20: 76:c4:84:2e:20:83:cf:7b:41:a1:1b:13:a0:4b:e6: 87:1d:98:1f:b8:5c:63:f3:25:6e:9f:dd:7a:b7:e7: f8:3a:d3:0b:03:f7:05:4f:6c:02:97:d2:64:f7:af: 39:cd:6c:46:5f:bf:ca:d0:f9:3b:5a:f8:8c:41:c9: e8:8d:4b:e9:cb:ff:34:3a:c0:ac:06:b7:6d:5a:6a: 1d:b1:33:ea:a3:f8:76:3d:35:bb:a8:39:10:80:24: 47:ec:8e:99:75:52:b8:fa:63:78:16:b2:72:57:1e: d0:72:68:50:14:04:80:ab:73:45:a7:db:c4:53:20: 41:b8:e2:6f:ce:d9:81:c3:f5:e4:a4:37:06:9d:3f: 7b:f9:34:d5:e6:47:f9:1e:ad:5e:dc:23:53:84:8f: d4:9a:a0:1c:37:5f:77:1c:f8:db:d9:62:3d:0c:ac: b5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:70:63:93:77:79:FF:A7:4D:89:F4:F5:0E:87:04:32:42:76:3A:83 X509v3 Authority Key Identifier: keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/3130332e3136372e3133372e302f32342d3234203d3e20313339343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.137.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:11:fc:06:c4:9a:e7:02:64:36:80:bb:4e:79:21:d4:b9:95: 12:73:db:e6:d2:26:b5:78:1c:ba:74:8c:a5:db:51:46:4d:76: 10:af:d9:86:b0:20:47:3b:ec:d7:14:45:1e:dc:74:04:d0:a8: 04:bc:c6:ee:a7:3c:e3:81:7e:5b:75:d8:73:f7:c3:a4:31:12: 56:ee:41:e0:91:92:62:20:12:ee:83:dd:9b:d3:ca:62:0f:2b: cc:45:10:93:f9:71:af:0d:84:97:b5:57:95:e4:32:bb:5a:91: 9b:a9:36:35:5e:22:4d:3c:8a:e8:be:c6:f8:c8:6b:50:bd:af: 88:01:20:ac:b3:f6:7b:ca:44:6e:03:c1:b5:9d:22:5a:ed:10: fe:a4:54:af:90:be:90:cd:d5:9f:ed:be:2c:56:b3:cc:83:ed: 5e:e4:53:17:17:5d:f4:bd:76:d5:1f:26:2f:0b:70:b6:f7:e2: fc:4f:4d:a1:eb:2b:bc:32:00:4c:f9:01:67:cc:0d:bb:e8:d1: 20:3a:38:8b:7e:c8:12:a0:0d:9b:7c:c0:43:2f:1c:e8:bb:65: ce:79:9d:24:e1:f9:c7:f8:0e:c3:9c:71:a2:d4:b3:0f:f0:1f: 2d:0a:0e:91:48:d2:c0:c0:7e:9f:bc:ef:dd:4a:55:d1:86:20: 78:0e:6e:99 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYjXH6N0f2nEFQUECT7S6C+A6i5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMw NTI0Q0ZGMDAeFw0yNjA4MTAxNTAxMzBaFw0yNzA4MDkxNTA2MzBaMDMxMTAvBgNV BAMTKEJENzA2MzkzNzc3OUZGQTc0RDg5RjRGNTBFODcwNDMyNDI3NjNBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYUZTXI5zz50efnGsLNVQESaxE cTvZaZXYZlCqh3JebMz1lKRWh1C34173aWFtwzbcbUGbzq3XrB4VND55ilFM8aJI 8Lp4t1ZI6NNiwUvMB1fLUYPUvsIPIHbEhC4gg897QaEbE6BL5ocdmB+4XGPzJW6f 3Xq35/g60wsD9wVPbAKX0mT3rznNbEZfv8rQ+Tta+IxByeiNS+nL/zQ6wKwGt21a ah2xM+qj+HY9NbuoORCAJEfsjpl1Urj6Y3gWsnJXHtByaFAUBICrc0Wn28RTIEG4 4m/O2YHD9eSkNwadP3v5NNXmR/kerV7cI1OEj9SaoBw3X3cc+NvZYj0MrLWvAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUvXBjk3d5/6dNifT1DocEMkJ2OoMwHwYDVR0j BBgwFoAUzHouxqeAW9MDBsPWStKSrAUkz/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRmYjM5OTItMWQyZi00NmNlLTg4NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZB NzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMwNTI0Q0ZGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzdBMkVDNkE3ODA1QkQzMDMwNkMzRDY0QUQyOTJBQzA1MjRD RkYwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzlkZmIzOTkyLTFkMmYtNDZjZS04 ODZhLThlMjJhMzI2MTFmOC8wLzMxMzAzMzJlMzEzNjM3MmUzMTMzMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzNDM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnp4kwDQYJ KoZIhvcNAQELBQADggEBAD8R/AbEmucCZDaAu055IdS5lRJz2+bSJrV4HLp0jKXb UUZNdhCv2YawIEc77NcURR7cdATQqAS8xu6nPOOBflt12HP3w6QxElbuQeCRkmIg Eu6D3ZvTymIPK8xFEJP5ca8NhJe1V5XkMrtakZupNjVeIk08iui+xvjIa1C9r4gB IKyz9nvKRG4DwbWdIlrtEP6kVK+QvpDN1Z/tvixWs8yD7V7kUxcXXfS9dtUfJi8L cLb34vxPTaHrK7wyAEz5AWfMDbvo0SA6OIt+yBKgDZt8wEMvHOi7Zc55nSTh+cf4 DsOccaLUsw/wHy0KDpFI0sDAfp+8791KVdGGIHgObpk= -----END CERTIFICATE-----Generated at Thu Sep 3 22:30:25 2026 by rpki-client