$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130392e302f32342d3234203d3e20313430343233.roa File: 3130332e32302e3130392e302f32342d3234203d3e20313430343233.roa (raw, json) Hash identifier: m7moeEEKoa7tBNsWW1/WiFxPUHqVNruJHZKBpwqbqkc= Subject key identifier: 4F:1A:E4:DC:DE:EF:2F:56:BA:4C:06:48:FB:91:69:C8:3D:74:E9:94 Certificate issuer: /CN=A337D214F1B15825AC6178574C28712521D64B38 Certificate serial: 0EF55404C02EF5C35D28E8CE8F85003AAAC790C3 Authority key identifier: A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130392e302f32342d3234203d3e20313430343233.roa Signing time: Sun 30 Aug 2026 07:32:13 +0000 ROA not before: Sun 30 Aug 2026 07:27:13 +0000 ROA not after: Sun 29 Aug 2027 07:32:13 +0000 asID: 140423 IP address blocks: 103.20.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 09:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f5:54:04:c0:2e:f5:c3:5d:28:e8:ce:8f:85:00:3a:aa:c7:90:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A337D214F1B15825AC6178574C28712521D64B38 Validity Not Before: Aug 30 07:27:13 2026 GMT Not After : Aug 29 07:32:13 2027 GMT Subject: CN=4F1AE4DCDEEF2F56BA4C0648FB9169C83D74E994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a0:b5:9a:ef:6b:35:86:21:b1:8b:5c:be:d2: 71:94:2a:f4:39:9c:ec:21:60:f7:f3:cd:bb:f5:b3: b5:69:8b:42:02:af:19:6d:71:a9:ea:69:1e:9f:19: 7a:78:41:5a:a4:3c:d8:52:59:7c:17:b2:a6:be:22: 04:ed:56:45:9b:04:a3:c9:9c:f2:35:d8:84:01:6f: 17:92:c9:81:04:94:56:2e:d3:46:32:47:be:97:20: 83:07:e1:c9:93:e5:b6:e0:59:0c:2c:fd:c5:4a:52: 7a:73:e0:1a:f7:44:f3:1d:29:ee:1c:9f:93:a8:df: b1:a9:ca:15:68:a7:f6:78:d9:8a:5a:ad:7c:ba:95: c3:ea:38:07:0e:bd:90:5e:bf:e8:d0:e6:84:c8:e0: 13:d5:8a:a1:7e:5e:04:77:26:63:c3:98:76:57:43: 19:1f:07:e5:99:81:b3:71:7d:92:34:8a:2b:9a:e9: 7c:d0:15:16:04:21:c0:b6:29:6e:d5:80:8d:02:4c: 08:ee:e7:0c:e8:b7:33:8a:37:47:2c:d9:8e:07:4a: 83:28:4f:12:35:54:83:af:17:7b:f8:31:8a:09:44: 02:18:2b:bd:86:51:5b:2b:32:6e:14:ac:4b:c4:48: bf:44:05:3f:3d:cf:04:8f:5b:57:6a:86:b6:13:a6: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1A:E4:DC:DE:EF:2F:56:BA:4C:06:48:FB:91:69:C8:3D:74:E9:94 X509v3 Authority Key Identifier: keyid:A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130392e302f32342d3234203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.109.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:d3:2f:79:83:8b:6b:74:ab:18:86:e6:b4:8f:3e:10:5c:fe: b6:93:f2:34:b3:17:5e:48:05:20:5f:52:d7:f0:43:ae:82:5a: 31:5f:41:fb:59:7a:68:b2:d1:ef:8b:22:6f:4c:ba:ed:3e:20: 37:55:eb:bd:77:12:c1:e2:87:11:65:45:09:9d:0d:fc:10:bc: 15:d7:a9:fc:29:c1:82:99:a9:be:9b:20:ff:95:0e:b2:ab:71: 56:7d:69:16:e6:c5:db:2f:4f:b6:24:53:32:1e:0d:2d:8c:8c: 8e:85:83:10:46:76:b2:1c:ea:0b:98:d7:1b:0e:40:dc:6e:bb: 20:c9:fc:90:27:81:34:98:25:a3:cd:c8:4b:cd:78:ea:e7:34: e4:5b:4f:b1:f8:44:78:2c:c7:62:9d:4d:11:fb:60:a4:94:6c: ac:20:6c:d5:46:86:27:a3:93:ef:0f:6b:2f:f3:60:73:54:40: 97:1f:7e:cb:6e:57:9b:8e:b4:93:6b:6b:19:6c:da:c9:83:50: 64:5c:2d:cb:9e:91:5f:ba:8e:87:64:de:ba:12:4b:1c:1d:be: 36:28:6c:36:6b:cd:a1:0b:bb:e4:3d:86:c0:07:90:e6:f6:dd: c1:c5:1d:7d:a9:ed:11:cc:e5:2a:ad:d4:f0:c0:98:0e:e4:c7: b5:61:8b:82 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDvVUBMAu9cNdKOjOj4UAOqrHkMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzN0QyMTRGMUIxNTgyNUFDNjE3ODU3NEMyODcxMjUy MUQ2NEIzODAeFw0yNjA4MzAwNzI3MTNaFw0yNzA4MjkwNzMyMTNaMDMxMTAvBgNV BAMTKDRGMUFFNERDREVFRjJGNTZCQTRDMDY0OEZCOTE2OUM4M0Q3NEU5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhoLWa72s1hiGxi1y+0nGUKvQ5 nOwhYPfzzbv1s7Vpi0ICrxltcanqaR6fGXp4QVqkPNhSWXwXsqa+IgTtVkWbBKPJ nPI12IQBbxeSyYEElFYu00YyR76XIIMH4cmT5bbgWQws/cVKUnpz4Br3RPMdKe4c n5Oo37GpyhVop/Z42YparXy6lcPqOAcOvZBev+jQ5oTI4BPViqF+XgR3JmPDmHZX QxkfB+WZgbNxfZI0iiua6XzQFRYEIcC2KW7VgI0CTAju5wzotzOKN0cs2Y4HSoMo TxI1VIOvF3v4MYoJRAIYK72GUVsrMm4UrEvESL9EBT89zwSPW1dqhrYTphAfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUTxrk3N7vL1a6TAZI+5FpyD106ZQwHwYDVR0j BBgwFoAUozfSFPGxWCWsYXhXTChxJSHWSzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNjNmJkNzMtZjliZC00ZjVhLTljNTktZmJlYTFiZDgzNDczLzAvQTMzN0QyMTRG MUIxNTgyNUFDNjE3ODU3NEMyODcxMjUyMUQ2NEIzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzM3RDIxNEYxQjE1ODI1QUM2MTc4NTc0QzI4NzEyNTIxRDY0 QjM4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FjYzZiZDczLWY5YmQtNGY1YS05 YzU5LWZiZWExYmQ4MzQ3My8wLzMxMzAzMzJlMzIzMDJlMzEzMDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxRtMA0GCSqG SIb3DQEBCwUAA4IBAQBN0y95g4trdKsYhua0jz4QXP62k/I0sxdeSAUgX1LX8EOu gloxX0H7WXpostHviyJvTLrtPiA3Veu9dxLB4ocRZUUJnQ38ELwV16n8KcGCmam+ myD/lQ6yq3FWfWkW5sXbL0+2JFMyHg0tjIyOhYMQRnayHOoLmNcbDkDcbrsgyfyQ J4E0mCWjzchLzXjq5zTkW0+x+ER4LMdinU0R+2CklGysIGzVRoYno5PvD2sv82Bz VECXH37LblebjrSTa2sZbNrJg1BkXC3LnpFfuo6HZN66EkscHb42KGw2a82hC7vk PYbAB5Dm9t3BxR19qe0RzOUqrdTwwJgO5Me1YYuC -----END CERTIFICATE-----Generated at Wed Sep 2 22:22:57 2026 by rpki-client