$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34322e302f32332d3233203d3e20313430343434.roa File: 3130332e3135332e34322e302f32332d3233203d3e20313430343434.roa (raw, json) Hash identifier: 4t+dKFGCIrgC9Nzebky+jsqn/Q/GxXwIZ2MFd9BNm0Y= Subject key identifier: 42:86:11:0D:1A:4B:BF:A9:72:AE:F3:29:65:62:13:6C:24:07:2D:F8 Certificate issuer: /CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Certificate serial: 6FCB0EDD4C8DB80D2D1538072E4025267D052350 Authority key identifier: 7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34322e302f32332d3233203d3e20313430343434.roa Signing time: Tue 20 Oct 2026 14:57:25 +0000 ROA not before: Tue 20 Oct 2026 14:52:25 +0000 ROA not after: Tue 19 Oct 2027 14:57:25 +0000 asID: 140444 IP address blocks: 103.153.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 23:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cb:0e:dd:4c:8d:b8:0d:2d:15:38:07:2e:40:25:26:7d:05:23:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Validity Not Before: Oct 20 14:52:25 2026 GMT Not After : Oct 19 14:57:25 2027 GMT Subject: CN=4286110D1A4BBFA972AEF3296562136C24072DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:35:73:42:84:9c:b2:c7:15:83:13:0a:3d: c4:ef:85:e1:56:81:27:2d:ee:20:58:a1:2e:c8:31: 38:5e:b0:cb:d1:42:63:fe:51:a6:ac:d5:0f:a1:4d: 59:ce:e0:0d:f2:e8:91:a6:6e:23:26:38:b8:60:fd: ce:78:8a:57:d2:48:9b:60:b4:c4:34:43:ed:83:10: 36:8b:b7:ed:2b:fd:fc:76:8e:d0:48:d8:e7:0f:78: fc:8c:4f:eb:77:0f:d9:c2:6d:18:75:fc:aa:61:1f: 28:6b:3b:84:9c:5f:32:dd:53:5a:d3:19:95:6e:f9: 4a:29:3b:0a:2c:69:90:5e:c6:b3:f3:b6:0d:8f:f3: b3:7e:5d:19:6b:ed:fc:5e:98:ee:c4:79:3c:c6:f6: f9:04:d9:9f:97:df:1c:41:93:b2:f3:c8:02:e6:04: b7:24:c7:c7:0b:fa:ea:f7:43:49:04:a8:e7:c2:59: 7d:65:d3:c3:1d:34:6d:03:a0:c4:69:3b:52:3d:1c: 08:99:a6:ac:93:c6:ee:01:d4:8c:5f:20:86:81:f3: 2d:27:db:6e:82:f0:d0:d1:71:82:db:96:9d:55:56: 22:ba:49:38:b3:2b:27:43:8b:e5:6d:e4:5a:2a:f0: 5c:77:30:27:95:a2:5e:15:9f:6b:02:85:7c:56:01: 6f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:86:11:0D:1A:4B:BF:A9:72:AE:F3:29:65:62:13:6C:24:07:2D:F8 X509v3 Authority Key Identifier: keyid:7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34322e302f32332d3233203d3e20313430343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.42.0/23 Signature Algorithm: sha256WithRSAEncryption 50:a4:4f:b7:cb:00:d9:77:a5:f8:cc:a3:da:11:dc:f8:7d:bb: ec:49:2e:15:62:d3:5d:23:00:b2:21:e0:67:d4:70:80:0b:e7: 38:8a:00:6f:45:ec:36:4a:79:77:6f:eb:3e:b6:04:98:e9:a9: 52:7c:1a:30:e8:d8:bd:31:71:2d:10:ae:8f:8e:4e:b8:99:f8: 32:0b:31:e3:b9:09:ce:a1:95:b9:09:cc:12:48:a4:69:c0:63: 5b:7c:c5:9a:fa:4f:60:de:00:19:6f:d7:88:a5:81:32:44:5a: 72:ca:f3:3d:cb:f4:95:5e:d9:15:b9:bc:02:46:62:ec:bf:4b: 19:c3:a8:33:47:47:60:c0:11:ec:80:2b:70:30:3e:82:65:d9: 29:b6:f0:da:b7:3d:1f:b8:04:1a:73:0c:19:30:a6:32:09:b8: e9:6e:d2:e6:df:e3:c6:81:f7:64:ea:01:b8:b0:7b:6c:ba:dd: 20:67:e2:f0:98:ac:23:1b:4b:a3:69:06:00:80:5e:1e:6a:9f: 26:41:af:fc:a7:08:0a:fb:c1:4b:ae:fb:8e:21:81:7d:e0:b6: c8:ac:1b:90:24:2d:03:a1:3f:e4:93:26:9f:93:82:8a:0a:32: e1:39:a4:a6:f6:7c:4e:f9:8d:9d:e0:d6:a3:2c:67:76:34:1a: 59:f8:c8:d8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUb8sO3UyNuA0tFTgHLkAlJn0FI1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2 NDdCQkM4NDAeFw0yNjEwMjAxNDUyMjVaFw0yNzEwMTkxNDU3MjVaMDMxMTAvBgNV BAMTKDQyODYxMTBEMUE0QkJGQTk3MkFFRjMyOTY1NjIxMzZDMjQwNzJERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNHjVzQoScsscVgxMKPcTvheFW gSct7iBYoS7IMThesMvRQmP+Uaas1Q+hTVnO4A3y6JGmbiMmOLhg/c54ilfSSJtg tMQ0Q+2DEDaLt+0r/fx2jtBI2OcPePyMT+t3D9nCbRh1/KphHyhrO4ScXzLdU1rT GZVu+UopOwosaZBexrPztg2P87N+XRlr7fxemO7EeTzG9vkE2Z+X3xxBk7LzyALm BLckx8cL+ur3Q0kEqOfCWX1l08MdNG0DoMRpO1I9HAiZpqyTxu4B1IxfIIaB8y0n 226C8NDRcYLblp1VViK6STizKydDi+Vt5Foq8Fx3MCeVol4Vn2sChXxWAW9TAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQoYRDRpLv6lyrvMpZWITbCQHLfgwHwYDVR0j BBgwFoAUfLU3Afml5suyRZYQXTAES2R7vIQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcxMTU1OWUtZDVlYy00YzE5LWIzMzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFG OUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2NDdCQkM4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0I1MzcwMUY5QTVFNkNCQjI0NTk2MTA1RDMwMDQ0QjY0N0JC Qzg0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M3MTE1NTllLWQ1ZWMtNGMxOS1i MzM1LWVlMjlkZGZiYjlkNS8wLzMxMzAzMzJlMzEzNTMzMmUzNDMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMwMzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5kqMA0GCSqG SIb3DQEBCwUAA4IBAQBQpE+3ywDZd6X4zKPaEdz4fbvsSS4VYtNdIwCyIeBn1HCA C+c4igBvRew2Snl3b+s+tgSY6alSfBow6Ni9MXEtEK6Pjk64mfgyCzHjuQnOoZW5 CcwSSKRpwGNbfMWa+k9g3gAZb9eIpYEyRFpyyvM9y/SVXtkVubwCRmLsv0sZw6gz R0dgwBHsgCtwMD6CZdkptvDatz0fuAQacwwZMKYyCbjpbtLm3+PGgfdk6gG4sHts ut0gZ+LwmKwjG0ujaQYAgF4eap8mQa/8pwgK+8FLrvuOIYF94LbIrBuQJC0DoT/k kyafk4KKCjLhOaSm9nxO+Y2d4NajLGd2NBpZ+MjY -----END CERTIFICATE-----Generated at Sun Nov 1 03:53:15 2026 by rpki-client