$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa File: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (raw, json) Hash identifier: sSRwH/T9b05X4BKvBEKgha2T5nZaqLKXo7E9Aw03Ff4= Subject key identifier: 14:AA:C1:A8:7A:F4:C9:D3:52:18:1E:B0:43:FC:9F:37:95:62:29:D6 Certificate issuer: /CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Certificate serial: 23CB9EBE42957921F5A068D74B994FD48C18F914 Authority key identifier: 7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa Signing time: Mon 05 Oct 2026 05:26:46 +0000 ROA not before: Mon 05 Oct 2026 05:21:46 +0000 ROA not after: Mon 04 Oct 2027 05:26:46 +0000 asID: 140444 IP address blocks: 103.153.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cb:9e:be:42:95:79:21:f5:a0:68:d7:4b:99:4f:d4:8c:18:f9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Validity Not Before: Oct 5 05:21:46 2026 GMT Not After : Oct 4 05:26:46 2027 GMT Subject: CN=14AAC1A87AF4C9D352181EB043FC9F37956229D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ee:1a:f9:35:2b:92:75:d6:82:35:21:f1:cb: 6b:0c:37:f7:c3:22:0d:62:f7:66:07:12:8b:9c:83: 14:71:4f:ec:71:74:42:e2:fb:a1:7e:f8:45:22:1e: 17:83:e2:8c:f2:7c:13:7a:a8:6c:2c:e7:24:6c:04: ba:79:a8:22:cd:d4:6e:df:03:0b:70:21:d1:85:81: 7d:33:bf:91:41:ad:a7:bc:16:d1:f8:3b:a0:a9:2e: 95:25:dc:02:86:b5:6f:88:91:c7:2f:5b:2d:2b:b2: 34:2e:2c:cc:c6:31:64:25:0d:40:f0:41:c2:ec:79: f2:07:b5:60:31:8d:45:cc:84:d8:ef:55:74:fc:87: da:50:0c:8e:7e:e5:8a:c0:75:8c:8a:4e:a7:a7:f8: 3a:6d:d8:d2:a4:5a:fb:70:13:66:6f:ea:20:3a:c4: 41:0d:56:ba:e6:e5:04:67:e0:b4:e5:da:95:62:5d: eb:dd:23:4d:d2:63:1c:82:b1:ed:30:78:10:fe:ba: 4d:a6:8b:1c:5a:0f:58:b2:f3:d3:b2:7e:e3:cc:e8: d9:9a:15:ef:c5:01:c3:9a:8d:da:f8:f7:ec:63:9a: 0b:f6:dd:ad:0e:f0:c3:ef:6d:58:4a:ce:33:a4:cf: f7:71:e7:22:9e:4c:d9:e0:ad:5c:19:b5:d4:85:75: 7c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AA:C1:A8:7A:F4:C9:D3:52:18:1E:B0:43:FC:9F:37:95:62:29:D6 X509v3 Authority Key Identifier: keyid:7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.43.0/24 Signature Algorithm: sha256WithRSAEncryption 34:04:1c:fd:a8:7a:0f:0c:c6:45:c5:1c:11:8d:91:21:e2:f4: 24:20:86:90:a8:a9:87:d6:0f:e8:2e:ab:1c:ae:bd:0e:90:aa: e5:20:71:8e:a9:25:0a:d1:aa:0e:81:26:4b:64:39:7c:7e:f6: 6d:60:21:71:4e:74:7c:00:6a:b8:85:53:3f:a0:83:f9:e5:6c: 5e:0c:d0:ef:fd:41:3b:1e:b9:e6:9f:b6:d6:43:7e:fe:50:b9: 5d:d1:ec:5a:40:f3:b3:e2:bb:83:61:63:90:5f:5d:42:63:24: eb:9f:f0:5a:e1:f0:ce:33:59:38:6d:cc:d1:89:a0:f6:3a:57: 00:1b:3d:51:b3:af:4a:43:2c:45:4a:9f:32:b7:fd:bb:78:26: 2f:b8:9b:b7:09:b7:e9:a2:31:cc:06:ab:d7:66:bc:93:10:dd: 6b:be:0d:07:70:43:67:91:f3:77:4b:4e:ca:bf:1a:8d:07:32: da:45:8f:ab:8d:8d:1f:e3:c9:ea:a3:24:97:47:39:a0:c6:05: 1a:09:4b:56:b9:2e:cb:48:3e:5f:44:a6:50:82:c5:e4:18:77: 59:58:29:1b:da:6f:61:87:10:c2:55:43:f7:7b:86:cf:89:e0: d0:72:6e:0a:06:cd:95:24:13:1a:5f:6a:09:7d:11:5a:1c:6b: f6:e1:dc:f4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUI8uevkKVeSH1oGjXS5lP1IwY+RQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2 NDdCQkM4NDAeFw0yNjEwMDUwNTIxNDZaFw0yNzEwMDQwNTI2NDZaMDMxMTAvBgNV BAMTKDE0QUFDMUE4N0FGNEM5RDM1MjE4MUVCMDQzRkM5RjM3OTU2MjI5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7hr5NSuSddaCNSHxy2sMN/fD Ig1i92YHEoucgxRxT+xxdELi+6F++EUiHheD4ozyfBN6qGws5yRsBLp5qCLN1G7f AwtwIdGFgX0zv5FBrae8FtH4O6CpLpUl3AKGtW+IkccvWy0rsjQuLMzGMWQlDUDw QcLsefIHtWAxjUXMhNjvVXT8h9pQDI5+5YrAdYyKTqen+Dpt2NKkWvtwE2Zv6iA6 xEENVrrm5QRn4LTl2pViXevdI03SYxyCse0weBD+uk2mixxaD1iy89OyfuPM6Nma Fe/FAcOajdr49+xjmgv23a0O8MPvbVhKzjOkz/dx5yKeTNngrVwZtdSFdXzXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFKrBqHr0ydNSGB6wQ/yfN5ViKdYwHwYDVR0j BBgwFoAUfLU3Afml5suyRZYQXTAES2R7vIQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcxMTU1OWUtZDVlYy00YzE5LWIzMzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFG OUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2NDdCQkM4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0I1MzcwMUY5QTVFNkNCQjI0NTk2MTA1RDMwMDQ0QjY0N0JC Qzg0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M3MTE1NTllLWQ1ZWMtNGMxOS1i MzM1LWVlMjlkZGZiYjlkNS8wLzMxMzAzMzJlMzEzNTMzMmUzNDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5krMA0GCSqG SIb3DQEBCwUAA4IBAQA0BBz9qHoPDMZFxRwRjZEh4vQkIIaQqKmH1g/oLqscrr0O kKrlIHGOqSUK0aoOgSZLZDl8fvZtYCFxTnR8AGq4hVM/oIP55WxeDNDv/UE7Hrnm n7bWQ37+ULld0exaQPOz4ruDYWOQX11CYyTrn/Ba4fDOM1k4bczRiaD2OlcAGz1R s69KQyxFSp8yt/27eCYvuJu3CbfpojHMBqvXZryTEN1rvg0HcENnkfN3S07KvxqN BzLaRY+rjY0f48nqoySXRzmgxgUaCUtWuS7LSD5fRKZQgsXkGHdZWCkb2m9hhxDC VUP3e4bPieDQcm4KBs2VJBMaX2oJfRFaHGv24dz0 -----END CERTIFICATE-----Generated at Sun Nov 1 21:07:37 2026 by rpki-client