$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31322e302f32342d3234203d3e20313533373435.roa File: 3130332e3132352e31322e302f32342d3234203d3e20313533373435.roa (raw, json) Hash identifier: Uj+9XNe6xEO+HPjQd/AjmVCUPxHpMHz4SrblToe4lBw= Subject key identifier: 6C:09:F2:91:1B:45:EE:FD:80:24:4D:25:82:19:3C:95:0F:39:6F:3D Certificate issuer: /CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Certificate serial: 21594F6141D977077A162CC50C65EA66F78E3311 Authority key identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31322e302f32342d3234203d3e20313533373435.roa Signing time: Sun 18 Oct 2026 10:37:07 +0000 ROA not before: Sun 18 Oct 2026 10:32:07 +0000 ROA not after: Sun 17 Oct 2027 10:37:07 +0000 asID: 153745 IP address blocks: 103.125.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 13:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:59:4f:61:41:d9:77:07:7a:16:2c:c5:0c:65:ea:66:f7:8e:33:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Validity Not Before: Oct 18 10:32:07 2026 GMT Not After : Oct 17 10:37:07 2027 GMT Subject: CN=6C09F2911B45EEFD80244D2582193C950F396F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:22:2e:e1:a8:a2:75:37:85:a6:fa:16:d3:17: 8a:ed:59:32:5c:2e:4c:d1:85:8a:01:c7:4a:a0:f4: e3:53:85:52:2b:6f:94:f7:71:6c:8e:f4:ef:15:bb: 3f:d5:1c:e2:14:e7:19:7c:01:8f:2a:68:81:c9:3e: 07:2a:2c:52:71:ef:0c:34:ef:7b:40:d0:d9:57:74: aa:13:f3:41:28:10:a8:f7:95:13:56:77:a7:a2:16: 1a:20:18:3f:10:ac:0a:1f:a3:96:83:63:bf:9c:1a: b2:76:d4:7a:15:2a:e2:38:14:f2:94:e3:f3:be:ad: 96:bd:30:c5:9f:2c:73:2d:79:ed:0c:b3:ee:a3:fb: cb:a6:90:7f:65:7d:64:27:eb:82:b8:fc:53:46:05: 68:33:f2:db:25:c7:90:1f:26:b2:da:fb:16:01:f4: 29:34:ff:c6:30:dc:aa:ab:49:1a:7c:7f:b1:2f:0c: 1f:1a:0d:8e:c7:15:0a:4e:74:ff:d2:0e:63:1a:05: 68:91:b9:bb:86:92:d9:bb:dd:13:45:66:d0:11:19: 85:70:a7:9a:ff:c8:9f:be:5e:a1:ab:1e:ef:e8:0c: e9:3b:d0:83:84:c5:cf:10:5c:3d:8a:d4:aa:85:ed: cf:64:a4:72:69:b1:e6:4d:40:33:4e:33:d9:13:03: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:09:F2:91:1B:45:EE:FD:80:24:4D:25:82:19:3C:95:0F:39:6F:3D X509v3 Authority Key Identifier: keyid:A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31322e302f32342d3234203d3e20313533373435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.12.0/24 Signature Algorithm: sha256WithRSAEncryption a8:8f:ba:6f:a6:a9:08:55:b0:1c:ab:30:dd:3a:e0:32:d7:1e: 56:85:39:3c:45:da:fc:36:3f:d3:43:68:60:27:1b:c5:4f:59: 31:11:0b:d5:c5:8a:ff:ae:84:79:68:e4:fc:7c:29:95:7b:9f: 18:52:8b:a6:6b:e0:4c:12:24:27:7e:4d:55:8c:27:5b:ee:1e: 01:9e:71:fe:2d:ef:ff:94:84:a8:0a:6c:4b:83:4c:39:d8:46: e1:2e:22:bb:5e:b1:f0:b2:33:32:a4:17:c4:b9:0c:0b:c6:22: 65:37:18:7a:ff:3b:eb:06:12:50:f5:97:9a:92:53:cc:82:85: 3d:5d:32:8a:75:db:8d:cc:97:b1:a0:31:f5:89:88:30:4a:95: 52:8b:fc:82:77:7f:24:d8:80:d3:f0:19:fb:a9:1d:31:94:5d: 31:12:0d:0d:e6:9d:5b:2f:11:30:88:d6:d2:56:11:b3:7c:c7: 9b:a5:7f:68:a1:d5:f4:5e:56:cb:a4:6d:69:5a:8b:04:5c:be: 13:e2:7d:8d:99:b1:ef:ad:69:ce:bd:80:17:a5:87:0f:71:93: 6c:d1:03:40:51:97:ae:63:69:9c:65:a7:a3:c7:e8:a9:2f:a3: d0:66:3a:14:79:a1:30:b8:1e:23:cd:d5:2f:35:ee:9b:37:bd: af:12:80:18 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIVlPYUHZdwd6FizFDGXqZveOMxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5QzVF MjJBQjgwMDAeFw0yNjEwMTgxMDMyMDdaFw0yNzEwMTcxMDM3MDdaMDMxMTAvBgNV BAMTKDZDMDlGMjkxMUI0NUVFRkQ4MDI0NEQyNTgyMTkzQzk1MEYzOTZGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIi7hqKJ1N4Wm+hbTF4rtWTJc LkzRhYoBx0qg9ONThVIrb5T3cWyO9O8Vuz/VHOIU5xl8AY8qaIHJPgcqLFJx7ww0 73tA0NlXdKoT80EoEKj3lRNWd6eiFhogGD8QrAofo5aDY7+cGrJ21HoVKuI4FPKU 4/O+rZa9MMWfLHMtee0Ms+6j+8umkH9lfWQn64K4/FNGBWgz8tslx5AfJrLa+xYB 9Ck0/8Yw3KqrSRp8f7EvDB8aDY7HFQpOdP/SDmMaBWiRubuGktm73RNFZtARGYVw p5r/yJ++XqGrHu/oDOk70IOExc8QXD2K1KqF7c9kpHJpseZNQDNOM9kTA21PAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbAnykRtF7v2AJE0lghk8lQ85bz0wHwYDVR0j BBgwFoAUpTNv7/ER1bklqJVOU8TJxeIquAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM1NGJlOWEtOWI1ZC00YzY0LWI0ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZG MTExRDVCOTI1QTg5NTRFNTNDNEM5QzVFMjJBQjgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTMzNkZFRkYxMTFENUI5MjVBODk1NEU1M0M0QzlDNUUyMkFC ODAwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBjNTRiZTlhLTliNWQtNGM2NC1i NGU4LTYxYzc0ZTllY2VkYy8wLzMxMzAzMzJlMzEzMjM1MmUzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzczNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ30MMA0GCSqG SIb3DQEBCwUAA4IBAQCoj7pvpqkIVbAcqzDdOuAy1x5WhTk8Rdr8Nj/TQ2hgJxvF T1kxEQvVxYr/roR5aOT8fCmVe58YUouma+BMEiQnfk1VjCdb7h4BnnH+Le//lISo CmxLg0w52EbhLiK7XrHwsjMypBfEuQwLxiJlNxh6/zvrBhJQ9ZeaklPMgoU9XTKK dduNzJexoDH1iYgwSpVSi/yCd38k2IDT8Bn7qR0xlF0xEg0N5p1bLxEwiNbSVhGz fMebpX9oodX0XlbLpG1pWosEXL4T4n2NmbHvrWnOvYAXpYcPcZNs0QNAUZeuY2mc Zaejx+ipL6PQZjoUeaEwuB4jzdUvNe6bN72vEoAY -----END CERTIFICATE-----Generated at Fri Oct 23 06:02:18 2026 by rpki-client