$ rpki-client -vvvf rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235342e302f32342d3234203d3e20313336383835.roa File: 3130332e3130352e3235342e302f32342d3234203d3e20313336383835.roa (raw, json) Hash identifier: kjns1P/9YtFZsQtwjo+slrRL21VSAsBZN0FYYz0ZfBc= Subject key identifier: 6A:FB:03:C1:DC:34:85:A3:A3:46:5E:FE:61:D9:62:28:45:47:7C:46 Certificate issuer: /CN=566E09CA4830024428EFAB32BD4C5C0588342F87 Certificate serial: 67251ADB6553DE09EA39A8A58001A70EAFF1BCE7 Authority key identifier: 56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235342e302f32342d3234203d3e20313336383835.roa Signing time: Fri 28 Aug 2026 08:55:45 +0000 ROA not before: Fri 28 Aug 2026 08:50:45 +0000 ROA not after: Fri 27 Aug 2027 08:55:45 +0000 asID: 136885 IP address blocks: 103.105.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:25:1a:db:65:53:de:09:ea:39:a8:a5:80:01:a7:0e:af:f1:bc:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566E09CA4830024428EFAB32BD4C5C0588342F87 Validity Not Before: Aug 28 08:50:45 2026 GMT Not After : Aug 27 08:55:45 2027 GMT Subject: CN=6AFB03C1DC3485A3A3465EFE61D9622845477C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:de:c8:74:9c:0f:da:e9:6b:e3:5c:05:32: d1:45:60:7a:da:5f:8d:49:43:13:84:5d:a4:52:fe: 18:3d:c1:2d:5d:ee:cc:90:51:4e:3b:28:83:bd:ad: e7:67:74:03:2d:da:b6:e0:42:8e:3c:53:ee:50:d3: ba:a2:89:21:5e:ae:13:bb:f2:44:03:3c:8a:82:3b: 1d:01:a5:ca:f0:0b:03:c2:2d:e1:52:06:32:d8:fc: cd:3d:ca:1a:27:06:fc:94:9e:73:68:a5:a5:cb:4e: 04:09:72:ee:5a:3b:c5:9d:6a:38:b9:98:58:35:5a: df:6c:1f:7e:2d:a1:6f:3f:78:1a:79:ba:3b:a0:b6: 07:db:c3:0a:45:a1:f9:68:4f:88:77:b0:71:6f:34: 95:6e:78:c8:7a:07:75:15:6f:9b:85:e3:85:11:92: 2d:77:f3:0e:bd:f0:19:62:a9:6c:3a:41:c3:8b:00: 30:d8:7e:2d:d9:fc:9f:20:d9:19:c6:fa:b6:fa:fe: 45:fd:5d:5b:0f:91:c0:e7:c0:9b:35:5d:93:06:ad: 2e:bc:03:2f:2a:62:2d:27:97:f1:15:42:b9:25:a1: c5:3d:26:a4:0f:35:06:2b:50:e6:b8:94:f0:c8:74: 8c:1f:74:af:72:bf:3e:bb:c5:80:a3:a9:77:29:d3: 40:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FB:03:C1:DC:34:85:A3:A3:46:5E:FE:61:D9:62:28:45:47:7C:46 X509v3 Authority Key Identifier: keyid:56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235342e302f32342d3234203d3e20313336383835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.254.0/24 Signature Algorithm: sha256WithRSAEncryption 19:d1:4e:a0:c8:11:09:f6:48:84:60:3f:14:8d:c9:fe:97:8e: 35:72:8c:e0:25:a4:48:d8:77:1b:54:6b:59:ee:75:20:ec:c2: 55:39:c1:af:bb:15:22:16:61:74:52:5e:f4:50:c5:af:6c:21: 5d:6d:3c:3f:a3:88:18:f9:5e:40:22:8a:0d:8d:1a:35:30:76: 37:0e:33:f4:f3:f7:2c:3d:0d:dc:0e:dd:45:a5:03:b7:49:c3: d8:a0:8c:46:bd:01:a1:eb:c6:66:b5:9c:32:28:15:61:74:5c: 95:1b:6f:2f:6d:86:c8:36:76:be:8d:05:be:80:55:1f:78:87: b7:e4:40:2e:12:d4:6e:c8:45:07:e1:28:43:5c:b5:b8:d9:84: 37:9b:76:be:8c:73:f1:1c:18:bc:4c:5f:c2:89:43:3e:e8:25: 0f:2a:87:b6:dd:93:15:98:62:cf:68:b5:5f:cc:7d:8d:ca:8f: 14:5b:06:f4:c3:b2:bc:d5:60:06:a1:3d:00:68:28:7a:78:52: 2a:9f:fc:cf:b9:c4:d3:07:ae:4e:70:83:15:02:37:f2:71:21: d8:19:30:64:da:1d:a8:a7:80:8b:bd:6d:39:24:d0:4d:ed:33: a4:16:1a:07:fd:b5:06:b5:47:92:fa:65:a0:03:52:cf:34:47: f5:07:11:5c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZyUa22VT3gnqOailgAGnDq/xvOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2RTA5Q0E0ODMwMDI0NDI4RUZBQjMyQkQ0QzVDMDU4 ODM0MkY4NzAeFw0yNjA4MjgwODUwNDVaFw0yNzA4MjcwODU1NDVaMDMxMTAvBgNV BAMTKDZBRkIwM0MxREMzNDg1QTNBMzQ2NUVGRTYxRDk2MjI4NDU0NzdDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg6N7IdJwP2ulr41wFMtFFYHra X41JQxOEXaRS/hg9wS1d7syQUU47KIO9redndAMt2rbgQo48U+5Q07qiiSFerhO7 8kQDPIqCOx0BpcrwCwPCLeFSBjLY/M09yhonBvyUnnNopaXLTgQJcu5aO8Wdaji5 mFg1Wt9sH34toW8/eBp5ujugtgfbwwpFofloT4h3sHFvNJVueMh6B3UVb5uF44UR ki138w698BliqWw6QcOLADDYfi3Z/J8g2RnG+rb6/kX9XVsPkcDnwJs1XZMGrS68 Ay8qYi0nl/EVQrklocU9JqQPNQYrUOa4lPDIdIwfdK9yvz67xYCjqXcp00DzAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUavsDwdw0haOjRl7+YdliKEVHfEYwHwYDVR0j BBgwFoAUVm4JykgwAkQo76syvUxcBYg0L4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE2YWE1NGYtNzE1OC00M2FmLWIzMzYtYmU0NzE0ODE2ZmFkLzAvNTY2RTA5Q0E0 ODMwMDI0NDI4RUZBQjMyQkQ0QzVDMDU4ODM0MkY4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NjZFMDlDQTQ4MzAwMjQ0MjhFRkFCMzJCRDRDNUMwNTg4MzQy Rjg3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMxNmFhNTRmLTcxNTgtNDNhZi1i MzM2LWJlNDcxNDgxNmZhZC8wLzMxMzAzMzJlMzEzMDM1MmUzMjM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM4MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnaf4wDQYJ KoZIhvcNAQELBQADggEBABnRTqDIEQn2SIRgPxSNyf6XjjVyjOAlpEjYdxtUa1nu dSDswlU5wa+7FSIWYXRSXvRQxa9sIV1tPD+jiBj5XkAiig2NGjUwdjcOM/Tz9yw9 DdwO3UWlA7dJw9igjEa9AaHrxma1nDIoFWF0XJUbby9thsg2dr6NBb6AVR94h7fk QC4S1G7IRQfhKENctbjZhDebdr6Mc/EcGLxMX8KJQz7oJQ8qh7bdkxWYYs9otV/M fY3KjxRbBvTDsrzVYAahPQBoKHp4Uiqf/M+5xNMHrk5wgxUCN/JxIdgZMGTaHain gIu9bTkk0E3tM6QWGgf9tQa1R5L6ZaADUs80R/UHEVw= -----END CERTIFICATE-----Generated at Thu Sep 17 08:17:14 2026 by rpki-client