$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38312e302f32342d3234203d3e203435373233.roa File: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (raw, json) Hash identifier: +tQQrL91DKY3GF87Bol7tPaM5Rdp2tOqyU/y9K8IpU4= Subject key identifier: 32:BA:0C:B6:A6:BF:B9:B8:89:4B:33:DF:0B:FA:68:8C:5E:62:B0:61 Certificate issuer: /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Certificate serial: 6D760D26B2376FE2CEF8BAB00B8C87E8DF4DA7DF Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38312e302f32342d3234203d3e203435373233.roa Signing time: Thu 20 Aug 2026 07:37:19 +0000 ROA not before: Thu 20 Aug 2026 07:32:19 +0000 ROA not after: Thu 19 Aug 2027 07:37:19 +0000 asID: 45723 IP address blocks: 103.28.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:76:0d:26:b2:37:6f:e2:ce:f8:ba:b0:0b:8c:87:e8:df:4d:a7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Validity Not Before: Aug 20 07:32:19 2026 GMT Not After : Aug 19 07:37:19 2027 GMT Subject: CN=32BA0CB6A6BFB9B8894B33DF0BFA688C5E62B061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:ca:7a:7d:74:57:36:57:13:30:38:ec:9a: 21:59:cf:f3:05:fd:58:3a:47:6b:18:1b:ee:f7:31: f9:d1:b1:5a:4f:37:da:7b:48:02:35:03:ce:fb:fc: ad:76:8b:5e:17:ca:95:07:e4:8b:c5:ed:e7:43:a3: 9d:18:c5:36:45:9e:98:bd:03:09:0b:a4:d3:11:aa: e0:04:af:b7:c7:8c:d1:c4:37:31:62:20:0f:7f:fc: a2:61:55:0d:ff:05:c8:d7:59:07:33:44:2e:43:81: 66:e9:be:6e:dc:55:bd:d4:d8:bd:4e:32:37:7d:ae: 4e:74:09:60:2e:5b:b9:3c:bb:02:ce:41:12:25:9c: 48:f2:9d:ea:67:1f:7e:41:18:44:d6:b1:02:ca:6e: 04:e4:b6:7d:36:c1:13:86:ae:83:7c:73:0e:e8:98: ff:c3:fa:c6:c0:ee:78:2a:f7:ba:1d:ed:15:fc:7c: 98:38:69:c6:57:75:eb:46:5b:19:2f:89:28:44:da: 3e:88:54:0e:df:2f:0a:df:36:68:4f:ee:ed:f7:fb: c5:95:d8:23:16:32:45:a5:6f:d8:1f:74:8c:fa:2e: 43:36:66:38:1e:a8:60:73:db:94:d4:ec:ea:2e:a6: 65:a9:7e:0b:bc:e6:70:55:2a:0e:61:1f:34:01:ea: 2c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BA:0C:B6:A6:BF:B9:B8:89:4B:33:DF:0B:FA:68:8C:5E:62:B0:61 X509v3 Authority Key Identifier: keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38312e302f32342d3234203d3e203435373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.81.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:0b:e4:da:50:94:7d:02:88:a2:a3:94:27:46:20:7a:0d:0d: 19:28:34:4a:f4:5b:d8:c3:e8:c4:37:6d:a2:cc:9a:33:ee:58: 6b:2e:ca:9b:95:1d:7f:3d:e5:b8:80:f2:76:a0:a1:1d:72:28: ac:54:cd:0b:52:03:f8:4e:97:93:92:12:e2:30:2f:59:02:fc: 9b:d2:72:1e:e0:6a:01:67:6a:1f:63:45:39:20:09:37:74:78: 2b:dc:9f:21:60:85:d1:59:a6:dc:b4:c2:cf:b4:6e:6e:05:1c: ca:d7:21:64:e9:63:6a:eb:b9:9b:d8:76:c4:cb:13:87:66:66: 65:a7:29:1a:58:82:cb:7d:8d:08:a3:c7:e3:cb:8d:74:12:54: bf:77:fb:ea:4f:87:cb:1b:15:99:d3:f0:3b:0f:e4:8d:b7:20: 15:e8:b0:65:1d:10:5a:e7:ce:3e:29:cb:ff:e9:cb:fa:b1:cc: da:67:43:42:ae:56:4d:b8:ef:67:90:4f:99:9a:88:f1:eb:bd: ac:dc:b0:5e:bf:e9:93:ea:c5:53:9e:57:3e:c3:d4:38:10:5e: 5a:b3:fb:9b:b5:36:7e:8a:7e:ea:c0:bf:5b:b5:c1:4e:14:6f: b5:b9:32:ce:37:db:db:aa:4a:7c:f9:3b:2d:e2:a3:91:99:38: 0c:4a:17:30 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUbXYNJrI3b+LO+LqwC4yH6N9Np98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5 Qzg4Q0M2MDAeFw0yNjA4MjAwNzMyMTlaFw0yNzA4MTkwNzM3MTlaMDMxMTAvBgNV BAMTKDMyQkEwQ0I2QTZCRkI5Qjg4OTRCMzNERjBCRkE2ODhDNUU2MkIwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1D8p6fXRXNlcTMDjsmiFZz/MF /Vg6R2sYG+73MfnRsVpPN9p7SAI1A877/K12i14XypUH5IvF7edDo50YxTZFnpi9 AwkLpNMRquAEr7fHjNHENzFiIA9//KJhVQ3/BcjXWQczRC5DgWbpvm7cVb3U2L1O Mjd9rk50CWAuW7k8uwLOQRIlnEjynepnH35BGETWsQLKbgTktn02wROGroN8cw7o mP/D+sbA7ngq97od7RX8fJg4acZXdetGWxkviShE2j6IVA7fLwrfNmhP7u33+8WV 2CMWMkWlb9gfdIz6LkM2ZjgeqGBz25TU7OoupmWpfgu85nBVKg5hHzQB6iwJAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUMroMtqa/ubiJSzPfC/pojF5isGEwHwYDVR0j BBgwFoAUJTX2qaZTlbWIGtsLQyoWZ5yIzGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkYjM3MzAtZjQ5OS00NDlmLWI2ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlB NjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5Qzg4Q0M2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM1RjZBOUE2NTM5NUI1ODgxQURCMEI0MzJBMTY2NzlDODhD QzYwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQxZGIzNzMwLWY0OTktNDQ5Zi1i NmYyLTdhNWRlYjUzMmIwYy8wLzMxMzAzMzJlMzIzODJlMzgzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzNzMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnHFEwDQYJKoZIhvcN AQELBQADggEBAA0L5NpQlH0CiKKjlCdGIHoNDRkoNEr0W9jD6MQ3baLMmjPuWGsu ypuVHX895biA8nagoR1yKKxUzQtSA/hOl5OSEuIwL1kC/JvSch7gagFnah9jRTkg CTd0eCvcnyFghdFZpty0ws+0bm4FHMrXIWTpY2rruZvYdsTLE4dmZmWnKRpYgst9 jQijx+PLjXQSVL93++pPh8sbFZnT8DsP5I23IBXosGUdEFrnzj4py//py/qxzNpn Q0KuVk2472eQT5maiPHrvazcsF6/6ZPqxVOeVz7D1DgQXlqz+5u1Nn6KfurAv1u1 wU4Ub7W5Ms4329uqSnz5Oy3io5GZOAxKFzA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:52:51 2026 by rpki-client