$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/3130332e33382e3231362e302f32342d3234203d3e20313335363336.roa File: 3130332e33382e3231362e302f32342d3234203d3e20313335363336.roa (raw, json) Hash identifier: mHJUFDeltP4mrmNUyCNMwaucSdGHP2VKqjZ/4bFuMiY= Subject key identifier: 71:BD:75:77:5F:FE:B6:3E:D5:F1:A6:B1:47:3A:AF:55:DB:8B:0F:40 Certificate issuer: /CN=1DAB6FF699A8F14120B0EF2DABD67849161BA2C7 Certificate serial: 3BCBA0A8DF90853904A4187D85D11F1EA9585E3D Authority key identifier: 1D:AB:6F:F6:99:A8:F1:41:20:B0:EF:2D:AB:D6:78:49:16:1B:A2:C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/3130332e33382e3231362e302f32342d3234203d3e20313335363336.roa Signing time: Mon 12 Oct 2026 04:18:42 +0000 ROA not before: Mon 12 Oct 2026 04:13:42 +0000 ROA not after: Mon 11 Oct 2027 04:18:42 +0000 asID: 135636 IP address blocks: 103.38.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.crl rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 13:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:cb:a0:a8:df:90:85:39:04:a4:18:7d:85:d1:1f:1e:a9:58:5e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DAB6FF699A8F14120B0EF2DABD67849161BA2C7 Validity Not Before: Oct 12 04:13:42 2026 GMT Not After : Oct 11 04:18:42 2027 GMT Subject: CN=71BD75775FFEB63ED5F1A6B1473AAF55DB8B0F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:16:b9:4e:eb:f3:a4:a7:e4:5e:98:fc:19: f2:6c:d2:cb:90:41:1d:b2:5f:37:d2:0b:25:e3:0e: 19:dc:d9:23:ec:ef:b0:61:1e:85:05:4a:97:b1:54: f9:46:a6:b5:75:b2:46:16:66:7f:ae:cf:57:86:e6: 05:e0:e3:e4:0a:2d:ed:ce:26:fb:6e:99:7f:41:50: 4b:e0:75:f6:25:fb:54:45:e9:41:2a:ac:bf:5d:20: 41:70:41:2b:6f:07:0f:8d:b8:15:ab:31:c0:61:0f: d8:1a:12:69:4d:65:4e:c5:fd:82:c0:1e:fe:d9:b4: 26:dd:61:0e:76:41:32:f6:24:37:6a:e0:c8:2f:87: 04:5e:25:ef:91:af:df:e0:a7:c6:97:a0:65:c3:e2: 10:7e:92:95:95:79:5e:70:25:fd:21:f8:1a:27:b5: f8:2e:f4:bf:46:d8:f1:34:7f:11:57:d6:a5:cc:24: ef:0f:4b:c3:85:cb:9a:2a:b1:83:db:8e:ff:0f:a6: c0:d9:07:a5:f1:e2:6b:95:19:03:4d:3e:da:48:51: e0:97:e9:17:f8:2d:98:57:33:70:21:b6:43:7b:2e: 62:1a:8a:b5:20:98:2b:50:e8:21:3e:00:52:25:1e: f9:66:30:8f:0b:59:f9:50:f2:fe:5e:aa:bf:cb:1a: 86:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BD:75:77:5F:FE:B6:3E:D5:F1:A6:B1:47:3A:AF:55:DB:8B:0F:40 X509v3 Authority Key Identifier: keyid:1D:AB:6F:F6:99:A8:F1:41:20:B0:EF:2D:AB:D6:78:49:16:1B:A2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/3130332e33382e3231362e302f32342d3234203d3e20313335363336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.38.216.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:96:ed:0a:22:d6:f0:e2:a5:a0:ce:be:23:bc:d2:bd:73:6b: 71:01:5f:0d:ab:9c:28:ec:f6:b5:a4:43:1c:b2:5f:58:0e:42: ac:1a:37:9d:06:cb:c7:30:b4:0d:cd:62:8d:a7:ed:43:70:3d: 40:fb:60:f6:33:38:b1:f4:f9:ec:3a:ae:ac:8c:9d:0e:5c:1d: 1e:b9:70:7a:89:2c:2c:51:58:ad:9d:ff:2e:3c:99:b1:a5:26: ce:df:58:22:07:bc:6c:ee:de:60:0c:ec:40:b9:42:79:22:ce: 49:8d:27:1e:c4:3d:41:2f:85:a4:57:28:8c:cd:e6:7d:aa:c0: 62:3b:2f:86:e2:11:cd:0c:62:49:c7:d8:94:9b:d6:ca:59:8d: 88:03:67:0b:87:38:4a:cd:66:82:0a:66:27:cd:a3:c1:65:2a: 63:f4:ec:77:e3:fa:69:4d:3d:f6:28:e6:a0:d3:cc:d7:b7:e3: 28:bf:1f:d0:9c:6c:fd:e8:1c:8e:08:8d:e7:c7:63:5b:33:be: 1d:ef:f3:fe:fc:0b:f4:e7:00:af:5b:78:6a:e1:7c:0e:ff:e5: e9:de:47:85:d0:f3:22:f4:2f:10:ca:7c:92:f1:03:06:7f:45: 9d:5a:5e:17:2d:fd:dd:7f:c8:ba:87:2f:76:b0:b5:c8:79:f3: c1:e8:57:ef -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUO8ugqN+QhTkEpBh9hdEfHqlYXj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURBQjZGRjY5OUE4RjE0MTIwQjBFRjJEQUJENjc4NDkx NjFCQTJDNzAeFw0yNjEwMTIwNDEzNDJaFw0yNzEwMTEwNDE4NDJaMDMxMTAvBgNV BAMTKDcxQkQ3NTc3NUZGRUI2M0VENUYxQTZCMTQ3M0FBRjU1REI4QjBGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zha5TuvzpKfkXpj8GfJs0suQ QR2yXzfSCyXjDhnc2SPs77BhHoUFSpexVPlGprV1skYWZn+uz1eG5gXg4+QKLe3O JvtumX9BUEvgdfYl+1RF6UEqrL9dIEFwQStvBw+NuBWrMcBhD9gaEmlNZU7F/YLA Hv7ZtCbdYQ52QTL2JDdq4MgvhwReJe+Rr9/gp8aXoGXD4hB+kpWVeV5wJf0h+Bon tfgu9L9G2PE0fxFX1qXMJO8PS8OFy5oqsYPbjv8PpsDZB6Xx4muVGQNNPtpIUeCX 6Rf4LZhXM3AhtkN7LmIairUgmCtQ6CE+AFIlHvlmMI8LWflQ8v5eqr/LGoYxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcb11d1/+tj7V8aaxRzqvVduLD0AwHwYDVR0j BBgwFoAUHatv9pmo8UEgsO8tq9Z4SRYboscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNjMWVhYmMtZWQxMy00MmM5LWJjNWQtN2JkMDQyMTdjY2FhLzAvMURBQjZGRjY5 OUE4RjE0MTIwQjBFRjJEQUJENjc4NDkxNjFCQTJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xREFCNkZGNjk5QThGMTQxMjBCMEVGMkRBQkQ2Nzg0OTE2MUJB MkM3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUzYzFlYWJjLWVkMTMtNDJjOS1i YzVkLTdiZDA0MjE3Y2NhYS8wLzMxMzAzMzJlMzMzODJlMzIzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzYzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZybYMA0GCSqG SIb3DQEBCwUAA4IBAQBblu0KItbw4qWgzr4jvNK9c2txAV8Nq5wo7Pa1pEMcsl9Y DkKsGjedBsvHMLQNzWKNp+1DcD1A+2D2Mzix9PnsOq6sjJ0OXB0euXB6iSwsUVit nf8uPJmxpSbO31giB7xs7t5gDOxAuUJ5Is5JjScexD1BL4WkVyiMzeZ9qsBiOy+G 4hHNDGJJx9iUm9bKWY2IA2cLhzhKzWaCCmYnzaPBZSpj9Ox34/ppTT32KOag08zX t+Movx/QnGz96ByOCI3nx2NbM74d7/P+/Av05wCvW3hq4XwO/+Xp3keF0PMi9C8Q ynyS8QMGf0WdWl4XLf3df8i6hy92sLXIefPB6Ffv -----END CERTIFICATE-----Generated at Fri Oct 23 01:20:45 2026 by rpki-client