$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa File: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (raw, json) Hash identifier: EMSp9sTBEYIxpwZzZRzI+gE7gVdIs4Im9QUStOiQIZc= Subject key identifier: EF:3A:C7:1C:D4:27:56:4F:B4:5C:8C:09:99:79:78:47:6A:38:7F:10 Certificate issuer: /CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Certificate serial: 19FC0B85729DA15825C10B78C1ADC784070E51AA Authority key identifier: AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa Signing time: Mon 05 Oct 2026 03:28:30 +0000 ROA not before: Mon 05 Oct 2026 03:23:30 +0000 ROA not after: Mon 04 Oct 2027 03:28:30 +0000 asID: 141087 IP address blocks: 103.156.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:fc:0b:85:72:9d:a1:58:25:c1:0b:78:c1:ad:c7:84:07:0e:51:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Validity Not Before: Oct 5 03:23:30 2026 GMT Not After : Oct 4 03:28:30 2027 GMT Subject: CN=EF3AC71CD427564FB45C8C09997978476A387F10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:6d:a1:ec:19:43:70:c7:c3:78:11:0e:f8: d4:72:78:40:b9:b9:1e:1b:a0:38:f1:e6:1c:b3:82: 28:f1:86:cc:f9:1a:69:0f:95:2f:e8:94:86:38:fa: e0:23:a4:72:52:85:ea:48:bf:9d:e4:bd:57:0d:6e: 92:e3:24:ec:50:40:f4:e9:a5:7c:f5:59:2f:40:8b: 0c:95:68:ca:a1:f3:76:e4:63:11:4f:cf:20:4b:b1: e9:9d:c3:eb:62:f4:a4:f6:d8:19:6b:3f:16:50:11: f3:30:4c:eb:93:fd:33:e0:e3:54:d1:11:86:90:02: f1:b9:ed:0b:55:e5:b6:66:96:98:c6:52:bf:8f:0a: d7:12:00:ba:73:2a:1f:6d:15:21:5a:02:0b:3f:f6: d7:cb:d7:65:13:b4:d6:e5:7c:9a:5a:42:62:a7:93: 3b:e9:5c:81:c9:f5:5e:4d:51:2f:b2:d0:02:ad:79: 16:54:4b:ee:cf:13:f9:ed:d1:0e:52:46:c9:61:1f: 2d:05:af:81:96:03:57:f5:ef:7b:98:07:cd:7b:ca: 98:bc:d7:70:9a:ee:b7:5d:59:a6:d6:d5:66:04:2e: 8e:19:b0:7e:af:9d:ac:99:74:d6:c1:1c:eb:7d:a0: dc:60:72:7c:34:30:a5:14:94:50:84:06:c2:a5:0f: a9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3A:C7:1C:D4:27:56:4F:B4:5C:8C:09:99:79:78:47:6A:38:7F:10 X509v3 Authority Key Identifier: keyid:AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.96.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:d1:21:a3:c8:bb:9d:04:68:44:4b:00:1c:42:61:eb:d4:ec: 73:13:93:01:fe:bc:b4:a0:f7:e4:39:1f:ce:69:10:d7:db:08: 74:5d:03:dd:6b:b6:bb:3d:5e:5c:46:e7:b8:ca:78:5c:db:91: b4:8e:d5:ab:66:42:66:f4:85:dd:f6:21:05:05:d3:54:2d:54: 2e:e9:de:55:da:fa:5a:d5:1f:eb:f2:00:82:da:ef:a1:21:d0: 82:c3:34:7a:47:63:65:37:75:15:da:95:5e:0a:f0:e4:9e:57: 2a:d7:4d:f6:a0:da:c0:25:91:1b:4c:b4:ec:cd:65:cb:87:8b: 49:8b:30:36:91:98:cf:eb:cd:c0:7d:39:43:8e:5e:0a:e3:d7: 4b:aa:c5:86:c1:b2:d9:da:b7:ca:07:93:e6:f2:a1:55:a6:43: db:9e:eb:9d:92:48:d8:43:ad:2f:05:c5:c9:5d:d4:c5:dd:76: 0f:6b:e4:e8:63:4c:2e:d4:79:c2:d3:81:74:d1:5b:44:49:d6: b3:a5:a7:be:79:0e:c0:40:bc:5e:a0:d0:f4:85:04:7b:f0:35: c0:47:71:8c:fd:88:0a:dd:cd:c7:2f:1c:32:bf:a9:98:99:38: fa:65:ae:fd:64:0a:31:f3:a7:2d:19:43:2e:28:a2:e3:bd:d2: 1a:e6:9d:8a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGfwLhXKdoVglwQt4wa3HhAcOUaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2 QzI3RTNDRTAeFw0yNjEwMDUwMzIzMzBaFw0yNzEwMDQwMzI4MzBaMDMxMTAvBgNV BAMTKEVGM0FDNzFDRDQyNzU2NEZCNDVDOEMwOTk5Nzk3ODQ3NkEzODdGMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rW2h7BlDcMfDeBEO+NRyeEC5 uR4boDjx5hyzgijxhsz5GmkPlS/olIY4+uAjpHJShepIv53kvVcNbpLjJOxQQPTp pXz1WS9AiwyVaMqh83bkYxFPzyBLsemdw+ti9KT22BlrPxZQEfMwTOuT/TPg41TR EYaQAvG57QtV5bZmlpjGUr+PCtcSALpzKh9tFSFaAgs/9tfL12UTtNblfJpaQmKn kzvpXIHJ9V5NUS+y0AKteRZUS+7PE/nt0Q5SRslhHy0Fr4GWA1f173uYB817ypi8 13Ca7rddWabW1WYELo4ZsH6vnayZdNbBHOt9oNxgcnw0MKUUlFCEBsKlD6lnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU7zrHHNQnVk+0XIwJmXl4R2o4fxAwHwYDVR0j BBgwFoAUr0y0b6g1PLWjsj71fyMY1Gwn484wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWM4OTdjNGEtZTBmZi00NjUyLWE1OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZB ODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2QzI3RTNDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjRDQjQ2RkE4MzUzQ0I1QTNCMjNFRjU3RjIzMThENDZDMjdF M0NFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjODk3YzRhLWUwZmYtNDY1Mi1h NTkxLWZmMmQ0OGU3MmM5MS8wLzMxMzAzMzJlMzEzNTM2MmUzOTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5xgMA0GCSqG SIb3DQEBCwUAA4IBAQBt0SGjyLudBGhESwAcQmHr1OxzE5MB/ry0oPfkOR/OaRDX 2wh0XQPda7a7PV5cRue4ynhc25G0jtWrZkJm9IXd9iEFBdNULVQu6d5V2vpa1R/r 8gCC2u+hIdCCwzR6R2NlN3UV2pVeCvDknlcq1032oNrAJZEbTLTszWXLh4tJizA2 kZjP683AfTlDjl4K49dLqsWGwbLZ2rfKB5Pm8qFVpkPbnuudkkjYQ60vBcXJXdTF 3XYPa+ToY0wu1HnC04F00VtESdazpae+eQ7AQLxeoND0hQR78DXAR3GM/YgK3c3H Lxwyv6mYmTj6Za79ZAox86ctGUMuKKLjvdIa5p2K -----END CERTIFICATE-----Generated at Sun Oct 25 04:54:04 2026 by rpki-client