$ rpki-client -vvvf rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32302e302f32342d3234203d3e203539313337.roa File: 3130332e3235322e32302e302f32342d3234203d3e203539313337.roa (raw, json) Hash identifier: QB8SNUGufBSyKcGRX74WU933H/1fPaQd7wVXQMgyMm4= Subject key identifier: F7:E6:A7:90:A7:13:98:51:6A:53:EB:26:89:F0:FD:B2:A6:15:11:37 Certificate issuer: /CN=0A40D86EAE29C558B2406A52DF151128A596DFEF Certificate serial: 09569F82B64FB0A736AFC275A9CAE39626A33F81 Authority key identifier: 0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32302e302f32342d3234203d3e203539313337.roa Signing time: Fri 16 Oct 2026 09:30:14 +0000 ROA not before: Fri 16 Oct 2026 09:25:14 +0000 ROA not after: Fri 15 Oct 2027 09:30:14 +0000 asID: 59137 IP address blocks: 103.252.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:56:9f:82:b6:4f:b0:a7:36:af:c2:75:a9:ca:e3:96:26:a3:3f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A40D86EAE29C558B2406A52DF151128A596DFEF Validity Not Before: Oct 16 09:25:14 2026 GMT Not After : Oct 15 09:30:14 2027 GMT Subject: CN=F7E6A790A71398516A53EB2689F0FDB2A6151137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:9e:8f:66:d5:e8:61:8c:0b:e8:b1:be:00: ee:14:f0:a8:5c:95:37:26:9e:db:8c:97:2d:ec:40: 90:7d:38:b7:4b:5f:b2:67:3f:7a:4c:03:b2:43:24: e2:ec:e9:43:76:e4:af:52:ba:74:26:aa:de:b7:cd: 17:43:04:89:62:59:95:fc:62:4f:f2:c5:94:f7:ce: 97:f1:c3:12:35:47:9d:10:89:35:a7:46:bd:e0:31: fc:cf:64:4f:37:5d:e2:e4:22:99:7f:b4:d2:04:e6: 28:ae:ea:97:52:6b:0c:4c:39:1f:ac:1a:c9:25:40: 1b:72:89:58:0a:06:72:b5:4a:7a:31:11:b3:2b:5e: 87:2b:8b:d0:8a:05:2c:03:e7:71:44:b3:5f:33:1f: 3c:43:f4:51:1e:fd:ec:b2:21:e6:b3:eb:26:1f:d9: db:98:8a:ee:2a:ac:e2:27:81:04:51:51:12:36:0e: 29:7d:2a:c5:2d:cd:42:46:57:e7:04:78:9a:a8:ce: 2d:2f:07:2f:17:04:12:4b:73:76:03:e5:50:b3:c9: da:c0:9c:a7:10:12:47:7c:b3:40:8b:8a:be:d6:13: 64:81:8c:f9:f4:0e:c7:03:04:07:af:4e:74:ab:3d: e3:29:f2:3b:de:67:f6:fc:3a:19:81:71:9a:59:02: cc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E6:A7:90:A7:13:98:51:6A:53:EB:26:89:F0:FD:B2:A6:15:11:37 X509v3 Authority Key Identifier: keyid:0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32302e302f32342d3234203d3e203539313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.252.20.0/24 Signature Algorithm: sha256WithRSAEncryption 25:62:66:f5:3e:f3:b1:7e:11:bb:24:8d:19:27:e5:ed:f0:a5: 41:99:54:31:fc:78:e9:56:52:9c:ac:13:5a:68:b6:7a:46:3b: fa:19:8c:a1:94:c9:71:e1:d3:af:43:47:05:0a:e3:60:42:28: 5a:e7:5c:02:67:1f:5a:03:81:d3:ff:60:3f:21:1c:55:32:bc: 3a:9b:4c:93:b8:c3:1e:82:fb:60:7c:3c:80:4e:98:a7:37:0c: fa:fe:ae:cf:99:aa:d6:e3:90:38:87:84:72:9d:2a:6a:d8:43: 00:76:08:c1:1c:d8:42:93:2b:f5:75:bc:a0:06:1c:32:4b:61: a1:7e:2a:47:9f:d1:d3:14:5b:15:2a:87:55:ec:59:c9:86:3e: 22:b1:88:f9:00:1c:e5:d8:16:59:b7:c6:b9:15:86:c2:8a:7b: 97:99:e8:37:1d:cd:2b:e1:b8:a7:bd:ec:60:5b:46:02:34:1b: af:ca:cd:23:e4:63:4e:ad:30:43:84:ea:4b:09:3f:04:9c:23: a7:61:5c:b9:03:8a:87:54:5e:50:2e:79:b3:60:d9:09:8c:c5: 05:cf:5d:04:78:a1:2d:7b:cc:8b:78:b9:7d:38:21:b9:df:db: 76:d0:bb:54:8b:b1:cc:20:cb:8f:bb:99:ad:7e:d9:d0:fb:22: 15:09:ce:f3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCVafgrZPsKc2r8J1qcrjliajP4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0MEQ4NkVBRTI5QzU1OEIyNDA2QTUyREYxNTExMjhB NTk2REZFRjAeFw0yNjEwMTYwOTI1MTRaFw0yNzEwMTUwOTMwMTRaMDMxMTAvBgNV BAMTKEY3RTZBNzkwQTcxMzk4NTE2QTUzRUIyNjg5RjBGREIyQTYxNTExMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCp6PZtXoYYwL6LG+AO4U8Khc lTcmntuMly3sQJB9OLdLX7JnP3pMA7JDJOLs6UN25K9SunQmqt63zRdDBIliWZX8 Yk/yxZT3zpfxwxI1R50QiTWnRr3gMfzPZE83XeLkIpl/tNIE5iiu6pdSawxMOR+s GsklQBtyiVgKBnK1SnoxEbMrXocri9CKBSwD53FEs18zHzxD9FEe/eyyIeaz6yYf 2duYiu4qrOIngQRRURI2Dil9KsUtzUJGV+cEeJqozi0vBy8XBBJLc3YD5VCzydrA nKcQEkd8s0CLir7WE2SBjPn0DscDBAevTnSrPeMp8jveZ/b8OhmBcZpZAsxVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9+ankKcTmFFqU+smifD9sqYVETcwHwYDVR0j BBgwFoAUCkDYbq4pxViyQGpS3xURKKWW3+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjY0YTczNGYtOTg0ZS00OWNiLWI0YjAtN2MxZDc5MjM3Y2IxLzAvMEE0MEQ4NkVB RTI5QzU1OEIyNDA2QTUyREYxNTExMjhBNTk2REZFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTQwRDg2RUFFMjlDNTU4QjI0MDZBNTJERjE1MTEyOEE1OTZE RkVGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY2NGE3MzRmLTk4NGUtNDljYi1i NGIwLTdjMWQ3OTIzN2NiMS8wLzMxMzAzMzJlMzIzNTMyMmUzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzOTMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf8FDANBgkqhkiG 9w0BAQsFAAOCAQEAJWJm9T7zsX4RuySNGSfl7fClQZlUMfx46VZSnKwTWmi2ekY7 +hmMoZTJceHTr0NHBQrjYEIoWudcAmcfWgOB0/9gPyEcVTK8OptMk7jDHoL7YHw8 gE6YpzcM+v6uz5mq1uOQOIeEcp0qathDAHYIwRzYQpMr9XW8oAYcMkthoX4qR5/R 0xRbFSqHVexZyYY+IrGI+QAc5dgWWbfGuRWGwop7l5noNx3NK+G4p73sYFtGAjQb r8rNI+RjTq0wQ4TqSwk/BJwjp2FcuQOKh1ReUC55s2DZCYzFBc9dBHihLXvMi3i5 fTghud/bdtC7VIuxzCDLj7uZrX7Z0PsiFQnO8w== -----END CERTIFICATE-----Generated at Mon Oct 26 02:20:01 2026 by rpki-client