$ rpki-client -vvvf rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32332e302f32342d3234203d3e203539313337.roa File: 3130332e3235322e32332e302f32342d3234203d3e203539313337.roa (raw, json) Hash identifier: NSDpPtXGyl2DriTGymCGtuOiMBi77PdX52WDKu2MCX8= Subject key identifier: 39:DA:B3:3B:DA:22:8B:94:7A:20:FD:72:B0:EF:23:39:48:8E:4C:31 Certificate issuer: /CN=0A40D86EAE29C558B2406A52DF151128A596DFEF Certificate serial: 5DE60EB4B7E73D40F248CF5050AACF1B3058EC73 Authority key identifier: 0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32332e302f32342d3234203d3e203539313337.roa Signing time: Fri 16 Oct 2026 09:31:35 +0000 ROA not before: Fri 16 Oct 2026 09:26:35 +0000 ROA not after: Fri 15 Oct 2027 09:31:35 +0000 asID: 59137 IP address blocks: 103.252.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e6:0e:b4:b7:e7:3d:40:f2:48:cf:50:50:aa:cf:1b:30:58:ec:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A40D86EAE29C558B2406A52DF151128A596DFEF Validity Not Before: Oct 16 09:26:35 2026 GMT Not After : Oct 15 09:31:35 2027 GMT Subject: CN=39DAB33BDA228B947A20FD72B0EF2339488E4C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:0c:bd:f4:f3:29:63:d5:97:8a:46:19:20: 91:79:a9:6f:33:b1:60:1c:97:e1:d4:d7:b8:e7:c4: 5c:ac:d1:4f:a7:76:78:e5:22:fb:36:47:2f:aa:d9: 43:9f:63:bb:e7:74:4b:fb:2f:0c:dd:0d:e1:f8:2b: 1b:86:e8:07:6f:31:93:6b:ba:6a:30:b6:50:cf:da: e6:1c:91:22:aa:00:60:d5:41:94:ad:6c:e4:78:d7: 6c:4e:30:84:34:38:52:d4:b9:ca:9e:ac:6a:3c:71: 54:60:07:37:f4:0d:ed:89:19:75:4e:bd:d1:d1:69: 3d:b4:69:d5:d1:55:d1:2b:3e:fc:7b:e8:03:86:cf: 1c:76:55:c6:ad:1a:00:4e:e3:33:d3:75:63:fa:50: b8:79:bc:0d:53:c8:86:b3:ed:24:70:4a:01:6f:23: b2:c3:df:6c:96:cb:9f:7b:5b:83:2d:5f:1e:c4:16: b4:d6:ac:71:fa:e0:f4:d0:7d:2e:0c:3f:d3:1d:d6: 8f:31:ee:13:59:23:95:e1:92:41:7d:93:0a:3b:12: ef:c6:0f:56:13:aa:ff:54:a9:2c:2a:a4:d7:a9:38: 82:46:f9:59:d2:17:bb:a1:ab:27:b4:29:91:86:3a: 2d:0f:17:66:99:b4:4e:88:22:48:0b:bc:7f:cd:62: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DA:B3:3B:DA:22:8B:94:7A:20:FD:72:B0:EF:23:39:48:8E:4C:31 X509v3 Authority Key Identifier: keyid:0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32332e302f32342d3234203d3e203539313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.252.23.0/24 Signature Algorithm: sha256WithRSAEncryption 28:94:d0:27:a6:5a:45:c5:2d:4d:fc:88:ac:f2:64:ad:08:9d: a2:9a:22:74:67:e6:36:d2:f4:19:83:9b:03:45:b0:94:3e:d7: 97:fa:ff:6a:72:8c:2f:b3:74:a2:7d:0d:04:b6:51:a7:ad:99: b9:c8:4d:2c:ae:a9:9a:8b:04:f8:ef:ed:42:74:38:cc:05:e5: c9:61:7f:94:70:04:15:c6:3f:a0:1a:e9:65:0f:77:16:38:2f: 21:07:49:76:7f:6c:03:6e:e5:06:a0:a1:01:f8:af:02:dd:db: 68:27:1c:b8:74:0d:33:79:fc:dc:f5:a9:c4:2c:fb:28:89:45: c5:f5:77:ab:d9:e5:4a:b9:0d:98:72:fa:18:40:69:56:73:40: 06:a0:e3:fb:c0:cb:81:96:7c:71:54:38:47:2e:a5:37:cf:44: b0:b6:28:a6:b7:0a:3f:4a:93:8d:bf:0f:5b:33:28:0a:24:95: b2:86:30:e3:6f:20:f8:0a:ed:20:c9:d4:47:fe:c5:a0:1c:3a: a4:87:57:fb:89:e5:64:4e:a7:fd:57:1d:e8:14:fc:dd:36:76: 6c:ef:df:e2:a0:92:39:56:68:89:5f:a6:84:17:0e:32:60:f2: 5c:14:f3:eb:58:23:1b:2e:b4:fd:3d:99:ee:1a:e9:af:6e:55: 6f:e7:bd:2f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXeYOtLfnPUDySM9QUKrPGzBY7HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0MEQ4NkVBRTI5QzU1OEIyNDA2QTUyREYxNTExMjhB NTk2REZFRjAeFw0yNjEwMTYwOTI2MzVaFw0yNzEwMTUwOTMxMzVaMDMxMTAvBgNV BAMTKDM5REFCMzNCREEyMjhCOTQ3QTIwRkQ3MkIwRUYyMzM5NDg4RTRDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVQy99PMpY9WXikYZIJF5qW8z sWAcl+HU17jnxFys0U+ndnjlIvs2Ry+q2UOfY7vndEv7LwzdDeH4KxuG6AdvMZNr umowtlDP2uYckSKqAGDVQZStbOR412xOMIQ0OFLUucqerGo8cVRgBzf0De2JGXVO vdHRaT20adXRVdErPvx76AOGzxx2VcatGgBO4zPTdWP6ULh5vA1TyIaz7SRwSgFv I7LD32yWy597W4MtXx7EFrTWrHH64PTQfS4MP9Md1o8x7hNZI5XhkkF9kwo7Eu/G D1YTqv9UqSwqpNepOIJG+VnSF7uhqye0KZGGOi0PF2aZtE6IIkgLvH/NYldBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOdqzO9oii5R6IP1ysO8jOUiOTDEwHwYDVR0j BBgwFoAUCkDYbq4pxViyQGpS3xURKKWW3+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjY0YTczNGYtOTg0ZS00OWNiLWI0YjAtN2MxZDc5MjM3Y2IxLzAvMEE0MEQ4NkVB RTI5QzU1OEIyNDA2QTUyREYxNTExMjhBNTk2REZFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTQwRDg2RUFFMjlDNTU4QjI0MDZBNTJERjE1MTEyOEE1OTZE RkVGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY2NGE3MzRmLTk4NGUtNDljYi1i NGIwLTdjMWQ3OTIzN2NiMS8wLzMxMzAzMzJlMzIzNTMyMmUzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzOTMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf8FzANBgkqhkiG 9w0BAQsFAAOCAQEAKJTQJ6ZaRcUtTfyIrPJkrQidopoidGfmNtL0GYObA0WwlD7X l/r/anKML7N0on0NBLZRp62ZuchNLK6pmosE+O/tQnQ4zAXlyWF/lHAEFcY/oBrp ZQ93FjgvIQdJdn9sA27lBqChAfivAt3baCccuHQNM3n83PWpxCz7KIlFxfV3q9nl SrkNmHL6GEBpVnNABqDj+8DLgZZ8cVQ4Ry6lN89EsLYoprcKP0qTjb8PWzMoCiSV soYw428g+ArtIMnUR/7FoBw6pIdX+4nlZE6n/Vcd6BT83TZ2bO/f4qCSOVZoiV+m hBcOMmDyXBTz61gjGy60/T2Z7hrpr25Vb+e9Lw== -----END CERTIFICATE-----Generated at Mon Oct 26 02:20:05 2026 by rpki-client