$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/3130332e3137322e3139372e302f32342d3234203d3e20313336343435.roa File: 3130332e3137322e3139372e302f32342d3234203d3e20313336343435.roa (raw, json) Hash identifier: tb675eaiEkDHOnmcu1KovtY2QzQr8ZannoNpqOhzL8A= Subject key identifier: CA:3C:F5:70:6F:63:B2:47:E4:1F:51:7B:F9:79:F4:80:58:65:B0:7F Certificate issuer: /CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Certificate serial: 25F68A9F07AB897CA764192C625340462BD6813E Authority key identifier: 0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/3130332e3137322e3139372e302f32342d3234203d3e20313336343435.roa Signing time: Fri 04 Sep 2026 09:40:25 +0000 ROA not before: Fri 04 Sep 2026 09:35:25 +0000 ROA not after: Fri 03 Sep 2027 09:40:25 +0000 asID: 136445 IP address blocks: 103.172.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f6:8a:9f:07:ab:89:7c:a7:64:19:2c:62:53:40:46:2b:d6:81:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Validity Not Before: Sep 4 09:35:25 2026 GMT Not After : Sep 3 09:40:25 2027 GMT Subject: CN=CA3CF5706F63B247E41F517BF979F4805865B07F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:48:37:e4:f8:70:7d:05:28:88:35:6f:d2:73: 05:dd:0b:19:c4:9b:8f:3f:2d:88:9f:04:dc:a9:78: ff:2c:24:cf:3e:33:7a:5e:db:ca:15:bc:47:fc:da: 08:b8:ce:c0:51:59:95:ff:0c:7f:be:2a:8d:53:21: a8:0d:bf:76:d3:76:a8:8a:6a:fa:56:d1:e2:02:66: 6f:14:d9:40:9c:c5:d1:e7:0f:d8:de:6b:29:d4:f2: 3e:ac:ef:fe:95:b0:1f:75:1d:84:6d:de:3d:e2:7a: d7:1e:84:08:09:5e:b1:e7:dc:23:3b:a8:0c:2d:2f: 0d:22:66:b5:35:48:45:86:42:7b:71:2f:3b:7c:bc: 47:f8:16:dd:34:cb:82:ed:b7:13:45:62:b2:a1:fe: ff:16:e6:af:dc:8a:2c:35:4d:75:2f:26:93:fc:c4: e0:88:dc:5b:dc:54:3b:10:e2:46:4e:a5:21:40:b8: 59:b3:a3:67:bb:80:a9:fb:53:17:d9:56:c0:81:45: 89:53:6b:8e:b6:f6:c7:10:db:ec:f9:c3:78:cd:8b: 0d:b1:0f:8d:ca:87:5f:9a:93:1a:ca:6a:88:27:c0: 56:f6:89:84:46:e4:42:12:a8:55:a5:d9:fe:de:3e: 65:fe:31:0b:87:d3:1d:8c:ff:09:75:24:33:53:f1: 9c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3C:F5:70:6F:63:B2:47:E4:1F:51:7B:F9:79:F4:80:58:65:B0:7F X509v3 Authority Key Identifier: keyid:0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/3130332e3137322e3139372e302f32342d3234203d3e20313336343435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.197.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:7d:14:a8:04:9a:de:c0:71:e7:2c:8d:1f:f7:9e:7e:37:d4: 7a:2b:e0:95:95:65:62:1a:44:9a:6c:24:17:3e:32:1c:84:08: 7e:b0:de:36:ca:fb:03:37:42:32:65:b6:c1:b7:54:bc:c1:f7: f4:54:a4:7c:2e:b3:29:98:30:89:da:74:26:26:6f:fa:36:d0: 59:5f:78:b7:7a:18:79:95:51:6d:cf:15:12:6c:83:a1:19:aa: cf:8c:2e:7d:88:8a:d4:70:5a:d4:c1:14:c2:2f:f4:51:1d:d5: 9e:f3:8a:2e:54:fa:55:27:c4:4c:1b:78:58:99:d3:74:0e:c9: f5:65:5b:f2:41:ad:2b:10:f0:97:fc:fe:d9:9c:07:90:81:80: bd:96:d5:90:95:18:2d:7d:24:44:68:f9:50:6c:85:05:99:03: f6:c3:41:09:d1:3d:03:f9:87:e1:b0:04:cf:9f:a9:7e:89:b1: 1b:02:3f:3e:78:ac:6f:8b:14:c9:21:e7:66:88:f5:51:3e:af: 76:40:fc:35:38:4c:72:56:c5:1b:ef:69:35:52:a2:32:71:db: b9:8b:41:a9:89:0c:14:f4:62:41:55:a4:e9:47:ec:c9:f3:49: d7:44:ec:cb:ac:46:db:47:5d:8f:46:ee:8f:5f:19:fa:10:54: b8:3f:be:8b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJfaKnweriXynZBksYlNARivWgT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYw OEU2N0JCOTAeFw0yNjA5MDQwOTM1MjVaFw0yNzA5MDMwOTQwMjVaMDMxMTAvBgNV BAMTKENBM0NGNTcwNkY2M0IyNDdFNDFGNTE3QkY5NzlGNDgwNTg2NUIwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8SDfk+HB9BSiINW/ScwXdCxnE m48/LYifBNypeP8sJM8+M3pe28oVvEf82gi4zsBRWZX/DH++Ko1TIagNv3bTdqiK avpW0eICZm8U2UCcxdHnD9jeaynU8j6s7/6VsB91HYRt3j3ietcehAgJXrHn3CM7 qAwtLw0iZrU1SEWGQntxLzt8vEf4Ft00y4LttxNFYrKh/v8W5q/ciiw1TXUvJpP8 xOCI3FvcVDsQ4kZOpSFAuFmzo2e7gKn7UxfZVsCBRYlTa4629scQ2+z5w3jNiw2x D43Kh1+akxrKaognwFb2iYRG5EISqFWl2f7ePmX+MQuH0x2M/wl1JDNT8ZyJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUyjz1cG9jskfkH1F7+Xn0gFhlsH8wHwYDVR0j BBgwFoAUC7ofy42XbaLxwpNX/nfeHwjme7kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM5N2NmYzUtZTBiMC00ODIwLWI4NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4 RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYwOEU2N0JCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkJBMUZDQjhEOTc2REEyRjFDMjkzNTdGRTc3REUxRjA4RTY3 QkI5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzOTdjZmM1LWUwYjAtNDgyMC1i ODU5LTc5NjI1MjAxZWNhZi8wLzMxMzAzMzJlMzEzNzMyMmUzMTM5MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNDM0MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrMUwDQYJ KoZIhvcNAQELBQADggEBAEp9FKgEmt7AcecsjR/3nn431Hor4JWVZWIaRJpsJBc+ MhyECH6w3jbK+wM3QjJltsG3VLzB9/RUpHwusymYMInadCYmb/o20FlfeLd6GHmV UW3PFRJsg6EZqs+MLn2IitRwWtTBFMIv9FEd1Z7zii5U+lUnxEwbeFiZ03QOyfVl W/JBrSsQ8Jf8/tmcB5CBgL2W1ZCVGC19JERo+VBshQWZA/bDQQnRPQP5h+GwBM+f qX6JsRsCPz54rG+LFMkh52aI9VE+r3ZA/DU4THJWxRvvaTVSojJx27mLQamJDBT0 YkFVpOlH7MnzSddE7MusRttHXY9G7o9fGfoQVLg/vos= -----END CERTIFICATE-----Generated at Thu Sep 17 12:16:53 2026 by rpki-client