$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3130332e39342e39382e302f32332d3234203d3e203233.roa File: 3130332e39342e39382e302f32332d3234203d3e203233.roa (raw, json) Hash identifier: v6AIf6Ye2mNisATf8VttDEk4MQh/WBoHi4P3BEg56Hs= Subject key identifier: 77:7F:BA:AF:96:63:09:33:3E:41:03:67:30:D3:82:71:94:8E:21:A6 Certificate issuer: /CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Certificate serial: 109D187C912C3601F895560B3ED3100A80EE65CA Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3130332e39342e39382e302f32332d3234203d3e203233.roa Signing time: Mon 05 Oct 2026 08:20:47 +0000 ROA not before: Mon 05 Oct 2026 08:15:47 +0000 ROA not after: Mon 04 Oct 2027 08:20:47 +0000 asID: 23 IP address blocks: 103.94.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 14:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:9d:18:7c:91:2c:36:01:f8:95:56:0b:3e:d3:10:0a:80:ee:65:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Validity Not Before: Oct 5 08:15:47 2026 GMT Not After : Oct 4 08:20:47 2027 GMT Subject: CN=777FBAAF966309333E41036730D38271948E21A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ad:17:b2:0c:b7:fd:7d:47:f9:1e:e2:5c:aa: 8b:82:95:29:19:42:8c:3f:44:9a:01:db:fa:af:68: 9f:c1:85:05:65:a9:4d:1d:e7:0a:f3:ea:0d:48:05: 5b:b7:15:58:3c:aa:39:14:fd:47:03:67:1a:ec:7b: 51:fd:23:8d:88:94:c1:c9:38:ba:e0:65:00:d1:13: 55:cc:17:1a:da:fb:3d:6d:ac:a0:9c:97:bd:cc:b3: 0f:d1:4a:e0:42:d3:99:91:18:c4:7f:49:d7:dd:7d: 9b:dc:83:a6:d1:11:b7:2a:71:fb:3e:3d:9a:42:9e: db:73:71:25:d8:cf:8b:a9:b3:61:83:44:4f:d9:9e: 0e:46:d0:86:87:3c:32:f2:d3:6b:7a:3b:b8:7f:f0: 3b:95:00:35:6c:dc:11:7f:f7:a3:f6:e5:54:1c:9b: 5b:4e:50:c6:a8:74:8a:87:24:7e:43:6a:b1:c8:71: d2:a9:a6:e8:a4:ae:e8:d8:73:ab:aa:94:aa:dc:b6: cb:3b:59:49:22:68:8a:2f:12:79:d0:ff:39:6a:02: 72:66:89:c3:d4:69:af:ad:48:34:d4:64:d9:14:03: 52:9a:9b:c9:07:94:a6:24:82:dc:22:55:60:fd:c8: 15:ed:44:54:e2:70:25:87:0d:4f:f9:01:e3:6f:62: 30:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7F:BA:AF:96:63:09:33:3E:41:03:67:30:D3:82:71:94:8E:21:A6 X509v3 Authority Key Identifier: keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3130332e39342e39382e302f32332d3234203d3e203233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.94.98.0/23 Signature Algorithm: sha256WithRSAEncryption 72:7d:62:2a:38:1c:09:c2:f7:aa:88:1e:ee:0f:48:5f:f8:87: 42:fa:9e:57:6b:d7:b7:06:c7:2c:5c:41:ff:17:98:c0:f6:0b: 16:90:d0:e3:9e:b9:28:b1:d5:24:86:f2:2a:5d:9a:72:ac:98: 91:a2:f7:c5:91:82:8e:9e:00:9d:24:4a:c4:cb:a8:a9:40:58: d4:63:5e:e6:50:f3:6b:e5:46:d4:22:1a:e1:cf:53:7e:e2:9d: 37:c2:20:05:65:b0:8f:3a:42:cc:83:72:68:c5:83:98:d7:28: b5:e0:59:88:11:cd:b3:c5:de:c4:07:5f:79:26:2f:40:83:ea: 0e:a0:4e:87:bf:1a:86:a1:61:64:9f:6d:55:a0:86:5d:10:4a: a3:2d:eb:3e:f0:a5:d7:ea:ee:09:de:b6:cf:0b:32:56:99:c7: 83:c8:f4:f4:93:ac:1b:27:77:fa:bb:34:36:b5:aa:96:0e:33: c8:8d:6e:79:09:ab:94:8d:16:87:5b:ba:bf:fc:99:0e:8a:86: 3a:8b:53:92:37:dc:1e:43:93:a6:61:5d:a4:d4:98:fc:d3:cb: f2:cb:64:40:29:97:92:a6:4f:f1:21:c5:e7:23:84:3a:91:fd: aa:d9:0b:5e:2a:84:10:09:09:0b:4b:23:cb:c7:18:df:0c:9e: 36:c3:37:7e -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgIUEJ0YfJEsNgH4lVYLPtMQCoDuZcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4 NEVFMTAyNDAeFw0yNjEwMDUwODE1NDdaFw0yNzEwMDQwODIwNDdaMDMxMTAvBgNV BAMTKDc3N0ZCQUFGOTY2MzA5MzMzRTQxMDM2NzMwRDM4MjcxOTQ4RTIxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrReyDLf9fUf5HuJcqouClSkZ Qow/RJoB2/qvaJ/BhQVlqU0d5wrz6g1IBVu3FVg8qjkU/UcDZxrse1H9I42IlMHJ OLrgZQDRE1XMFxra+z1trKCcl73Msw/RSuBC05mRGMR/SdfdfZvcg6bREbcqcfs+ PZpCnttzcSXYz4ups2GDRE/Zng5G0IaHPDLy02t6O7h/8DuVADVs3BF/96P25VQc m1tOUMaodIqHJH5DarHIcdKppuikrujYc6uqlKrctss7WUkiaIovEnnQ/zlqAnJm icPUaa+tSDTUZNkUA1Kam8kHlKYkgtwiVWD9yBXtRFTicCWHDU/5AeNvYjBJAgMB AAGjggIpMIICJTAdBgNVHQ4EFgQUd3+6r5ZjCTM+QQNnMNOCcZSOIaYwHwYDVR0j BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx MDI0LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJiZmU3NzYtMDBhMy00Nzc2LWJm M2YtNTIxMTk0NjEwMWMzLzAvMzEzMDMzMmUzOTM0MmUzOTM4MmUzMDJmMzIzMzJk MzIzNDIwM2QzZTIwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdeYjANBgkqhkiG9w0BAQsFAAOC AQEAcn1iKjgcCcL3qoge7g9IX/iHQvqeV2vXtwbHLFxB/xeYwPYLFpDQ4565KLHV JIbyKl2acqyYkaL3xZGCjp4AnSRKxMuoqUBY1GNe5lDza+VG1CIa4c9TfuKdN8Ig BWWwjzpCzINyaMWDmNcoteBZiBHNs8XexAdfeSYvQIPqDqBOh78ahqFhZJ9tVaCG XRBKoy3rPvCl1+ruCd62zwsyVpnHg8j09JOsGyd3+rs0NrWqlg4zyI1ueQmrlI0W h1u6v/yZDoqGOotTkjfcHkOTpmFdpNSY/NPL8stkQCmXkqZP8SHF5yOEOpH9qtkL XiqEEAkJC0sjy8cY3wyeNsM3fg== -----END CERTIFICATE-----Generated at Mon Oct 26 08:50:19 2026 by rpki-client