$ rpki-client -vvf rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa File: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (raw, json) Hash identifier: fmfwcql8BPTZXrBSOzyjpVBCvfAqL/VgrqcNagVB8MY= Subject key identifier: 12:87:FD:23:38:DA:55:63:5D:C1:11:33:81:93:D4:1D:47:AD:AA:5F Certificate issuer: /CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Certificate serial: 526D599C1C3C57F318A9882DF2E8E9576646A15C Authority key identifier: D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa Signing time: Wed 15 Jul 2026 00:36:05 +0000 ROA not before: Wed 15 Jul 2026 00:31:05 +0000 ROA not after: Wed 14 Jul 2027 00:36:05 +0000 asID: 139456 IP address blocks: 103.152.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6d:59:9c:1c:3c:57:f3:18:a9:88:2d:f2:e8:e9:57:66:46:a1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Validity Not Before: Jul 15 00:31:05 2026 GMT Not After : Jul 14 00:36:05 2027 GMT Subject: CN=1287FD2338DA55635DC111338193D41D47ADAA5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:95:34:9e:d3:0f:2d:b1:de:cf:dd:ac:09:c8: 53:ba:90:cd:58:00:f1:35:32:c1:b8:9b:71:36:e8: 96:c0:84:db:fc:90:0d:0e:b7:e3:6b:16:da:95:17: e2:d5:91:70:1d:ec:2a:0c:83:a5:fc:71:18:06:46: 89:51:a6:b0:90:10:8d:c2:1f:0f:bd:05:8f:1d:8d: 88:51:9c:ae:3c:e6:f9:7c:9d:cf:46:5b:b6:f5:3a: d2:a1:b5:f9:6f:10:3d:ea:2c:c7:df:7c:fd:b9:ec: 81:14:d5:d0:60:2d:a8:55:3d:97:dc:ce:e0:ce:42: 99:82:6b:ce:0a:5d:4e:f5:4c:57:e7:7d:b7:13:ea: cb:37:d0:d7:33:10:db:72:fc:1f:91:02:a8:b6:06: 57:a4:72:1a:8a:a7:fd:87:61:2d:6b:03:ad:1e:61: bc:79:05:68:9d:2f:d9:e7:9c:da:54:f9:fd:ff:d9: 80:7c:db:0b:09:1c:50:6c:e1:dd:a4:cb:93:f7:3e: b3:d9:20:ec:d6:a0:bc:a2:b9:41:e0:4a:1f:d2:ad: da:12:a2:be:6f:5e:96:5d:83:f6:59:d1:7d:50:9f: 54:62:9a:9d:24:63:20:cf:ce:55:a9:49:14:8a:4a: a1:6b:e6:b7:f0:d0:e8:1c:3c:3b:06:6a:e9:a9:dd: 1b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:87:FD:23:38:DA:55:63:5D:C1:11:33:81:93:D4:1D:47:AD:AA:5F X509v3 Authority Key Identifier: keyid:D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.242.0/23 Signature Algorithm: sha256WithRSAEncryption cb:cd:2e:2e:43:58:4c:84:a9:6b:a6:64:b8:4f:35:68:52:bc: 1a:6c:95:4e:a2:51:58:de:34:0c:71:c1:b0:97:e0:c6:bf:ad: ad:0e:57:45:75:29:89:04:44:fb:20:e0:d3:b1:f8:dd:3f:47: 22:ea:6c:c1:f1:96:18:bb:00:f5:fa:7a:a0:c5:e8:d5:79:fe: 43:9a:19:63:73:df:0c:10:3e:2f:3a:70:f1:ae:a6:c0:90:fd: 91:71:69:d1:84:65:e7:65:23:35:90:1c:c0:c6:de:1c:8e:dc: e7:8a:cb:26:8b:0d:38:f8:a3:f5:37:87:29:11:19:f7:bc:86: 9b:c2:4f:eb:1d:2f:64:dd:51:70:49:2e:25:ac:6b:56:90:bf: 3a:c5:38:96:0d:6c:4b:55:98:8c:bd:7a:f6:d0:f1:ca:b4:a3: 37:31:2b:af:6f:1d:3b:28:37:dd:b8:99:09:76:db:a3:7d:6e: 8a:d4:47:2e:cf:b6:a3:65:d3:c1:1f:f6:72:7d:84:45:ae:05: 52:11:ac:18:62:14:fa:79:5a:7b:34:b3:a1:2f:e7:c6:bc:6f: 48:7c:7e:79:5e:42:2d:29:72:a1:8d:a0:e4:d3:15:03:d6:73: 54:06:e9:60:f8:6f:6a:da:0e:ba:03:43:65:5b:43:a2:20:f5: 64:32:64:f3 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUm1ZnBw8V/MYqYgt8ujpV2ZGoVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4 NTIzRTE0QjAeFw0yNjA3MTUwMDMxMDVaFw0yNzA3MTQwMDM2MDVaMDMxMTAvBgNV BAMTKDEyODdGRDIzMzhEQTU1NjM1REMxMTEzMzgxOTNENDFENDdBREFBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTlTSe0w8tsd7P3awJyFO6kM1Y APE1MsG4m3E26JbAhNv8kA0Ot+NrFtqVF+LVkXAd7CoMg6X8cRgGRolRprCQEI3C Hw+9BY8djYhRnK485vl8nc9GW7b1OtKhtflvED3qLMfffP257IEU1dBgLahVPZfc zuDOQpmCa84KXU71TFfnfbcT6ss30NczENty/B+RAqi2BlekchqKp/2HYS1rA60e Ybx5BWidL9nnnNpU+f3/2YB82wsJHFBs4d2ky5P3PrPZIOzWoLyiuUHgSh/SrdoS or5vXpZdg/ZZ0X1Qn1Rimp0kYyDPzlWpSRSKSqFr5rfw0OgcPDsGaump3RsNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUEof9IzjaVWNdwREzgZPUHUetql8wHwYDVR0j BBgwFoAU17PSmhxY8qdk73HZDus0oIUj4UswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjRiYTY3NzgtYjE2ZC00YmE4LTk4NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUEx QzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4NTIzRTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0IzRDI5QTFDNThGMkE3NjRFRjcxRDkwRUVCMzRBMDg1MjNF MTRCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI0YmE2Nzc4LWIxNmQtNGJhOC05 ODRmLTM0ZTQxOWZjOWM0OS8wLzMxMzAzMzJlMzEzNTMyMmUzMjM0MzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzNDM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnmPIwDQYJ KoZIhvcNAQELBQADggEBAMvNLi5DWEyEqWumZLhPNWhSvBpslU6iUVjeNAxxwbCX 4Ma/ra0OV0V1KYkERPsg4NOx+N0/RyLqbMHxlhi7APX6eqDF6NV5/kOaGWNz3wwQ Pi86cPGupsCQ/ZFxadGEZedlIzWQHMDG3hyO3OeKyyaLDTj4o/U3hykRGfe8hpvC T+sdL2TdUXBJLiWsa1aQvzrFOJYNbEtVmIy9evbQ8cq0ozcxK69vHTsoN924mQl2 26N9borURy7PtqNl08Ef9nJ9hEWuBVIRrBhiFPp5Wns0s6Ev58a8b0h8fnleQi0p cqGNoOTTFQPWc1QG6WD4b2raDroDQ2VbQ6Ig9WQyZPM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:42:55 2026 by rpki-client