$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/3130332e3231302e3230392e302f32342d3234203d3e20313331373732.roa File: 3130332e3231302e3230392e302f32342d3234203d3e20313331373732.roa (raw, json) Hash identifier: XNmF0uoNuKq1Ux6VEndyF0UUR7z6WY99ugSnYwqThWk= Subject key identifier: DF:AA:56:AC:86:8B:4A:94:A9:0D:31:E4:12:EE:67:1F:CF:8C:D0:67 Certificate issuer: /CN=4C020B9A7E561E4B66C4D84205960DF774E08E45 Certificate serial: 10A2122040588AA4EBEF3434B9983FE24A112AF7 Authority key identifier: 4C:02:0B:9A:7E:56:1E:4B:66:C4:D8:42:05:96:0D:F7:74:E0:8E:45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C020B9A7E561E4B66C4D84205960DF774E08E45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/3130332e3231302e3230392e302f32342d3234203d3e20313331373732.roa Signing time: Tue 22 Sep 2026 14:12:59 +0000 ROA not before: Tue 22 Sep 2026 14:07:59 +0000 ROA not after: Tue 21 Sep 2027 14:12:59 +0000 asID: 131772 IP address blocks: 103.210.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.crl rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C020B9A7E561E4B66C4D84205960DF774E08E45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a2:12:20:40:58:8a:a4:eb:ef:34:34:b9:98:3f:e2:4a:11:2a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C020B9A7E561E4B66C4D84205960DF774E08E45 Validity Not Before: Sep 22 14:07:59 2026 GMT Not After : Sep 21 14:12:59 2027 GMT Subject: CN=DFAA56AC868B4A94A90D31E412EE671FCF8CD067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d0:66:87:5d:a9:73:d2:ef:4f:23:04:29:0f: 04:9a:e7:a2:74:53:f3:9d:d2:9d:5c:6f:fa:e4:13: 4e:87:a3:af:3c:73:9d:71:12:63:0b:12:d6:dd:d5: 13:5c:d5:ea:d4:c9:f9:62:2c:97:b2:ed:2a:23:2f: 7d:2b:85:7e:84:80:b1:d1:38:bc:49:c7:fa:41:74: c9:5a:9c:65:87:f4:28:d4:b8:d1:95:4f:19:40:8a: 72:13:84:db:ee:73:90:e3:03:62:4c:5e:c6:99:bc: 9b:b7:74:98:69:cf:a6:96:43:a5:07:da:db:3a:09: 80:f2:de:57:0a:bf:f2:9d:cf:f7:04:05:57:2c:ea: 4d:de:a5:bd:6b:22:70:e2:a0:f4:f2:ac:46:fa:62: 9a:ae:51:4b:38:85:bd:30:b5:23:3f:09:0c:d6:cc: 8a:05:ba:fe:81:73:0e:8d:18:7f:7a:48:33:d2:70: a4:54:4a:59:b2:27:af:1e:26:74:01:53:9c:da:1e: ea:4e:28:fa:e5:4c:0a:50:19:4e:5d:02:3f:37:f0: 63:a9:bb:2e:ac:3c:38:16:79:94:8f:e1:8a:74:45: ee:49:ff:47:9a:7d:9f:cd:fb:85:3f:db:31:69:bb: 5c:10:3b:83:1c:36:93:31:dc:bf:d7:be:06:07:21: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AA:56:AC:86:8B:4A:94:A9:0D:31:E4:12:EE:67:1F:CF:8C:D0:67 X509v3 Authority Key Identifier: keyid:4C:02:0B:9A:7E:56:1E:4B:66:C4:D8:42:05:96:0D:F7:74:E0:8E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C020B9A7E561E4B66C4D84205960DF774E08E45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/3130332e3231302e3230392e302f32342d3234203d3e20313331373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.209.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:d7:a4:be:c2:65:8e:4a:cb:bf:48:a5:c8:18:de:de:f0:e5: 65:7b:87:ee:fb:a7:0b:ff:c3:d4:55:03:70:34:02:70:b8:20: d4:ef:9e:11:cf:7f:8d:08:08:8e:f3:66:e7:fb:bd:d5:18:f5: 6c:4b:30:d0:3e:15:2d:aa:21:4d:de:3a:c1:cf:35:aa:c7:d9: e1:89:f7:53:62:8d:fa:b6:3e:3e:aa:23:c0:2d:1b:6d:9e:20: ea:ce:5c:a1:4c:ec:bf:be:b3:31:26:5b:4d:9e:62:3c:f4:d0: 58:8a:c6:10:9b:6c:e3:6f:be:0d:61:4e:b2:6a:bc:a0:5b:41: 5d:90:35:29:0b:de:30:38:95:09:1b:e2:43:98:99:61:59:b8: 9f:3a:80:d0:f4:c3:10:42:76:62:8a:28:1e:c7:d2:64:35:d0: ac:4f:e6:fb:c8:c9:51:83:7d:29:75:15:85:ce:dd:4f:5e:08: e0:ef:42:dc:da:ca:88:d3:ef:50:7d:b0:7b:af:8a:50:4c:2b: 1a:c3:6c:2b:78:d9:f9:86:e2:7d:0c:50:5e:6b:c0:72:e5:80: 49:28:2f:c8:d2:f3:bd:23:4b:f2:9a:6e:6e:22:c7:8f:74:d1: 7a:28:ed:40:97:48:7e:a2:0b:cd:0f:79:e3:c8:45:28:3d:55: 5a:95:c2:09 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEKISIEBYiqTr7zQ0uZg/4koRKvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwMjBCOUE3RTU2MUU0QjY2QzREODQyMDU5NjBERjc3 NEUwOEU0NTAeFw0yNjA5MjIxNDA3NTlaFw0yNzA5MjExNDEyNTlaMDMxMTAvBgNV BAMTKERGQUE1NkFDODY4QjRBOTRBOTBEMzFFNDEyRUU2NzFGQ0Y4Q0QwNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb0GaHXalz0u9PIwQpDwSa56J0 U/Od0p1cb/rkE06Ho688c51xEmMLEtbd1RNc1erUyfliLJey7SojL30rhX6EgLHR OLxJx/pBdMlanGWH9CjUuNGVTxlAinIThNvuc5DjA2JMXsaZvJu3dJhpz6aWQ6UH 2ts6CYDy3lcKv/Kdz/cEBVcs6k3epb1rInDioPTyrEb6YpquUUs4hb0wtSM/CQzW zIoFuv6Bcw6NGH96SDPScKRUSlmyJ68eJnQBU5zaHupOKPrlTApQGU5dAj838GOp uy6sPDgWeZSP4Yp0Re5J/0eafZ/N+4U/2zFpu1wQO4McNpMx3L/XvgYHIeedAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU36pWrIaLSpSpDTHkEu5nH8+M0GcwHwYDVR0j BBgwFoAUTAILmn5WHktmxNhCBZYN93TgjkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjcwMWYxNjEtMDgwOC00YWI0LTk2MDgtNjUwMzhmMWVlYjNhLzAvNEMwMjBCOUE3 RTU2MUU0QjY2QzREODQyMDU5NjBERjc3NEUwOEU0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzAyMEI5QTdFNTYxRTRCNjZDNEQ4NDIwNTk2MERGNzc0RTA4 RTQ1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI3MDFmMTYxLTA4MDgtNGFiNC05 NjA4LTY1MDM4ZjFlZWIzYS8wLzMxMzAzMzJlMzIzMTMwMmUzMjMwMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM3MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn0tEwDQYJ KoZIhvcNAQELBQADggEBAEzXpL7CZY5Ky79IpcgY3t7w5WV7h+77pwv/w9RVA3A0 AnC4INTvnhHPf40ICI7zZuf7vdUY9WxLMNA+FS2qIU3eOsHPNarH2eGJ91Nijfq2 Pj6qI8AtG22eIOrOXKFM7L++szEmW02eYjz00FiKxhCbbONvvg1hTrJqvKBbQV2Q NSkL3jA4lQkb4kOYmWFZuJ86gND0wxBCdmKKKB7H0mQ10KxP5vvIyVGDfSl1FYXO 3U9eCODvQtzayojT71B9sHuvilBMKxrDbCt42fmG4n0MUF5rwHLlgEkoL8jS870j S/Kabm4ix4900Xoo7UCXSH6iC80PeePIRSg9VVqVwgk= -----END CERTIFICATE-----Generated at Sun Sep 27 00:03:04 2026 by rpki-client