$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32342d3234203d3e203137363730.roa File: 3130332e3231332e3132382e302f32342d3234203d3e203137363730.roa (raw, json) Hash identifier: h9ERyEefV9I1A5M4z4tK9bpFBxWOGmWoS5oxSOOg/AU= Subject key identifier: C5:68:08:8A:53:8B:F9:4B:ED:C8:9E:BC:0C:0B:76:68:F5:02:69:ED Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Certificate serial: 3C3E5ED34E95147782863B459DFB393B6576357F Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32342d3234203d3e203137363730.roa Signing time: Tue 15 Sep 2026 04:07:54 +0000 ROA not before: Tue 15 Sep 2026 04:02:54 +0000 ROA not after: Tue 14 Sep 2027 04:07:54 +0000 asID: 17670 IP address blocks: 103.213.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 19:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3e:5e:d3:4e:95:14:77:82:86:3b:45:9d:fb:39:3b:65:76:35:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Validity Not Before: Sep 15 04:02:54 2026 GMT Not After : Sep 14 04:07:54 2027 GMT Subject: CN=C568088A538BF94BEDC89EBC0C0B7668F50269ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:70:17:83:f4:33:e2:6e:b1:c6:1e:c9:5c: 2f:c3:7f:d2:3a:fb:04:3d:8b:c9:6a:bd:44:84:f4: 2b:32:fd:d0:ff:87:49:92:a7:d0:0f:01:7e:61:62: de:02:f7:b3:bb:0c:16:ff:f6:a6:20:a1:5e:d6:17: 12:93:6a:aa:6b:cb:06:1f:bb:2c:e0:ed:41:f7:5f: cb:08:84:b3:43:c1:d2:6f:ae:9d:69:18:af:f3:52: 4d:56:19:6a:39:a9:45:79:18:ae:01:75:46:e3:34: 1c:62:1e:55:35:0a:49:5e:88:62:72:c5:8c:3b:04: 99:ce:eb:6e:91:51:67:94:e1:17:1f:eb:ed:62:53: 13:a8:78:38:09:74:b4:75:1a:d9:44:fa:c5:8d:99: 92:79:f7:de:8a:04:ed:63:6c:ec:75:b0:53:9e:17: ca:24:79:52:64:93:30:a1:35:da:fa:82:ed:c8:cd: b7:c2:bb:63:d8:5a:4a:1f:a2:3d:91:84:d4:13:93: da:62:3f:1f:16:31:f9:24:fb:66:1a:0c:9d:cf:c8: 34:f3:c2:05:45:ee:c9:57:d4:e5:2c:f8:9d:db:1f: 7d:dc:f3:11:eb:82:61:da:d6:b1:f5:6b:1b:c4:95: b6:a2:ef:ff:fd:d5:19:17:43:4c:14:94:52:15:79: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:68:08:8A:53:8B:F9:4B:ED:C8:9E:BC:0C:0B:76:68:F5:02:69:ED X509v3 Authority Key Identifier: keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32342d3234203d3e203137363730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.128.0/24 Signature Algorithm: sha256WithRSAEncryption 95:ea:fa:ab:67:88:66:ca:82:3a:ee:91:ee:f7:e3:07:65:9e: db:05:73:f8:04:e9:a8:d9:6d:57:15:ee:2d:39:3c:76:6a:c7: 25:f9:0b:fa:7e:72:ab:52:6e:56:f7:62:22:00:e2:a0:67:d4: 13:bc:fc:f7:8c:07:cb:41:b1:07:ad:0a:a4:3b:6e:4a:71:ad: 72:bf:7e:42:30:a2:11:df:8a:e2:01:c3:a3:6c:de:86:d3:a3: 48:9f:b2:11:8f:ec:83:29:4c:7a:9b:aa:ad:83:df:66:b9:3f: 19:ac:fa:36:53:43:8e:96:af:48:b3:32:d5:ba:4a:58:d4:ed: 36:7d:aa:31:bb:cb:31:93:d3:8f:d7:a7:16:04:05:ba:9a:62: 83:85:56:5d:3f:0a:22:6c:4d:c8:67:4d:b8:ee:88:5a:00:ed: 3a:82:c6:bd:a8:62:08:12:b1:cd:b5:f3:0d:0e:cb:e6:0f:d7: 50:f9:6d:ab:8f:7c:2e:32:c7:de:8a:67:fe:21:ab:aa:f2:6a: 40:25:6f:17:c7:d6:99:66:21:ad:80:f7:3a:e2:f4:9c:e4:bc: 21:e6:14:13:a6:2b:e2:c0:8f:a6:3d:7b:88:5b:03:8c:59:be: 43:0e:f9:ac:5e:d3:18:97:78:25:d4:62:23:bf:ef:09:f9:e1: 60:7b:8f:ab -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPD5e006VFHeChjtFnfs5O2V2NX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2 N0ZGRUZBQTAeFw0yNjA5MTUwNDAyNTRaFw0yNzA5MTQwNDA3NTRaMDMxMTAvBgNV BAMTKEM1NjgwODhBNTM4QkY5NEJFREM4OUVCQzBDMEI3NjY4RjUwMjY5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQJnAXg/Qz4m6xxh7JXC/Df9I6 +wQ9i8lqvUSE9Csy/dD/h0mSp9APAX5hYt4C97O7DBb/9qYgoV7WFxKTaqprywYf uyzg7UH3X8sIhLNDwdJvrp1pGK/zUk1WGWo5qUV5GK4BdUbjNBxiHlU1CkleiGJy xYw7BJnO626RUWeU4Rcf6+1iUxOoeDgJdLR1GtlE+sWNmZJ5996KBO1jbOx1sFOe F8okeVJkkzChNdr6gu3IzbfCu2PYWkofoj2RhNQTk9piPx8WMfkk+2YaDJ3PyDTz wgVF7slX1OUs+J3bH33c8xHrgmHa1rH1axvElbai7//91RkXQ0wUlFIVeU+rAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUxWgIilOL+UvtyJ68DAt2aPUCae0wHwYDVR0j BBgwFoAUcFYvvw4ZDufhugY9bkaFOmf/76owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiMWM4MGMtNGQ2Yy00NDA4LTg5NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYw RTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2N0ZGRUZBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDU2MkZCRjBFMTkwRUU3RTFCQTA2M0Q2RTQ2ODUzQTY3RkZF RkFBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMxMzAzMzJlMzIzMTMzMmUzMTMyMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzYzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9WAMA0GCSqG SIb3DQEBCwUAA4IBAQCV6vqrZ4hmyoI67pHu9+MHZZ7bBXP4BOmo2W1XFe4tOTx2 ascl+Qv6fnKrUm5W92IiAOKgZ9QTvPz3jAfLQbEHrQqkO25Kca1yv35CMKIR34ri AcOjbN6G06NIn7IRj+yDKUx6m6qtg99muT8ZrPo2U0OOlq9IszLVukpY1O02faox u8sxk9OP16cWBAW6mmKDhVZdPwoibE3IZ0247ohaAO06gsa9qGIIErHNtfMNDsvm D9dQ+W2rj3wuMsfeimf+Iauq8mpAJW8Xx9aZZiGtgPc64vSc5Lwh5hQTpiviwI+m PXuIWwOMWb5DDvmsXtMYl3gl1GIjv+8J+eFge4+r -----END CERTIFICATE-----Generated at Mon Sep 28 10:06:29 2026 by rpki-client