$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132392e302f32342d3234203d3e20313331373735.roa File: 3130332e3231332e3132392e302f32342d3234203d3e20313331373735.roa (raw, json) Hash identifier: HY+aJPxaezirRr4NHeslZY3QFJWf9uO7z+CkSmEbtwg= Subject key identifier: 5A:E5:D1:21:DC:53:6E:D6:A1:3C:E9:7E:77:6D:73:6C:E3:A5:0C:A1 Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Certificate serial: 1A3E880C1A0A79181F32225F14B803A557BDA836 Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132392e302f32342d3234203d3e20313331373735.roa Signing time: Tue 15 Sep 2026 04:09:17 +0000 ROA not before: Tue 15 Sep 2026 04:04:17 +0000 ROA not after: Tue 14 Sep 2027 04:09:17 +0000 asID: 131775 IP address blocks: 103.213.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 19:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3e:88:0c:1a:0a:79:18:1f:32:22:5f:14:b8:03:a5:57:bd:a8:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Validity Not Before: Sep 15 04:04:17 2026 GMT Not After : Sep 14 04:09:17 2027 GMT Subject: CN=5AE5D121DC536ED6A13CE97E776D736CE3A50CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:da:5e:9d:78:48:37:6b:76:6c:4f:30:29: e6:88:ec:20:35:b0:93:f5:96:33:6a:34:61:b0:d0: 4d:50:1d:17:c1:05:d1:3e:5a:89:e2:0c:90:0b:ea: d7:fb:f6:e7:c4:53:28:ae:5d:ff:1c:40:c2:d2:21: b4:07:5f:f8:e2:59:03:dc:47:2c:dd:74:e5:a2:16: c6:d2:f1:5f:df:5d:00:01:25:1b:65:a9:08:04:9b: 9a:57:85:a2:ae:38:c6:cc:e2:43:3a:50:50:a0:49: 8c:40:e0:6d:74:67:7c:7e:00:3b:a3:65:b1:a7:a4: 3b:cd:59:4d:7b:89:9a:e4:6a:ff:f0:93:28:8c:20: b5:52:d8:32:2b:2f:f7:96:ab:20:15:5a:ca:1f:cb: 41:54:75:1e:61:5e:5a:64:30:fb:ed:c3:c2:2c:bc: b4:e9:61:7d:88:b0:86:dd:b1:ce:f1:a8:f2:ac:c9: 80:4c:19:6c:d3:b6:cd:ad:2c:11:41:ca:3b:cd:ba: d7:32:96:6f:ef:8f:0d:e3:f8:20:5e:4d:0b:07:0b: ca:0c:fd:65:ae:cd:f5:2f:28:4f:b8:35:ee:e8:b1: ec:a9:cd:33:dd:2b:8b:ce:16:03:0b:27:56:7f:05: 3e:86:80:8c:32:44:30:65:36:98:87:2f:97:3b:73: 40:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E5:D1:21:DC:53:6E:D6:A1:3C:E9:7E:77:6D:73:6C:E3:A5:0C:A1 X509v3 Authority Key Identifier: keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132392e302f32342d3234203d3e20313331373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.129.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:b1:76:07:85:a8:df:e6:1d:71:39:10:f3:61:4d:20:bf:e8: 03:d6:ac:71:15:32:28:aa:64:e3:b9:e8:6c:00:25:2c:a2:97: b1:98:e7:d3:e5:ee:1e:88:55:60:3b:02:16:39:bc:ee:b3:1c: ad:36:45:e4:57:03:77:f2:89:ba:e2:2b:8f:c6:8b:b5:2c:3e: cf:90:31:73:da:44:a0:52:fb:79:d6:19:31:7e:80:ff:a5:09: 57:cc:fc:11:03:9e:81:cb:00:0b:79:f4:c1:d6:7f:cc:fe:65: 99:af:22:2b:e2:10:c7:d2:7a:37:89:55:f5:36:54:c8:76:56: 36:71:ae:3b:2c:0a:33:e5:1f:4f:45:d9:34:a9:c0:b1:b4:31: 89:bb:87:eb:03:48:bb:b9:b3:2a:e8:31:c0:10:79:39:68:f8: af:db:55:90:a9:15:2a:5e:ad:d9:90:71:33:39:98:6c:4d:15: 8a:ed:ad:4d:01:dc:55:5a:5a:1b:a2:08:17:ed:e2:a1:24:1c: c8:49:03:3d:7d:41:9a:15:a4:d2:89:72:5d:a1:17:fb:bb:03: 5d:56:19:f9:42:52:11:8c:1b:d5:e2:2b:fe:f7:b5:e1:24:37: 6d:5a:b8:1e:b0:28:c6:4c:75:2b:af:f2:40:7d:b4:71:38:5c: e4:99:f2:33 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGj6IDBoKeRgfMiJfFLgDpVe9qDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2 N0ZGRUZBQTAeFw0yNjA5MTUwNDA0MTdaFw0yNzA5MTQwNDA5MTdaMDMxMTAvBgNV BAMTKDVBRTVEMTIxREM1MzZFRDZBMTNDRTk3RTc3NkQ3MzZDRTNBNTBDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe19penXhIN2t2bE8wKeaI7CA1 sJP1ljNqNGGw0E1QHRfBBdE+WoniDJAL6tf79ufEUyiuXf8cQMLSIbQHX/jiWQPc RyzddOWiFsbS8V/fXQABJRtlqQgEm5pXhaKuOMbM4kM6UFCgSYxA4G10Z3x+ADuj ZbGnpDvNWU17iZrkav/wkyiMILVS2DIrL/eWqyAVWsofy0FUdR5hXlpkMPvtw8Is vLTpYX2IsIbdsc7xqPKsyYBMGWzTts2tLBFByjvNutcylm/vjw3j+CBeTQsHC8oM /WWuzfUvKE+4Ne7oseypzTPdK4vOFgMLJ1Z/BT6GgIwyRDBlNpiHL5c7c0CXAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUWuXRIdxTbtahPOl+d21zbOOlDKEwHwYDVR0j BBgwFoAUcFYvvw4ZDufhugY9bkaFOmf/76owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiMWM4MGMtNGQ2Yy00NDA4LTg5NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYw RTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2N0ZGRUZBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDU2MkZCRjBFMTkwRUU3RTFCQTA2M0Q2RTQ2ODUzQTY3RkZF RkFBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMxMzAzMzJlMzIzMTMzMmUzMTMyMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn1YEwDQYJ KoZIhvcNAQELBQADggEBAC6xdgeFqN/mHXE5EPNhTSC/6APWrHEVMiiqZOO56GwA JSyil7GY59Pl7h6IVWA7AhY5vO6zHK02ReRXA3fyibriK4/Gi7UsPs+QMXPaRKBS +3nWGTF+gP+lCVfM/BEDnoHLAAt59MHWf8z+ZZmvIiviEMfSejeJVfU2VMh2VjZx rjssCjPlH09F2TSpwLG0MYm7h+sDSLu5syroMcAQeTlo+K/bVZCpFSperdmQcTM5 mGxNFYrtrU0B3FVaWhuiCBft4qEkHMhJAz19QZoVpNKJcl2hF/u7A11WGflCUhGM G9XiK/73teEkN21auB6wKMZMdSuv8kB9tHE4XOSZ8jM= -----END CERTIFICATE-----Generated at Mon Sep 28 05:58:34 2026 by rpki-client