$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3133312e302f32342d3234203d3e203535373031.roa File: 3130332e3231332e3133312e302f32342d3234203d3e203535373031.roa (raw, json) Hash identifier: vzgewcG3oAbC7AbL8VbFC07s+SgG6tK6AAtDNUKrFRI= Subject key identifier: B2:87:FC:93:5E:E1:DB:70:78:28:57:66:64:FA:7F:52:B2:91:37:D3 Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Certificate serial: 07B5C9CB8A1A13F30146221005EE27DDF4010E94 Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3133312e302f32342d3234203d3e203535373031.roa Signing time: Tue 15 Sep 2026 04:07:08 +0000 ROA not before: Tue 15 Sep 2026 04:02:08 +0000 ROA not after: Tue 14 Sep 2027 04:07:08 +0000 asID: 55701 IP address blocks: 103.213.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 19:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b5:c9:cb:8a:1a:13:f3:01:46:22:10:05:ee:27:dd:f4:01:0e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Validity Not Before: Sep 15 04:02:08 2026 GMT Not After : Sep 14 04:07:08 2027 GMT Subject: CN=B287FC935EE1DB707828576664FA7F52B29137D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:0d:83:c1:76:4e:d4:3e:41:3b:6d:6e:82: 94:cb:ab:f9:ad:8f:84:2d:21:29:2d:de:a7:9d:2e: f9:76:9e:21:ac:b9:b3:20:31:46:3d:d7:c4:0d:04: b1:9a:a4:99:46:38:8c:ca:18:c3:97:41:7e:ae:34: 7b:ff:83:66:b8:44:c4:b1:c4:1b:c8:3e:f8:08:37: e1:99:98:7c:03:db:06:6a:ff:ad:76:89:4d:1d:f3: a3:e7:52:bf:95:da:8b:87:cb:dc:f5:0c:95:16:09: 10:3c:ba:fe:a2:71:58:d6:20:cb:51:1d:64:e6:5a: e1:8c:b0:13:30:38:fe:4e:fe:50:9f:9e:f9:58:bb: e7:4b:a8:75:39:a7:e8:d2:65:b2:b1:c5:65:f0:61: ed:d5:4c:d3:57:13:17:79:ac:d5:72:76:fb:92:cd: 20:ab:28:d2:28:b6:e7:1b:3a:16:75:e7:bd:aa:9b: 39:20:40:b0:6e:6c:11:ce:dc:4b:02:e0:d5:9f:e4: 11:45:f8:23:6d:f7:1f:fe:67:21:24:fe:f9:77:fb: a9:6a:00:6a:2f:73:22:3f:b0:80:f5:da:50:f8:0a: b9:c3:75:d1:e7:5e:a4:1f:4f:51:38:47:f6:ad:d5: 5b:fb:1b:c3:de:ce:9b:ef:03:da:bc:23:99:bf:3d: 8f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:87:FC:93:5E:E1:DB:70:78:28:57:66:64:FA:7F:52:B2:91:37:D3 X509v3 Authority Key Identifier: keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3133312e302f32342d3234203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.131.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:4a:44:3b:9d:76:6e:61:13:0e:0c:51:39:df:df:fd:1f:68: d5:a1:b5:af:2d:3b:4a:a7:60:4c:b4:9b:1b:57:a3:2d:ce:e6: cf:96:b4:bc:e6:36:88:6e:1a:07:00:e2:61:e8:2a:da:42:34: 5c:fc:a3:13:7c:27:db:fb:a7:9d:b3:df:2d:00:be:7d:b1:b9: 69:94:13:f0:b0:b8:ec:43:4b:01:e3:76:65:3c:0a:d5:c4:56: 45:48:ec:58:0c:18:bc:c5:8c:9a:06:4e:eb:b9:25:e3:c1:f6: 68:53:ab:13:3d:99:79:a3:76:d6:1a:7f:fa:d0:f4:08:23:4a: df:97:b6:66:41:a2:d6:37:29:38:21:8d:85:72:dc:15:88:b3: 37:b2:c0:c5:45:87:4e:2b:7d:3b:fd:3d:af:9c:1a:1f:61:f4: 1e:b9:22:78:31:5e:9e:5c:4b:98:a5:61:b9:c7:6c:01:70:cd: 05:5f:6a:95:c6:f7:b9:f2:2c:b8:ad:53:75:54:9a:22:f3:36: 1d:86:b0:32:30:93:99:ac:2e:23:68:a8:57:6d:5c:e1:40:51: b5:0b:34:19:f9:8c:40:ff:f0:e1:53:c2:fa:d0:cf:1f:c3:6e: 43:cf:4e:6d:f1:5a:3a:ad:e5:be:fd:65:85:a9:15:57:94:1d: c2:8d:47:b2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUB7XJy4oaE/MBRiIQBe4n3fQBDpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2 N0ZGRUZBQTAeFw0yNjA5MTUwNDAyMDhaFw0yNzA5MTQwNDA3MDhaMDMxMTAvBgNV BAMTKEIyODdGQzkzNUVFMURCNzA3ODI4NTc2NjY0RkE3RjUyQjI5MTM3RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6g2DwXZO1D5BO21ugpTLq/mt j4QtISkt3qedLvl2niGsubMgMUY918QNBLGapJlGOIzKGMOXQX6uNHv/g2a4RMSx xBvIPvgIN+GZmHwD2wZq/612iU0d86PnUr+V2ouHy9z1DJUWCRA8uv6icVjWIMtR HWTmWuGMsBMwOP5O/lCfnvlYu+dLqHU5p+jSZbKxxWXwYe3VTNNXExd5rNVydvuS zSCrKNIotucbOhZ1572qmzkgQLBubBHO3EsC4NWf5BFF+CNt9x/+ZyEk/vl3+6lq AGovcyI/sID12lD4CrnDddHnXqQfT1E4R/at1Vv7G8PezpvvA9q8I5m/PY8ZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUsof8k17h23B4KFdmZPp/UrKRN9MwHwYDVR0j BBgwFoAUcFYvvw4ZDufhugY9bkaFOmf/76owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiMWM4MGMtNGQ2Yy00NDA4LTg5NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYw RTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2N0ZGRUZBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDU2MkZCRjBFMTkwRUU3RTFCQTA2M0Q2RTQ2ODUzQTY3RkZF RkFBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMxMzAzMzJlMzIzMTMzMmUzMTMzMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9WDMA0GCSqG SIb3DQEBCwUAA4IBAQBqSkQ7nXZuYRMODFE539/9H2jVobWvLTtKp2BMtJsbV6Mt zubPlrS85jaIbhoHAOJh6CraQjRc/KMTfCfb+6eds98tAL59sblplBPwsLjsQ0sB 43ZlPArVxFZFSOxYDBi8xYyaBk7ruSXjwfZoU6sTPZl5o3bWGn/60PQII0rfl7Zm QaLWNyk4IY2FctwViLM3ssDFRYdOK307/T2vnBofYfQeuSJ4MV6eXEuYpWG5x2wB cM0FX2qVxve58iy4rVN1VJoi8zYdhrAyMJOZrC4jaKhXbVzhQFG1CzQZ+YxA//Dh U8L60M8fw25Dz05t8Vo6reW+/WWFqRVXlB3CjUey -----END CERTIFICATE-----Generated at Mon Sep 28 06:57:15 2026 by rpki-client