$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/3130332e3133372e33382e302f32332d3234203d3e20313338303737.roa File: 3130332e3133372e33382e302f32332d3234203d3e20313338303737.roa (raw, json) Hash identifier: LpmeCYIxoWBDvzjeANLy6rKl3zTbux6LO0Gm7oz2kiY= Subject key identifier: F1:14:73:C9:D8:A9:9B:11:4F:2B:65:4F:8D:53:27:93:95:C9:A5:DE Certificate issuer: /CN=0D2802EC43905EEA387602B994B8B579041C8507 Certificate serial: 34B5C86D5E1A2C9E0D0AF5A1827FAF290429546A Authority key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/3130332e3133372e33382e302f32332d3234203d3e20313338303737.roa Signing time: Tue 15 Sep 2026 11:43:19 +0000 ROA not before: Tue 15 Sep 2026 11:38:19 +0000 ROA not after: Tue 14 Sep 2027 11:43:19 +0000 asID: 138077 IP address blocks: 103.137.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b5:c8:6d:5e:1a:2c:9e:0d:0a:f5:a1:82:7f:af:29:04:29:54:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D2802EC43905EEA387602B994B8B579041C8507 Validity Not Before: Sep 15 11:38:19 2026 GMT Not After : Sep 14 11:43:19 2027 GMT Subject: CN=F11473C9D8A99B114F2B654F8D53279395C9A5DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:79:68:14:90:b6:6b:5e:24:38:a9:8f:f8:a9: 53:ab:73:51:31:b1:13:6f:0d:7f:17:09:9b:39:23: d0:d2:3b:e1:83:cd:a0:2a:be:a3:2b:a4:c0:d4:bf: d1:8b:ac:0f:6f:bb:ad:9f:51:bf:f5:bd:10:b1:1e: c9:a3:36:e7:b2:d3:31:88:43:97:29:46:25:78:45: 09:6e:85:5c:7c:8e:f7:af:51:d4:41:dd:b5:b2:38: 9a:ba:6a:fc:22:59:56:23:14:07:07:1a:06:e8:9e: 94:40:5d:f3:d9:47:10:f1:76:70:26:d3:49:42:b5: b2:7b:fc:0d:08:50:19:bd:40:bc:72:1b:71:b0:17: bb:5e:e8:28:73:4c:7b:8d:b6:f8:33:0a:4f:69:e7: ce:2d:b9:a9:4a:d5:f3:72:9e:71:7b:a2:6b:d6:9e: 29:91:8b:3e:55:8d:c6:27:2e:6d:4e:67:24:ce:e2: 1b:d5:fe:bd:c8:6b:04:e2:6e:4a:e5:aa:67:0b:35: 51:57:c4:79:d9:cc:36:1c:ec:7d:dc:64:33:08:f6: 58:60:d5:65:5f:53:a1:f2:31:f2:75:31:86:15:0f: 3d:34:ad:d9:14:25:82:99:fc:1e:ff:80:4d:e9:be: e0:3a:84:31:88:04:76:f4:00:02:7c:9a:91:05:55: 4a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:14:73:C9:D8:A9:9B:11:4F:2B:65:4F:8D:53:27:93:95:C9:A5:DE X509v3 Authority Key Identifier: keyid:0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/3130332e3133372e33382e302f32332d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.38.0/23 Signature Algorithm: sha256WithRSAEncryption 86:80:1c:95:ff:18:a6:ff:36:c5:2a:9e:d8:fd:bd:d6:53:e5: 52:40:07:96:24:fa:31:4b:bb:12:43:df:4f:73:56:88:15:08: 7d:0b:6b:cf:89:61:05:cd:ed:61:b9:34:2f:75:53:3b:07:cb: 08:dc:f8:da:43:ff:20:70:cf:d6:39:a2:86:97:35:79:d4:09: 55:9e:d5:4a:ca:1f:9c:8f:01:67:2d:48:04:4f:39:f9:27:d3: 3d:53:f4:00:2d:eb:ee:32:06:c3:fa:d3:ab:04:b8:6e:3d:ab: 3c:5b:a3:80:66:b9:af:ca:1e:83:48:a5:83:be:66:2e:a2:78: a7:49:eb:ce:30:dc:4c:ad:27:d0:14:b1:a6:b4:77:ea:96:05: 08:bd:99:6c:31:28:9c:80:af:73:24:41:4d:0e:68:b9:ed:04: 1a:32:fc:02:51:92:9e:99:57:8f:95:40:ca:34:ab:94:1b:46: 54:84:52:2e:9c:a9:9a:5c:3a:f9:59:bd:58:bf:60:98:a2:1d: 13:65:1c:83:c7:21:f3:cb:35:43:47:b9:85:8e:3d:3a:50:f1: f5:9d:2c:cd:df:bf:25:69:ad:42:ef:5d:ca:7f:df:52:b7:da: d6:36:c8:a7:b9:5b:1f:ca:78:1c:0c:a8:83:3d:09:b8:af:c0: 9d:88:f6:e3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNLXIbV4aLJ4NCvWhgn+vKQQpVGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1Nzkw NDFDODUwNzAeFw0yNjA5MTUxMTM4MTlaFw0yNzA5MTQxMTQzMTlaMDMxMTAvBgNV BAMTKEYxMTQ3M0M5RDhBOTlCMTE0RjJCNjU0RjhENTMyNzkzOTVDOUE1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUeWgUkLZrXiQ4qY/4qVOrc1Ex sRNvDX8XCZs5I9DSO+GDzaAqvqMrpMDUv9GLrA9vu62fUb/1vRCxHsmjNuey0zGI Q5cpRiV4RQluhVx8jvevUdRB3bWyOJq6avwiWVYjFAcHGgbonpRAXfPZRxDxdnAm 00lCtbJ7/A0IUBm9QLxyG3GwF7te6ChzTHuNtvgzCk9p584tualK1fNynnF7omvW nimRiz5VjcYnLm1OZyTO4hvV/r3IawTibkrlqmcLNVFXxHnZzDYc7H3cZDMI9lhg 1WVfU6HyMfJ1MYYVDz00rdkUJYKZ/B7/gE3pvuA6hDGIBHb0AAJ8mpEFVUqrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU8RRzydipmxFPK2VPjVMnk5XJpd4wHwYDVR0j BBgwFoAUDSgC7EOQXuo4dgK5lLi1eQQchQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTNiYmYxZGEtZTMxNy00OGVmLWFkNmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0 MzkwNUVFQTM4NzYwMkI5OTRCOEI1NzkwNDFDODUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI4MDJFQzQzOTA1RUVBMzg3NjAyQjk5NEI4QjU3OTA0MUM4 NTA3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2UzYmJmMWRhLWUzMTctNDhlZi1h ZDZkLWZlOGE4YmYwODQwMC8wLzMxMzAzMzJlMzEzMzM3MmUzMzM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4kmMA0GCSqG SIb3DQEBCwUAA4IBAQCGgByV/xim/zbFKp7Y/b3WU+VSQAeWJPoxS7sSQ99Pc1aI FQh9C2vPiWEFze1huTQvdVM7B8sI3PjaQ/8gcM/WOaKGlzV51AlVntVKyh+cjwFn LUgETzn5J9M9U/QALevuMgbD+tOrBLhuPas8W6OAZrmvyh6DSKWDvmYuoninSevO MNxMrSfQFLGmtHfqlgUIvZlsMSicgK9zJEFNDmi57QQaMvwCUZKemVePlUDKNKuU G0ZUhFIunKmaXDr5Wb1Yv2CYoh0TZRyDxyHzyzVDR7mFjj06UPH1nSzN378laa1C 713Kf99St9rWNsinuVsfyngcDKiDPQm4r8CdiPbj -----END CERTIFICATE-----Generated at Mon Sep 21 15:54:46 2026 by rpki-client