$ rpki-client -vvf repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa File: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (raw, json) Hash identifier: jaZVjq3R+3/LbbBN+QBMswILVamVqgypIXD15guKfqg= Subject key identifier: 0E:7D:EA:CC:8A:7E:9A:1D:3A:A3:0C:F9:3A:EC:D3:68:44:85:4C:88 Certificate issuer: /CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Certificate serial: 1846CB3C60BE5884A268BDF8CD404CBEC2C09E5B Authority key identifier: EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa Signing time: Thu 12 Mar 2026 07:02:56 +0000 ROA not before: Thu 12 Mar 2026 06:57:56 +0000 ROA not after: Thu 11 Mar 2027 07:02:56 +0000 asID: 150941 IP address blocks: 103.101.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:46:cb:3c:60:be:58:84:a2:68:bd:f8:cd:40:4c:be:c2:c0:9e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Validity Not Before: Mar 12 06:57:56 2026 GMT Not After : Mar 11 07:02:56 2027 GMT Subject: CN=0E7DEACC8A7E9A1D3AA30CF93AECD36844854C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:32:55:d9:16:21:d7:e8:e5:d2:f5:a4:ae: 72:60:4f:a2:54:e0:3a:c6:32:2c:40:67:d0:16:98: d7:f3:76:6d:47:25:96:4c:28:a5:32:cd:07:26:67: 6c:a7:f0:a2:c4:e2:fc:1a:a9:3b:e3:0e:e2:34:95: ca:ad:5c:ed:7e:b5:7c:a9:b8:07:eb:0b:65:cd:75: 9b:ee:ae:ea:55:7e:26:f4:9c:8c:8c:ac:6c:bf:75: 19:4d:c4:b8:d7:aa:dc:14:7a:2f:5c:bb:0e:7f:c1: 95:26:30:4f:26:85:ea:e8:c3:76:10:bb:ec:d8:b3: 01:70:ef:a4:fa:36:f8:fc:83:08:8a:94:4c:41:34: d4:43:a9:09:f9:c6:1b:13:43:42:e7:a0:50:66:0f: f2:aa:9f:39:79:01:af:87:6b:c9:52:ef:83:06:ac: 46:bc:ea:cd:07:a7:e6:17:b7:03:52:eb:c7:58:7f: b9:74:04:34:8f:6d:66:e1:10:a5:dd:bd:5d:61:dd: 93:1e:08:3f:8e:8c:73:ac:3f:79:8d:a7:8a:8a:20: 80:1f:7f:34:31:3d:eb:fd:e3:51:7f:1d:7b:8d:6f: 00:91:39:bf:60:49:e3:4b:96:4e:b7:62:e4:21:9e: 4f:36:12:36:e5:2b:5c:34:c1:fc:71:68:55:85:20: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7D:EA:CC:8A:7E:9A:1D:3A:A3:0C:F9:3A:EC:D3:68:44:85:4C:88 X509v3 Authority Key Identifier: keyid:EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.216.0/23 Signature Algorithm: sha256WithRSAEncryption b4:f4:75:10:bb:93:77:a4:d8:18:a7:e6:71:40:2e:87:1c:a0: e0:04:3f:12:6e:50:0d:31:a3:a7:2f:d1:4b:e8:19:0b:c0:ae: e9:d0:dd:a9:98:0e:7a:4b:9f:f5:cc:b0:5a:6a:1b:29:40:03: 2d:5d:30:8f:9d:b2:00:e3:53:71:ca:36:c9:9f:80:7d:52:ee: 17:68:c0:48:c1:dc:c6:a5:61:c6:d0:d3:fc:5b:68:34:2a:14: cc:e5:80:78:73:93:60:f5:76:44:ed:fb:32:23:36:af:48:d5: 44:8c:9e:0d:e8:67:79:3d:13:06:cc:05:0a:d0:0f:6e:5b:8c: 33:33:d1:37:28:ea:7f:1d:20:83:bc:81:6a:fe:b2:61:0f:37: c1:c8:10:68:67:51:65:9a:0f:9b:54:93:d0:a5:ed:ed:6f:f9: 21:b4:3f:8d:b9:9d:63:e7:26:ab:e3:c0:9e:34:5f:c2:65:25: f0:74:1e:69:ad:0d:cc:5b:db:2e:7a:84:cf:a4:25:17:71:3d: 16:22:cc:5e:b9:1b:22:08:f9:49:a7:11:05:ca:80:11:b6:c5: c2:e7:d7:ac:e4:f9:0e:c1:be:1d:91:95:99:3b:0e:e5:af:4d: 45:c7:23:3b:bf:3a:20:6b:a7:b4:be:52:1e:be:e5:13:30:f8: 3d:69:b0:52 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGEbLPGC+WISiaL34zUBMvsLAnlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJD M0QwNUEyRjAeFw0yNjAzMTIwNjU3NTZaFw0yNzAzMTEwNzAyNTZaMDMxMTAvBgNV BAMTKDBFN0RFQUNDOEE3RTlBMUQzQUEzMENGOTNBRUNEMzY4NDQ4NTRDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBjJV2RYh1+jl0vWkrnJgT6JU 4DrGMixAZ9AWmNfzdm1HJZZMKKUyzQcmZ2yn8KLE4vwaqTvjDuI0lcqtXO1+tXyp uAfrC2XNdZvurupVfib0nIyMrGy/dRlNxLjXqtwUei9cuw5/wZUmME8mherow3YQ u+zYswFw76T6Nvj8gwiKlExBNNRDqQn5xhsTQ0LnoFBmD/Kqnzl5Aa+Ha8lS74MG rEa86s0Hp+YXtwNS68dYf7l0BDSPbWbhEKXdvV1h3ZMeCD+OjHOsP3mNp4qKIIAf fzQxPev941F/HXuNbwCROb9gSeNLlk63YuQhnk82EjblK1w0wfxxaFWFIEtFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUDn3qzIp+mh06owz5OuzTaESFTIgwHwYDVR0j BBgwFoAU63ghTySO/gi05GL9r9TnC8PQWi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTFmMzk3MS0zYTQ3LTQ1NWQtYWIzMC1lN2MyM2I2MWI5ZjIvMC9FQjc4MjE0RjI0 OEVGRTA4QjRFNDYyRkRBRkQ0RTcwQkMzRDA1QTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJDM0Qw NUEyRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhMWYzOTcxLTNhNDctNDU1ZC1h YjMwLWU3YzIzYjYxYjlmMi8wLzMxMzAzMzJlMzEzMDMxMmUzMjMxMzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzAzOTM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnZdgwDQYJ KoZIhvcNAQELBQADggEBALT0dRC7k3ek2Bin5nFALoccoOAEPxJuUA0xo6cv0Uvo GQvArunQ3amYDnpLn/XMsFpqGylAAy1dMI+dsgDjU3HKNsmfgH1S7hdowEjB3Mal YcbQ0/xbaDQqFMzlgHhzk2D1dkTt+zIjNq9I1USMng3oZ3k9EwbMBQrQD25bjDMz 0Tco6n8dIIO8gWr+smEPN8HIEGhnUWWaD5tUk9Cl7e1v+SG0P425nWPnJqvjwJ40 X8JlJfB0HmmtDcxb2y56hM+kJRdxPRYizF65GyII+UmnEQXKgBG2xcLn16zk+Q7B vh2RlZk7DuWvTUXHIzu/OiBrp7S+Uh6+5RMw+D1psFI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:55 2026 by rpki-client