$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa File: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (raw, json) Hash identifier: 5lFW18qFNnfQY6ocmWqfaAsIw6kobVZuqjGN1oNWW+o= Subject key identifier: E6:F9:B9:A1:52:9E:E5:8E:B0:7F:2B:91:E8:68:A2:1D:58:72:28:F1 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 229D94E28F0B3912C7E6F91B5C5A3DA9E1208901 Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa Signing time: Thu 26 Mar 2026 04:02:12 +0000 ROA not before: Thu 26 Mar 2026 03:57:12 +0000 ROA not after: Thu 25 Mar 2027 04:02:12 +0000 asID: 131111 IP address blocks: 103.158.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:9d:94:e2:8f:0b:39:12:c7:e6:f9:1b:5c:5a:3d:a9:e1:20:89:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Mar 26 03:57:12 2026 GMT Not After : Mar 25 04:02:12 2027 GMT Subject: CN=E6F9B9A1529EE58EB07F2B91E868A21D587228F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:ee:d5:67:3f:dc:53:d9:da:9e:5d:8f:65: 96:f7:7f:ac:f2:6d:35:99:af:0b:5d:9d:ea:4c:fd: 0e:6c:df:10:b8:cb:3a:50:8f:54:1c:67:ee:07:c7: 19:52:5f:61:fe:39:e3:be:33:80:44:2f:89:2c:9a: e7:c6:b0:b6:ae:0e:78:c9:d6:5c:74:af:36:d9:16: af:cc:51:34:f5:5b:78:a0:72:9f:08:f7:86:5a:e3: 72:22:c3:7f:30:ae:3d:22:b9:4a:30:28:91:21:57: dd:04:8d:88:24:84:16:ce:39:51:dd:32:16:3d:81: 1a:14:3c:c6:fb:76:9e:bb:5e:ef:18:74:b3:61:c6: 57:e0:fb:4c:44:8a:58:27:da:95:eb:d7:3b:df:e8: 31:f5:90:14:4a:86:d7:70:21:2f:8a:db:cb:b1:92: d0:1b:c3:6e:8a:99:a6:5d:6d:77:1a:c6:ff:f3:6c: 09:4f:e4:32:d9:3a:ab:57:26:6c:85:7f:5c:93:57: 1b:98:a2:62:f3:eb:9c:2e:a1:c1:55:b5:fc:07:ae: c5:0d:24:f1:a4:6c:d4:06:ac:e2:5a:e1:1b:1b:65: f0:b3:87:05:01:d0:3c:a3:0f:a4:9b:09:4b:2c:82: be:c2:cd:c0:69:47:90:54:cb:ce:29:5c:d1:6d:ef: 16:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F9:B9:A1:52:9E:E5:8E:B0:7F:2B:91:E8:68:A2:1D:58:72:28:F1 X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.194.0/23 Signature Algorithm: sha256WithRSAEncryption 57:41:65:d3:b7:dc:b4:71:83:e3:54:99:46:39:ba:3b:c2:b0: 1f:09:a0:d4:6f:72:2a:22:13:c7:be:22:95:2d:11:b8:12:08: 9c:b3:dc:df:b6:9f:01:0e:40:db:11:23:3a:ae:b4:3c:3b:da: 9a:4b:0d:52:61:5f:5a:02:a5:23:7f:53:6b:ee:17:91:8f:99: db:f9:92:b3:df:d9:6d:ec:09:bf:1e:16:d0:1b:73:16:cf:94: 24:46:1b:4c:60:29:25:54:14:c5:6f:ba:c4:ed:6f:b3:f6:85: 7c:99:8c:f9:a2:76:14:02:06:b3:d3:b5:89:c5:7d:06:94:b7: e4:36:49:0d:9a:81:e0:8a:09:75:55:59:0a:5a:a6:6a:8e:26: c9:f6:12:0f:4a:99:fd:94:8a:63:62:3c:f7:47:14:24:a6:32: 2c:b3:8a:57:5c:a1:b2:21:fa:a8:6d:02:df:77:d9:74:f7:85: 3b:19:67:06:07:17:ea:28:69:e8:a9:60:74:36:88:a0:40:63: 65:45:78:02:ad:79:eb:ad:f1:6d:18:95:47:15:9f:3b:ed:5f: 03:10:22:df:e4:f6:db:44:d4:16:c8:3e:9b:46:88:f2:59:c3: 56:18:66:16:7f:5f:63:a1:9e:40:f1:55:02:31:a4:64:cf:7c: b8:22:92:4d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIp2U4o8LORLH5vkbXFo9qeEgiQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNjAzMjYwMzU3MTJaFw0yNzAzMjUwNDAyMTJaMDMxMTAvBgNV BAMTKEU2RjlCOUExNTI5RUU1OEVCMDdGMkI5MUU4NjhBMjFENTg3MjI4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sO7VZz/cU9nanl2PZZb3f6zy bTWZrwtdnepM/Q5s3xC4yzpQj1QcZ+4HxxlSX2H+OeO+M4BEL4ksmufGsLauDnjJ 1lx0rzbZFq/MUTT1W3igcp8I94Za43Iiw38wrj0iuUowKJEhV90EjYgkhBbOOVHd MhY9gRoUPMb7dp67Xu8YdLNhxlfg+0xEilgn2pXr1zvf6DH1kBRKhtdwIS+K28ux ktAbw26KmaZdbXcaxv/zbAlP5DLZOqtXJmyFf1yTVxuYomLz65wuocFVtfwHrsUN JPGkbNQGrOJa4RsbZfCzhwUB0DyjD6SbCUssgr7CzcBpR5BUy84pXNFt7xaZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU5vm5oVKe5Y6wfyuR6GiiHVhyKPEwHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNDZiZGFkLWYxMzAtNDhhOS04 NTM0LTU0YmEzZThlZDYxZi8wLzMxMzAzMzJlMzEzNTM4MmUzMTM5MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnsIwDQYJ KoZIhvcNAQELBQADggEBAFdBZdO33LRxg+NUmUY5ujvCsB8JoNRvcioiE8e+IpUt EbgSCJyz3N+2nwEOQNsRIzqutDw72ppLDVJhX1oCpSN/U2vuF5GPmdv5krPf2W3s Cb8eFtAbcxbPlCRGG0xgKSVUFMVvusTtb7P2hXyZjPmidhQCBrPTtYnFfQaUt+Q2 SQ2ageCKCXVVWQpapmqOJsn2Eg9Kmf2UimNiPPdHFCSmMiyzildcobIh+qhtAt93 2XT3hTsZZwYHF+ooaeipYHQ2iKBAY2VFeAKteeut8W0YlUcVnzvtXwMQIt/k9ttE 1BbIPptGiPJZw1YYZhZ/X2OhnkDxVQIxpGTPfLgikk0= -----END CERTIFICATE-----Generated at Thu Mar 26 20:12:45 2026 by rpki-client