$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa File: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (raw, json) Hash identifier: rUOvI4+wCQk+cZsxILU6myE9U874ZkvxT8DP55n/Wdc= Subject key identifier: A8:33:3F:DA:98:FB:6C:F5:D2:51:59:C6:65:8A:24:53:FA:5D:41:8A Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 357225D644FEFA462B86311E82E8AC71D3B2E825 Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa Signing time: Thu 26 Mar 2026 04:02:12 +0000 ROA not before: Thu 26 Mar 2026 03:57:12 +0000 ROA not after: Thu 25 Mar 2027 04:02:12 +0000 asID: 131111 IP address blocks: 103.158.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:72:25:d6:44:fe:fa:46:2b:86:31:1e:82:e8:ac:71:d3:b2:e8:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Mar 26 03:57:12 2026 GMT Not After : Mar 25 04:02:12 2027 GMT Subject: CN=A8333FDA98FB6CF5D25159C6658A2453FA5D418A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f3:bf:1e:0b:9f:53:46:06:52:61:64:be:3d: 87:78:8c:74:85:79:19:1e:d0:b5:e1:a8:be:ac:da: 21:6f:8c:92:4a:21:f9:ce:5d:05:df:ed:ca:3b:8c: f0:0b:b0:07:ab:55:74:8d:fd:5d:9d:c6:bb:95:e8: 1f:ae:06:46:8b:c1:49:b4:ae:7a:e8:ca:4e:11:3e: 2d:a2:33:61:4d:a4:5f:67:31:28:74:b7:a8:4b:43: dc:80:d5:e0:41:65:c4:9a:35:74:bc:05:1a:ce:83: 7d:c3:c9:a2:76:5d:af:0c:00:5b:6a:38:f2:50:8d: 3b:56:b4:7e:f5:2d:12:53:8f:a9:84:0d:a2:07:56: 99:bc:c0:64:19:cd:c1:0b:c8:a0:4d:b5:56:33:c8: d1:54:ba:54:32:d2:f3:38:8e:0c:7b:6b:df:c8:a2: be:c3:c9:8b:4c:ea:be:78:6d:da:48:7e:87:f2:48: 83:83:8d:1b:dc:1e:22:fc:12:8c:62:44:16:6c:f8: f5:05:f6:3b:5e:e1:22:ad:ee:47:6a:79:cf:1d:50: e2:b2:68:3a:a7:f6:8b:b2:7f:90:75:f7:8d:2a:3f: 3c:d0:23:94:f9:2c:f0:42:62:5b:55:83:d3:59:f8: 20:ab:f7:2a:c5:64:f8:50:06:cd:5e:d8:94:c6:f1: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:33:3F:DA:98:FB:6C:F5:D2:51:59:C6:65:8A:24:53:FA:5D:41:8A X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.195.0/24 Signature Algorithm: sha256WithRSAEncryption 08:09:76:c4:73:1f:55:97:bf:1c:31:95:e9:7c:e5:3d:77:3a: ed:14:12:20:c7:f8:06:6b:23:05:bf:6a:5f:3f:56:fa:c9:41: 03:38:ee:56:10:86:79:26:a9:59:ef:46:8d:51:14:30:9c:0b: 6f:62:08:05:73:9e:ef:16:c4:4b:cd:a9:a0:1f:d1:67:9e:14: 91:3a:1c:7b:38:21:15:ed:c7:1c:31:e6:95:6b:fd:86:82:23: 8a:45:91:62:d0:89:8c:e9:2a:eb:5c:55:03:e4:10:fe:91:e6: 9b:b5:55:a8:8f:e9:10:c3:af:2d:d1:5e:d5:7f:85:3c:33:ba: 63:af:0d:a2:2c:c5:11:a3:dc:ae:45:44:e6:80:82:b7:b8:8c: d3:ad:b1:a3:b6:47:18:8d:b2:cc:5f:c1:44:25:2b:0b:ec:e7: 59:e4:c0:9e:f5:04:db:13:3e:a7:43:1b:b5:29:9c:0e:3f:00: 77:e0:59:1a:89:fe:9e:01:f0:b5:04:01:ae:20:43:e3:06:b0: ee:40:49:08:3b:69:91:8a:cf:f8:3a:d0:f0:01:07:ce:a9:dd: 9b:f6:88:84:44:14:bd:ba:93:e0:38:90:f3:b5:56:59:e1:7c: 38:77:a7:e6:23:4d:86:31:f9:eb:ac:ef:45:63:8c:66:8b:fa: 0b:ed:67:4f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNXIl1kT++kYrhjEeguiscdOy6CUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNjAzMjYwMzU3MTJaFw0yNzAzMjUwNDAyMTJaMDMxMTAvBgNV BAMTKEE4MzMzRkRBOThGQjZDRjVEMjUxNTlDNjY1OEEyNDUzRkE1RDQxOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU878eC59TRgZSYWS+PYd4jHSF eRke0LXhqL6s2iFvjJJKIfnOXQXf7co7jPALsAerVXSN/V2dxruV6B+uBkaLwUm0 rnroyk4RPi2iM2FNpF9nMSh0t6hLQ9yA1eBBZcSaNXS8BRrOg33DyaJ2Xa8MAFtq OPJQjTtWtH71LRJTj6mEDaIHVpm8wGQZzcELyKBNtVYzyNFUulQy0vM4jgx7a9/I or7DyYtM6r54bdpIfofySIODjRvcHiL8EoxiRBZs+PUF9jte4SKt7kdqec8dUOKy aDqn9ouyf5B1940qPzzQI5T5LPBCYltVg9NZ+CCr9yrFZPhQBs1e2JTG8R75AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUqDM/2pj7bPXSUVnGZYokU/pdQYowHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNDZiZGFkLWYxMzAtNDhhOS04 NTM0LTU0YmEzZThlZDYxZi8wLzMxMzAzMzJlMzEzNTM4MmUzMTM5MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnsMwDQYJ KoZIhvcNAQELBQADggEBAAgJdsRzH1WXvxwxlel85T13Ou0UEiDH+AZrIwW/al8/ VvrJQQM47lYQhnkmqVnvRo1RFDCcC29iCAVznu8WxEvNqaAf0WeeFJE6HHs4IRXt xxwx5pVr/YaCI4pFkWLQiYzpKutcVQPkEP6R5pu1VaiP6RDDry3RXtV/hTwzumOv DaIsxRGj3K5FROaAgre4jNOtsaO2RxiNssxfwUQlKwvs51nkwJ71BNsTPqdDG7Up nA4/AHfgWRqJ/p4B8LUEAa4gQ+MGsO5ASQg7aZGKz/g60PABB86p3Zv2iIREFL26 k+A4kPO1VlnhfDh3p+YjTYYx+eus70VjjGaL+gvtZ08= -----END CERTIFICATE-----Generated at Thu Mar 26 23:10:26 2026 by rpki-client