$ rpki-client -vvf repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa File: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (raw, json) Hash identifier: JBPQaOuTxEdCFfY8RKNZH+MHhyJwY41MarBrg7GwAtI= Subject key identifier: 00:DF:1A:C5:13:85:8E:45:39:E0:3F:38:CF:19:A6:67:58:2D:1F:57 Certificate issuer: /CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF Certificate serial: 411A40A66863DA53DE5B673DBE73BDD9F8CC8AE3 Authority key identifier: 6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa Signing time: Thu 19 Mar 2026 05:02:44 +0000 ROA not before: Thu 19 Mar 2026 04:57:44 +0000 ROA not after: Thu 18 Mar 2027 05:02:44 +0000 asID: 38320 IP address blocks: 103.158.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1a:40:a6:68:63:da:53:de:5b:67:3d:be:73:bd:d9:f8:cc:8a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF Validity Not Before: Mar 19 04:57:44 2026 GMT Not After : Mar 18 05:02:44 2027 GMT Subject: CN=00DF1AC513858E4539E03F38CF19A667582D1F57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:0d:e2:b2:d5:de:13:2b:f2:f6:16:4d:b2:24: d4:83:f0:79:ab:72:8c:50:e9:84:a2:b6:54:5a:a5: 82:4a:bc:ef:c7:5e:20:3e:f8:02:4c:19:f8:f7:2b: 60:7b:8a:b1:eb:7c:85:f9:09:22:55:04:16:62:0c: 35:ea:ba:44:a1:54:10:25:bb:82:a7:0e:be:1d:13: 25:08:6f:b9:28:9e:37:b9:c6:8b:c0:ea:c8:e0:3b: 87:8e:40:b6:fa:5f:34:f0:31:61:bb:08:81:3f:3e: e6:50:43:e3:96:4b:8a:8e:8b:8b:f4:de:e3:30:9f: 0b:7a:b5:0a:8c:80:9a:5c:8f:f9:f7:2b:6e:d2:fd: b0:51:bc:25:36:93:7f:24:b0:80:a9:71:c3:bc:a3: fd:e0:10:cb:c6:fe:02:6e:ce:aa:3c:e8:e3:da:12: cb:cf:d0:e1:08:34:dc:76:e6:e6:9a:49:76:78:32: e3:ce:0d:81:42:30:06:88:54:6e:47:45:89:45:87: f7:42:35:f7:30:81:1d:85:f2:1f:a4:16:5b:9b:12: 9a:b0:d7:7d:39:80:6f:e2:95:f6:9f:cf:34:e7:c0: 1e:d3:79:51:cd:a7:b1:3f:ad:7e:19:17:38:70:91: be:02:00:10:22:12:d4:91:0f:92:c8:9f:5c:0c:ea: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DF:1A:C5:13:85:8E:45:39:E0:3F:38:CF:19:A6:67:58:2D:1F:57 X509v3 Authority Key Identifier: keyid:6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.128.0/23 Signature Algorithm: sha256WithRSAEncryption 36:9e:fa:74:d1:26:4a:72:c7:16:de:6b:7e:70:4e:f7:1b:45: 68:83:6e:d1:76:a4:54:df:24:59:cd:ed:ee:a2:93:91:c9:72: 12:70:56:ed:3e:a8:6f:5b:19:72:2f:74:91:db:22:48:b9:f3: 9b:84:f3:91:4a:3d:12:cc:af:92:da:3a:3b:a6:cb:f1:bf:4d: 2d:f8:47:98:f1:52:8f:03:ca:41:62:e5:07:e3:c4:0e:7e:4f: 17:f3:33:04:ac:45:00:35:67:45:27:46:a6:01:57:9c:f1:2b: 21:5e:b0:f1:33:a8:74:43:b2:ef:f6:da:21:f2:02:4a:bf:70: 1a:b3:0f:5e:e1:d5:a3:8e:78:66:28:89:1f:da:fd:80:ed:d2: 81:f2:84:e8:a3:45:d8:d2:b0:8f:3c:91:e5:17:ad:7a:ba:cf: 4a:7f:18:5e:48:fc:d4:3d:33:52:0a:0c:2b:a0:74:f6:d6:a9: 9f:0f:7a:df:e3:5d:90:5b:d5:d6:c1:82:dc:98:97:8a:4c:83: 12:21:63:f1:51:73:cb:21:3c:51:99:cf:6a:b6:2b:16:f9:91: ed:da:0a:b5:e3:af:a5:6d:75:60:f7:75:71:a5:11:83:d3:98: 42:b4:3f:f7:42:04:a1:12:0c:09:c6:a7:ad:d9:06:9f:69:03: 78:76:7e:de -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQRpApmhj2lPeW2c9vnO92fjMiuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2MDE1 MkZEMzhCRjAeFw0yNjAzMTkwNDU3NDRaFw0yNzAzMTgwNTAyNDRaMDMxMTAvBgNV BAMTKDAwREYxQUM1MTM4NThFNDUzOUUwM0YzOENGMTlBNjY3NTgyRDFGNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3DeKy1d4TK/L2Fk2yJNSD8Hmr coxQ6YSitlRapYJKvO/HXiA++AJMGfj3K2B7irHrfIX5CSJVBBZiDDXqukShVBAl u4KnDr4dEyUIb7konje5xovA6sjgO4eOQLb6XzTwMWG7CIE/PuZQQ+OWS4qOi4v0 3uMwnwt6tQqMgJpcj/n3K27S/bBRvCU2k38ksICpccO8o/3gEMvG/gJuzqo86OPa EsvP0OEINNx25uaaSXZ4MuPODYFCMAaIVG5HRYlFh/dCNfcwgR2F8h+kFlubEpqw 1305gG/ilfafzzTnwB7TeVHNp7E/rX4ZFzhwkb4CABAiEtSRD5LIn1wM6gOXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAN8axROFjkU54D84zxmmZ1gtH1cwHwYDVR0j BBgwFoAUai9mK21q3ov8MNLN5J42AVL9OL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x M2YwYTgzYy0yYmMwLTQyYTUtYTRhZS0xMWE1Mzg4MmRmMTAvMC82QTJGNjYyQjZE NkFERThCRkMzMEQyQ0RFNDlFMzYwMTUyRkQzOEJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2MDE1MkZE MzhCRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzZjBhODNjLTJiYzAtNDJhNS1h NGFlLTExYTUzODgyZGYxMC8wLzMxMzAzMzJlMzEzNTM4MmUzMTMyMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ56AMA0GCSqG SIb3DQEBCwUAA4IBAQA2nvp00SZKcscW3mt+cE73G0Vog27RdqRU3yRZze3uopOR yXIScFbtPqhvWxlyL3SR2yJIufObhPORSj0SzK+S2jo7psvxv00t+EeY8VKPA8pB YuUH48QOfk8X8zMErEUANWdFJ0amAVec8SshXrDxM6h0Q7Lv9toh8gJKv3Aasw9e 4dWjjnhmKIkf2v2A7dKB8oToo0XY0rCPPJHlF616us9KfxheSPzUPTNSCgwroHT2 1qmfD3rf412QW9XWwYLcmJeKTIMSIWPxUXPLITxRmc9qtisW+ZHt2gq146+lbXVg 93VxpRGD05hCtD/3QgShEgwJxqet2QafaQN4dn7e -----END CERTIFICATE-----Generated at Thu Mar 26 18:59:18 2026 by rpki-client