$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa File: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (raw, json) Hash identifier: Hg8oWG164Y0Dz0OH2cwj6JjK/OmfQmVg/cUvcWXZfYs= Subject key identifier: 25:21:A7:65:9C:6C:CC:7D:95:49:43:43:FB:DC:F4:EC:5F:21:7A:16 Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 5DC3AB734E0B9776F48CCFBD855B367A69DE3F35 Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa Signing time: Fri 20 Mar 2026 16:02:43 +0000 ROA not before: Fri 20 Mar 2026 15:57:43 +0000 ROA not after: Fri 19 Mar 2027 16:02:43 +0000 asID: 141674 IP address blocks: 103.171.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c3:ab:73:4e:0b:97:76:f4:8c:cf:bd:85:5b:36:7a:69:de:3f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Mar 20 15:57:43 2026 GMT Not After : Mar 19 16:02:43 2027 GMT Subject: CN=2521A7659C6CCC7D95494343FBDCF4EC5F217A16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:38:d1:63:a6:42:c8:ae:1a:27:b5:7d:e3:df: 41:8a:3c:86:2f:43:2f:38:b8:30:05:66:8a:7a:48: 68:b7:8a:96:9f:bc:6d:fb:cb:df:23:23:9e:b2:be: 37:0e:75:a6:21:25:52:f6:fa:c7:40:29:c6:49:c3: b0:ab:fc:04:38:07:95:e6:85:a6:4a:66:e8:d2:ae: 27:5a:2f:94:6c:c6:fb:44:0a:96:c4:9d:0a:d7:34: 60:11:e2:54:8f:54:19:15:cd:ad:08:3f:bb:ff:6e: b4:76:55:3a:a2:a4:10:e3:c0:07:d3:2f:72:e3:77: 43:31:fe:6d:02:6a:78:3d:e1:8b:8b:bb:4e:a0:df: 30:7f:65:31:f4:b3:74:7c:a8:7a:8c:69:26:d4:22: 0d:9f:77:32:c3:55:43:72:71:ed:3e:43:54:c7:d3: 67:76:e8:f4:b9:24:57:9e:e5:48:ae:17:c8:7e:84: 99:84:a7:2f:82:9c:e9:98:c1:9d:ad:70:5e:be:aa: 3d:c8:d9:2e:16:57:27:ec:54:8f:8c:ff:85:53:b7: f4:11:ea:c9:1c:19:25:fb:7c:72:ec:b5:26:f5:d0: 85:d6:74:87:08:64:1f:85:e2:c2:0f:5c:e6:10:9b: 4b:4c:c6:cc:85:d4:5f:13:1d:b9:0c:4a:d2:56:03: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:21:A7:65:9C:6C:CC:7D:95:49:43:43:FB:DC:F4:EC:5F:21:7A:16 X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.244.0/24 Signature Algorithm: sha256WithRSAEncryption 92:2d:85:d7:d7:cb:e2:db:33:ce:64:f6:d8:2f:d2:61:41:c5: 1f:6a:19:2e:ee:8b:da:d8:e3:4d:b0:ad:f7:a3:2c:ed:53:42: 0d:3f:f0:2c:59:27:3d:c6:06:8b:3c:0a:c9:cc:bd:8b:18:2f: 8f:d3:a5:2a:c8:18:a2:c0:8f:74:ac:60:fa:a8:fa:63:50:be: da:3c:50:72:a8:1d:38:4d:3d:65:2d:01:9b:f0:79:2e:91:5d: bf:05:49:14:26:c6:7d:f3:d6:cf:f6:b4:8b:b3:7c:4c:17:c7: 4f:f3:83:93:6f:29:db:34:29:eb:87:6d:51:ed:10:14:ae:31: 4c:0f:be:8b:d0:72:05:92:39:f0:dd:ea:b1:91:c4:4b:0a:98: d9:c2:34:4b:6a:8a:f9:25:55:ca:2b:0c:94:aa:4e:2c:ba:c4: eb:5f:17:ad:56:c3:4a:22:8d:99:14:93:55:6c:e2:7d:1c:8e: 19:be:fa:3e:fd:9f:98:c7:44:e1:9e:fc:55:21:e3:0d:3e:db: eb:89:d7:73:82:0a:1a:77:fb:21:e5:4f:fa:ef:3c:73:55:13: f4:f8:5e:0c:8e:00:6f:c3:9a:71:07:72:64:0b:5a:cc:fd:31: 96:50:97:27:33:b1:81:1b:55:64:fa:ee:b2:ec:7e:b6:13:a0: d0:0f:26:be -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXcOrc04Ll3b0jM+9hVs2emnePzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNjAzMjAxNTU3NDNaFw0yNzAzMTkxNjAyNDNaMDMxMTAvBgNV BAMTKDI1MjFBNzY1OUM2Q0NDN0Q5NTQ5NDM0M0ZCRENGNEVDNUYyMTdBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqONFjpkLIrhontX3j30GKPIYv Qy84uDAFZop6SGi3ipafvG37y98jI56yvjcOdaYhJVL2+sdAKcZJw7Cr/AQ4B5Xm haZKZujSridaL5RsxvtECpbEnQrXNGAR4lSPVBkVza0IP7v/brR2VTqipBDjwAfT L3Ljd0Mx/m0Cang94YuLu06g3zB/ZTH0s3R8qHqMaSbUIg2fdzLDVUNyce0+Q1TH 02d26PS5JFee5UiuF8h+hJmEpy+CnOmYwZ2tcF6+qj3I2S4WVyfsVI+M/4VTt/QR 6skcGSX7fHLstSb10IXWdIcIZB+F4sIPXOYQm0tMxsyF1F8THbkMStJWA4uBAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUJSGnZZxszH2VSUND+9z07F8hehYwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFhYWMxYmI5LTQ1ZjYtNDY2Ny1i MTk0LTlhNjlhNGE0ZDc1NS8wLzMxMzAzMzJlMzEzNzMxMmUzMjM0MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM3MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnq/QwDQYJ KoZIhvcNAQELBQADggEBAJIthdfXy+LbM85k9tgv0mFBxR9qGS7ui9rY402wrfej LO1TQg0/8CxZJz3GBos8CsnMvYsYL4/TpSrIGKLAj3SsYPqo+mNQvto8UHKoHThN PWUtAZvweS6RXb8FSRQmxn3z1s/2tIuzfEwXx0/zg5NvKds0KeuHbVHtEBSuMUwP vovQcgWSOfDd6rGRxEsKmNnCNEtqivklVcorDJSqTiy6xOtfF61Ww0oijZkUk1Vs 4n0cjhm++j79n5jHROGe/FUh4w0+2+uJ13OCChp3+yHlT/rvPHNVE/T4XgyOAG/D mnEHcmQLWsz9MZZQlyczsYEbVWT67rLsfrYToNAPJr4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:50:33 2026 by rpki-client