$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa File: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (raw, json) Hash identifier: dOsg1NquFUOOp9EP16mqQPlHlKCMBlOxEwxrPFA6kwE= Subject key identifier: 06:8E:06:23:E6:D5:46:68:99:16:F7:F0:E6:8C:61:F1:FE:3C:AD:D0 Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 77D1AE6BB91F26E1340BC5EC29732BFCA3B55DE0 Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa Signing time: Wed 18 Mar 2026 12:00:02 +0000 ROA not before: Wed 18 Mar 2026 11:55:02 +0000 ROA not after: Wed 17 Mar 2027 12:00:02 +0000 asID: 150968 IP address blocks: 103.123.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d1:ae:6b:b9:1f:26:e1:34:0b:c5:ec:29:73:2b:fc:a3:b5:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: Mar 18 11:55:02 2026 GMT Not After : Mar 17 12:00:02 2027 GMT Subject: CN=068E0623E6D546689916F7F0E68C61F1FE3CADD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:15:4e:d5:33:9d:e8:1b:c9:77:5e:09:41:90: 6a:81:cb:f9:64:9e:d7:3a:d0:30:0b:0e:9e:6c:ca: 4e:43:f4:c3:db:19:5f:87:d9:2d:5c:00:34:86:1a: 21:11:0f:6b:f8:50:39:e3:a2:75:7f:9b:65:f3:09: a5:47:a8:e2:41:44:09:5a:a2:47:1e:f9:7d:d2:00: 06:30:d0:84:5b:50:9c:fd:0f:df:a0:2e:a2:63:0a: fc:a8:02:a3:6f:f5:93:80:cf:4e:17:26:f4:ae:29: 5a:f7:92:d2:a8:7d:54:af:0c:f3:07:54:6e:06:25: d0:0b:02:90:71:70:7a:2c:91:ba:e9:9a:7e:1a:2c: 49:32:f7:09:fd:89:b8:17:d2:a7:28:49:d3:aa:34: 99:4a:5a:94:73:93:50:df:71:82:ef:b6:77:fa:6b: a7:fe:db:4b:52:62:01:85:f6:ef:cc:ed:23:08:18: 82:65:65:25:29:ca:3a:4f:19:45:02:97:37:c0:83: 0c:09:08:33:c6:48:26:cd:13:ad:a5:97:d0:f6:89: 3a:c0:8c:ff:17:09:0a:8d:fc:52:da:24:20:4b:aa: 19:58:88:48:f2:db:f3:64:c9:29:e1:4a:7f:72:56: f1:e6:ad:cf:73:9e:e8:f3:68:90:47:f7:3d:f3:ad: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8E:06:23:E6:D5:46:68:99:16:F7:F0:E6:8C:61:F1:FE:3C:AD:D0 X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.174.0/23 Signature Algorithm: sha256WithRSAEncryption 39:fd:2b:9b:16:c2:42:57:ee:94:65:d7:16:0e:be:4f:d1:1b: 8b:8c:9f:79:b4:d8:49:9f:ae:4c:dc:69:1d:f8:ba:1a:d2:58: 6b:38:46:46:27:ae:01:ec:64:bc:2d:61:16:cd:a6:56:c1:eb: 3a:dc:4c:b5:33:a5:d2:63:e8:08:01:e5:9a:bd:1b:08:79:37: b9:2e:b9:a9:65:5d:35:73:26:3c:f0:66:6d:00:66:ec:6f:43: 55:ad:25:ab:21:45:d8:74:36:41:12:37:8a:dd:e1:3b:b6:ff: 1c:43:25:73:3e:40:7e:ad:a2:c3:f7:f6:6d:0f:25:bb:f9:da: 6e:7d:aa:3d:93:fe:bf:78:7b:87:14:4b:ef:28:3c:b4:a4:95: 9e:70:08:68:e6:12:bf:7d:80:5b:1c:51:56:75:6c:84:57:67: 6f:9f:c5:9c:e1:68:69:e5:e7:b6:b2:42:53:a6:ae:f9:61:32: c1:51:00:17:45:e6:11:38:ac:0d:94:e6:1c:f4:2a:76:b1:60: 12:47:23:28:f5:65:b5:8e:97:96:55:a7:0e:a1:ea:69:f3:0b: 80:cd:18:b7:b5:72:b4:48:34:35:61:27:42:6b:37:ac:12:3a: b9:93:30:4f:02:9f:59:e8:90:c9:f4:62:43:1a:de:2e:c5:e8: 32:0f:2b:72 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUd9Gua7kfJuE0C8XsKXMr/KO1XeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNjAzMTgxMTU1MDJaFw0yNzAzMTcxMjAwMDJaMDMxMTAvBgNV BAMTKDA2OEUwNjIzRTZENTQ2Njg5OTE2RjdGMEU2OEM2MUYxRkUzQ0FERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgFU7VM53oG8l3XglBkGqBy/lk ntc60DALDp5syk5D9MPbGV+H2S1cADSGGiERD2v4UDnjonV/m2XzCaVHqOJBRAla okce+X3SAAYw0IRbUJz9D9+gLqJjCvyoAqNv9ZOAz04XJvSuKVr3ktKofVSvDPMH VG4GJdALApBxcHoskbrpmn4aLEky9wn9ibgX0qcoSdOqNJlKWpRzk1DfcYLvtnf6 a6f+20tSYgGF9u/M7SMIGIJlZSUpyjpPGUUClzfAgwwJCDPGSCbNE62ll9D2iTrA jP8XCQqN/FLaJCBLqhlYiEjy2/NkySnhSn9yVvHmrc9znujzaJBH9z3zrXA5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUBo4GI+bVRmiZFvfw5oxh8f48rdAwHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZWRiMjhmLWYzZjktNDE5OS04 NWEzLWM5YmY5YTdhN2RmOC8wLzMxMzAzMzJlMzEzMjMzMmUzMTM3MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzAzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFne64wDQYJ KoZIhvcNAQELBQADggEBADn9K5sWwkJX7pRl1xYOvk/RG4uMn3m02EmfrkzcaR34 uhrSWGs4RkYnrgHsZLwtYRbNplbB6zrcTLUzpdJj6AgB5Zq9Gwh5N7kuuallXTVz JjzwZm0AZuxvQ1WtJashRdh0NkESN4rd4Tu2/xxDJXM+QH6tosP39m0PJbv52m59 qj2T/r94e4cUS+8oPLSklZ5wCGjmEr99gFscUVZ1bIRXZ2+fxZzhaGnl57ayQlOm rvlhMsFRABdF5hE4rA2U5hz0KnaxYBJHIyj1ZbWOl5ZVpw6h6mnzC4DNGLe1crRI NDVhJ0JrN6wSOrmTME8Cn1nokMn0YkMa3i7F6DIPK3I= -----END CERTIFICATE-----Generated at Thu Mar 26 19:12:02 2026 by rpki-client