$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa File: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (raw, json) Hash identifier: nmctoMYkDgA8/S7N7kyu78eibNA+g17O1Xuhn/JxhXc= Subject key identifier: EE:3E:F0:1A:0A:A4:01:F2:2E:B8:1D:26:6A:9F:13:B3:7E:71:01:04 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 4A228D02C891B07DA757FA921FEB6CF763F06F61 Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa Signing time: Wed 18 Mar 2026 11:00:45 +0000 ROA not before: Wed 18 Mar 2026 10:55:45 +0000 ROA not after: Wed 17 Mar 2027 11:00:45 +0000 asID: 141591 IP address blocks: 103.159.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:22:8d:02:c8:91:b0:7d:a7:57:fa:92:1f:eb:6c:f7:63:f0:6f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Mar 18 10:55:45 2026 GMT Not After : Mar 17 11:00:45 2027 GMT Subject: CN=EE3EF01A0AA401F22EB81D266A9F13B37E710104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9d:16:30:7d:0d:9c:85:85:02:1c:4c:c9:65: c6:d8:2a:a7:c4:01:2c:86:41:7d:be:a7:e7:e8:cd: 70:24:93:c9:25:85:74:64:67:29:ac:c4:43:09:c8: f0:a9:be:9c:bb:27:9d:4a:c8:6a:30:4d:eb:6f:24: ce:bd:94:ce:5b:a5:0a:90:76:ec:99:41:16:ba:cd: ad:02:a9:22:0c:8f:44:f8:be:e2:ac:88:91:0a:7d: 5a:80:76:53:bb:38:bf:d0:4d:40:57:55:bb:20:19: b7:70:c8:dc:34:4b:bd:73:ef:4b:0a:a7:7c:dd:ed: bf:bb:75:76:b2:0d:7f:e1:2b:70:3f:ea:3c:cb:a4: 69:13:91:6a:ec:87:27:76:f7:f1:6a:ba:bd:d5:5c: 2c:91:46:60:2a:0f:09:45:8a:05:5e:4e:05:ca:68: d5:d9:f4:6f:27:c1:3b:f4:1e:d6:c0:bd:d1:e0:d7: 44:b7:93:0e:7e:9e:ff:75:9c:e8:f3:67:1e:92:9c: ff:ea:8d:45:06:a0:37:54:f2:a9:fd:b4:9a:99:e2: eb:74:b4:05:66:7c:b6:6d:b4:9c:7e:52:02:11:f2: 18:ea:5c:85:d4:72:fc:20:2f:4c:b7:0a:01:33:0d: bf:0b:9d:e1:e7:52:a6:a2:76:27:98:f9:73:af:a2: d6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3E:F0:1A:0A:A4:01:F2:2E:B8:1D:26:6A:9F:13:B3:7E:71:01:04 X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.63.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:22:89:0a:ac:bc:a2:14:c2:6b:e7:e5:72:25:0c:24:8e:d8: 10:ca:12:3d:5c:74:95:f0:e3:d1:2a:3e:4a:13:89:38:46:8d: eb:a5:cb:05:51:78:ce:db:4e:07:b0:ea:12:d0:0c:c3:c9:b0: d7:fb:ca:26:6a:16:00:cc:b5:33:ae:95:43:3c:e8:fd:d0:1f: 96:b8:29:24:ad:97:4d:92:1e:23:91:a5:a9:1e:22:1e:ab:a6: a3:0b:d6:53:63:64:d1:1e:b7:83:94:95:5a:53:e3:9b:f1:94: 7c:fc:98:fe:18:81:8b:1a:d9:0a:a9:58:9b:47:01:6a:2f:e6: 61:7d:63:7d:a0:3b:61:cb:eb:10:fa:ab:05:16:a0:f2:4b:38: 49:c8:b5:39:d7:da:50:78:e1:a3:23:f0:73:7c:3b:0d:bf:33: 19:51:76:78:65:df:14:6a:5c:31:6c:a4:c9:61:3c:1e:02:c4: 61:49:0c:fc:28:01:22:cc:a1:80:a9:85:c8:e2:7b:3a:67:41: 82:f7:55:0a:2c:45:20:e4:ea:b2:4c:fb:84:63:bc:bc:3a:7a: d2:a5:ab:b3:d9:ae:96:01:2f:8a:36:e6:7d:b1:db:42:0a:fa: c5:08:05:a3:0b:c6:7a:35:83:9b:f7:e3:cb:3a:07:6b:8c:95: ec:de:9b:7b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSiKNAsiRsH2nV/qSH+ts92Pwb2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNjAzMTgxMDU1NDVaFw0yNzAzMTcxMTAwNDVaMDMxMTAvBgNV BAMTKEVFM0VGMDFBMEFBNDAxRjIyRUI4MUQyNjZBOUYxM0IzN0U3MTAxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfnRYwfQ2chYUCHEzJZcbYKqfE ASyGQX2+p+fozXAkk8klhXRkZymsxEMJyPCpvpy7J51KyGowTetvJM69lM5bpQqQ duyZQRa6za0CqSIMj0T4vuKsiJEKfVqAdlO7OL/QTUBXVbsgGbdwyNw0S71z70sK p3zd7b+7dXayDX/hK3A/6jzLpGkTkWrshyd29/Fqur3VXCyRRmAqDwlFigVeTgXK aNXZ9G8nwTv0HtbAvdHg10S3kw5+nv91nOjzZx6SnP/qjUUGoDdU8qn9tJqZ4ut0 tAVmfLZttJx+UgIR8hjqXIXUcvwgL0y3CgEzDb8LneHnUqaidieY+XOvotbzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU7j7wGgqkAfIuuB0map8Ts35xAQQwHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwYzE3MWY0LWJkMTEtNDhlZC04 N2YwLTI3ZWExMjA5MDY0Zi8wLzMxMzAzMzJlMzEzNTM5MmUzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzUzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ58/MA0GCSqG SIb3DQEBCwUAA4IBAQAfIokKrLyiFMJr5+VyJQwkjtgQyhI9XHSV8OPRKj5KE4k4 Ro3rpcsFUXjO204HsOoS0AzDybDX+8omahYAzLUzrpVDPOj90B+WuCkkrZdNkh4j kaWpHiIeq6ajC9ZTY2TRHreDlJVaU+Ob8ZR8/Jj+GIGLGtkKqVibRwFqL+ZhfWN9 oDthy+sQ+qsFFqDySzhJyLU519pQeOGjI/BzfDsNvzMZUXZ4Zd8UalwxbKTJYTwe AsRhSQz8KAEizKGAqYXI4ns6Z0GC91UKLEUg5OqyTPuEY7y8OnrSpauz2a6WAS+K NuZ9sdtCCvrFCAWjC8Z6NYOb9+PLOgdrjJXs3pt7 -----END CERTIFICATE-----Generated at Thu Mar 26 20:46:21 2026 by rpki-client