$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa File: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (raw, json) Hash identifier: QFVEqtesaTrmTJQnAhXdEFMlhzgCjQGVydaTISBOk4I= Subject key identifier: BE:A1:CB:68:E0:84:A0:60:35:3C:49:0A:71:B2:7C:3D:F4:EF:38:CD Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 17BA087CA145AB0EB12E4766D656EDC0C209A330 Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa Signing time: Sun 08 Mar 2026 21:00:02 +0000 ROA not before: Sun 08 Mar 2026 20:55:02 +0000 ROA not after: Sun 07 Mar 2027 21:00:02 +0000 asID: 142342 IP address blocks: 103.169.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ba:08:7c:a1:45:ab:0e:b1:2e:47:66:d6:56:ed:c0:c2:09:a3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Mar 8 20:55:02 2026 GMT Not After : Mar 7 21:00:02 2027 GMT Subject: CN=BEA1CB68E084A060353C490A71B27C3DF4EF38CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:82:31:09:31:ea:25:cd:f8:e0:9a:09:2d: 8c:cd:ce:d5:f2:d6:96:13:3d:71:cb:a9:02:e4:0a: 1d:1c:96:bc:cc:c9:05:0e:21:4f:aa:7f:a6:a3:24: 65:40:2b:62:70:9e:3f:b6:ac:87:6b:d9:08:92:36: 20:93:8d:85:14:10:1d:2f:f3:8c:57:09:43:2a:3a: be:0e:20:9e:64:1a:28:61:dc:d4:15:d5:6d:f0:2d: 0e:f6:87:63:0d:31:4f:b3:f1:87:5a:1d:5d:93:2d: 0b:0f:f2:7d:de:7e:f8:ce:35:b6:e1:fb:7b:09:ff: f9:b5:9d:17:f0:69:97:25:a5:60:f9:ed:33:34:c6: 6c:72:7a:da:40:a7:0a:a5:00:c6:53:9c:cb:63:36: 02:14:6d:ce:ee:56:90:1b:fe:e7:28:89:3a:53:68: 51:d0:61:a2:4c:3e:a1:d6:ea:af:dd:ad:cc:ee:da: 78:16:8c:61:d0:d1:65:b0:85:a0:58:ca:d3:71:ed: c2:4d:af:b2:04:55:44:93:75:5e:bf:78:6a:e4:06: 17:e2:8c:b8:9f:03:c1:03:1f:18:50:82:ab:20:2e: 9f:53:ec:3b:fc:70:b2:a6:60:c2:b6:19:4a:92:55: 74:01:05:26:48:36:2d:13:d1:c5:c5:50:1b:6f:b1: 89:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A1:CB:68:E0:84:A0:60:35:3C:49:0A:71:B2:7C:3D:F4:EF:38:CD X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.128.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:85:c7:76:51:d0:03:7a:d7:9a:ad:3e:5d:2c:b0:8e:36:ed: e6:b1:1c:98:9f:d4:15:46:d3:b8:d0:44:ef:97:9c:ce:33:a1: aa:08:6d:38:4f:bc:39:27:63:9a:d7:e0:95:0c:91:fe:b3:76: 8c:c0:dd:d4:84:03:58:ea:38:56:d6:c0:83:03:8f:7f:ac:02: 4b:7f:28:ef:4d:d3:75:46:61:01:72:3a:e7:72:b1:8b:b3:7f: 42:b3:3b:5f:66:a6:16:d5:1a:ca:85:30:5a:3a:38:78:95:da: f8:38:6c:70:84:98:d5:40:dc:bd:8b:fc:6e:18:e1:32:bc:38: 52:94:6f:e3:66:b4:2f:9f:b1:ff:ec:10:44:40:83:20:3e:39: c3:3e:b9:d9:be:ac:69:e3:3d:79:7c:8b:71:9f:01:c7:20:ab: 70:7b:1d:8f:d4:44:63:e5:87:08:f2:17:32:e5:06:8e:ad:ad: 2d:43:9a:26:63:04:98:8b:d8:3e:64:7e:2c:0e:42:18:d3:f2: 09:8f:87:df:b0:85:b8:aa:e3:3f:c0:83:c9:52:34:86:7f:a3: c1:77:66:55:0c:8d:93:71:c6:85:41:11:d9:17:2d:d4:27:06: ab:13:9b:e3:c8:fa:05:42:97:6c:3e:87:a0:b3:52:17:fb:11: 4d:fe:2b:15 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUF7oIfKFFqw6xLkdm1lbtwMIJozAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNjAzMDgyMDU1MDJaFw0yNzAzMDcyMTAwMDJaMDMxMTAvBgNV BAMTKEJFQTFDQjY4RTA4NEEwNjAzNTNDNDkwQTcxQjI3QzNERjRFRjM4Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ2IIxCTHqJc344JoJLYzNztXy 1pYTPXHLqQLkCh0clrzMyQUOIU+qf6ajJGVAK2Jwnj+2rIdr2QiSNiCTjYUUEB0v 84xXCUMqOr4OIJ5kGihh3NQV1W3wLQ72h2MNMU+z8YdaHV2TLQsP8n3efvjONbbh +3sJ//m1nRfwaZclpWD57TM0xmxyetpApwqlAMZTnMtjNgIUbc7uVpAb/ucoiTpT aFHQYaJMPqHW6q/drczu2ngWjGHQ0WWwhaBYytNx7cJNr7IEVUSTdV6/eGrkBhfi jLifA8EDHxhQgqsgLp9T7Dv8cLKmYMK2GUqSVXQBBSZINi0T0cXFUBtvsYl3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUvqHLaOCEoGA1PEkKcbJ8PfTvOM0wHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiMGUzNjRiLTc3OWUtNDBkNS1h ZDBlLWQ5MTc4Nzc4ZDZiMS8wLzMxMzAzMzJlMzEzNjM5MmUzMTMyMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM0MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqYAwDQYJ KoZIhvcNAQELBQADggEBAB6Fx3ZR0AN615qtPl0ssI427eaxHJif1BVG07jQRO+X nM4zoaoIbThPvDknY5rX4JUMkf6zdozA3dSEA1jqOFbWwIMDj3+sAkt/KO9N03VG YQFyOudysYuzf0KzO19mphbVGsqFMFo6OHiV2vg4bHCEmNVA3L2L/G4Y4TK8OFKU b+NmtC+fsf/sEERAgyA+OcM+udm+rGnjPXl8i3GfAccgq3B7HY/URGPlhwjyFzLl Bo6trS1DmiZjBJiL2D5kfiwOQhjT8gmPh9+whbiq4z/Ag8lSNIZ/o8F3ZlUMjZNx xoVBEdkXLdQnBqsTm+PI+gVCl2w+h6CzUhf7EU3+KxU= -----END CERTIFICATE-----Generated at Thu Mar 26 21:05:09 2026 by rpki-client