$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa File: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (raw, json) Hash identifier: dKh9sdtQ/yvQ7BxDxof7l0iHZZ9i1Xhkr36k5+LOKm0= Subject key identifier: 8A:D4:BB:36:0A:D2:42:7D:9B:F1:11:6F:D6:60:87:96:2F:8B:FD:9E Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 079163BA5C0D3F92828B605ADF0230F13F7A1675 Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa Signing time: Fri 20 Mar 2026 10:02:44 +0000 ROA not before: Fri 20 Mar 2026 09:57:44 +0000 ROA not after: Fri 19 Mar 2027 10:02:44 +0000 asID: 59133 IP address blocks: 103.243.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:91:63:ba:5c:0d:3f:92:82:8b:60:5a:df:02:30:f1:3f:7a:16:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Mar 20 09:57:44 2026 GMT Not After : Mar 19 10:02:44 2027 GMT Subject: CN=8AD4BB360AD2427D9BF1116FD66087962F8BFD9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:52:27:31:56:99:3e:d4:6f:68:48:18:4d:17: c9:0f:d1:a9:a3:6d:42:76:30:5e:56:2a:e3:ba:1b: 35:b8:78:cd:ea:5c:4f:e7:25:88:ab:a0:02:69:b9: 1f:51:83:65:db:b3:c0:b6:f7:34:ae:d6:0b:05:4a: 11:98:50:10:0b:f6:3f:ed:c2:5d:70:3c:0e:ee:7a: 19:5a:fb:18:71:b8:12:44:68:b3:85:62:75:33:e3: 49:48:70:49:32:08:6f:57:1e:5a:c5:77:7e:05:2b: 4d:de:5f:7b:0d:a2:57:6b:30:15:2d:23:c9:16:27: 53:08:cc:a4:99:a9:ea:28:a7:f1:e2:50:f5:83:dd: ac:8c:63:e6:cd:ab:43:3f:df:07:91:43:a3:3c:3d: aa:d5:e2:ee:49:79:d6:1d:ae:83:3c:40:b6:28:71: 8e:81:e3:38:ce:20:11:3a:ab:90:b9:8b:30:d8:3c: 27:4f:62:2e:8f:bf:5c:f1:da:38:0d:2e:8d:95:e6: 56:00:55:bd:ea:52:a8:99:1d:be:a0:74:48:12:98: 58:c9:0a:0f:c4:13:23:5b:fc:cc:ba:1e:ec:55:32: b7:79:d9:47:56:72:4e:c7:a6:e3:f6:b5:fc:81:ca: db:c5:77:da:5f:16:22:df:a7:ef:a9:ac:48:62:12: 05:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D4:BB:36:0A:D2:42:7D:9B:F1:11:6F:D6:60:87:96:2F:8B:FD:9E X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.243.247.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:1f:67:87:d2:e6:88:bb:db:d3:83:00:c8:4e:53:64:d0:59: 55:a5:db:58:80:ff:a1:b3:28:20:17:6d:33:61:27:45:c4:c8: 88:28:2b:c8:82:28:d4:97:95:fa:95:7f:d2:42:d7:3e:99:5a: f3:6b:c6:18:fa:3f:de:e3:ac:92:98:75:24:00:13:1a:e5:43: e3:57:a1:e0:fc:af:d8:3d:ff:aa:49:b7:eb:90:51:42:74:17: 38:7e:b2:d9:d7:4d:32:a2:6e:87:cc:fa:49:3e:0a:e0:5b:41: b9:f5:68:7b:e8:59:e2:42:75:b7:8a:09:19:df:1c:15:72:ee: 59:a3:64:ec:0e:4b:99:9c:78:92:2e:5a:d4:53:fa:89:c4:d4: 71:22:a8:77:88:d8:6e:c7:df:ad:27:67:2c:4c:d1:75:d1:7c: 9f:00:a7:06:83:e8:1b:08:fa:5f:00:c5:31:fb:ac:94:b2:48: 66:b0:b1:07:be:1b:5e:28:6c:9e:d8:45:85:6e:a9:23:0f:11: 28:33:91:4e:d1:41:8a:6b:ec:9c:4f:7a:2d:d6:c5:39:d1:aa: 43:4a:c7:7c:ef:3c:10:50:c4:33:40:3f:6f:8a:b0:4b:05:be: 20:22:d7:26:35:d2:ef:d7:0f:f5:0d:bb:1d:ef:6f:26:48:98: bb:79:0b:81 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUB5FjulwNP5KCi2Ba3wIw8T96FnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNjAzMjAwOTU3NDRaFw0yNzAzMTkxMDAyNDRaMDMxMTAvBgNV BAMTKDhBRDRCQjM2MEFEMjQyN0Q5QkYxMTE2RkQ2NjA4Nzk2MkY4QkZEOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUicxVpk+1G9oSBhNF8kP0amj bUJ2MF5WKuO6GzW4eM3qXE/nJYiroAJpuR9Rg2Xbs8C29zSu1gsFShGYUBAL9j/t wl1wPA7uehla+xhxuBJEaLOFYnUz40lIcEkyCG9XHlrFd34FK03eX3sNoldrMBUt I8kWJ1MIzKSZqeoop/HiUPWD3ayMY+bNq0M/3weRQ6M8ParV4u5JedYdroM8QLYo cY6B4zjOIBE6q5C5izDYPCdPYi6Pv1zx2jgNLo2V5lYAVb3qUqiZHb6gdEgSmFjJ Cg/EEyNb/My6HuxVMrd52UdWck7HpuP2tfyBytvFd9pfFiLfp++prEhiEgWvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUitS7NgrSQn2b8RFv1mCHli+L/Z4wHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMGVjNDNiLTQzM2QtNDA3ZC1i ZGVlLWVlYTYyMTZhNmZmNC8wLzMxMzAzMzJlMzIzNDMzMmUzMjM0MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzEzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/P3MA0GCSqG SIb3DQEBCwUAA4IBAQANH2eH0uaIu9vTgwDITlNk0FlVpdtYgP+hsyggF20zYSdF xMiIKCvIgijUl5X6lX/SQtc+mVrza8YY+j/e46ySmHUkABMa5UPjV6Hg/K/YPf+q SbfrkFFCdBc4frLZ100yom6HzPpJPgrgW0G59Wh76FniQnW3igkZ3xwVcu5Zo2Ts DkuZnHiSLlrUU/qJxNRxIqh3iNhux9+tJ2csTNF10XyfAKcGg+gbCPpfAMUx+6yU skhmsLEHvhteKGye2EWFbqkjDxEoM5FO0UGKa+ycT3ot1sU50apDSsd87zwQUMQz QD9virBLBb4gItcmNdLv1w/1Dbsd728mSJi7eQuB -----END CERTIFICATE-----Generated at Thu Mar 26 18:50:05 2026 by rpki-client