$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa File: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (raw, json) Hash identifier: ac+pTouEjojvRH9x31YqC69WCvHAHpMyIgDD/FHq+TY= Subject key identifier: 7D:B2:F4:73:54:18:B1:08:1E:9C:E8:80:36:57:C8:E4:03:60:B6:BA Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 2BB9960B0A78C324C6D1BEF43B86349C24FF3FDD Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa Signing time: Fri 20 Mar 2026 10:02:44 +0000 ROA not before: Fri 20 Mar 2026 09:57:44 +0000 ROA not after: Fri 19 Mar 2027 10:02:44 +0000 asID: 59133 IP address blocks: 103.43.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b9:96:0b:0a:78:c3:24:c6:d1:be:f4:3b:86:34:9c:24:ff:3f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Mar 20 09:57:44 2026 GMT Not After : Mar 19 10:02:44 2027 GMT Subject: CN=7DB2F4735418B1081E9CE8803657C8E40360B6BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:2a:06:85:a3:b8:31:97:c6:a4:7a:df:96: 59:80:8b:9e:cc:b2:62:6e:4a:1d:47:e6:f4:76:e5: e6:24:ff:38:0d:8e:47:e2:58:4d:8f:45:10:ac:bb: d2:75:a4:db:4b:64:49:a8:04:53:66:e5:f4:4f:b7: 06:5e:86:f0:0f:6c:ad:72:e5:e1:37:ff:7f:95:df: 1c:a3:f1:d3:22:e3:ed:2b:38:e6:42:57:18:27:14: 0d:0f:5a:b0:0a:73:b0:69:50:21:05:c7:96:e7:af: dc:2c:43:0b:ed:b6:e1:ed:4c:94:09:92:2b:d7:d8: e9:c8:52:22:fc:83:e0:96:90:87:24:d6:8b:fe:59: 32:4e:34:d6:6c:b3:9f:0b:59:cc:0e:2c:d7:ed:06: a1:6c:67:61:32:00:d1:6f:fe:39:c4:a6:27:e6:f5: 73:78:cb:f9:d4:54:d4:a3:0c:b4:55:b1:26:2d:28: 7a:0a:29:12:52:47:d3:a2:05:7a:b0:7b:69:7a:71: e1:b5:df:38:af:d0:9b:ea:92:51:84:47:8c:a2:3a: cf:2c:87:3f:4a:a2:8f:96:96:e5:47:fc:f5:fa:ed: b0:f4:b9:b5:42:48:90:5d:c1:44:16:50:a5:60:a2: f4:b5:3f:56:85:c9:25:64:3c:0e:ef:45:05:49:12: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B2:F4:73:54:18:B1:08:1E:9C:E8:80:36:57:C8:E4:03:60:B6:BA X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.1.0/24 Signature Algorithm: sha256WithRSAEncryption 02:17:70:89:a5:7f:7e:89:f4:78:ce:c2:36:6e:40:64:53:1b: ec:fd:c8:da:50:d8:de:b1:c4:f2:e5:f2:75:21:73:dd:d2:15: 7f:d7:86:4b:64:91:a3:21:b1:2a:96:d1:88:3c:80:4f:8b:93: 95:a5:1f:9d:5e:5e:4b:f2:4a:27:dc:46:86:b8:b1:4d:51:31: 73:58:2b:ed:7e:da:2e:1f:7c:ac:a1:95:42:b7:b5:8b:5c:c3: 0c:28:a9:bf:6f:40:39:ad:20:60:4b:46:10:ce:f7:7e:c4:23: 57:de:74:54:cd:5e:0e:30:5f:7b:d2:38:74:0b:91:db:12:94: 16:15:d2:b1:a9:5e:3d:1f:67:bc:26:37:6c:a1:e3:3a:60:02: 31:ac:4d:5f:a8:b8:ad:8e:41:0f:e0:51:11:db:fa:7d:0d:1e: 6a:c8:b8:8d:51:2d:a7:a9:6f:83:2b:d9:0c:86:89:15:94:22: fe:22:25:1a:48:69:20:45:74:b7:20:87:38:48:6c:b5:92:94: 54:00:b0:c2:e8:04:2b:1d:49:ca:4a:23:93:29:56:53:23:d1: fb:76:d1:38:9e:5b:7e:33:e9:2b:a5:f4:c0:02:ae:0a:7c:ca: 04:4f:9f:8c:c9:ac:81:a0:e7:5b:3a:8e:b5:ee:9d:77:cd:9f: 1b:14:22:ec -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUK7mWCwp4wyTG0b70O4Y0nCT/P90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNjAzMjAwOTU3NDRaFw0yNzAzMTkxMDAyNDRaMDMxMTAvBgNV BAMTKDdEQjJGNDczNTQxOEIxMDgxRTlDRTg4MDM2NTdDOEU0MDM2MEI2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGVCoGhaO4MZfGpHrfllmAi57M smJuSh1H5vR25eYk/zgNjkfiWE2PRRCsu9J1pNtLZEmoBFNm5fRPtwZehvAPbK1y 5eE3/3+V3xyj8dMi4+0rOOZCVxgnFA0PWrAKc7BpUCEFx5bnr9wsQwvttuHtTJQJ kivX2OnIUiL8g+CWkIck1ov+WTJONNZss58LWcwOLNftBqFsZ2EyANFv/jnEpifm 9XN4y/nUVNSjDLRVsSYtKHoKKRJSR9OiBXqwe2l6ceG13ziv0JvqklGER4yiOs8s hz9Koo+WluVH/PX67bD0ubVCSJBdwUQWUKVgovS1P1aFySVkPA7vRQVJEl/DAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUfbL0c1QYsQgenOiANlfI5ANgtrowHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAwZWM0M2ItNDMzZC00MDdkLWJk ZWUtZWVhNjIxNmE2ZmY0LzAvMzEzMDMzMmUzNDMzMmUzMTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM1MzkzMTMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnKwEwDQYJKoZIhvcNAQEL BQADggEBAAIXcImlf36J9HjOwjZuQGRTG+z9yNpQ2N6xxPLl8nUhc93SFX/Xhktk kaMhsSqW0Yg8gE+Lk5WlH51eXkvySifcRoa4sU1RMXNYK+1+2i4ffKyhlUK3tYtc wwwoqb9vQDmtIGBLRhDO937EI1fedFTNXg4wX3vSOHQLkdsSlBYV0rGpXj0fZ7wm N2yh4zpgAjGsTV+ouK2OQQ/gURHb+n0NHmrIuI1RLaepb4Mr2QyGiRWUIv4iJRpI aSBFdLcghzhIbLWSlFQAsMLoBCsdScpKI5MpVlMj0ft20TieW34z6Sul9MACrgp8 ygRPn4zJrIGg51s6jrXunXfNnxsUIuw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:26 2026 by rpki-client