$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/3130332e3133352e34382e302f32322d3234203d3e203338333230.roa File: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: lW1S43/pcoUgHysASo7Fj4hF5yGyOMccC2jRCS55KX8= Subject key identifier: 05:1B:29:79:67:A3:0F:65:14:A9:3B:7D:15:91:80:0C:4E:AD:32:C7 Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 5B84B04AB6A216A735A008D2A2C582A1E8371CAC Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/3130332e3133352e34382e302f32322d3234203d3e203338333230.roa Signing time: Wed 18 Mar 2026 06:02:32 +0000 ROA not before: Wed 18 Mar 2026 05:57:32 +0000 ROA not after: Wed 17 Mar 2027 06:02:32 +0000 asID: 38320 IP address blocks: 103.135.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:84:b0:4a:b6:a2:16:a7:35:a0:08:d2:a2:c5:82:a1:e8:37:1c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Mar 18 05:57:32 2026 GMT Not After : Mar 17 06:02:32 2027 GMT Subject: CN=051B297967A30F6514A93B7D1591800C4EAD32C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:f9:fe:72:2e:4e:a1:8c:f6:a3:77:a4:8c: f1:27:3e:8a:2a:88:c5:4f:c9:d5:ac:b9:3d:a1:31: 64:c2:40:e1:bd:12:93:c3:f9:5e:15:b4:d9:74:fb: ad:5d:1a:00:30:48:d5:f3:58:9c:46:19:5b:21:25: 80:68:d1:27:bd:60:ee:28:24:41:14:f9:94:3c:9b: 5f:0c:30:bf:b3:12:01:91:22:44:22:e4:ae:7c:7d: 31:fc:30:f2:2e:83:93:b7:d4:b4:d2:c8:23:1b:da: 6a:f8:a5:61:e3:59:c0:07:e3:f2:b6:db:d7:d3:07: d4:8b:b3:f0:2e:d3:a6:dd:11:77:7c:33:13:8b:7a: 61:68:77:ed:6c:2f:c9:1f:72:63:92:50:b7:97:ff: 9b:5e:99:bb:d8:a2:67:b7:52:8a:2b:c1:3d:38:5f: d9:79:5f:7d:e5:59:0f:8e:73:2f:a7:b5:a0:b3:7b: 32:d8:32:ff:f0:1f:74:1c:4d:da:a2:9d:84:3d:0c: c7:7f:32:80:df:6b:c1:f9:c8:c1:89:d2:78:f3:29: 92:ce:f9:29:0f:25:bc:d2:b4:62:de:5d:5a:d0:cf: a3:1a:c8:9e:5a:df:24:a0:3f:c1:53:93:55:6b:ef: 36:7f:8d:8b:0d:cc:33:79:0d:a1:27:30:60:c6:08: fe:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1B:29:79:67:A3:0F:65:14:A9:3B:7D:15:91:80:0C:4E:AD:32:C7 X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/3130332e3133352e34382e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.48.0/22 Signature Algorithm: sha256WithRSAEncryption ae:2a:5a:97:1f:d8:06:d1:d3:cc:41:4d:4c:4e:e2:79:d1:57: 0e:a3:5b:e9:56:4a:4e:56:86:24:82:5d:69:b0:64:cb:d3:69: cd:76:4c:0d:15:b5:fd:e6:3d:56:72:47:45:c6:d8:a5:02:b2: 0a:00:32:51:97:47:5e:73:e4:69:06:7e:7d:25:5d:1e:b7:43: a8:2f:e6:5f:af:da:ec:41:6e:64:64:68:09:54:29:51:c8:fc: 9c:cb:fc:ac:a8:16:c5:84:2b:21:18:8c:55:e7:fd:4b:d5:ff: 7f:29:a5:a6:21:d2:b9:80:e0:89:e4:ff:86:57:8f:84:9d:d5: 32:8d:1e:ec:25:73:36:93:1c:94:af:07:8d:3d:66:b0:58:bb: 7c:c6:56:93:4c:5e:25:77:38:07:e7:18:43:3e:be:11:15:98: cd:88:68:5b:5b:66:2d:07:d9:c7:cf:1b:2c:71:73:d9:a5:6e: 05:c8:20:11:53:06:1f:9b:de:0f:47:e8:2f:55:ad:af:1e:4c: 0d:19:c8:ff:cd:12:2e:51:06:94:89:b4:ce:74:ec:05:93:dc: 94:db:89:c9:6f:3a:2f:96:e3:77:74:99:ad:67:9a:f6:31:1a: 6e:7d:8a:82:ce:ef:ea:f9:3e:cb:7b:8c:df:54:a1:96:cc:1c: ae:8f:db:3a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUW4SwSraiFqc1oAjSosWCoeg3HKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNjAzMTgwNTU3MzJaFw0yNzAzMTcwNjAyMzJaMDMxMTAvBgNV BAMTKDA1MUIyOTc5NjdBMzBGNjUxNEE5M0I3RDE1OTE4MDBDNEVBRDMyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYkfn+ci5OoYz2o3ekjPEnPooq iMVPydWsuT2hMWTCQOG9EpPD+V4VtNl0+61dGgAwSNXzWJxGGVshJYBo0Se9YO4o JEEU+ZQ8m18MML+zEgGRIkQi5K58fTH8MPIug5O31LTSyCMb2mr4pWHjWcAH4/K2 29fTB9SLs/Au06bdEXd8MxOLemFod+1sL8kfcmOSULeX/5tembvYome3UoorwT04 X9l5X33lWQ+Ocy+ntaCzezLYMv/wH3QcTdqinYQ9DMd/MoDfa8H5yMGJ0njzKZLO +SkPJbzStGLeXVrQz6MayJ5a3ySgP8FTk1Vr7zZ/jYsNzDN5DaEnMGDGCP5BAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUBRspeWejD2UUqTt9FZGADE6tMscwHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRjY2MyYWY0LWE2MmQtNDcwOC1i Njg4LTE4OTI1OTRiYTk4OS8wLzMxMzAzMzJlMzEzMzM1MmUzNDM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmeHMDANBgkqhkiG 9w0BAQsFAAOCAQEAripalx/YBtHTzEFNTE7iedFXDqNb6VZKTlaGJIJdabBky9Np zXZMDRW1/eY9VnJHRcbYpQKyCgAyUZdHXnPkaQZ+fSVdHrdDqC/mX6/a7EFuZGRo CVQpUcj8nMv8rKgWxYQrIRiMVef9S9X/fymlpiHSuYDgieT/hlePhJ3VMo0e7CVz NpMclK8HjT1msFi7fMZWk0xeJXc4B+cYQz6+ERWYzYhoW1tmLQfZx88bLHFz2aVu BcggEVMGH5veD0foL1Wtrx5MDRnI/80SLlEGlIm0znTsBZPclNuJyW86L5bjd3SZ rWea9jEabn2Kgs7v6vk+y3uM31Shlswcro/bOg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:38:45 2026 by rpki-client