$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38382e302f32342d3234203d3e20313531353732.roa File: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (raw, json) Hash identifier: IyPHx8aV4XIvWehNSAX5HTGcu8KRFs0fdi9byvOJbdI= Subject key identifier: AE:0B:12:A7:54:7E:10:E9:2A:7E:FA:A8:6A:1A:CF:BD:67:E6:CA:07 Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 641FC35C1EBDE4F91D92E98CD192835C552D1F8B Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38382e302f32342d3234203d3e20313531353732.roa Signing time: Tue 24 Mar 2026 12:00:01 +0000 ROA not before: Tue 24 Mar 2026 11:55:01 +0000 ROA not after: Tue 23 Mar 2027 12:00:01 +0000 asID: 151572 IP address blocks: 103.60.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 22:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1f:c3:5c:1e:bd:e4:f9:1d:92:e9:8c:d1:92:83:5c:55:2d:1f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Mar 24 11:55:01 2026 GMT Not After : Mar 23 12:00:01 2027 GMT Subject: CN=AE0B12A7547E10E92A7EFAA86A1ACFBD67E6CA07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:42:df:b4:ad:b9:57:72:ac:da:1a:2e:92:bf: 55:8c:0a:a0:71:1b:0f:7c:7b:a8:ed:40:4d:47:11: da:25:85:f0:e4:63:fe:f8:94:79:2e:fd:2b:93:52: cc:25:27:13:ad:50:c7:dc:d4:eb:d9:36:31:01:79: ac:b0:1e:e1:22:d4:aa:27:b8:f3:f8:b8:01:d9:2d: 68:c4:0e:13:7b:de:ce:7b:1f:09:c7:87:9b:c2:b6: 17:54:9b:79:1f:95:06:24:80:b4:86:a1:e4:e8:33: 8e:b2:42:4d:c0:92:64:8a:1a:44:af:27:67:96:9d: 44:9d:56:e0:bb:e2:39:ec:1b:f1:2a:82:5c:ce:cd: 20:db:f2:65:12:54:2c:3e:53:5e:e1:31:96:ad:e4: 96:e0:c8:ba:92:26:5f:1d:ff:40:d4:34:41:1c:7e: 13:a1:ae:33:63:85:77:d4:a7:7b:a8:90:75:7e:fa: b9:7f:e7:da:06:bb:50:21:5c:93:2f:b8:29:74:ea: 9d:c0:48:d7:19:5b:e7:bf:6b:92:03:9f:3b:2c:7c: 5e:5c:58:61:22:7b:91:0e:ed:f7:8e:09:2f:16:08: bb:9b:c0:e3:81:8d:80:95:ee:de:87:99:d5:55:73: 76:9b:05:50:ad:f4:60:8c:9e:25:11:3f:4f:89:af: af:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0B:12:A7:54:7E:10:E9:2A:7E:FA:A8:6A:1A:CF:BD:67:E6:CA:07 X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38382e302f32342d3234203d3e20313531353732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.60.88.0/24 Signature Algorithm: sha256WithRSAEncryption 52:f0:63:b8:e7:2c:bd:30:5b:2f:4f:a1:3c:c3:ef:a6:9a:de: ac:ed:48:8e:c5:a9:89:10:64:24:0f:37:3d:5d:1e:d6:56:79: bb:2c:96:8a:22:95:7d:cf:e0:07:6b:f6:08:fb:e7:65:1d:7c: 12:69:80:a4:9b:1c:37:bb:ba:9c:63:41:82:b8:a3:03:d7:d8: 3d:c9:cb:1e:6c:80:c4:0c:24:a9:84:c8:ed:6a:b9:16:84:e9: f7:21:c2:1e:3f:65:5a:c0:de:61:df:3e:1c:6a:3e:57:ce:61: 47:91:d3:34:b8:d0:42:ce:fa:7d:f5:7d:76:3e:51:62:23:ea: f7:82:ba:af:38:c0:16:8f:3f:07:2d:b8:cc:41:38:e9:06:c6: f0:4e:c9:fe:1a:88:ef:c5:f1:ca:09:f8:4c:89:9e:f5:49:be: a5:ef:ed:53:c4:60:76:03:4a:53:cd:db:50:7e:39:4c:70:90: 42:9e:5b:35:8e:16:03:7c:13:10:09:43:89:e5:e8:5b:b6:69: 71:ae:2b:d1:a9:cd:e3:dd:01:84:2e:34:6d:38:b2:e6:e1:34: a9:6a:09:d0:7d:d3:d6:74:f7:6f:c7:4d:6b:12:10:a0:a9:1f: af:f8:c3:57:1a:d7:f7:1a:b5:45:a7:ca:43:f1:e6:ff:69:36: 91:21:3d:d7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZB/DXB695PkdkumM0ZKDXFUtH4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNjAzMjQxMTU1MDFaFw0yNzAzMjMxMjAwMDFaMDMxMTAvBgNV BAMTKEFFMEIxMkE3NTQ3RTEwRTkyQTdFRkFBODZBMUFDRkJENjdFNkNBMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQt+0rblXcqzaGi6Sv1WMCqBx Gw98e6jtQE1HEdolhfDkY/74lHku/SuTUswlJxOtUMfc1OvZNjEBeaywHuEi1Kon uPP4uAHZLWjEDhN73s57HwnHh5vCthdUm3kflQYkgLSGoeToM46yQk3AkmSKGkSv J2eWnUSdVuC74jnsG/EqglzOzSDb8mUSVCw+U17hMZat5JbgyLqSJl8d/0DUNEEc fhOhrjNjhXfUp3uokHV++rl/59oGu1AhXJMvuCl06p3ASNcZW+e/a5IDnzssfF5c WGEie5EO7feOCS8WCLubwOOBjYCV7t6HmdVVc3abBVCt9GCMniURP0+Jr6/7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUrgsSp1R+EOkqfvqoahrPvWfmygcwHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3MTFhYTQ2LWYyOGUtNGM1NS1i OWJhLTdkNWJkYzk1YjRmNi8wLzMxMzAzMzJlMzYzMDJlMzgzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMTM1MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc8WDANBgkqhkiG 9w0BAQsFAAOCAQEAUvBjuOcsvTBbL0+hPMPvpprerO1IjsWpiRBkJA83PV0e1lZ5 uyyWiiKVfc/gB2v2CPvnZR18EmmApJscN7u6nGNBgrijA9fYPcnLHmyAxAwkqYTI 7Wq5FoTp9yHCHj9lWsDeYd8+HGo+V85hR5HTNLjQQs76ffV9dj5RYiPq94K6rzjA Fo8/By24zEE46QbG8E7J/hqI78Xxygn4TIme9Um+pe/tU8RgdgNKU83bUH45THCQ Qp5bNY4WA3wTEAlDieXoW7Zpca4r0anN490BhC40bTiy5uE0qWoJ0H3T1nT3b8dN axIQoKkfr/jDVxrX9xq1RafKQ/Hm/2k2kSE91w== -----END CERTIFICATE-----Generated at Fri Mar 27 08:11:32 2026 by rpki-client