$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/3130332e35332e32382e302f32332d3234203d3e20313339393535.roa File: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (raw, json) Hash identifier: MbXRfNX9m/ZxE9UsrWroW0O0GkPhUkArIfxuzIVXAp4= Subject key identifier: B6:4B:3D:F7:8B:C5:59:1B:50:4B:73:7F:AE:6F:EF:34:7C:EF:67:3B Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 283B76A42A6985DD83EC79EAA03E3705EEE1E073 Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/3130332e35332e32382e302f32332d3234203d3e20313339393535.roa Signing time: Wed 11 Mar 2026 05:00:02 +0000 ROA not before: Wed 11 Mar 2026 04:55:02 +0000 ROA not after: Wed 10 Mar 2027 05:00:02 +0000 asID: 139955 IP address blocks: 103.53.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:3b:76:a4:2a:69:85:dd:83:ec:79:ea:a0:3e:37:05:ee:e1:e0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Mar 11 04:55:02 2026 GMT Not After : Mar 10 05:00:02 2027 GMT Subject: CN=B64B3DF78BC5591B504B737FAE6FEF347CEF673B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:c3:ab:22:b4:06:ab:94:9c:43:8c:11:77: 39:d9:0d:fb:1a:a6:61:c4:83:e8:8c:6a:e3:ba:24: 4f:37:ad:19:40:f9:21:05:f3:33:f9:0f:b0:49:d0: b5:3e:71:a0:4a:08:da:dd:f7:1e:00:3d:18:02:8f: 80:49:31:99:05:93:f5:25:6b:52:31:fd:8f:c5:fa: 96:94:b9:7a:ed:f9:00:18:de:04:35:0e:54:2c:9a: b7:08:0a:e5:22:12:39:a4:3d:3a:3d:8d:26:5c:bf: b8:c0:26:a0:9c:6b:cd:77:e9:0c:f6:31:56:01:4c: eb:d3:41:56:a8:6c:1f:81:51:0a:3f:04:a2:c5:e4: 2d:69:d1:7e:a3:70:08:dc:c7:32:a1:ba:69:1c:93: 49:db:fc:55:fa:0f:1c:9b:1e:c7:ee:5d:39:0c:43: b1:09:fc:11:94:19:6d:37:f5:e4:73:9a:87:cf:7a: 2e:7d:a4:3e:c6:f6:56:2d:8e:27:bd:45:72:90:1c: b0:c6:a9:cc:52:de:97:13:ad:e9:5e:2b:87:4c:d0: c8:73:29:13:d8:8a:11:61:2b:92:de:95:9e:02:9b: 35:3d:31:fe:da:60:74:b8:d8:bf:23:88:60:dc:aa: 0b:10:2b:4a:66:92:61:06:3d:87:34:25:e9:cb:00: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4B:3D:F7:8B:C5:59:1B:50:4B:73:7F:AE:6F:EF:34:7C:EF:67:3B X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/3130332e35332e32382e302f32332d3234203d3e20313339393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.53.28.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:47:a6:3f:bc:92:36:a2:64:a8:25:b0:0b:e4:1c:8f:a5:03: 0f:9c:75:fe:61:52:fa:1a:fb:99:49:11:d6:71:9d:bc:7c:39: ea:85:28:fd:1b:ec:10:fd:96:04:64:d1:8e:5e:d3:24:be:da: 6d:7d:ce:e2:2a:f0:d0:22:4a:03:66:2f:a8:5a:88:90:b1:5a: fd:80:40:59:05:71:c2:b6:cc:22:e3:d2:37:54:1b:51:2f:af: 6a:f8:8e:71:23:95:ea:53:f3:80:cf:7e:65:cb:a2:0c:e0:bf: 19:c6:31:82:33:87:44:c0:94:be:e3:bd:15:dc:ec:56:92:16: 9f:01:69:d9:71:e5:90:5d:31:ad:c9:8d:c6:7c:1e:6c:c1:3e: 89:f2:27:1c:12:8e:ba:f5:fd:51:74:f1:c4:53:fe:82:74:59: b5:4d:fa:5b:25:74:eb:35:23:63:65:7b:fe:fb:9e:0b:45:5a: 14:c7:f3:61:d1:f0:89:35:8a:cb:81:a0:cc:1e:43:65:e1:3a: 3c:cd:72:92:7a:65:3f:33:9f:4a:ef:30:07:a7:e5:38:3b:13: 53:32:2d:99:19:5f:c2:b0:5f:2e:37:10:a4:1b:23:9e:bd:e0: f6:93:cc:93:5c:59:69:2c:b1:4e:74:d3:97:84:5f:15:dd:27: f8:8e:7b:d1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKDt2pCpphd2D7HnqoD43Be7h4HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNjAzMTEwNDU1MDJaFw0yNzAzMTAwNTAwMDJaMDMxMTAvBgNV BAMTKEI2NEIzREY3OEJDNTU5MUI1MDRCNzM3RkFFNkZFRjM0N0NFRjY3M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmcOrIrQGq5ScQ4wRdznZDfsa pmHEg+iMauO6JE83rRlA+SEF8zP5D7BJ0LU+caBKCNrd9x4APRgCj4BJMZkFk/Ul a1Ix/Y/F+paUuXrt+QAY3gQ1DlQsmrcICuUiEjmkPTo9jSZcv7jAJqCca8136Qz2 MVYBTOvTQVaobB+BUQo/BKLF5C1p0X6jcAjcxzKhumkck0nb/FX6DxybHsfuXTkM Q7EJ/BGUGW039eRzmofPei59pD7G9lYtjie9RXKQHLDGqcxS3pcTreleK4dM0Mhz KRPYihFhK5LelZ4CmzU9Mf7aYHS42L8jiGDcqgsQK0pmkmEGPYc0JenLACTBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUtks994vFWRtQS3N/rm/vNHzvZzswHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViYjQzZWM4LWY1ODItNDAyNS04 ZjM2LTNjZWE1MzlkMGIwOS8wLzMxMzAzMzJlMzUzMzJlMzIzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzOTM5MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc1HDANBgkqhkiG 9w0BAQsFAAOCAQEAfkemP7ySNqJkqCWwC+Qcj6UDD5x1/mFS+hr7mUkR1nGdvHw5 6oUo/RvsEP2WBGTRjl7TJL7abX3O4irw0CJKA2YvqFqIkLFa/YBAWQVxwrbMIuPS N1QbUS+vaviOcSOV6lPzgM9+ZcuiDOC/GcYxgjOHRMCUvuO9FdzsVpIWnwFp2XHl kF0xrcmNxnwebME+ifInHBKOuvX9UXTxxFP+gnRZtU36WyV06zUjY2V7/vueC0Va FMfzYdHwiTWKy4GgzB5DZeE6PM1yknplPzOfSu8wB6flODsTUzItmRlfwrBfLjcQ pBsjnr3g9pPMk1xZaSyxTnTTl4RfFd0n+I570Q== -----END CERTIFICATE-----Generated at Thu Mar 26 19:47:34 2026 by rpki-client