$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa File: 3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa (raw, json) Hash identifier: C+HBXW4aP/jjAvOzAVNV699XcHbQGZO5MrB9N3xY3xk= Subject key identifier: 23:34:74:DC:6F:2B:34:7E:47:8A:F7:ED:EE:B1:C2:4A:9E:9A:AF:B6 Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Certificate serial: 7747C844A2ACFE4361CF4039530010A0C605864F Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa Signing time: Sun 08 Mar 2026 16:00:02 +0000 ROA not before: Sun 08 Mar 2026 15:55:02 +0000 ROA not after: Sun 07 Mar 2027 16:00:02 +0000 asID: 45725 IP address blocks: 103.245.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 01:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:47:c8:44:a2:ac:fe:43:61:cf:40:39:53:00:10:a0:c6:05:86:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Validity Not Before: Mar 8 15:55:02 2026 GMT Not After : Mar 7 16:00:02 2027 GMT Subject: CN=233474DC6F2B347E478AF7EDEEB1C24A9E9AAFB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:2b:29:5b:35:fe:38:0c:56:5e:0f:92:22: 55:03:b0:a4:be:98:cf:f4:05:da:34:a4:a2:12:5f: a7:54:a7:29:45:a1:bc:70:58:92:c8:85:c5:7a:8d: 43:1b:49:58:cc:83:3a:12:32:a9:b6:80:78:f1:b6: 41:bc:b1:46:1b:40:25:ea:00:83:b1:0a:41:b8:e6: 22:44:38:1e:2d:c3:51:5b:92:ed:e4:b2:e9:4c:5e: 8b:29:93:08:f0:26:d8:36:6c:e8:79:a6:7f:fe:a6: dd:fd:40:d8:42:55:87:23:a2:fa:32:6b:24:4e:7b: 8c:45:42:b4:a1:01:53:7a:66:3a:f9:70:57:d7:67: 7d:7f:e7:15:e8:7d:64:bf:7a:57:b3:63:3e:2a:8c: 6d:e0:f5:69:29:94:0a:58:d9:d5:1d:7b:d8:db:1d: 7a:ee:ad:d7:83:cd:74:e5:16:b7:cf:4e:da:f2:ca: a2:93:46:22:c6:29:fb:f2:43:b5:7e:e0:bc:63:4c: 91:20:bc:5e:d6:aa:ba:83:64:59:45:35:fb:6b:eb: 81:84:e4:93:48:ce:28:ac:e6:44:08:f1:3f:12:d5: 87:b3:8b:16:e3:25:ac:76:11:19:f5:c6:22:58:97: 1e:f2:54:90:5e:d3:1e:42:41:e9:ac:45:ff:d7:28: 66:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:34:74:DC:6F:2B:34:7E:47:8A:F7:ED:EE:B1:C2:4A:9E:9A:AF:B6 X509v3 Authority Key Identifier: keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.136.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:75:cc:94:41:49:ec:cb:6b:b0:b8:05:5a:04:bd:3e:45:8a: 29:58:d0:3e:98:18:0a:2e:2b:24:0a:36:5a:a7:ff:d7:e3:6c: 40:33:61:3e:fd:76:94:92:9f:f5:eb:21:63:a9:3d:f5:52:5d: 13:6b:a5:fc:c3:a7:95:1c:19:34:0c:a1:b7:07:e7:9f:66:fc: b5:58:34:a7:2d:50:7e:7a:cd:3a:7d:f0:53:10:ae:18:2e:5e: 9e:e4:0a:fb:7d:e0:84:71:c3:c2:ec:d9:aa:e9:d5:c6:04:1a: c1:b6:fd:ca:24:03:c3:b9:85:31:f5:e8:cf:d9:be:4e:24:61: 5a:47:91:46:5a:3e:8e:74:db:8f:86:c6:cd:6e:58:06:66:40: f6:b0:66:89:80:d5:df:4b:7b:d9:e8:26:08:15:4c:83:e5:03: 2b:46:54:70:25:1f:47:7d:c1:a0:54:a0:9c:dd:61:59:14:76: 15:66:dd:33:12:ec:07:c9:f4:30:9c:3f:30:d9:67:2d:f0:c5: 14:e0:89:3f:61:3c:20:8e:d0:ea:d8:64:4e:ce:ca:56:8d:f1: b9:ff:0c:73:eb:f2:0d:72:2c:ad:57:3d:67:2d:e0:2f:52:ef: ea:b5:fc:7b:22:76:64:aa:81:cf:98:2d:d2:e1:ba:90:1f:c2: 78:b0:72:8d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUd0fIRKKs/kNhz0A5UwAQoMYFhk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy NzQ1ODEwMzAeFw0yNjAzMDgxNTU1MDJaFw0yNzAzMDcxNjAwMDJaMDMxMTAvBgNV BAMTKDIzMzQ3NERDNkYyQjM0N0U0NzhBRjdFREVFQjFDMjRBOUU5QUFGQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HSspWzX+OAxWXg+SIlUDsKS+ mM/0Bdo0pKISX6dUpylFobxwWJLIhcV6jUMbSVjMgzoSMqm2gHjxtkG8sUYbQCXq AIOxCkG45iJEOB4tw1Fbku3ksulMXospkwjwJtg2bOh5pn/+pt39QNhCVYcjovoy ayROe4xFQrShAVN6Zjr5cFfXZ31/5xXofWS/elezYz4qjG3g9WkplApY2dUde9jb HXrurdeDzXTlFrfPTtryyqKTRiLGKfvyQ7V+4LxjTJEgvF7WqrqDZFlFNftr64GE 5JNIziis5kQI8T8S1YezixbjJax2ERn1xiJYlx7yVJBe0x5CQemsRf/XKGaDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUIzR03G8rNH5Hivft7rHCSp6ar7YwHwYDVR0j BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1 ODEwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h NzJiLWVjMjczZjQzYmJjMi8wLzMxMzAzMzJlMzIzNDM1MmUzMTMzMzYyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzNDM1MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/WIMA0GCSqG SIb3DQEBCwUAA4IBAQA9dcyUQUnsy2uwuAVaBL0+RYopWNA+mBgKLiskCjZap//X 42xAM2E+/XaUkp/16yFjqT31Ul0Ta6X8w6eVHBk0DKG3B+efZvy1WDSnLVB+es06 ffBTEK4YLl6e5Ar7feCEccPC7Nmq6dXGBBrBtv3KJAPDuYUx9ejP2b5OJGFaR5FG Wj6OdNuPhsbNblgGZkD2sGaJgNXfS3vZ6CYIFUyD5QMrRlRwJR9HfcGgVKCc3WFZ FHYVZt0zEuwHyfQwnD8w2Wct8MUU4Ik/YTwgjtDq2GROzspWjfG5/wxz6/INciyt Vz1nLeAvUu/qtfx7InZkqoHPmC3S4bqQH8J4sHKN -----END CERTIFICATE-----Generated at Fri Mar 27 01:58:33 2026 by rpki-client