$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa File: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (raw, json) Hash identifier: KM1ESBIXGbFNSPLyYnNSMBK3OGLkTwlOBU29jEyxfKk= Subject key identifier: A2:43:D8:49:A8:D3:41:62:FA:9C:F1:F3:8E:6B:84:0B:0C:F0:4C:57 Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Certificate serial: 31B78741756FDEA611DAAAE44BE9B505ACBC32D4 Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa Signing time: Thu 19 Mar 2026 05:02:44 +0000 ROA not before: Thu 19 Mar 2026 04:57:44 +0000 ROA not after: Thu 18 Mar 2027 05:02:44 +0000 asID: 38320 IP address blocks: 103.161.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b7:87:41:75:6f:de:a6:11:da:aa:e4:4b:e9:b5:05:ac:bc:32:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Validity Not Before: Mar 19 04:57:44 2026 GMT Not After : Mar 18 05:02:44 2027 GMT Subject: CN=A243D849A8D34162FA9CF1F38E6B840B0CF04C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:36:96:cc:47:1c:5f:e1:ec:9e:cf:9b:51: ab:a0:24:0b:f1:be:36:dd:bc:6b:4c:6b:77:c8:59: 06:fb:b1:5c:5d:09:8e:33:fa:28:5a:f0:4e:65:d5: 12:48:1b:78:5b:ff:fa:82:8b:f6:60:ba:21:74:00: a4:2b:14:71:8e:d6:52:9d:76:e2:2d:07:a3:9d:81: f6:69:cd:91:b9:54:67:7b:34:cc:a9:1d:13:09:03: 61:cd:a7:bb:aa:3d:ca:da:6c:8d:5e:6b:08:e1:0e: ed:63:d0:c6:bf:6e:4d:e2:de:49:a7:2f:a6:19:07: 20:78:95:d8:bf:a0:4f:de:c7:af:77:22:dc:d6:5f: eb:e9:ac:de:f0:30:fc:5e:f8:72:0c:95:b9:16:d5: ad:60:95:fa:a9:5b:f8:7b:0c:34:78:50:05:67:6b: 7f:2f:53:3f:ba:8a:bd:c4:2e:1a:3a:bd:ce:c5:52: 6f:ce:11:09:76:5e:50:47:8a:47:ed:63:58:b4:b7: aa:c5:9b:fe:71:3c:d8:b3:f3:e6:dd:39:64:30:42: 4e:1e:7f:78:78:6d:b9:40:eb:f2:84:68:0b:05:c8: 4a:eb:32:1c:47:1c:22:57:00:d8:ed:b9:21:be:d4: b4:8e:4d:01:32:f2:d5:f2:df:db:c5:37:cf:8d:b0: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:43:D8:49:A8:D3:41:62:FA:9C:F1:F3:8E:6B:84:0B:0C:F0:4C:57 X509v3 Authority Key Identifier: keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.202.0/23 Signature Algorithm: sha256WithRSAEncryption 92:2e:41:04:50:f7:50:90:1b:a5:56:c6:90:cd:5d:05:3a:e6: b7:cd:5d:20:4d:63:e4:90:93:2b:6f:43:9c:18:9b:1c:9b:06: 4c:07:9b:ff:42:38:89:d7:4b:8f:36:4a:d3:c5:ba:35:05:e0: 62:ef:b7:04:cd:72:34:94:52:24:9c:af:c2:28:f1:c6:86:91: 9b:91:28:5a:d7:d6:af:53:d2:6a:8d:ba:79:d8:db:5f:db:a8: 0a:b4:db:f2:e3:75:ab:9e:83:ed:6f:3b:85:49:3d:26:a4:65: 9e:57:b1:1d:26:2f:00:81:f4:8d:46:d0:72:73:cc:9e:38:94: f7:85:d3:82:46:ad:54:b6:d3:53:e4:02:d2:dd:4b:a8:37:d8: 6b:87:3d:0c:ac:48:74:1c:83:c0:5c:4e:3b:55:b1:76:b1:6e: 4f:10:7b:3f:12:d3:3c:b4:11:d2:3f:78:b3:2f:74:42:9c:f8: 15:f7:9a:90:58:89:80:12:ea:6b:f1:8c:0a:6a:70:e0:94:a5: 9f:3e:9b:d8:d5:57:ed:5a:78:55:06:43:c4:e1:a4:71:e5:af: 85:00:05:3c:7c:15:ec:c5:a9:f1:b5:1f:c0:f7:7d:b4:f0:72: 78:7b:1f:0b:bc:c4:55:5f:74:22:db:0a:3c:5c:38:ad:6b:22: 3a:53:56:9b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMbeHQXVv3qYR2qrkS+m1Bay8MtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlD OTAzRUFDMDAeFw0yNjAzMTkwNDU3NDRaFw0yNzAzMTgwNTAyNDRaMDMxMTAvBgNV BAMTKEEyNDNEODQ5QThEMzQxNjJGQTlDRjFGMzhFNkI4NDBCMENGMDRDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxlTaWzEccX+Hsns+bUaugJAvx vjbdvGtMa3fIWQb7sVxdCY4z+iha8E5l1RJIG3hb//qCi/ZguiF0AKQrFHGO1lKd duItB6OdgfZpzZG5VGd7NMypHRMJA2HNp7uqPcrabI1eawjhDu1j0Ma/bk3i3kmn L6YZByB4ldi/oE/ex693ItzWX+vprN7wMPxe+HIMlbkW1a1glfqpW/h7DDR4UAVn a38vUz+6ir3ELho6vc7FUm/OEQl2XlBHikftY1i0t6rFm/5xPNiz8+bdOWQwQk4e f3h4bblA6/KEaAsFyErrMhxHHCJXANjtuSG+1LSOTQEy8tXy39vFN8+NsPTDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUokPYSajTQWL6nPHzjmuECwzwTFcwHwYDVR0j BBgwFoAU0P9vCT0N6vtctCqTQz+iOckD6sAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9EMEZGNkYwOTNE MERFQUZCNUNCNDJBOTM0MzNGQTIzOUM5MDNFQUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlDOTAz RUFDMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY3ZjlmNTYyLTcyOTItNDRmMS04 ZTJjLTQ0MGEwNTMxYzM5Ni8wLzMxMzAzMzJlMzEzNjMxMmUzMjMwMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6HKMA0GCSqG SIb3DQEBCwUAA4IBAQCSLkEEUPdQkBulVsaQzV0FOua3zV0gTWPkkJMrb0OcGJsc mwZMB5v/QjiJ10uPNkrTxbo1BeBi77cEzXI0lFIknK/CKPHGhpGbkSha19avU9Jq jbp52Ntf26gKtNvy43WrnoPtbzuFST0mpGWeV7EdJi8AgfSNRtByc8yeOJT3hdOC Rq1UttNT5ALS3UuoN9hrhz0MrEh0HIPAXE47VbF2sW5PEHs/EtM8tBHSP3izL3RC nPgV95qQWImAEupr8YwKanDglKWfPpvY1VftWnhVBkPE4aRx5a+FAAU8fBXsxanx tR/A93208HJ4ex8LvMRVX3Qi2wo8XDitayI6U1ab -----END CERTIFICATE-----Generated at Thu Mar 26 21:38:51 2026 by rpki-client