$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa File: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (raw, json) Hash identifier: oYSrvBY6t5O7aLmZMgG93NzR9Kg2HGBDTBbJyH9LHhc= Subject key identifier: F9:DE:14:02:29:7E:9C:58:E7:1B:DC:72:79:E7:F3:B8:6E:14:17:ED Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 2F6DD59D386E80154F90085D5F1C82F7ACE08EAD Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa Signing time: Thu 05 Mar 2026 01:00:01 +0000 ROA not before: Thu 05 Mar 2026 00:55:01 +0000 ROA not after: Thu 04 Mar 2027 01:00:01 +0000 asID: 138090 IP address blocks: 103.124.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6d:d5:9d:38:6e:80:15:4f:90:08:5d:5f:1c:82:f7:ac:e0:8e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: Mar 5 00:55:01 2026 GMT Not After : Mar 4 01:00:01 2027 GMT Subject: CN=F9DE1402297E9C58E71BDC7279E7F3B86E1417ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:46:67:d5:3c:07:96:14:3e:c7:8c:37:43:78: 3c:ce:6f:40:aa:9b:72:60:e4:4e:84:30:25:d8:5e: b1:93:3e:3d:64:55:6d:d9:56:cf:84:a9:7a:0c:5b: 6d:39:dc:b7:64:81:ab:82:e9:39:70:73:20:18:f1: e8:6e:13:15:97:b3:53:86:93:6e:78:e9:f5:2b:37: 51:93:54:82:87:68:26:94:81:f0:54:ee:76:4f:73: 73:1c:95:f9:2b:d3:2c:50:fa:43:3f:9d:80:24:73: da:78:56:54:6a:48:22:f1:7c:3c:40:7e:2b:55:6e: 79:6b:68:94:92:ed:cc:a8:78:fb:e3:d6:3b:68:22: 66:7a:85:2c:51:6f:2f:38:8b:bd:84:50:92:6e:70: 74:15:b0:9b:e3:1e:9d:67:5f:c7:42:00:dd:db:85: cc:33:e9:64:cc:f5:ce:7d:e7:77:65:f1:47:69:cc: 29:71:d5:7a:09:e1:8f:1e:3a:19:6d:6d:92:fa:8b: d9:e8:7d:e6:9e:f8:dc:0b:b6:27:00:1d:4a:3a:6c: 9c:72:c2:d3:74:c8:bc:f6:d5:81:76:e5:93:13:d7: 59:f5:84:16:21:83:d2:f3:83:43:84:8d:3c:c9:c3: b5:c5:3a:0f:4a:d7:a9:f0:64:d0:fb:bf:df:d3:da: e3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DE:14:02:29:7E:9C:58:E7:1B:DC:72:79:E7:F3:B8:6E:14:17:ED X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.245.0/24 Signature Algorithm: sha256WithRSAEncryption 49:b7:ac:b9:2d:e5:e3:f0:ca:c4:32:2e:19:51:e8:0c:b4:5d: be:c5:a3:22:b2:fe:5e:3a:28:f9:52:02:10:71:5b:c4:2e:2e: d9:e8:ba:a6:d7:61:c1:cf:43:79:97:31:2e:9d:60:53:94:c9: 38:82:dd:38:8e:3d:c5:f7:66:36:ca:7d:e0:15:2f:83:29:0a: 95:27:ab:6e:23:96:14:49:c7:71:d4:8d:6d:f1:c6:0c:49:6b: d8:74:25:4b:2b:e7:56:c0:50:d6:0c:75:cf:0f:60:a1:e8:4f: f3:72:e2:8b:11:05:c5:bf:b9:4e:c6:e2:c5:9f:da:cc:b6:eb: fd:04:5e:af:b2:d2:3b:b9:2b:77:25:e3:18:26:24:e8:41:86: b5:a7:bf:ce:57:33:51:28:a3:3c:19:ef:2a:bd:06:a1:25:5e: 56:8f:f7:fd:2d:26:35:13:7e:03:83:7a:f2:5b:32:c3:50:51: f2:a6:df:70:fd:58:d6:db:fb:23:10:6e:b8:6e:07:fa:9d:cb: cb:e0:ca:f6:de:af:0b:80:b6:70:72:70:2e:6c:56:01:c0:a3: ec:d4:9c:af:5c:11:41:b5:6a:f3:5d:88:d8:f3:fb:40:12:bf: 6d:bc:8f:2d:80:1e:89:72:72:ef:0b:aa:77:69:80:98:cf:b6: 38:2f:31:e1 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUL23VnThugBVPkAhdXxyC96zgjq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNjAzMDUwMDU1MDFaFw0yNzAzMDQwMTAwMDFaMDMxMTAvBgNV BAMTKEY5REUxNDAyMjk3RTlDNThFNzFCREM3Mjc5RTdGM0I4NkUxNDE3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbRmfVPAeWFD7HjDdDeDzOb0Cq m3Jg5E6EMCXYXrGTPj1kVW3ZVs+EqXoMW2053LdkgauC6TlwcyAY8ehuExWXs1OG k2546fUrN1GTVIKHaCaUgfBU7nZPc3Mclfkr0yxQ+kM/nYAkc9p4VlRqSCLxfDxA fitVbnlraJSS7cyoePvj1jtoImZ6hSxRby84i72EUJJucHQVsJvjHp1nX8dCAN3b hcwz6WTM9c5953dl8UdpzClx1XoJ4Y8eOhltbZL6i9nofeae+NwLticAHUo6bJxy wtN0yLz21YF25ZMT11n1hBYhg9Lzg0OEjTzJw7XFOg9K16nwZND7v9/T2uP7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU+d4UAil+nFjnG9xyeefzuG4UF+0wHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlMmM5Mjg1LWMwOWEtNDUwNi1h MzIwLWZkYTFhMDdmZDllYy8wLzMxMzAzMzJlMzEzMjM0MmUzMjM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM5MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfPUwDQYJ KoZIhvcNAQELBQADggEBAEm3rLkt5ePwysQyLhlR6Ay0Xb7FoyKy/l46KPlSAhBx W8QuLtnouqbXYcHPQ3mXMS6dYFOUyTiC3TiOPcX3ZjbKfeAVL4MpCpUnq24jlhRJ x3HUjW3xxgxJa9h0JUsr51bAUNYMdc8PYKHoT/Ny4osRBcW/uU7G4sWf2sy26/0E Xq+y0ju5K3cl4xgmJOhBhrWnv85XM1EoozwZ7yq9BqElXlaP9/0tJjUTfgODevJb MsNQUfKm33D9WNbb+yMQbrhuB/qdy8vgyvberwuAtnBycC5sVgHAo+zUnK9cEUG1 avNdiNjz+0ASv228jy2AHolycu8LqndpgJjPtjgvMeE= -----END CERTIFICATE-----Generated at Fri Mar 27 04:13:41 2026 by rpki-client