$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa File: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (raw, json) Hash identifier: xKO2CXnPQI2NViGwkl0YgPqxk11jmuJGUEqkoy47iBc= Subject key identifier: D8:51:DE:51:F4:77:B8:5E:F9:1D:BC:9A:6D:EF:79:E9:86:6F:FA:20 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 3654343BBE8028B0D61FFCD1010D7818CC5B40 Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa Signing time: Wed 25 Mar 2026 04:03:18 +0000 ROA not before: Wed 25 Mar 2026 03:58:18 +0000 ROA not after: Wed 24 Mar 2027 04:03:18 +0000 asID: 149908 IP address blocks: 103.188.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:54:34:3b:be:80:28:b0:d6:1f:fc:d1:01:0d:78:18:cc:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Mar 25 03:58:18 2026 GMT Not After : Mar 24 04:03:18 2027 GMT Subject: CN=D851DE51F477B85EF91DBC9A6DEF79E9866FFA20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fa:9e:71:d6:44:e9:78:62:cd:91:6c:b7:19: 77:d9:51:32:a6:d3:cd:80:7c:a8:43:b4:99:4e:00: e8:43:df:b7:9e:33:a3:a3:d6:b4:db:fa:37:6e:c4: 73:b5:b2:85:63:e4:e4:7e:ac:9b:a0:aa:db:c0:ee: 8a:9f:69:11:67:c3:98:69:43:7d:f4:a0:59:2b:60: 07:43:7d:73:47:6e:54:2c:b0:e8:58:24:bb:75:ed: 34:52:7c:f6:af:90:28:47:02:c4:28:43:50:78:ef: bc:42:87:e5:63:28:2c:93:eb:12:3e:ef:e7:18:9a: 45:f8:ca:28:34:54:86:4c:7c:47:ab:48:ab:29:5d: 31:53:f2:1e:4e:91:58:0b:91:a7:64:c2:66:47:6e: ae:bd:d8:e4:cd:2a:7f:9a:c7:6c:60:6b:2d:82:e8: 62:41:ca:82:40:97:0c:db:99:f8:1d:19:cb:b6:9a: d4:e1:ce:68:c9:7d:32:cf:96:f7:8b:e6:e2:1c:e4: c2:71:82:e0:a0:be:63:fd:fc:ca:4e:bf:a5:83:95: c4:65:18:01:56:7b:f9:da:e1:06:85:41:e8:4d:eb: 4c:62:c0:c4:f7:65:46:f0:86:c8:19:79:0e:9d:d6: 36:55:7f:22:83:a1:8d:93:ca:84:92:14:5a:83:26: 25:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:51:DE:51:F4:77:B8:5E:F9:1D:BC:9A:6D:EF:79:E9:86:6F:FA:20 X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.249.0/24 Signature Algorithm: sha256WithRSAEncryption ab:fd:9b:fe:88:8d:2c:ee:18:d6:20:40:16:53:49:ac:fa:d6: a9:4e:7c:f4:8b:23:dc:ca:96:bc:a0:41:e8:11:79:ec:93:65: e1:29:af:46:4b:06:8b:b2:bc:30:80:aa:72:81:17:ad:62:9d: e3:22:fe:3e:5f:cb:51:85:98:05:8c:c2:91:24:da:88:c1:a4: 2f:34:bc:4c:75:bb:a4:e4:aa:ce:2b:84:01:68:89:b7:e7:44: 15:cc:52:f2:eb:2d:5f:48:83:d6:0d:2e:37:7b:ee:c9:0a:de: ee:ce:85:51:37:f4:77:8a:1d:57:8c:46:90:6b:c1:7a:99:f0: 67:3a:18:ff:2f:2a:c0:c6:04:87:66:ba:6a:14:df:b6:13:9d: 94:c5:3d:40:a2:8d:66:4d:01:c7:11:66:00:a7:ae:37:e9:77: 19:44:52:1c:d2:e7:3a:8e:8c:6f:e0:4e:b1:ff:3d:8b:89:9f: 3d:01:de:73:9a:dd:6e:50:d1:37:53:d8:ca:f8:51:a6:d2:14: c2:bd:7b:eb:e5:38:22:8e:9a:3a:74:e5:45:8c:39:8f:6b:f9: c1:ec:b3:61:29:98:de:45:c8:a1:ad:94:a8:2b:a2:a1:92:dd: ad:b0:40:0e:2a:45:8e:ae:2d:41:66:1a:c8:35:8f:83:30:2a: b0:90:c2:71 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgITNlQ0O76AKLDWH/zRAQ14GMxbQDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxMTU0RDkyMEI2QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEz RDMwM0Q2MB4XDTI2MDMyNTAzNTgxOFoXDTI3MDMyNDA0MDMxOFowMzExMC8GA1UE AxMoRDg1MURFNTFGNDc3Qjg1RUY5MURCQzlBNkRFRjc5RTk4NjZGRkEyMDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOz6nnHWROl4Ys2RbLcZd9lRMqbT zYB8qEO0mU4A6EPft54zo6PWtNv6N27Ec7WyhWPk5H6sm6Cq28Duip9pEWfDmGlD ffSgWStgB0N9c0duVCyw6Fgku3XtNFJ89q+QKEcCxChDUHjvvEKH5WMoLJPrEj7v 5xiaRfjKKDRUhkx8R6tIqyldMVPyHk6RWAuRp2TCZkdurr3Y5M0qf5rHbGBrLYLo YkHKgkCXDNuZ+B0Zy7aa1OHOaMl9Ms+W94vm4hzkwnGC4KC+Y/38yk6/pYOVxGUY AVZ7+drhBoVB6E3rTGLAxPdlRvCGyBl5Dp3WNlV/IoOhjZPKhJIUWoMmJa0CAwEA AaOCAjYwggIyMB0GA1UdDgQWBBTYUd5R9He4XvkdvJpt73nphm/6IDAfBgNVHSME GDAWgBQRVNkgtqQgkTGHFTCu4fi4o9MD1jAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0 NjdlYzMzLTVhNzItNGM2NS05ZmQzLTY2ZWY4NDc5Mzk0ZC8wLzExNTREOTIwQjZB NDIwOTEzMTg3MTUzMEFFRTFGOEI4QTNEMzAzRDYuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8xMTU0RDkyMEI2QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMw M0Q2LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMzEzMDMzMmUzMTM4MzgyZTMyMzQzOTJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDMxMzQzOTM5MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe8+TANBgkq hkiG9w0BAQsFAAOCAQEAq/2b/oiNLO4Y1iBAFlNJrPrWqU589Isj3MqWvKBB6BF5 7JNl4SmvRksGi7K8MICqcoEXrWKd4yL+Pl/LUYWYBYzCkSTaiMGkLzS8THW7pOSq ziuEAWiJt+dEFcxS8ustX0iD1g0uN3vuyQre7s6FUTf0d4odV4xGkGvBepnwZzoY /y8qwMYEh2a6ahTfthOdlMU9QKKNZk0BxxFmAKeuN+l3GURSHNLnOo6Mb+BOsf89 i4mfPQHec5rdblDRN1PYyvhRptIUwr176+U4Io6aOnTlRYw5j2v5weyzYSmY3kXI oa2UqCuioZLdrbBADipFjq4tQWYayDWPgzAqsJDCcQ== -----END CERTIFICATE-----Generated at Thu Mar 26 23:25:52 2026 by rpki-client