$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa File: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (raw, json) Hash identifier: sx7oZBs7estL7aNZUmO9oRk1EPlXA/zCFyzUOngOWfg= Subject key identifier: D6:F1:5E:4C:42:A5:F0:C9:9B:8C:9C:3C:F9:0C:DE:89:57:0A:CA:74 Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 4DA2D3C29C63E55BED895E06EDCF12F77689A716 Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa Signing time: Wed 11 Mar 2026 10:02:46 +0000 ROA not before: Wed 11 Mar 2026 09:57:46 +0000 ROA not after: Wed 10 Mar 2027 10:02:46 +0000 asID: 151000 IP address blocks: 103.184.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a2:d3:c2:9c:63:e5:5b:ed:89:5e:06:ed:cf:12:f7:76:89:a7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Mar 11 09:57:46 2026 GMT Not After : Mar 10 10:02:46 2027 GMT Subject: CN=D6F15E4C42A5F0C99B8C9C3CF90CDE89570ACA74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:14:90:b0:70:46:d3:c8:2c:ea:3f:5f:e2: 82:6f:81:4a:3e:5a:3c:cf:3c:52:19:be:a1:8d:35: e6:10:61:82:a4:15:a9:93:51:c7:91:2b:01:46:b1: a2:ae:02:d2:e2:22:2c:a0:3a:2c:bc:0b:5d:31:13: 00:0d:3c:6f:06:6c:b9:78:58:89:e9:f0:df:9a:4e: d4:ce:8e:88:5d:5b:f6:07:33:c1:de:63:01:0f:73: fc:cc:d0:57:9e:1e:ee:8f:de:4e:bb:9c:5c:c1:d2: 5c:b9:f6:b8:6e:d9:b8:a5:24:ce:0c:b0:cc:0b:a3: 01:44:2c:84:49:ee:28:24:85:f4:11:c2:e6:6c:60: aa:dd:ef:66:af:ac:e5:76:83:fd:bb:9b:35:84:33: 8c:69:c1:0f:fb:6c:39:67:b7:16:17:05:50:ca:ac: ae:88:a5:14:a6:ef:88:84:3a:fa:5f:3c:c9:c7:5d: d0:3e:2d:f4:26:85:97:c2:6d:6e:28:cd:a0:67:24: 02:21:dc:76:23:b3:b8:07:62:59:ab:db:6f:63:da: c9:cb:db:19:e2:16:2a:29:c3:08:07:04:32:bb:0e: b9:2a:81:38:54:24:6b:a5:1c:5b:c3:1f:3d:51:c0: ea:a5:01:3f:38:f1:78:4d:ce:ff:49:85:2b:46:8a: 46:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F1:5E:4C:42:A5:F0:C9:9B:8C:9C:3C:F9:0C:DE:89:57:0A:CA:74 X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.12.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:34:cf:67:7c:6c:c9:d1:8e:0c:f8:f7:8a:10:a9:57:7a:aa: 20:85:b5:35:75:60:9a:12:09:4e:7f:ac:7b:c0:28:26:2c:57: ab:5d:ca:fd:30:9e:99:df:af:2c:62:cb:bd:80:1b:d8:8a:62: 73:ba:22:07:bc:43:7d:6b:b2:24:2e:e3:b8:7c:64:0a:b4:0b: 8e:7b:ae:51:7a:c0:b5:ac:0b:c1:8a:79:83:42:ce:27:93:ff: a3:75:72:04:cd:97:59:23:6e:82:8d:92:14:8f:df:2a:07:45: b0:23:ac:d3:ee:cf:53:3b:8b:aa:28:dd:62:e1:4f:f5:ee:2f: 86:25:48:34:ac:85:a9:fc:6b:f9:71:c0:16:25:93:83:6b:93: 06:3e:69:bb:cc:55:4c:a4:9c:3f:58:a4:cc:9d:55:d5:83:53: 1f:4d:0b:7d:b7:01:b0:45:53:75:16:af:ef:19:d5:fd:cc:19: 0d:07:c6:a8:d4:1a:d5:82:1c:60:2f:39:b2:a8:29:9a:de:b8: 4c:ee:6b:b9:32:f0:b4:8c:96:d2:ec:69:fc:67:dd:0e:08:8c: 7c:1c:a8:8c:f7:f5:0b:b3:9a:c9:ab:36:77:be:42:5b:2b:9b: 1d:08:7a:78:d1:2c:46:df:4e:68:3a:ec:e2:51:29:47:d8:cb: 3f:be:c0:d7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTaLTwpxj5VvtiV4G7c8S93aJpxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNjAzMTEwOTU3NDZaFw0yNzAzMTAxMDAyNDZaMDMxMTAvBgNV BAMTKEQ2RjE1RTRDNDJBNUYwQzk5QjhDOUMzQ0Y5MENERTg5NTcwQUNBNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cxSQsHBG08gs6j9f4oJvgUo+ WjzPPFIZvqGNNeYQYYKkFamTUceRKwFGsaKuAtLiIiygOiy8C10xEwANPG8GbLl4 WInp8N+aTtTOjohdW/YHM8HeYwEPc/zM0FeeHu6P3k67nFzB0ly59rhu2bilJM4M sMwLowFELIRJ7igkhfQRwuZsYKrd72avrOV2g/27mzWEM4xpwQ/7bDlntxYXBVDK rK6IpRSm74iEOvpfPMnHXdA+LfQmhZfCbW4ozaBnJAIh3HYjs7gHYlmr229j2snL 2xniFiopwwgHBDK7DrkqgThUJGulHFvDHz1RwOqlAT848XhNzv9JhStGikZ5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU1vFeTEKl8MmbjJw8+QzeiVcKynQwHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5NWMxYWU4LWQ5N2QtNDA0OC05 YTdlLTZiNzFiODU3Nzc0MC8wLzMxMzAzMzJlMzEzODM0MmUzMTMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMxMzAzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7gMMA0GCSqG SIb3DQEBCwUAA4IBAQBfNM9nfGzJ0Y4M+PeKEKlXeqoghbU1dWCaEglOf6x7wCgm LFerXcr9MJ6Z368sYsu9gBvYimJzuiIHvEN9a7IkLuO4fGQKtAuOe65ResC1rAvB inmDQs4nk/+jdXIEzZdZI26CjZIUj98qB0WwI6zT7s9TO4uqKN1i4U/17i+GJUg0 rIWp/Gv5ccAWJZODa5MGPmm7zFVMpJw/WKTMnVXVg1MfTQt9twGwRVN1Fq/vGdX9 zBkNB8ao1BrVghxgLzmyqCma3rhM7mu5MvC0jJbS7Gn8Z90OCIx8HKiM9/ULs5rJ qzZ3vkJbK5sdCHp40SxG305oOuziUSlH2Ms/vsDX -----END CERTIFICATE-----Generated at Thu Mar 26 19:15:45 2026 by rpki-client