$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa File: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (raw, json) Hash identifier: cXkbM2VDPHAMtezT3GG/k9XIgcsPZTYfY8tAzuSozyA= Subject key identifier: 22:FA:2C:A1:16:C3:74:89:C6:46:58:DF:37:FA:15:D7:CB:31:F7:A9 Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 2F0AFB56F221033BDE959B59E39AB21B93D755B4 Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa Signing time: Tue 24 Mar 2026 09:00:01 +0000 ROA not before: Tue 24 Mar 2026 08:55:01 +0000 ROA not after: Tue 23 Mar 2027 09:00:01 +0000 asID: 9341 IP address blocks: 103.189.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 21:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0a:fb:56:f2:21:03:3b:de:95:9b:59:e3:9a:b2:1b:93:d7:55:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Mar 24 08:55:01 2026 GMT Not After : Mar 23 09:00:01 2027 GMT Subject: CN=22FA2CA116C37489C64658DF37FA15D7CB31F7A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:bb:29:84:17:99:8f:f0:9b:65:64:58:65: a0:37:29:50:97:91:32:6a:b6:52:a9:31:7a:74:86: be:34:0d:46:61:6c:6b:b0:3c:53:32:df:15:eb:94: 31:c7:46:1b:d8:24:bb:34:a1:bc:99:91:3f:8d:2a: 03:5c:00:0c:a9:90:79:99:13:1c:4a:15:e6:78:db: b2:7c:4c:8f:bb:79:6a:e0:e0:74:61:ec:ab:1e:4d: 30:44:7a:3b:42:64:3a:8e:e4:1a:99:22:db:5f:34: ee:18:a3:5e:69:a9:af:ca:cc:a0:d2:58:c2:bb:6e: 67:36:68:d3:16:f2:e6:6f:a8:58:90:cf:0c:3a:5d: 38:de:71:d0:33:08:61:42:2d:e0:42:c2:a0:34:e4: ab:5a:be:96:e5:53:4a:1c:0c:84:6b:5c:7c:6a:a1: 78:96:ce:c6:71:80:3a:76:7a:dc:ce:18:09:66:af: 38:d4:fa:a5:5b:b8:24:70:be:5b:73:7c:0f:34:06: 04:9b:5e:e8:2a:82:4d:5d:f0:63:d8:8e:4f:bc:79: f9:d7:ff:25:90:6d:75:a2:8c:64:f8:5b:97:34:c5: a2:ce:be:2f:f9:45:cd:50:20:94:bb:91:20:ce:87: 7e:d2:fe:f8:a1:6e:09:c5:86:8f:5a:78:46:39:9a: da:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FA:2C:A1:16:C3:74:89:C6:46:58:DF:37:FA:15:D7:CB:31:F7:A9 X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.200.0/23 Signature Algorithm: sha256WithRSAEncryption 88:83:b6:de:a4:32:64:11:5d:c9:b9:9e:46:5d:18:9b:68:34: 69:17:96:d2:c9:c4:22:c0:68:8b:9c:cd:52:48:09:7f:0d:fd: 66:36:cf:e8:95:36:d9:55:b7:43:3b:40:f7:17:65:39:02:41: f9:ae:85:a0:a6:9d:eb:16:d8:57:88:d5:5c:06:66:22:31:10: ed:84:fc:2f:a4:b3:a4:de:1b:ed:31:58:07:4b:5f:6c:9d:3b: e6:82:0b:16:89:37:e3:e2:f7:a7:0b:22:48:ea:70:a3:3d:c3: 71:70:50:6c:19:aa:02:fe:db:df:91:87:e5:8c:5f:f6:60:d9: 82:fd:49:2d:a9:32:1f:e2:69:28:54:f3:31:e5:22:7d:b0:94: c7:5f:6a:a2:1a:48:dd:2f:67:0c:5b:d8:d6:63:b5:b2:4a:a7: e1:fc:56:40:58:f3:6e:2d:6f:57:1f:e6:ba:b1:f9:76:46:7d: cf:0a:02:40:69:62:dc:18:55:4b:5f:20:1f:ed:46:ad:cf:cc: 91:61:b8:fb:96:a9:ed:dc:93:d2:6e:ef:c6:01:f9:c6:bf:ca: 27:b9:34:aa:fb:d5:2e:0a:c2:9c:fb:24:1a:e5:96:35:ec:cc: a7:dd:66:56:5f:e0:eb:52:aa:36:77:13:13:8a:d0:f8:0f:53: ee:95:18:2c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULwr7VvIhAzvelZtZ45qyG5PXVbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNjAzMjQwODU1MDFaFw0yNzAzMjMwOTAwMDFaMDMxMTAvBgNV BAMTKDIyRkEyQ0ExMTZDMzc0ODlDNjQ2NThERjM3RkExNUQ3Q0IzMUY3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgW7sphBeZj/CbZWRYZaA3KVCX kTJqtlKpMXp0hr40DUZhbGuwPFMy3xXrlDHHRhvYJLs0obyZkT+NKgNcAAypkHmZ ExxKFeZ427J8TI+7eWrg4HRh7KseTTBEejtCZDqO5BqZIttfNO4Yo15pqa/KzKDS WMK7bmc2aNMW8uZvqFiQzww6XTjecdAzCGFCLeBCwqA05KtavpblU0ocDIRrXHxq oXiWzsZxgDp2etzOGAlmrzjU+qVbuCRwvltzfA80BgSbXugqgk1d8GPYjk+8efnX /yWQbXWijGT4W5c0xaLOvi/5Rc1QIJS7kSDOh37S/vihbgnFho9aeEY5mtoXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUIvosoRbDdInGRljfN/oV18sx96kwHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMmU1ZjAzLWJmOTYtNGI0MC1i ZDRhLTZlMzg4OGM0MDIwNS8wLzMxMzAzMzJlMzEzODM5MmUzMjMwMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe9yDANBgkqhkiG 9w0BAQsFAAOCAQEAiIO23qQyZBFdybmeRl0Ym2g0aReW0snEIsBoi5zNUkgJfw39 ZjbP6JU22VW3QztA9xdlOQJB+a6FoKad6xbYV4jVXAZmIjEQ7YT8L6SzpN4b7TFY B0tfbJ075oILFok34+L3pwsiSOpwoz3DcXBQbBmqAv7b35GH5Yxf9mDZgv1JLaky H+JpKFTzMeUifbCUx19qohpI3S9nDFvY1mO1skqn4fxWQFjzbi1vVx/murH5dkZ9 zwoCQGli3BhVS18gH+1Grc/MkWG4+5ap7dyT0m7vxgH5xr/KJ7k0qvvVLgrCnPsk GuWWNezMp91mVl/g61KqNncTE4rQ+A9T7pUYLA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:49:53 2026 by rpki-client