$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa File: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: IqdyBss4FzdA/M3SnxcRkepuTRZFmOB0g6ykhyyOeAs= Subject key identifier: 7D:E3:9D:9C:6B:C3:6B:B5:FE:25:2B:D6:19:55:9D:FA:B0:D7:C1:6E Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 5058DDA5E0A70FD1B92359DAE3E5E3A6455089F1 Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa Signing time: Tue 24 Mar 2026 09:00:00 +0000 ROA not before: Tue 24 Mar 2026 08:55:00 +0000 ROA not after: Tue 23 Mar 2027 09:00:00 +0000 asID: 9341 IP address blocks: 103.189.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:58:dd:a5:e0:a7:0f:d1:b9:23:59:da:e3:e5:e3:a6:45:50:89:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Mar 24 08:55:00 2026 GMT Not After : Mar 23 09:00:00 2027 GMT Subject: CN=7DE39D9C6BC36BB5FE252BD619559DFAB0D7C16E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dc:a4:88:4d:99:be:bc:2e:bc:f1:cb:03:de: 1a:65:14:76:97:64:d2:4a:ad:66:6f:71:ad:b9:4c: e6:bd:6f:1c:cb:58:9e:fd:1f:4a:ae:a4:6b:eb:07: 7a:47:9e:db:f4:8c:e3:0c:af:21:d2:80:62:e0:9d: 30:e5:d8:0e:d4:65:9d:27:26:33:c5:a8:8c:f0:a9: 79:57:7b:08:b2:f2:f5:92:83:07:53:d4:9b:86:2e: 3b:97:c1:8f:38:df:b6:db:a8:ab:de:4f:26:37:08: 4d:9a:88:f7:7a:c1:03:60:84:31:75:59:53:1d:d2: 56:78:e5:1e:73:a7:cd:8d:4a:fd:f7:84:2b:24:3d: 74:aa:43:63:dc:18:f5:d5:57:0c:ff:b7:46:fb:ec: 8b:60:6c:f5:61:18:67:d6:0f:c8:40:23:ea:ec:db: 50:da:e3:ad:13:58:8b:94:d6:91:53:66:f4:7b:8c: 42:b9:ba:fb:51:57:6a:2a:26:a1:29:5a:d2:0c:e9: 28:3e:f5:6d:ca:9b:38:a2:4d:0a:4d:2c:58:31:5d: e5:6e:4e:cf:23:38:26:67:7d:09:ea:f2:31:21:34: ed:0e:85:c9:71:1e:2b:26:90:b0:24:18:b8:48:b0: 7b:5d:73:f4:af:4b:f0:ce:ab:9c:6f:69:9a:9d:d8: 54:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E3:9D:9C:6B:C3:6B:B5:FE:25:2B:D6:19:55:9D:FA:B0:D7:C1:6E X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.200.0/24 Signature Algorithm: sha256WithRSAEncryption 18:e5:85:29:ab:1a:93:b1:bf:43:15:5c:0d:3a:df:5f:d6:59: 3b:04:ea:f1:1c:4a:03:46:80:20:fb:02:f0:1b:0b:48:81:44: 0c:59:92:c2:37:82:20:6f:f6:c6:2f:95:06:fc:33:6f:0e:73: 24:19:b2:9a:81:3e:ac:b9:ba:54:41:44:00:1a:51:76:3e:cf: 39:16:51:ba:f1:a7:d3:6f:ee:40:87:aa:bf:dd:cc:23:fe:60: 73:64:b2:53:75:e7:ff:4d:a8:55:17:4b:65:24:ed:c1:2c:09: 2a:23:bb:fb:03:f7:6d:63:bf:c0:52:a0:d0:08:14:1a:05:3d: b7:9c:ac:bf:8f:00:26:c0:f1:f4:dc:6f:84:0c:af:25:ba:b0: f9:cd:1f:80:87:96:ee:02:e3:8d:7a:32:36:5c:6d:10:87:4e: 32:17:8e:c1:a9:f7:4d:26:cc:af:c9:14:71:db:05:85:a6:7c: 93:f6:f9:74:e6:29:f5:07:48:62:45:38:03:43:44:da:bc:90: 6e:11:31:8e:cc:8e:95:9e:6c:c9:52:6b:a6:30:ff:41:12:c0: 28:51:38:49:c4:ba:c8:af:86:1a:44:ee:76:f6:fa:51:25:5b: 5f:0c:47:60:88:cb:b5:56:61:ef:4b:a1:81:ca:ee:19:b4:16: 9c:a3:e4:df -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUFjdpeCnD9G5I1na4+XjpkVQifEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNjAzMjQwODU1MDBaFw0yNzAzMjMwOTAwMDBaMDMxMTAvBgNV BAMTKDdERTM5RDlDNkJDMzZCQjVGRTI1MkJENjE5NTU5REZBQjBEN0MxNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf3KSITZm+vC688csD3hplFHaX ZNJKrWZvca25TOa9bxzLWJ79H0qupGvrB3pHntv0jOMMryHSgGLgnTDl2A7UZZ0n JjPFqIzwqXlXewiy8vWSgwdT1JuGLjuXwY8437bbqKveTyY3CE2aiPd6wQNghDF1 WVMd0lZ45R5zp82NSv33hCskPXSqQ2PcGPXVVwz/t0b77ItgbPVhGGfWD8hAI+rs 21Da460TWIuU1pFTZvR7jEK5uvtRV2oqJqEpWtIM6Sg+9W3KmziiTQpNLFgxXeVu Ts8jOCZnfQnq8jEhNO0OhclxHismkLAkGLhIsHtdc/SvS/DOq5xvaZqd2FRlAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUfeOdnGvDa7X+JSvWGVWd+rDXwW4wHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMmU1ZjAzLWJmOTYtNGI0MC1i ZDRhLTZlMzg4OGM0MDIwNS8wLzMxMzAzMzJlMzEzODM5MmUzMjMwMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe9yDANBgkqhkiG 9w0BAQsFAAOCAQEAGOWFKasak7G/QxVcDTrfX9ZZOwTq8RxKA0aAIPsC8BsLSIFE DFmSwjeCIG/2xi+VBvwzbw5zJBmymoE+rLm6VEFEABpRdj7PORZRuvGn02/uQIeq v93MI/5gc2SyU3Xn/02oVRdLZSTtwSwJKiO7+wP3bWO/wFKg0AgUGgU9t5ysv48A JsDx9NxvhAyvJbqw+c0fgIeW7gLjjXoyNlxtEIdOMheOwan3TSbMr8kUcdsFhaZ8 k/b5dOYp9QdIYkU4A0NE2ryQbhExjsyOlZ5syVJrpjD/QRLAKFE4ScS6yK+GGkTu dvb6USVbXwxHYIjLtVZh70uhgcruGbQWnKPk3w== -----END CERTIFICATE-----Generated at Thu Mar 26 21:54:15 2026 by rpki-client