$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/3130332e38372e36302e302f32322d3234203d3e20313336303932.roa File: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (raw, json) Hash identifier: IG1xkP17/hC/ImkkCYcinf8gtC3kZiUA7WdckI5avsY= Subject key identifier: 3F:8B:7B:FF:51:33:BE:73:49:AB:FF:F4:A8:59:07:81:A4:9B:28:37 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 6DE8156B396955085BB1380FD6426308CFFAC7EA Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/3130332e38372e36302e302f32322d3234203d3e20313336303932.roa Signing time: Thu 12 Mar 2026 22:00:00 +0000 ROA not before: Thu 12 Mar 2026 21:55:00 +0000 ROA not after: Thu 11 Mar 2027 22:00:00 +0000 asID: 136092 IP address blocks: 103.87.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e8:15:6b:39:69:55:08:5b:b1:38:0f:d6:42:63:08:cf:fa:c7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Mar 12 21:55:00 2026 GMT Not After : Mar 11 22:00:00 2027 GMT Subject: CN=3F8B7BFF5133BE7349ABFFF4A8590781A49B2837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:eb:8d:8f:a3:90:c3:14:46:88:80:79:a6: 17:0e:76:6b:ce:0f:52:a8:f7:b9:f2:ab:d3:72:2e: 16:12:f7:20:82:02:c0:b3:54:93:25:3d:d0:d0:b7: 6f:fe:aa:25:2f:ce:66:61:7e:6b:14:ba:5e:d6:07: 31:e0:29:b5:aa:01:4d:46:66:70:14:61:92:bb:25: 2e:fc:37:73:97:88:56:70:19:ba:7f:3f:8a:b0:56: 37:04:fd:6c:1c:ad:44:23:14:28:19:e1:8f:bb:f3: 35:97:94:84:19:27:1f:34:e1:35:a1:f9:87:b4:7c: bc:5d:04:95:c9:05:af:2f:21:a0:e5:ae:61:e1:d3: 63:a0:4a:8c:ce:4d:9c:e6:ce:95:60:60:ec:90:64: fe:c6:c4:50:1a:c9:75:5a:3c:f7:a2:f4:bf:4d:10: 1e:41:4b:87:3d:09:0c:31:33:85:29:78:1e:14:72: 36:34:f1:44:e3:ca:8f:7e:48:e4:10:7a:15:e8:c6: 5f:ad:59:07:61:2f:e9:42:3a:7a:1a:ce:65:6e:21: ee:af:7f:06:b6:1f:55:a2:2e:23:ac:ce:50:da:49: e4:b1:72:13:3a:7f:f4:19:0c:3c:c2:b9:69:78:e7: 74:67:1f:38:84:65:2b:40:b5:06:fc:39:a7:a4:57: e8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8B:7B:FF:51:33:BE:73:49:AB:FF:F4:A8:59:07:81:A4:9B:28:37 X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/3130332e38372e36302e302f32322d3234203d3e20313336303932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.60.0/22 Signature Algorithm: sha256WithRSAEncryption 90:74:e0:27:33:fd:f4:95:d9:aa:9e:c2:dd:70:19:aa:5e:57: c2:89:ea:c8:0e:40:69:70:89:51:18:54:22:a5:91:9f:ce:33: 71:2b:ab:bb:39:e4:b3:05:ca:92:65:3b:da:7d:fe:90:d1:33: e8:ac:0e:fe:c9:0f:73:88:48:f4:03:35:91:4c:58:65:fc:4b: 65:ca:65:67:c9:95:9a:68:ef:da:eb:ac:bf:59:40:42:81:c4: 76:fa:ec:7e:4a:be:c6:20:bd:e7:85:01:46:ef:89:a9:51:62: 8b:e1:5f:dd:d5:be:37:3d:28:4e:40:35:ee:9e:df:18:69:42: 9e:ed:f4:97:3d:90:e1:42:31:c0:e1:65:c0:0b:38:e5:43:3a: 42:f4:6c:9d:ab:b7:3c:91:6b:6c:12:b5:8b:cd:fa:ea:75:a3: d0:ba:9e:af:16:1c:08:09:4b:00:a7:63:a4:b3:74:93:ed:4e: 96:06:98:24:87:fd:b4:0c:77:ca:cb:d8:99:42:08:a4:24:a0: 83:72:6a:d7:8e:2b:5f:ba:67:80:d7:45:31:95:95:c3:82:f7: e1:5d:31:fc:64:33:1f:84:86:5e:29:ae:36:20:f2:5e:f0:b9: a2:9f:2b:d5:04:32:f5:fa:16:7e:33:5a:ee:23:2d:5f:14:5e: 71:fe:9c:0f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbegVazlpVQhbsTgP1kJjCM/6x+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNjAzMTIyMTU1MDBaFw0yNzAzMTEyMjAwMDBaMDMxMTAvBgNV BAMTKDNGOEI3QkZGNTEzM0JFNzM0OUFCRkZGNEE4NTkwNzgxQTQ5QjI4MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HOuNj6OQwxRGiIB5phcOdmvO D1Ko97nyq9NyLhYS9yCCAsCzVJMlPdDQt2/+qiUvzmZhfmsUul7WBzHgKbWqAU1G ZnAUYZK7JS78N3OXiFZwGbp/P4qwVjcE/WwcrUQjFCgZ4Y+78zWXlIQZJx804TWh +Ye0fLxdBJXJBa8vIaDlrmHh02OgSozOTZzmzpVgYOyQZP7GxFAayXVaPPei9L9N EB5BS4c9CQwxM4UpeB4UcjY08UTjyo9+SOQQehXoxl+tWQdhL+lCOnoazmVuIe6v fwa2H1WiLiOszlDaSeSxchM6f/QZDDzCuWl453RnHziEZStAtQb8OaekV+gFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUP4t7/1EzvnNJq//0qFkHgaSbKDcwHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiYTBiM2YxLTk3NGYtNDIwNS1i ZGNlLTBmOWY1YjcyNTBkYy8wLzMxMzAzMzJlMzgzNzJlMzYzMDJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzNjMwMzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdXPDANBgkqhkiG 9w0BAQsFAAOCAQEAkHTgJzP99JXZqp7C3XAZql5XwonqyA5AaXCJURhUIqWRn84z cSuruznkswXKkmU72n3+kNEz6KwO/skPc4hI9AM1kUxYZfxLZcplZ8mVmmjv2uus v1lAQoHEdvrsfkq+xiC954UBRu+JqVFii+Ff3dW+Nz0oTkA17p7fGGlCnu30lz2Q 4UIxwOFlwAs45UM6QvRsnau3PJFrbBK1i8366nWj0LqerxYcCAlLAKdjpLN0k+1O lgaYJIf9tAx3ysvYmUIIpCSgg3Jq144rX7pngNdFMZWVw4L34V0x/GQzH4SGXimu NiDyXvC5op8r1QQy9foWfjNa7iMtXxRecf6cDw== -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:35 2026 by rpki-client