$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa File: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (raw, json) Hash identifier: i+jlvxpTFwINLCyEDOLYiVMmzTheC3p0BfnqisiMDQA= Subject key identifier: 9A:FA:E4:DA:E3:5C:36:68:D6:D9:3E:A4:86:CB:C0:94:D7:9D:44:29 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 31B90FCA50C535AFE26C1804DB559AF8E93E8596 Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa Signing time: Thu 19 Mar 2026 03:02:44 +0000 ROA not before: Thu 19 Mar 2026 02:57:44 +0000 ROA not after: Thu 18 Mar 2027 03:02:44 +0000 asID: 136101 IP address blocks: 103.108.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b9:0f:ca:50:c5:35:af:e2:6c:18:04:db:55:9a:f8:e9:3e:85:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Mar 19 02:57:44 2026 GMT Not After : Mar 18 03:02:44 2027 GMT Subject: CN=9AFAE4DAE35C3668D6D93EA486CBC094D79D4429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c6:fc:02:62:3e:f3:c9:ac:68:d4:13:ef:58: a5:9d:a4:e9:da:b4:a0:1e:ba:52:d3:e4:a9:aa:07: 92:e0:99:f2:e7:51:23:bf:ab:69:a8:6a:f3:a9:16: 77:f7:f0:b2:63:3f:de:c8:6d:d3:8b:a0:e1:8e:7d: 3a:90:48:89:57:c0:8b:09:40:0f:d1:55:2c:03:16: bf:02:04:cb:ea:70:af:87:5c:16:19:e0:41:26:ee: 32:70:dd:3b:55:e1:62:fc:33:28:00:55:bf:87:65: 0b:12:53:3b:b0:25:0c:bf:21:10:ba:7f:db:5b:c4: 91:fa:4d:2c:57:1c:c8:ac:fb:a6:a1:a3:6b:b3:a6: 8d:fa:ad:81:af:6e:c0:f6:1f:a1:d3:79:e6:ee:8b: 5b:9d:94:8e:da:8c:d5:2a:c6:6f:5b:7b:fc:cb:9a: 68:25:84:91:9a:1f:69:01:53:cb:01:b3:4b:43:f5: f7:7b:f0:2a:2b:3b:63:b1:d5:fa:d3:67:86:2f:42: 00:a7:45:b1:c9:f9:09:20:75:32:a7:44:da:b7:a6: 0d:87:9c:5a:17:53:74:38:b5:de:df:9d:09:d3:e4: dd:2f:8b:2d:03:79:30:ea:b1:4f:18:07:f3:54:0a: 45:0f:85:49:95:bc:90:55:e7:d3:2a:c3:fc:16:7e: 6d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FA:E4:DA:E3:5C:36:68:D6:D9:3E:A4:86:CB:C0:94:D7:9D:44:29 X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.200.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:08:36:ef:45:c1:d7:84:e7:74:5e:09:72:da:e8:76:61:11: 0b:23:14:1e:ab:b2:97:71:91:e3:20:ec:c8:69:06:45:4d:59: 0d:d0:58:25:bb:50:8d:71:24:8e:95:b5:63:55:a4:82:92:12: 73:1d:60:af:60:bc:d1:74:01:08:50:f4:63:4e:ab:a7:89:ca: 2d:24:20:6e:09:c5:cb:1f:46:c3:11:62:50:ff:d6:04:11:a0: 6d:46:c4:54:21:d0:62:1c:e1:22:5c:12:a3:eb:1d:46:c3:79: 38:50:61:7a:7b:86:fc:ac:97:73:73:a8:d3:a1:7a:37:99:64: 42:40:10:2a:7d:a5:d0:b3:ea:83:c2:93:2a:ae:00:44:83:4b: c5:9b:c6:08:31:f1:76:ad:9f:7f:a9:3d:3c:73:ee:00:5a:a3: ea:30:d0:43:e1:74:a5:fc:23:b6:cb:0c:c1:de:78:d7:0d:b9: a3:58:05:69:40:36:2e:9e:95:5a:07:fd:e4:b3:55:37:98:b9: f6:f7:25:6c:0f:5b:d8:e4:4b:c9:9e:56:47:d1:42:ed:2f:f0: 5d:c6:86:53:b0:c9:51:1a:a2:25:4b:2a:2b:ed:b7:d7:cd:1e: 00:ef:22:95:13:b6:88:03:17:f7:31:d5:46:b3:dc:2c:17:95: 6f:77:f5:91 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMbkPylDFNa/ibBgE21Wa+Ok+hZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNjAzMTkwMjU3NDRaFw0yNzAzMTgwMzAyNDRaMDMxMTAvBgNV BAMTKDlBRkFFNERBRTM1QzM2NjhENkQ5M0VBNDg2Q0JDMDk0RDc5RDQ0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHxvwCYj7zyaxo1BPvWKWdpOna tKAeulLT5KmqB5LgmfLnUSO/q2moavOpFnf38LJjP97IbdOLoOGOfTqQSIlXwIsJ QA/RVSwDFr8CBMvqcK+HXBYZ4EEm7jJw3TtV4WL8MygAVb+HZQsSUzuwJQy/IRC6 f9tbxJH6TSxXHMis+6aho2uzpo36rYGvbsD2H6HTeebui1udlI7ajNUqxm9be/zL mmglhJGaH2kBU8sBs0tD9fd78CorO2Ox1frTZ4YvQgCnRbHJ+QkgdTKnRNq3pg2H nFoXU3Q4td7fnQnT5N0viy0DeTDqsU8YB/NUCkUPhUmVvJBV59Mqw/wWfm1TAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUmvrk2uNcNmjW2T6khsvAlNedRCkwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmMzQwNGU2LWJiMmEtNDRiMC1i ZWRlLWE4YjM1MDE0NjEyZC8wLzMxMzAzMzJlMzEzMDM4MmUzMjMwMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzMTMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnbMgwDQYJ KoZIhvcNAQELBQADggEBAD0INu9FwdeE53ReCXLa6HZhEQsjFB6rspdxkeMg7Mhp BkVNWQ3QWCW7UI1xJI6VtWNVpIKSEnMdYK9gvNF0AQhQ9GNOq6eJyi0kIG4Jxcsf RsMRYlD/1gQRoG1GxFQh0GIc4SJcEqPrHUbDeThQYXp7hvysl3NzqNOhejeZZEJA ECp9pdCz6oPCkyquAESDS8Wbxggx8Xatn3+pPTxz7gBao+ow0EPhdKX8I7bLDMHe eNcNuaNYBWlANi6elVoH/eSzVTeYufb3JWwPW9jkS8meVkfRQu0v8F3GhlOwyVEa oiVLKivtt9fNHgDvIpUTtogDF/cx1Uaz3CwXlW939ZE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:12:05 2026 by rpki-client