$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa File: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (raw, json) Hash identifier: 6YppYQBmze+QjQsjns3D6bEx0CLiUBYJBxjSLx6K1N0= Subject key identifier: 71:E3:F3:3B:E4:70:6C:D3:12:DF:C7:2B:B5:FB:F8:8D:1A:BD:18:87 Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 58382A50B8899C90282BFF18E066BB67E6E71DED Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa Signing time: Wed 25 Mar 2026 11:00:01 +0000 ROA not before: Wed 25 Mar 2026 10:55:01 +0000 ROA not after: Wed 24 Mar 2027 11:00:01 +0000 asID: 58369 IP address blocks: 103.188.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:38:2a:50:b8:89:9c:90:28:2b:ff:18:e0:66:bb:67:e6:e7:1d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Mar 25 10:55:01 2026 GMT Not After : Mar 24 11:00:01 2027 GMT Subject: CN=71E3F33BE4706CD312DFC72BB5FBF88D1ABD1887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0e:91:5b:56:10:d8:71:6a:03:00:34:e2:5b: 3c:f0:c9:5d:5f:bc:7d:90:97:c7:14:82:dd:48:13: 25:26:a6:cd:4c:f2:c1:d7:a2:b8:da:45:46:70:3f: f0:c5:40:45:53:2d:68:e2:ca:fb:76:69:ea:f6:b6: 61:5c:40:c0:bd:64:2d:78:69:7d:49:52:b2:23:f0: ec:8a:35:5a:60:73:2d:d1:df:68:56:41:f3:d8:3a: f8:f7:bb:49:07:37:95:73:dc:e3:07:b3:45:1c:d6: aa:24:56:ba:c6:9f:65:14:d3:98:c4:c7:33:21:eb: 87:d2:85:d2:7a:53:9c:9b:97:64:4d:4e:1d:12:38: 9a:15:40:6e:4c:f8:d5:fa:5e:9a:e5:6c:ba:5d:93: b3:22:94:ff:1e:ca:ce:cb:5d:22:47:fd:9d:97:e9: d3:76:05:ff:90:71:72:d8:01:42:8f:a6:57:80:ad: f8:b2:95:86:0f:8e:e3:3f:3d:c3:8c:d2:81:5e:d2: 3a:b8:86:aa:fc:36:4d:b2:d4:6f:7b:dc:db:a1:4f: 8b:4b:84:67:7c:e2:a5:ed:fe:d6:58:0a:ff:86:55: 1b:95:3c:c7:f3:5e:86:7a:db:7b:7a:3a:d6:81:b2: f0:36:71:36:42:b6:dc:22:36:a5:11:d1:65:cb:aa: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E3:F3:3B:E4:70:6C:D3:12:DF:C7:2B:B5:FB:F8:8D:1A:BD:18:87 X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.174.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:18:dd:0a:5c:72:c8:fb:91:4d:51:91:ce:9e:bc:3d:0d:23: d2:b6:da:a9:78:cc:b1:5d:c9:1c:01:93:95:fa:1c:74:88:a2: c5:04:46:25:fb:d3:b9:0a:6a:ae:f4:e1:96:77:1d:26:80:2f: 6e:c0:9c:ca:38:05:f5:3d:53:72:48:c2:58:5c:b9:fb:7a:95: 1d:1e:ba:c8:ad:60:af:86:7f:2a:0e:0c:34:ff:77:8e:1d:11: 11:62:05:9f:79:4a:db:78:07:22:35:da:67:d7:9c:bf:24:51: 4b:e6:71:30:cc:cb:0d:c1:4a:34:9f:94:2b:9c:aa:5c:1e:1b: 67:5e:47:4b:29:6e:57:29:3d:7e:30:1d:e5:0f:c6:b7:91:48: 75:9b:59:91:7c:14:53:b3:44:de:75:5a:2f:5e:fc:ba:02:1f: 07:d1:56:02:2e:21:62:2c:9e:af:9a:c3:e9:c5:c3:d4:9a:52: 97:14:74:c4:a2:b6:4c:4b:f3:6c:fe:06:53:ee:0b:f1:52:a0: 73:86:1c:3b:89:c0:0a:2e:e3:2c:9a:8b:4f:74:bb:1e:87:98: c7:db:6e:8b:91:9b:af:c0:58:9e:62:e0:a3:12:db:3c:e5:b0: b1:ce:ac:72:52:60:54:7c:48:3c:8e:09:95:83:d6:65:9d:e8: 3e:ee:30:89 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWDgqULiJnJAoK/8Y4Ga7Z+bnHe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNjAzMjUxMDU1MDFaFw0yNzAzMjQxMTAwMDFaMDMxMTAvBgNV BAMTKDcxRTNGMzNCRTQ3MDZDRDMxMkRGQzcyQkI1RkJGODhEMUFCRDE4ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXDpFbVhDYcWoDADTiWzzwyV1f vH2Ql8cUgt1IEyUmps1M8sHXorjaRUZwP/DFQEVTLWjiyvt2aer2tmFcQMC9ZC14 aX1JUrIj8OyKNVpgcy3R32hWQfPYOvj3u0kHN5Vz3OMHs0Uc1qokVrrGn2UU05jE xzMh64fShdJ6U5ybl2RNTh0SOJoVQG5M+NX6XprlbLpdk7MilP8eys7LXSJH/Z2X 6dN2Bf+QcXLYAUKPpleArfiylYYPjuM/PcOM0oFe0jq4hqr8Nk2y1G973NuhT4tL hGd84qXt/tZYCv+GVRuVPMfzXoZ623t6OtaBsvA2cTZCttwiNqUR0WXLqtlVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcePzO+RwbNMS38crtfv4jRq9GIcwHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2YmQ1NTM4LTQyNzAtNDEyZC05 ZDY2LWMyYjUxNTdkM2Q2ZS8wLzMxMzAzMzJlMzEzODM4MmUzMTM3MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7yuMA0GCSqG SIb3DQEBCwUAA4IBAQCMGN0KXHLI+5FNUZHOnrw9DSPSttqpeMyxXckcAZOV+hx0 iKLFBEYl+9O5Cmqu9OGWdx0mgC9uwJzKOAX1PVNySMJYXLn7epUdHrrIrWCvhn8q Dgw0/3eOHRERYgWfeUrbeAciNdpn15y/JFFL5nEwzMsNwUo0n5QrnKpcHhtnXkdL KW5XKT1+MB3lD8a3kUh1m1mRfBRTs0TedVovXvy6Ah8H0VYCLiFiLJ6vmsPpxcPU mlKXFHTEorZMS/Ns/gZT7gvxUqBzhhw7icAKLuMsmotPdLseh5jH226LkZuvwFie YuCjEts85bCxzqxyUmBUfEg8jgmVg9Zlneg+7jCJ -----END CERTIFICATE-----Generated at Thu Mar 26 18:38:48 2026 by rpki-client