$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa File: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (raw, json) Hash identifier: SFQmtlEqNhmx25kRgKhycgtd/3jV5zQ3nNu6Q6CPubo= Subject key identifier: 8B:B1:B0:A6:10:F7:3A:C0:D0:CE:56:41:1D:58:D7:87:BA:57:16:F4 Certificate issuer: /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6 Certificate serial: 7C26E381359EDBE0922EF043FCF50566077C1327 Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa Signing time: Tue 10 Mar 2026 07:01:39 +0000 ROA not before: Tue 10 Mar 2026 06:56:39 +0000 ROA not after: Tue 09 Mar 2027 07:01:39 +0000 asID: 141660 IP address blocks: 103.162.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:26:e3:81:35:9e:db:e0:92:2e:f0:43:fc:f5:05:66:07:7c:13:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6 Validity Not Before: Mar 10 06:56:39 2026 GMT Not After : Mar 9 07:01:39 2027 GMT Subject: CN=8BB1B0A610F73AC0D0CE56411D58D787BA5716F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:0a:46:6c:cb:a6:4d:c1:e0:37:d6:91:ed: 07:89:58:b0:cb:1c:f2:af:21:75:87:ca:e1:45:51: 4c:e9:6d:de:e2:0f:ec:7b:9b:55:32:ec:f9:b9:f3: ef:2c:72:d8:39:45:5e:ab:90:ea:cf:e3:c7:fe:f3: 51:70:32:42:a6:63:9d:48:ae:fa:b5:81:f3:f6:b4: d9:ef:a7:37:a2:80:7e:cf:7c:65:5c:e2:e5:ef:df: 08:f8:13:2c:e1:c4:15:2a:63:6b:16:0d:79:cb:91: 60:4c:db:e1:84:f2:bf:b1:1a:e4:20:e5:37:a7:51: 75:11:f8:1d:4a:2e:f8:03:c1:ea:f7:a7:a8:1e:94: 05:ef:95:d0:cf:5e:b2:2b:39:2f:34:fc:57:32:b7: 6c:39:e1:94:f4:46:c2:48:31:c2:36:49:c7:04:f5: 4e:74:a4:76:5a:11:57:7f:b5:7d:be:d3:1f:10:c1: 0a:a3:08:8e:f6:db:e9:8d:84:8e:e3:12:3a:a7:49: 41:15:29:bb:16:bf:a8:29:7d:c0:73:ac:e7:26:81: a9:25:d4:c2:f1:ec:a1:01:30:df:12:68:a2:42:ab: f3:64:d8:ea:db:3d:59:b8:64:31:c7:74:11:ba:fd: 25:ca:85:9c:17:22:cd:74:1c:d2:60:79:31:5a:5f: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B1:B0:A6:10:F7:3A:C0:D0:CE:56:41:1D:58:D7:87:BA:57:16:F4 X509v3 Authority Key Identifier: keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.152.0/24 Signature Algorithm: sha256WithRSAEncryption 64:7e:73:cc:ee:62:a3:48:d5:e8:18:4c:47:7e:93:ac:3f:be: 5c:c2:2a:a1:2c:81:66:ba:c4:fe:ed:0b:19:86:40:2f:43:f5: 57:09:49:25:68:bb:a6:3d:4f:08:26:2c:ea:44:94:0a:68:c9: 1e:bf:da:6c:d1:b7:0d:36:8c:5b:f2:f7:64:1f:32:fe:f6:84: b3:d3:61:36:53:3b:dc:e5:67:19:be:50:1e:05:f1:28:a7:cc: 79:cb:49:2b:b6:55:4c:af:85:80:58:e1:22:16:98:9b:ca:8c: 6d:30:9c:ca:9b:a0:27:7c:d7:a8:76:bc:14:fa:23:d4:fe:a3: dc:31:d5:46:ce:b0:00:53:16:ff:32:7e:bc:00:7f:43:2c:e5: 39:72:65:cc:49:9b:74:70:17:5b:a6:7c:92:58:83:4a:55:4c: 14:f3:d9:f3:7e:f0:f5:79:ae:15:f1:b8:dd:2d:50:b8:fd:94: a0:8d:3e:5c:65:81:70:65:5e:6d:36:83:fb:eb:9b:c8:54:18: b5:c5:79:9b:41:42:f9:34:d9:6d:64:3f:00:32:cc:d0:ed:28: 9b:ca:d4:49:c9:90:a5:53:0f:58:1e:0a:5a:88:32:8e:fd:96: 2e:3a:2a:f6:8e:2b:9c:df:65:89:cf:93:be:48:12:62:97:fb: 28:d7:3a:1c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUfCbjgTWe2+CSLvBD/PUFZgd8EycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVF MEVDMjJGNjAeFw0yNjAzMTAwNjU2MzlaFw0yNzAzMDkwNzAxMzlaMDMxMTAvBgNV BAMTKDhCQjFCMEE2MTBGNzNBQzBEMENFNTY0MTFENThENzg3QkE1NzE2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwgpGbMumTcHgN9aR7QeJWLDL HPKvIXWHyuFFUUzpbd7iD+x7m1Uy7Pm58+8sctg5RV6rkOrP48f+81FwMkKmY51I rvq1gfP2tNnvpzeigH7PfGVc4uXv3wj4EyzhxBUqY2sWDXnLkWBM2+GE8r+xGuQg 5TenUXUR+B1KLvgDwer3p6gelAXvldDPXrIrOS80/Fcyt2w54ZT0RsJIMcI2SccE 9U50pHZaEVd/tX2+0x8QwQqjCI722+mNhI7jEjqnSUEVKbsWv6gpfcBzrOcmgakl 1MLx7KEBMN8SaKJCq/Nk2OrbPVm4ZDHHdBG6/SXKhZwXIs10HNJgeTFaX9zNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUi7GwphD3OsDQzlZBHVjXh7pXFvQwHwYDVR0j BBgwFoAUg5BqsYpJ7Bet2EHyBy/cVeDsIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWIzYzAzZC0yZTJlLTQ4OTctODY5Yi0yMWNlNDg2MDE2MTkvMC84MzkwNkFCMThB NDlFQzE3QUREODQxRjIwNzJGREM1NUUwRUMyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVFMEVD MjJGNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhYjNjMDNkLTJlMmUtNDg5Ny04 NjliLTIxY2U0ODYwMTYxOS8wLzMxMzAzMzJlMzEzNjMyMmUzMTM1MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM2MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnopgwDQYJ KoZIhvcNAQELBQADggEBAGR+c8zuYqNI1egYTEd+k6w/vlzCKqEsgWa6xP7tCxmG QC9D9VcJSSVou6Y9TwgmLOpElApoyR6/2mzRtw02jFvy92QfMv72hLPTYTZTO9zl Zxm+UB4F8SinzHnLSSu2VUyvhYBY4SIWmJvKjG0wnMqboCd816h2vBT6I9T+o9wx 1UbOsABTFv8yfrwAf0Ms5TlyZcxJm3RwF1umfJJYg0pVTBTz2fN+8PV5rhXxuN0t ULj9lKCNPlxlgXBlXm02g/vrm8hUGLXFeZtBQvk02W1kPwAyzNDtKJvK1EnJkKVT D1geClqIMo79li46KvaOK5zfZYnPk75IEmKX+yjXOhw= -----END CERTIFICATE-----Generated at Thu Mar 26 20:13:36 2026 by rpki-client