$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa File: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (raw, json) Hash identifier: oupcLDUmMHLFoLDlfsFGLMKtLOlyWvfSlJ+uVUfUPvg= Subject key identifier: A1:52:6B:93:D3:9B:13:CA:64:CC:E4:45:19:1C:13:18:20:B2:38:28 Certificate issuer: /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Certificate serial: 3E4C7513E00170F7E8BE3F46C357B22C2B62D01A Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa Signing time: Tue 24 Mar 2026 07:00:03 +0000 ROA not before: Tue 24 Mar 2026 06:55:03 +0000 ROA not after: Tue 23 Mar 2027 07:00:03 +0000 asID: 131743 IP address blocks: 103.191.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4c:75:13:e0:01:70:f7:e8:be:3f:46:c3:57:b2:2c:2b:62:d0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Validity Not Before: Mar 24 06:55:03 2026 GMT Not After : Mar 23 07:00:03 2027 GMT Subject: CN=A1526B93D39B13CA64CCE445191C131820B23828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:9a:aa:a4:9d:4a:3d:da:62:cb:1f:7a:14: fc:53:63:db:37:53:3d:e6:f4:74:d4:5f:ec:76:c1: 75:67:1c:08:0f:b7:d3:aa:02:5c:91:22:30:93:e5: 49:27:09:7d:d6:9f:56:a9:c0:04:17:a3:98:7a:d1: 83:e5:fd:f5:55:52:9a:51:40:e2:04:da:b0:45:0d: 18:e3:b7:80:00:1d:45:4e:d2:5e:2c:04:20:aa:2d: 29:7d:a1:79:69:fd:5a:da:21:c5:48:ab:b7:19:ca: a8:92:cf:3f:a8:2a:7f:8b:d2:a5:24:1d:d0:a1:a5: a4:03:07:1d:d7:33:ac:c6:89:25:06:4e:07:be:8a: 3a:c3:6f:af:07:61:b7:03:62:b9:3c:f3:4d:51:a1: 9f:8b:f6:73:04:0d:ad:29:55:d5:8f:72:84:67:09: 75:03:27:c5:18:b3:42:87:b6:6c:fd:45:83:96:04: 73:11:54:e4:02:da:3b:4f:88:ae:b9:74:d7:39:3c: 9a:29:9f:93:21:eb:c5:e2:09:bc:cf:7a:7c:22:77: d7:ba:e8:c4:8c:5c:51:df:eb:52:53:0c:0b:cd:25: 73:ac:04:15:e9:c3:2b:16:20:4f:20:17:b2:cf:3d: 54:f8:d4:40:28:41:21:8b:49:7e:7c:5c:8d:22:90: 14:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:52:6B:93:D3:9B:13:CA:64:CC:E4:45:19:1C:13:18:20:B2:38:28 X509v3 Authority Key Identifier: keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.56.0/24 Signature Algorithm: sha256WithRSAEncryption 67:46:d3:94:c6:7d:a6:d7:bd:15:b9:3c:b2:11:cf:d0:cc:9c: ea:b8:60:9e:89:38:59:d0:e6:45:73:b4:d3:13:96:52:8b:17: 60:53:a2:c9:a1:b7:fd:cb:f6:a3:6e:79:e9:32:70:81:4d:5a: 62:8f:e6:25:52:c8:b6:08:95:d6:93:a6:3a:7f:20:f7:1a:bf: 10:e2:20:53:3e:6d:f5:1d:79:1f:53:38:82:c5:b1:d6:c3:2d: 63:80:af:8f:ce:2f:2a:e5:a5:61:bf:8d:91:c9:ac:69:f4:3e: 4c:01:45:8b:e7:0f:34:b5:11:40:51:ff:c6:5a:90:43:a4:ae: b1:0b:db:dc:48:c6:33:88:8c:1e:7f:f3:de:7d:55:2d:01:9f: 24:aa:f1:5b:6f:fd:f2:77:67:92:e8:c7:a8:99:96:e7:b1:a5: 45:65:01:4c:2c:6b:71:ee:40:fe:c7:37:a6:f4:32:c3:ac:b5: c6:4a:50:c1:d9:3d:e0:0b:29:fc:5b:94:e5:a0:e4:a7:2d:75: 5e:d4:58:87:49:4d:07:d2:f5:59:af:bd:dd:43:7c:82:8b:d4: aa:a7:ff:8f:7e:2c:21:1d:ac:32:d9:51:15:6b:52:d4:34:7c: a2:b4:21:dc:74:12:4c:a5:a0:f8:ba:36:59:54:aa:5d:6f:62: b8:47:65:8c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPkx1E+ABcPfovj9Gw1eyLCti0BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZC QTBCMzlCQjAeFw0yNjAzMjQwNjU1MDNaFw0yNzAzMjMwNzAwMDNaMDMxMTAvBgNV BAMTKEExNTI2QjkzRDM5QjEzQ0E2NENDRTQ0NTE5MUMxMzE4MjBCMjM4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+x5qqpJ1KPdpiyx96FPxTY9s3 Uz3m9HTUX+x2wXVnHAgPt9OqAlyRIjCT5UknCX3Wn1apwAQXo5h60YPl/fVVUppR QOIE2rBFDRjjt4AAHUVO0l4sBCCqLSl9oXlp/VraIcVIq7cZyqiSzz+oKn+L0qUk HdChpaQDBx3XM6zGiSUGTge+ijrDb68HYbcDYrk8801RoZ+L9nMEDa0pVdWPcoRn CXUDJ8UYs0KHtmz9RYOWBHMRVOQC2jtPiK65dNc5PJopn5Mh68XiCbzPenwid9e6 6MSMXFHf61JTDAvNJXOsBBXpwysWIE8gF7LPPVT41EAoQSGLSX58XI0ikBT1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUoVJrk9ObE8pkzORFGRwTGCCyOCgwHwYDVR0j BBgwFoAUNEjITd/5uZEtnRdJP+vbn7oLObswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjI5Y2E1MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC8zNDQ4Qzg0RERG RjlCOTkxMkQ5RDE3NDkzRkVCREI5RkJBMEIzOUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZCQTBC MzlCQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyMjljYTUwLWU5NWMtNDViYi05 YzMwLTYzZTEyYWY3YTVlMS8wLzMxMzAzMzJlMzEzOTMxMmUzNTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ784MA0GCSqG SIb3DQEBCwUAA4IBAQBnRtOUxn2m170VuTyyEc/QzJzquGCeiThZ0OZFc7TTE5ZS ixdgU6LJobf9y/ajbnnpMnCBTVpij+YlUsi2CJXWk6Y6fyD3Gr8Q4iBTPm31HXkf UziCxbHWwy1jgK+Pzi8q5aVhv42Ryaxp9D5MAUWL5w80tRFAUf/GWpBDpK6xC9vc SMYziIwef/PefVUtAZ8kqvFbb/3yd2eS6MeomZbnsaVFZQFMLGtx7kD+xzem9DLD rLXGSlDB2T3gCyn8W5TloOSnLXVe1FiHSU0H0vVZr73dQ3yCi9Sqp/+PfiwhHawy 2VEVa1LUNHyitCHcdBJMpaD4ujZZVKpdb2K4R2WM -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:40 2026 by rpki-client