$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa File: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (raw, json) Hash identifier: ETkKS9VsDoQRjfo7XaGH4n7CzRFRoBuPEhzcOfMjns0= Subject key identifier: 49:BE:78:C3:30:B5:20:42:BD:8C:7C:99:1B:5A:3F:9F:C2:66:0C:68 Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 79CBD2EB78468B6D08D9A4371BE2ABEFF905F8F1 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa Signing time: Wed 04 Mar 2026 03:00:01 +0000 ROA not before: Wed 04 Mar 2026 02:55:01 +0000 ROA not after: Wed 03 Mar 2027 03:00:01 +0000 asID: 55685 IP address blocks: 103.108.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:cb:d2:eb:78:46:8b:6d:08:d9:a4:37:1b:e2:ab:ef:f9:05:f8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Mar 4 02:55:01 2026 GMT Not After : Mar 3 03:00:01 2027 GMT Subject: CN=49BE78C330B52042BD8C7C991B5A3F9FC2660C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:65:8f:3d:72:70:26:ae:34:49:e3:0b:5d: 9a:a7:cc:47:af:4b:d5:fa:d3:84:98:de:d0:32:74: f3:d2:53:44:4b:61:b6:c7:28:ea:89:3c:9d:19:11: 12:71:d5:f6:f5:5f:70:f6:4b:29:63:7b:f5:ad:21: 35:ec:cb:82:35:90:09:be:1f:a0:34:f5:45:fb:24: 7e:fa:ad:23:32:34:df:14:cf:86:ab:e0:ae:a3:bc: 27:53:65:50:b8:c4:21:9d:f3:55:2a:ed:aa:a9:89: b7:44:02:64:32:a5:48:ec:c9:d7:e9:f1:72:fa:8a: 59:be:b2:60:39:18:01:92:07:0d:2e:7c:cd:30:7d: 25:e1:11:59:d0:c0:bd:7b:49:63:fd:bb:6d:9c:27: 39:64:89:51:db:bd:c2:37:32:7d:0d:91:b0:28:e6: c1:cf:04:76:53:86:96:38:a5:49:69:93:64:86:32: 80:51:2d:f1:e2:34:71:f3:92:81:aa:05:6b:63:ec: 39:cb:78:6c:b8:60:d7:30:0b:73:f1:df:b0:cf:e9: 0f:c5:f2:f9:bb:fb:b5:bb:c2:c3:d8:7b:9a:ea:96: 5a:e6:0d:9f:d7:f4:32:3d:97:74:47:7f:df:90:7e: 98:b7:be:eb:a4:67:de:8e:8e:8c:78:30:0b:88:e8: 73:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BE:78:C3:30:B5:20:42:BD:8C:7C:99:1B:5A:3F:9F:C2:66:0C:68 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.128.0/22 Signature Algorithm: sha256WithRSAEncryption 21:24:8d:47:4f:fb:e3:02:30:f5:9b:ca:ac:18:ff:49:aa:46: f3:af:d8:0e:6e:eb:60:be:53:b5:e5:bf:83:36:fd:b0:c9:c7: 17:31:89:d4:8c:71:86:d5:e1:fa:9b:cf:9b:f4:a8:69:08:df: 42:a9:b2:30:bb:db:5f:76:10:51:25:12:d7:1d:fe:2a:6f:1a: e8:92:d6:04:30:1b:50:dd:ed:54:e1:62:c8:4a:96:db:67:38: 9f:77:ec:91:7d:4d:43:0d:93:3d:b7:49:2b:74:29:bf:78:76: 03:cb:af:8f:de:c3:03:19:3c:59:fb:2b:19:bf:e3:d4:c1:19: 76:71:19:6a:d0:b4:4a:cf:a6:b6:cb:54:ef:89:c5:aa:c8:54: 2f:ce:b2:ac:bf:c6:0f:e3:2c:52:67:45:69:f8:cb:bc:1c:97: 66:f2:1b:08:fe:a4:0f:52:a3:00:5b:2f:8a:5a:df:a3:be:98: 30:3d:c8:5f:1a:3d:d2:9b:8a:b3:d5:75:bd:bd:83:eb:48:b6: 27:29:74:83:ef:67:a8:47:a0:6e:b4:73:be:24:c5:68:b2:e6: 2e:cb:78:b3:ce:ed:b3:26:5e:dd:0c:70:59:ec:db:b9:cb:b5: e8:d7:c3:83:0e:07:be:04:6f:48:5d:75:de:5c:c1:f5:b7:2a: 0e:e0:d1:dd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUecvS63hGi20I2aQ3G+Kr7/kF+PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNjAzMDQwMjU1MDFaFw0yNzAzMDMwMzAwMDFaMDMxMTAvBgNV BAMTKDQ5QkU3OEMzMzBCNTIwNDJCRDhDN0M5OTFCNUEzRjlGQzI2NjBDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK92WPPXJwJq40SeMLXZqnzEev S9X604SY3tAydPPSU0RLYbbHKOqJPJ0ZERJx1fb1X3D2Sylje/WtITXsy4I1kAm+ H6A09UX7JH76rSMyNN8Uz4ar4K6jvCdTZVC4xCGd81Uq7aqpibdEAmQypUjsydfp 8XL6ilm+smA5GAGSBw0ufM0wfSXhEVnQwL17SWP9u22cJzlkiVHbvcI3Mn0NkbAo 5sHPBHZThpY4pUlpk2SGMoBRLfHiNHHzkoGqBWtj7DnLeGy4YNcwC3Px37DP6Q/F 8vm7+7W7wsPYe5rqllrmDZ/X9DI9l3RHf9+Qfpi3vuukZ96Ojox4MAuI6HMHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSb54wzC1IEK9jHyZG1o/n8JmDGgwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzEzMDM4MmUzMTMyMzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2yAMA0GCSqG SIb3DQEBCwUAA4IBAQAhJI1HT/vjAjD1m8qsGP9Jqkbzr9gObutgvlO15b+DNv2w yccXMYnUjHGG1eH6m8+b9KhpCN9CqbIwu9tfdhBRJRLXHf4qbxroktYEMBtQ3e1U 4WLISpbbZzifd+yRfU1DDZM9t0krdCm/eHYDy6+P3sMDGTxZ+ysZv+PUwRl2cRlq 0LRKz6a2y1TvicWqyFQvzrKsv8YP4yxSZ0Vp+Mu8HJdm8hsI/qQPUqMAWy+KWt+j vpgwPchfGj3Sm4qz1XW9vYPrSLYnKXSD72eoR6ButHO+JMVosuYuy3izzu2zJl7d DHBZ7Nu5y7Xo18ODDge+BG9IXXXeXMH1tyoO4NHd -----END CERTIFICATE-----Generated at Thu Mar 26 18:07:08 2026 by rpki-client