$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa File: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: M+08VWH7IMnc5EimyxyBsiNgkubt8AigK4DN84smiCk= Subject key identifier: 45:B9:99:81:5B:D0:38:E8:BD:BA:45:8A:46:30:A6:81:3B:6F:74:B9 Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 6018A61ED47604DCF8BF67781C6632163BDC1D7F Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa Signing time: Wed 04 Mar 2026 03:00:01 +0000 ROA not before: Wed 04 Mar 2026 02:55:01 +0000 ROA not after: Wed 03 Mar 2027 03:00:01 +0000 asID: 55685 IP address blocks: 103.108.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 19:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:18:a6:1e:d4:76:04:dc:f8:bf:67:78:1c:66:32:16:3b:dc:1d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Mar 4 02:55:01 2026 GMT Not After : Mar 3 03:00:01 2027 GMT Subject: CN=45B999815BD038E8BDBA458A4630A6813B6F74B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:19:f4:e0:d4:02:e0:bb:71:5b:ed:9f:dd: c1:14:17:be:1a:bd:6b:51:ae:74:43:19:c5:54:7d: 4e:ef:3d:ec:59:f6:cd:df:92:81:84:1b:0b:f6:73: 21:70:6f:a7:9c:55:9b:ee:8f:3e:33:b6:aa:5b:e9: 64:ec:90:c1:db:21:dc:cd:72:3f:e2:07:01:4c:ae: f2:dd:e4:f0:00:30:52:b1:b3:26:20:c4:15:c7:d8: 8d:ed:31:a9:d8:93:34:99:84:24:80:59:59:ea:a9: 7a:4a:ea:09:f7:0e:66:c8:bb:cc:15:61:f6:e8:79: b3:83:81:0a:ac:85:cd:43:a9:6c:f5:16:8d:10:46: f4:a1:68:37:35:d3:da:24:d5:be:cc:be:2c:34:61: 33:bb:f9:fa:92:81:18:ed:f0:bf:83:5e:28:92:b5: 99:04:8d:0a:4b:36:41:c1:85:54:5b:19:a0:25:21: 00:3d:d9:27:1d:69:2d:fa:f5:be:e6:26:8f:fe:50: 4e:3a:e9:2f:51:2c:bb:71:30:1d:9f:45:9e:a1:94: a7:b5:24:e1:09:80:db:f4:72:e9:8b:f2:23:c1:4a: 0a:5f:b8:ea:c7:2c:e4:75:7e:2b:6f:e0:a5:71:a8: 79:b2:f8:ae:99:7c:20:21:34:3e:ed:eb:14:35:13: bc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B9:99:81:5B:D0:38:E8:BD:BA:45:8A:46:30:A6:81:3B:6F:74:B9 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.129.0/24 Signature Algorithm: sha256WithRSAEncryption 94:da:4e:2f:7c:ba:42:ff:e2:38:1b:e4:fb:f2:71:41:1d:18: 4b:b1:77:ed:9d:eb:19:2a:c1:82:b9:f3:a6:d0:29:d0:7d:86: 1b:da:ea:0f:6f:31:55:fb:01:41:e4:ca:67:e2:fd:ca:d9:0e: 21:e4:e5:0c:99:ac:03:94:39:64:cf:80:f8:fc:69:ed:1a:94: 2a:5b:13:66:cd:c4:17:cb:47:48:79:46:c5:e4:87:a1:16:a3: 0f:39:fc:50:f5:09:96:23:57:c2:04:fa:25:fe:40:ad:ce:d0: 5a:20:76:bb:10:8f:6f:e7:50:54:92:17:b3:be:a5:bd:79:82: 6e:2e:6c:47:ff:0d:0d:f1:c1:a6:0a:dc:85:fa:0a:88:b6:c0: 88:bf:08:c6:21:e8:bd:af:e7:94:e9:70:dc:b2:a9:5f:8a:36: 2a:76:fe:eb:13:b2:51:be:84:c9:ee:8b:2f:0d:6a:c2:e6:7c: 10:39:6d:bf:23:f3:f5:c5:2b:e2:46:20:1a:50:22:64:03:c9: 3e:aa:39:81:c2:ff:e5:ec:91:65:75:3a:09:0b:c9:f5:f5:18: 64:80:25:c0:ed:59:ea:e7:7f:ae:93:d9:8d:2c:a1:5d:bd:e5: 27:e1:7e:91:dd:a3:3e:a3:61:b9:1d:75:8c:7d:03:69:b9:29: 22:20:45:fb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYBimHtR2BNz4v2d4HGYyFjvcHX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNjAzMDQwMjU1MDFaFw0yNzAzMDMwMzAwMDFaMDMxMTAvBgNV BAMTKDQ1Qjk5OTgxNUJEMDM4RThCREJBNDU4QTQ2MzBBNjgxM0I2Rjc0QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtuhn04NQC4LtxW+2f3cEUF74a vWtRrnRDGcVUfU7vPexZ9s3fkoGEGwv2cyFwb6ecVZvujz4ztqpb6WTskMHbIdzN cj/iBwFMrvLd5PAAMFKxsyYgxBXH2I3tManYkzSZhCSAWVnqqXpK6gn3DmbIu8wV YfboebODgQqshc1DqWz1Fo0QRvShaDc109ok1b7Mviw0YTO7+fqSgRjt8L+DXiiS tZkEjQpLNkHBhVRbGaAlIQA92ScdaS369b7mJo/+UE466S9RLLtxMB2fRZ6hlKe1 JOEJgNv0cumL8iPBSgpfuOrHLOR1fitv4KVxqHmy+K6ZfCAhND7t6xQ1E7xXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURbmZgVvQOOi9ukWKRjCmgTtvdLkwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzEzMDM4MmUzMTMyMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2yBMA0GCSqG SIb3DQEBCwUAA4IBAQCU2k4vfLpC/+I4G+T78nFBHRhLsXftnesZKsGCufOm0CnQ fYYb2uoPbzFV+wFB5Mpn4v3K2Q4h5OUMmawDlDlkz4D4/GntGpQqWxNmzcQXy0dI eUbF5IehFqMPOfxQ9QmWI1fCBPol/kCtztBaIHa7EI9v51BUkhezvqW9eYJuLmxH /w0N8cGmCtyF+gqItsCIvwjGIei9r+eU6XDcsqlfijYqdv7rE7JRvoTJ7osvDWrC 5nwQOW2/I/P1xSviRiAaUCJkA8k+qjmBwv/l7JFldToJC8n19RhkgCXA7Vnq53+u k9mNLKFdveUn4X6R3aM+o2G5HXWMfQNpuSkiIEX7 -----END CERTIFICATE-----Generated at Thu Mar 26 20:10:29 2026 by rpki-client