$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa File: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: dRJS7uROXD+8OrePczzV74g/Ovnmamj5hrSj2kmHNWY= Subject key identifier: C8:81:D3:38:A7:A7:B9:56:4B:68:9A:D7:F4:37:44:7D:60:AC:E3:D4 Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 4283F76C63239C2A59BFE22D228BC6C2FAB7FFD5 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa Signing time: Wed 04 Mar 2026 03:00:01 +0000 ROA not before: Wed 04 Mar 2026 02:55:01 +0000 ROA not after: Wed 03 Mar 2027 03:00:01 +0000 asID: 55685 IP address blocks: 103.108.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:83:f7:6c:63:23:9c:2a:59:bf:e2:2d:22:8b:c6:c2:fa:b7:ff:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Mar 4 02:55:01 2026 GMT Not After : Mar 3 03:00:01 2027 GMT Subject: CN=C881D338A7A7B9564B689AD7F437447D60ACE3D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8c:4f:2d:01:7d:6f:ce:7e:10:12:8b:bd:5f: ef:9f:8f:85:b4:72:dc:52:a0:45:b1:68:45:77:dc: 59:fe:18:a8:ba:a7:67:16:20:d7:0e:95:4d:32:a2: 40:a3:7f:08:db:d9:8f:18:da:50:cc:54:b0:32:b3: 0d:bf:4b:f1:a3:a8:e9:3b:7a:82:14:56:9e:35:40: b8:80:78:56:8d:53:37:7f:26:ea:70:33:b8:40:15: 1a:d2:81:aa:e6:2f:af:cf:f6:43:4b:b5:1c:18:24: a9:9a:ad:8a:6f:23:b2:a9:3b:96:e9:49:ad:db:79: 49:14:32:8d:70:29:40:78:c2:c1:31:3f:ba:6d:07: 4c:22:9f:8e:8c:33:80:d7:0d:8d:24:a5:d3:8d:86: 3d:3a:9e:61:46:20:b4:40:d4:2c:ad:8c:dd:1c:21: 5c:bc:92:60:a6:74:fc:5f:2b:eb:59:a2:c4:e0:cb: 16:3a:18:70:85:19:9a:ab:e6:1c:b5:a1:2c:a3:6f: 34:66:03:ea:f3:60:98:ac:7c:89:48:f1:8c:43:4a: d0:71:7f:e4:b7:94:29:54:43:a8:cf:91:20:27:ca: 40:b4:6f:bd:42:ad:cb:29:ff:84:5a:bd:b9:59:d4: ba:63:d9:24:83:4d:15:ff:f0:b5:e5:40:58:23:fa: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:81:D3:38:A7:A7:B9:56:4B:68:9A:D7:F4:37:44:7D:60:AC:E3:D4 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.130.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:2b:8f:f4:c2:a0:88:32:72:c8:1c:14:42:9a:2a:bb:98:b0: 7d:f9:15:2b:d9:9b:c8:12:b2:c2:e8:4b:d9:78:81:18:0f:65: a7:24:cf:11:dd:35:13:cf:5e:f9:76:63:4a:3c:22:08:ed:df: a1:29:58:56:ff:14:82:e1:d8:76:8f:75:cb:02:3d:fe:ae:17: ba:45:cb:c2:b5:4d:72:9c:ee:0b:07:97:a8:41:69:55:aa:34: 55:87:0a:77:f6:18:47:ad:46:fa:e9:6d:e5:fd:97:ee:45:0c: 17:2b:af:c6:92:a8:28:05:91:3f:ac:2d:8b:8e:87:ba:71:01: d4:10:50:f5:12:03:e5:85:ef:5c:60:84:e2:16:6c:34:89:aa: d2:d9:ae:4f:a9:53:bf:99:6a:49:82:57:54:3e:b2:72:00:81: 1a:e3:fa:07:db:25:7d:5b:b1:f1:8b:a3:9c:e8:df:dd:77:35: fd:1a:88:0d:30:14:5a:ba:ae:82:77:42:c2:05:51:0d:44:14: 05:2c:03:f3:6b:ce:a0:d4:79:ea:f0:9b:7f:87:d1:57:d3:1d: 08:26:be:a8:33:92:03:8e:03:e1:5d:fa:f8:75:cb:08:60:1e: d1:4e:63:da:98:51:70:09:3d:88:60:c5:c7:ea:9e:f5:d9:10: 81:80:fd:d1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQoP3bGMjnCpZv+ItIovGwvq3/9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNjAzMDQwMjU1MDFaFw0yNzAzMDMwMzAwMDFaMDMxMTAvBgNV BAMTKEM4ODFEMzM4QTdBN0I5NTY0QjY4OUFEN0Y0Mzc0NDdENjBBQ0UzRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijE8tAX1vzn4QEou9X++fj4W0 ctxSoEWxaEV33Fn+GKi6p2cWINcOlU0yokCjfwjb2Y8Y2lDMVLAysw2/S/GjqOk7 eoIUVp41QLiAeFaNUzd/JupwM7hAFRrSgarmL6/P9kNLtRwYJKmarYpvI7KpO5bp Sa3beUkUMo1wKUB4wsExP7ptB0win46MM4DXDY0kpdONhj06nmFGILRA1CytjN0c IVy8kmCmdPxfK+tZosTgyxY6GHCFGZqr5hy1oSyjbzRmA+rzYJisfIlI8YxDStBx f+S3lClUQ6jPkSAnykC0b71Crcsp/4RavblZ1Lpj2SSDTRX/8LXlQFgj+lP9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyIHTOKenuVZLaJrX9DdEfWCs49QwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzEzMDM4MmUzMTMzMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2yCMA0GCSqG SIb3DQEBCwUAA4IBAQBqK4/0wqCIMnLIHBRCmiq7mLB9+RUr2ZvIErLC6EvZeIEY D2WnJM8R3TUTz175dmNKPCII7d+hKVhW/xSC4dh2j3XLAj3+rhe6RcvCtU1ynO4L B5eoQWlVqjRVhwp39hhHrUb66W3l/ZfuRQwXK6/GkqgoBZE/rC2Ljoe6cQHUEFD1 EgPlhe9cYITiFmw0iarS2a5PqVO/mWpJgldUPrJyAIEa4/oH2yV9W7Hxi6Oc6N/d dzX9GogNMBRauq6Cd0LCBVENRBQFLAPza86g1Hnq8Jt/h9FX0x0IJr6oM5IDjgPh Xfr4dcsIYB7RTmPamFFwCT2IYMXH6p712RCBgP3R -----END CERTIFICATE-----Generated at Thu Mar 26 18:07:07 2026 by rpki-client