$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa File: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: OyCnOgi9DF6ImFMB1rT6WHy4zvSLECF/37ABilSCMZo= Subject key identifier: 3A:83:F8:88:72:F8:A5:7E:8E:BF:F6:38:A0:B6:9A:1F:E5:1B:EC:75 Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 44B5DC91E64907409AA25C21803A1B927D9B57C3 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa Signing time: Wed 04 Mar 2026 04:03:19 +0000 ROA not before: Wed 04 Mar 2026 03:58:19 +0000 ROA not after: Wed 03 Mar 2027 04:03:19 +0000 asID: 55685 IP address blocks: 103.247.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 19:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b5:dc:91:e6:49:07:40:9a:a2:5c:21:80:3a:1b:92:7d:9b:57:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Mar 4 03:58:19 2026 GMT Not After : Mar 3 04:03:19 2027 GMT Subject: CN=3A83F88872F8A57E8EBFF638A0B69A1FE51BEC75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:cc:18:39:ba:66:06:af:61:34:b8:5d:28: 92:92:43:47:bf:fb:7c:8d:e9:ca:82:df:70:5b:38: 18:95:14:57:9d:d8:ab:3d:1b:97:ad:4e:2a:9f:ff: 49:b0:84:88:ad:b1:da:b5:f0:23:db:7b:0e:d1:1a: 48:bd:9f:82:5a:a0:14:47:70:f8:2c:2b:f6:be:cc: 28:87:41:41:4a:69:36:8f:85:d8:bd:7c:47:c3:8f: c8:a3:f5:44:c6:c3:88:ed:03:6f:5b:1d:a3:4a:dc: 41:08:49:77:ed:d1:bb:09:8f:5f:fd:1e:d3:af:93: 42:a2:55:ff:27:d2:8a:39:62:dd:4f:25:17:14:74: a3:60:95:bf:23:5a:82:3f:64:84:7c:b3:2f:07:88: b5:ac:98:c5:cd:12:62:f5:3d:3e:06:6c:97:03:0d: d7:31:66:5f:13:8f:34:7a:df:08:39:79:d7:90:08: e4:e1:8e:31:d3:ed:4a:26:d0:48:9d:0e:5f:84:86: ce:df:dc:fc:4f:bd:9c:5c:45:8e:76:5b:6f:b6:28: 92:69:76:63:c2:49:8e:7c:c4:cd:84:ef:cb:72:a8: 2d:6b:9e:5b:e5:7b:44:58:b2:f4:3c:e9:11:11:05: 18:12:73:19:3d:b1:bc:ff:0d:19:9f:5e:9c:0d:35: cc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:83:F8:88:72:F8:A5:7E:8E:BF:F6:38:A0:B6:9A:1F:E5:1B:EC:75 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.40.0/24 Signature Algorithm: sha256WithRSAEncryption bc:b9:77:5a:e7:35:d7:33:95:a2:03:3c:31:f2:59:2f:51:3f: 68:d2:c0:82:c3:45:9b:eb:0e:55:75:91:e0:97:95:ae:81:7b: e1:b8:9b:9f:46:16:2c:8c:69:a8:55:17:70:f4:85:8e:51:79: 27:8a:ad:7b:71:b3:81:81:e7:e4:91:a3:dd:74:4c:99:3a:b5: 49:75:1d:63:b6:95:4c:76:b5:11:4f:d0:5d:e9:e9:7d:af:d1: 35:9c:c5:fd:75:9f:11:c5:19:51:c0:8b:82:61:27:65:41:88: 30:55:07:e3:b8:53:be:84:a4:48:90:75:09:cf:97:e5:0a:e3: 58:8a:06:de:de:9e:ae:d2:03:5e:c6:af:3e:ef:1a:27:8f:57: 95:b0:04:08:0a:ad:55:20:01:b4:72:d1:c0:30:e5:23:b5:34: e7:ef:8c:ec:f0:a2:e7:fe:c7:f2:ec:ba:1e:6e:b9:34:2a:4b: c0:14:71:6d:b3:03:b3:f9:64:3e:94:a0:a4:db:54:3a:36:ab: 25:79:77:41:d7:d1:07:bc:1b:c1:fe:c2:fd:25:db:ba:fd:06: 49:98:5c:32:d8:75:73:f9:67:ab:79:42:20:b1:b2:9d:8a:af: 29:30:a6:b8:af:ae:6e:96:e5:8b:68:24:17:e6:34:ba:39:69: 90:55:10:70 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURLXckeZJB0CaolwhgDobkn2bV8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNjAzMDQwMzU4MTlaFw0yNzAzMDMwNDAzMTlaMDMxMTAvBgNV BAMTKDNBODNGODg4NzJGOEE1N0U4RUJGRjYzOEEwQjY5QTFGRTUxQkVDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUfMwYObpmBq9hNLhdKJKSQ0e/ +3yN6cqC33BbOBiVFFed2Ks9G5etTiqf/0mwhIitsdq18CPbew7RGki9n4JaoBRH cPgsK/a+zCiHQUFKaTaPhdi9fEfDj8ij9UTGw4jtA29bHaNK3EEISXft0bsJj1/9 HtOvk0KiVf8n0oo5Yt1PJRcUdKNglb8jWoI/ZIR8sy8HiLWsmMXNEmL1PT4GbJcD DdcxZl8TjzR63wg5edeQCOThjjHT7Uom0EidDl+Ehs7f3PxPvZxcRY52W2+2KJJp dmPCSY58xM2E78tyqC1rnlvle0RYsvQ86RERBRgScxk9sbz/DRmfXpwNNczFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOoP4iHL4pX6Ov/Y4oLaaH+Ub7HUwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzIzNDM3MmUzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3KDANBgkqhkiG 9w0BAQsFAAOCAQEAvLl3Wuc11zOVogM8MfJZL1E/aNLAgsNFm+sOVXWR4JeVroF7 4bibn0YWLIxpqFUXcPSFjlF5J4qte3GzgYHn5JGj3XRMmTq1SXUdY7aVTHa1EU/Q Xenpfa/RNZzF/XWfEcUZUcCLgmEnZUGIMFUH47hTvoSkSJB1Cc+X5QrjWIoG3t6e rtIDXsavPu8aJ49XlbAECAqtVSABtHLRwDDlI7U05++M7PCi5/7H8uy6Hm65NCpL wBRxbbMDs/lkPpSgpNtUOjarJXl3QdfRB7wbwf7C/SXbuv0GSZhcMth1c/lnq3lC ILGynYqvKTCmuK+ubpbli2gkF+Y0ujlpkFUQcA== -----END CERTIFICATE-----Generated at Thu Mar 26 22:31:55 2026 by rpki-client