$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34332e302f32342d3234203d3e203535363835.roa File: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: KmS/dz3+11zX3fNHd3kC7GuAtCCakiSkUbzI+cUQ3nc= Subject key identifier: C4:55:63:C2:A4:F1:9E:49:75:09:2A:4A:D4:D2:BF:CF:05:F6:4B:EB Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 7FDFBC34211C7D16DE147289D598975674576D3C Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34332e302f32342d3234203d3e203535363835.roa Signing time: Wed 04 Mar 2026 04:03:19 +0000 ROA not before: Wed 04 Mar 2026 03:58:19 +0000 ROA not after: Wed 03 Mar 2027 04:03:19 +0000 asID: 55685 IP address blocks: 103.247.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:df:bc:34:21:1c:7d:16:de:14:72:89:d5:98:97:56:74:57:6d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Mar 4 03:58:19 2026 GMT Not After : Mar 3 04:03:19 2027 GMT Subject: CN=C45563C2A4F19E4975092A4AD4D2BFCF05F64BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:be:60:23:2c:bd:d5:93:67:f0:5d:a3:8a: bd:0a:cc:46:5f:a8:6c:52:dc:a6:f7:ce:3d:1f:c9: 2b:07:c4:94:c5:ad:c0:2e:a5:f5:3c:65:0f:d6:72: 6d:53:74:e0:64:35:ea:2a:a9:35:34:75:6a:50:6f: 89:cf:ed:47:53:a8:a4:5b:a9:29:95:07:1b:4c:d9: b7:20:9d:4d:7a:04:57:87:5e:30:a3:3f:a8:4e:0e: 33:88:e5:7e:90:37:fb:c9:d9:9c:db:11:a5:9b:e9: 12:f7:85:5e:6b:69:7a:4b:c5:df:e2:95:ce:27:c8: b1:c8:fa:ed:33:34:6a:c0:f0:5d:64:f5:ab:4e:fa: 16:e0:af:10:4d:eb:1d:26:2d:f4:13:2a:ef:63:7d: d7:42:13:d4:f0:88:2c:a7:79:63:92:3c:d2:22:58: 88:9b:ca:54:c3:5a:f7:63:64:e0:7d:b0:63:a1:87: f7:a5:34:5d:f6:0f:a7:02:cb:41:9c:4b:6f:91:6c: c1:b9:95:d1:09:ba:83:8e:ee:b0:b6:c8:be:01:13: ca:9a:11:10:21:91:22:88:51:87:af:ca:95:26:91: 6d:56:f0:6b:9e:b5:5d:45:75:24:00:33:e0:f8:03: e3:05:45:83:da:55:4c:ff:73:fb:01:ad:1d:af:87: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:55:63:C2:A4:F1:9E:49:75:09:2A:4A:D4:D2:BF:CF:05:F6:4B:EB X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34332e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.43.0/24 Signature Algorithm: sha256WithRSAEncryption 01:ef:e9:e3:7b:8b:7a:43:f3:0a:74:ca:ff:e6:b5:05:dd:19: 28:32:e9:be:9b:80:5e:63:70:b2:2c:3f:68:91:8d:77:30:4a: fb:a5:94:ab:18:2b:3d:86:be:ab:48:9a:41:83:03:93:40:ba: 18:0e:43:45:0a:6d:d7:e7:3c:e6:2a:f8:87:1f:1c:a4:2d:00: ec:46:74:c6:ea:77:6e:29:43:bf:3a:1e:39:c4:68:38:d5:6f: 8e:2b:13:c4:25:e4:13:9a:bf:86:2d:02:3e:a7:7d:2c:be:c1: f5:0f:d0:5d:ca:f0:7a:88:14:13:fe:f6:ef:1c:93:e9:39:76: 08:a8:76:5e:bc:8f:ef:96:51:94:ad:5c:23:85:e9:32:d1:52: 83:17:6a:d3:a5:c9:c8:a4:67:d2:dc:bb:22:b4:3d:fd:e3:a1: 83:65:bb:e3:d1:50:b1:34:01:8e:bd:ef:96:4e:8d:0d:2b:31: fb:94:6a:65:bf:2e:81:49:43:10:4e:2f:ae:4f:b8:1d:2e:fd: 44:0c:64:1b:50:e4:73:85:9c:f2:94:df:0c:aa:e5:e1:d6:42: c5:44:0d:cc:dd:1a:6b:9a:0f:7a:4b:46:bd:ff:49:de:79:9c: 03:5c:f3:ed:0d:66:79:64:5a:29:de:00:cd:1e:15:4b:e3:fe: ff:01:f7:77 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUf9+8NCEcfRbeFHKJ1ZiXVnRXbTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNjAzMDQwMzU4MTlaFw0yNzAzMDMwNDAzMTlaMDMxMTAvBgNV BAMTKEM0NTU2M0MyQTRGMTlFNDk3NTA5MkE0QUQ0RDJCRkNGMDVGNjRCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QL5gIyy91ZNn8F2jir0KzEZf qGxS3Kb3zj0fySsHxJTFrcAupfU8ZQ/Wcm1TdOBkNeoqqTU0dWpQb4nP7UdTqKRb qSmVBxtM2bcgnU16BFeHXjCjP6hODjOI5X6QN/vJ2ZzbEaWb6RL3hV5raXpLxd/i lc4nyLHI+u0zNGrA8F1k9atO+hbgrxBN6x0mLfQTKu9jfddCE9TwiCyneWOSPNIi WIibylTDWvdjZOB9sGOhh/elNF32D6cCy0GcS2+RbMG5ldEJuoOO7rC2yL4BE8qa ERAhkSKIUYevypUmkW1W8GuetV1FdSQAM+D4A+MFRYPaVUz/c/sBrR2vh4xdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUxFVjwqTxnkl1CSpK1NK/zwX2S+swHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzIzNDM3MmUzNDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3KzANBgkqhkiG 9w0BAQsFAAOCAQEAAe/p43uLekPzCnTK/+a1Bd0ZKDLpvpuAXmNwsiw/aJGNdzBK +6WUqxgrPYa+q0iaQYMDk0C6GA5DRQpt1+c85ir4hx8cpC0A7EZ0xup3bilDvzoe OcRoONVvjisTxCXkE5q/hi0CPqd9LL7B9Q/QXcrweogUE/727xyT6Tl2CKh2XryP 75ZRlK1cI4XpMtFSgxdq06XJyKRn0ty7IrQ9/eOhg2W749FQsTQBjr3vlk6NDSsx +5RqZb8ugUlDEE4vrk+4HS79RAxkG1Dkc4Wc8pTfDKrl4dZCxUQNzN0aa5oPektG vf9J3nmcA1zz7Q1meWRaKd4AzR4VS+P+/wH3dw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:33 2026 by rpki-client