$ rpki-client -vvf repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa File: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (raw, json) Hash identifier: 0v81aFIZjdZaL5+c3wL8Cr/2378a23t5e/FnpKMWiRU= Subject key identifier: 16:C0:C8:63:E6:A5:0E:81:B0:73:B6:EC:97:59:FA:B1:58:D7:97:C7 Certificate issuer: /CN=ED47540CA812870D4CDBD150F71BACF636BC000E Certificate serial: 35360B82E08D0FFD2E6790DBAF2F7A2A5FC1D285 Authority key identifier: ED:47:54:0C:A8:12:87:0D:4C:DB:D1:50:F7:1B:AC:F6:36:BC:00:0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED47540CA812870D4CDBD150F71BACF636BC000E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa Signing time: Thu 19 Mar 2026 04:00:00 +0000 ROA not before: Thu 19 Mar 2026 03:55:00 +0000 ROA not after: Thu 18 Mar 2027 04:00:00 +0000 asID: 38320 IP address blocks: 103.159.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.crl rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED47540CA812870D4CDBD150F71BACF636BC000E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:36:0b:82:e0:8d:0f:fd:2e:67:90:db:af:2f:7a:2a:5f:c1:d2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED47540CA812870D4CDBD150F71BACF636BC000E Validity Not Before: Mar 19 03:55:00 2026 GMT Not After : Mar 18 04:00:00 2027 GMT Subject: CN=16C0C863E6A50E81B073B6EC9759FAB158D797C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c0:43:f9:72:96:62:cd:bd:61:2e:f0:34:26: ea:2f:75:b6:9c:dc:68:87:5c:18:56:c9:58:6b:f5: 36:e4:39:8b:f7:aa:e9:18:a4:6b:97:1f:f5:c5:0f: ea:e4:f7:c8:5f:fd:b5:d0:9f:bd:b1:5b:d4:4b:12: 12:21:0a:2a:c9:3e:61:17:3e:2a:7c:ed:d5:a0:aa: 1e:87:7b:88:b8:25:27:9c:b7:2d:b2:8b:2c:ec:30: 40:e1:42:65:81:b4:36:95:e5:73:58:a6:d5:3f:87: 42:80:be:2f:7d:39:14:06:ed:65:05:35:92:16:e2: 63:6f:d9:f1:81:d0:f4:37:bb:af:3b:48:1b:08:9a: d9:0c:40:1c:d8:c2:63:c0:03:85:fe:63:a0:ca:b7: c7:b4:00:af:7a:cf:a3:1d:e7:35:cb:62:ca:0e:ae: 3b:c3:0f:dd:28:e1:d4:80:f4:b7:ff:f8:f5:d8:d9: f4:48:af:e2:34:54:97:2a:5c:78:f7:dd:4a:40:2c: 2e:f3:1c:66:20:92:c9:21:a7:4a:34:fe:4f:7a:0d: eb:d0:ab:d1:29:79:9a:fa:d2:ac:4f:d1:d5:6c:89: 4d:4b:c9:06:b2:52:00:8c:ea:79:ba:71:76:fb:0f: e0:43:af:60:bf:67:e9:70:99:91:a1:5e:0a:88:e5: dc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C0:C8:63:E6:A5:0E:81:B0:73:B6:EC:97:59:FA:B1:58:D7:97:C7 X509v3 Authority Key Identifier: keyid:ED:47:54:0C:A8:12:87:0D:4C:DB:D1:50:F7:1B:AC:F6:36:BC:00:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED47540CA812870D4CDBD150F71BACF636BC000E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.116.0/23 Signature Algorithm: sha256WithRSAEncryption 58:00:26:55:9e:4a:ca:8b:b4:92:d4:8a:95:72:a7:05:dc:c2: 23:fd:9d:91:8b:58:0a:32:d6:35:2c:57:2f:6b:2c:3f:5f:85: 0f:be:d4:77:7c:b5:9f:db:2d:d4:85:d9:37:3d:89:73:70:d3: 24:52:72:7d:4f:68:87:65:ce:15:81:1f:8c:39:aa:38:57:b0: 69:4e:14:6d:c9:72:69:36:b7:85:35:37:ea:d3:c6:72:60:b5: 86:77:f9:1f:0d:96:60:c9:ed:7b:24:c1:f5:af:d2:13:58:d0: 6e:f1:45:54:d2:c1:24:68:77:ef:81:da:d1:6c:47:0f:d9:78: b9:6a:aa:57:91:f4:92:c4:a8:97:2d:93:1c:ba:2c:42:18:5e: 98:ae:35:66:f0:2f:ac:0c:91:a1:b3:2d:a3:6e:79:37:58:62: a1:e6:37:e2:c6:fb:21:a2:94:f4:21:e7:51:db:3e:9e:55:52: c8:0b:a2:0d:fb:91:d7:f3:2b:71:32:86:e2:5a:98:d5:1f:f7: 66:5e:27:95:b5:ef:f4:a9:2a:e9:7e:23:b7:20:a2:8a:b2:84: 31:71:72:a5:11:a0:d3:ab:73:67:e7:b7:40:3f:9f:a7:88:71: a5:4b:b2:d7:3c:fa:68:79:52:54:5a:b8:75:44:7d:5f:f3:9a: f1:ba:ef:2c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNTYLguCND/0uZ5Dbry96Kl/B0oUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0NzU0MENBODEyODcwRDRDREJEMTUwRjcxQkFDRjYz NkJDMDAwRTAeFw0yNjAzMTkwMzU1MDBaFw0yNzAzMTgwNDAwMDBaMDMxMTAvBgNV BAMTKDE2QzBDODYzRTZBNTBFODFCMDczQjZFQzk3NTlGQUIxNThENzk3QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQwEP5cpZizb1hLvA0Juovdbac 3GiHXBhWyVhr9TbkOYv3qukYpGuXH/XFD+rk98hf/bXQn72xW9RLEhIhCirJPmEX Pip87dWgqh6He4i4JSecty2yiyzsMEDhQmWBtDaV5XNYptU/h0KAvi99ORQG7WUF NZIW4mNv2fGB0PQ3u687SBsImtkMQBzYwmPAA4X+Y6DKt8e0AK96z6Md5zXLYsoO rjvDD90o4dSA9Lf/+PXY2fRIr+I0VJcqXHj33UpALC7zHGYgkskhp0o0/k96DevQ q9EpeZr60qxP0dVsiU1LyQayUgCM6nm6cXb7D+BDr2C/Z+lwmZGhXgqI5dzlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFsDIY+alDoGwc7bsl1n6sVjXl8cwHwYDVR0j BBgwFoAU7UdUDKgShw1M29FQ9xus9ja8AA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzVmMTVjOS01ODQzLTQ3MDUtYjY5NC1mZTVlN2NlMTk4MDgvMC9FRDQ3NTQwQ0E4 MTI4NzBENENEQkQxNTBGNzFCQUNGNjM2QkMwMDBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ0NzU0MENBODEyODcwRDRDREJEMTUwRjcxQkFDRjYzNkJD MDAwRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzNWYxNWM5LTU4NDMtNDcwNS1i Njk0LWZlNWU3Y2UxOTgwOC8wLzMxMzAzMzJlMzEzNTM5MmUzMTMxMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ590MA0GCSqG SIb3DQEBCwUAA4IBAQBYACZVnkrKi7SS1IqVcqcF3MIj/Z2Ri1gKMtY1LFcvayw/ X4UPvtR3fLWf2y3Uhdk3PYlzcNMkUnJ9T2iHZc4VgR+MOao4V7BpThRtyXJpNreF NTfq08ZyYLWGd/kfDZZgye17JMH1r9ITWNBu8UVU0sEkaHfvgdrRbEcP2Xi5aqpX kfSSxKiXLZMcuixCGF6YrjVm8C+sDJGhsy2jbnk3WGKh5jfixvshopT0IedR2z6e VVLIC6IN+5HX8ytxMobiWpjVH/dmXieVte/0qSrpfiO3IKKKsoQxcXKlEaDTq3Nn 57dAP5+niHGlS7LXPPpoeVJUWrh1RH1f85rxuu8s -----END CERTIFICATE-----Generated at Thu Mar 26 23:08:23 2026 by rpki-client