$ rpki-client -vvf repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/3130332e35322e36342e302f32322d3234203d3e20313331373335.roa File: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (raw, json) Hash identifier: Wy1p+wFvKd0UV6WEx9T22l9SfAuvHRIy4T5+zN8yMc4= Subject key identifier: 8E:1A:E8:71:F4:31:EE:38:69:B6:DF:7B:E7:E7:7C:63:7C:E7:DB:6A Certificate issuer: /CN=91982855FD8C4C119B32F9D536B640804091001C Certificate serial: 08FD0C54ED5EC404C6B4432FFD0C23F0EE30B999 Authority key identifier: 91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/3130332e35322e36342e302f32322d3234203d3e20313331373335.roa Signing time: Sun 22 Mar 2026 04:00:01 +0000 ROA not before: Sun 22 Mar 2026 03:55:01 +0000 ROA not after: Sun 21 Mar 2027 04:00:01 +0000 asID: 131735 IP address blocks: 103.52.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fd:0c:54:ed:5e:c4:04:c6:b4:43:2f:fd:0c:23:f0:ee:30:b9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91982855FD8C4C119B32F9D536B640804091001C Validity Not Before: Mar 22 03:55:01 2026 GMT Not After : Mar 21 04:00:01 2027 GMT Subject: CN=8E1AE871F431EE3869B6DF7BE7E77C637CE7DB6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:35:25:69:4f:44:33:03:3b:01:ec:dc:65:f9: 52:ab:e1:f7:00:c9:11:60:26:94:23:79:b1:65:95: 43:d5:d2:95:44:9c:6b:88:4b:d2:e0:ad:ff:62:ef: 72:36:b6:88:7b:28:63:a8:0b:40:a6:fb:3d:cf:9f: f3:c1:d7:5d:06:55:37:81:e9:f6:2a:24:cc:f8:84: f5:3f:6e:a3:be:19:1f:64:61:ba:88:20:c4:b5:30: 50:15:07:b2:aa:81:d4:4c:79:d1:25:2d:53:c8:3a: b0:1c:19:16:51:63:5d:d7:bd:2f:d2:8d:b7:fd:a1: 08:c7:ef:2b:6e:4c:64:64:5b:6d:55:05:d9:3b:a0: 80:d8:68:89:15:7a:5e:67:79:23:fe:3a:ff:c0:10: c3:f4:2f:0f:e6:3c:a2:17:a2:67:40:34:0c:62:70: 98:24:82:07:6b:0c:ef:b5:66:50:e9:bb:bb:97:eb: 7f:e1:82:68:5d:0a:1c:86:3d:c3:6c:a1:2f:73:2a: 0d:34:f1:14:f4:06:95:ea:5b:6e:e5:45:6f:b9:67: e1:66:33:70:a0:7f:8c:34:e1:d1:45:65:f7:ff:ea: a9:4b:af:6d:f4:e4:b6:8f:44:49:17:6b:f3:8d:f0: be:8e:a4:f6:3a:a6:ae:6d:e7:f6:40:cf:67:d4:d2: bd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1A:E8:71:F4:31:EE:38:69:B6:DF:7B:E7:E7:7C:63:7C:E7:DB:6A X509v3 Authority Key Identifier: keyid:91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/3130332e35322e36342e302f32322d3234203d3e20313331373335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.64.0/22 Signature Algorithm: sha256WithRSAEncryption a0:cb:9c:8f:ec:7b:aa:3a:ae:f6:e7:5a:14:74:19:12:dc:ea: d2:e7:7c:19:7c:f6:fe:d9:b4:0b:68:a3:2c:91:58:14:b1:4d: 22:b4:18:ba:5e:11:0d:93:ea:cb:3e:57:65:8e:15:c8:63:39: bd:7f:f1:08:79:c0:cc:6e:46:9d:a3:27:5d:22:72:a5:5f:7b: 90:0e:a4:33:79:11:12:7e:f7:78:f4:90:c0:e7:64:4d:ba:6d: 5f:a9:a5:67:bd:6e:ec:0d:b8:2b:0d:39:bc:54:d4:c5:74:72: 85:8c:0d:dc:77:de:6e:4c:52:ea:bc:b3:3c:31:fc:a6:f3:8b: ad:de:c2:09:97:01:0f:c6:39:f3:0e:0f:f1:31:2f:3f:be:7c: 4f:57:42:65:a7:54:3d:23:7a:32:fd:55:9f:2e:5f:b8:13:19: d5:74:6b:28:0f:18:62:22:5f:50:ba:5d:18:75:db:31:37:93: 11:04:b8:5b:1f:7f:6f:ba:61:4d:21:20:fa:57:a4:85:34:d9: 09:88:4a:2e:6b:31:41:67:ff:ee:d1:d7:d7:c2:cc:c0:24:22: 6d:0b:29:ce:6b:11:7c:bc:fa:80:99:81:52:4f:51:08:6c:fa: ea:f8:68:c4:c5:01:b1:b3:65:42:2d:5e:d9:cb:ae:1a:32:a8: 9b:e7:ac:5c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCP0MVO1exATGtEMv/Qwj8O4wuZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQwODA0 MDkxMDAxQzAeFw0yNjAzMjIwMzU1MDFaFw0yNzAzMjEwNDAwMDFaMDMxMTAvBgNV BAMTKDhFMUFFODcxRjQzMUVFMzg2OUI2REY3QkU3RTc3QzYzN0NFN0RCNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNSVpT0QzAzsB7Nxl+VKr4fcA yRFgJpQjebFllUPV0pVEnGuIS9Lgrf9i73I2toh7KGOoC0Cm+z3Pn/PB110GVTeB 6fYqJMz4hPU/bqO+GR9kYbqIIMS1MFAVB7KqgdRMedElLVPIOrAcGRZRY13XvS/S jbf9oQjH7ytuTGRkW21VBdk7oIDYaIkVel5neSP+Ov/AEMP0Lw/mPKIXomdANAxi cJgkggdrDO+1ZlDpu7uX63/hgmhdChyGPcNsoS9zKg008RT0BpXqW27lRW+5Z+Fm M3Cgf4w04dFFZff/6qlLr2305LaPREkXa/ON8L6OpPY6pq5t5/ZAz2fU0r0hAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUjhrocfQx7jhptt975+d8Y3zn22owHwYDVR0j BBgwFoAUkZgoVf2MTBGbMvnVNrZAgECRABwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzJjNDk0OC02ODdiLTQwMjAtODdmNC0yOGVlNGI2M2FhNDcvMC85MTk4Mjg1NUZE OEM0QzExOUIzMkY5RDUzNkI2NDA4MDQwOTEwMDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQwODA0MDkx MDAxQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljMmM0OTQ4LTY4N2ItNDAyMC04 N2Y0LTI4ZWU0YjYzYWE0Ny8wLzMxMzAzMzJlMzUzMjJlMzYzNDJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzMTM3MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmc0QDANBgkqhkiG 9w0BAQsFAAOCAQEAoMucj+x7qjqu9udaFHQZEtzq0ud8GXz2/tm0C2ijLJFYFLFN IrQYul4RDZPqyz5XZY4VyGM5vX/xCHnAzG5GnaMnXSJypV97kA6kM3kREn73ePSQ wOdkTbptX6mlZ71u7A24Kw05vFTUxXRyhYwN3HfebkxS6ryzPDH8pvOLrd7CCZcB D8Y58w4P8TEvP758T1dCZadUPSN6Mv1Vny5fuBMZ1XRrKA8YYiJfULpdGHXbMTeT EQS4Wx9/b7phTSEg+lekhTTZCYhKLmsxQWf/7tHX18LMwCQibQspzmsRfLz6gJmB Uk9RCGz66vhoxMUBsbNlQi1e2cuuGjKom+esXA== -----END CERTIFICATE-----Generated at Thu Mar 26 23:46:01 2026 by rpki-client