$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa File: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (raw, json) Hash identifier: M0fQVaA9y/GHUN4D73xJHIZQVfNSjhrhi+C2OP+xS7k= Subject key identifier: 14:16:F3:87:CF:7C:78:DE:81:A6:A2:4A:AA:77:85:78:C8:3A:F6:80 Certificate issuer: /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Certificate serial: 4C6238F5C32DFAE75F99A3AA9A1554A92DBB1AD9 Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa Signing time: Fri 13 Mar 2026 03:00:02 +0000 ROA not before: Fri 13 Mar 2026 02:55:02 +0000 ROA not after: Fri 12 Mar 2027 03:00:02 +0000 asID: 149885 IP address blocks: 103.189.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:62:38:f5:c3:2d:fa:e7:5f:99:a3:aa:9a:15:54:a9:2d:bb:1a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Validity Not Before: Mar 13 02:55:02 2026 GMT Not After : Mar 12 03:00:02 2027 GMT Subject: CN=1416F387CF7C78DE81A6A24AAA778578C83AF680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f8:08:65:ac:ff:3f:d0:e4:49:ac:82:31:2f: 63:6e:2e:c0:13:1f:b9:61:58:6a:d6:95:32:7a:36: 72:84:5a:d5:cc:43:cc:29:c6:6b:45:ec:65:db:eb: 2b:54:44:29:b7:22:37:4b:43:4a:cd:a5:f3:dd:e1: ae:46:28:c6:b7:2e:27:df:d9:48:53:89:b6:de:30: c3:de:d1:62:fc:96:83:2d:6c:db:ab:c6:86:f6:9a: 91:79:24:6c:d9:cd:7d:1a:2d:75:78:e3:0d:43:62: bf:77:06:e4:a2:66:ca:29:ec:0b:4b:55:d8:ef:91: 66:14:e9:dc:85:6a:8e:77:4d:71:0c:ae:f3:d4:12: 71:37:a0:25:bd:74:50:fe:14:6d:c9:74:dd:42:38: aa:e0:36:b6:2b:0f:a4:64:0c:63:91:62:1c:d6:d0: a0:82:e7:d9:0a:d4:39:ed:f5:45:f2:68:93:71:03: 8e:da:28:33:0a:dd:eb:96:b0:76:a5:64:9d:d7:76: b2:7f:86:4a:b1:13:38:bc:cd:f3:80:6f:df:99:9a: 57:9a:39:30:08:60:ca:7b:d4:76:c0:c0:0c:51:df: 66:6c:52:7f:55:78:77:3e:43:e9:f9:3e:f1:d8:32: dc:86:02:d9:c8:76:27:c5:8b:e2:4a:9f:13:9c:21: c7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:16:F3:87:CF:7C:78:DE:81:A6:A2:4A:AA:77:85:78:C8:3A:F6:80 X509v3 Authority Key Identifier: keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.166.0/23 Signature Algorithm: sha256WithRSAEncryption bb:28:b3:9a:e8:91:29:2b:c4:6b:19:91:a7:ee:7a:d6:70:02: 28:d7:1f:16:04:70:1b:22:0a:3b:93:e2:85:88:71:e8:be:64: 5f:32:98:ec:d3:b6:dd:f2:87:38:36:25:97:ae:bc:b4:86:f3: b8:31:03:3f:3a:b6:66:cb:66:68:a1:00:80:7e:03:bd:ef:93: ff:ff:0a:f5:59:2d:84:b1:07:0a:2d:de:f4:cb:47:11:19:34: b0:5f:1c:e1:9f:b2:00:d1:36:7b:5b:20:7b:16:b9:55:55:6d: b9:a9:3d:63:d0:8d:ca:d0:fe:4e:34:39:6c:6a:24:5b:ce:af: 40:81:9f:60:e6:3f:ed:66:a1:45:f1:0b:ea:35:67:a8:77:7b: 13:03:6b:46:b8:17:7e:8e:13:4c:88:c6:33:55:4a:e2:5c:25: 58:df:2c:e4:28:f3:17:0c:ea:df:cb:48:2f:31:95:e1:54:dc: 5b:af:30:a6:6d:c5:35:21:e1:e9:33:73:b6:4e:c8:d4:b9:11: f4:5a:95:2f:ee:06:7c:87:05:bc:7d:84:88:02:bb:46:3c:55: 69:6f:7a:25:3a:8d:eb:58:92:a3:70:75:b5:a3:8c:2a:8e:0a: a9:35:80:3d:e2:31:53:3d:78:27:19:2b:08:43:73:a0:79:00: 79:b4:71:4d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTGI49cMt+udfmaOqmhVUqS27GtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQy RDEzN0Q1MTAeFw0yNjAzMTMwMjU1MDJaFw0yNzAzMTIwMzAwMDJaMDMxMTAvBgNV BAMTKDE0MTZGMzg3Q0Y3Qzc4REU4MUE2QTI0QUFBNzc4NTc4QzgzQUY2ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm+AhlrP8/0ORJrIIxL2NuLsAT H7lhWGrWlTJ6NnKEWtXMQ8wpxmtF7GXb6ytURCm3IjdLQ0rNpfPd4a5GKMa3Liff 2UhTibbeMMPe0WL8loMtbNurxob2mpF5JGzZzX0aLXV44w1DYr93BuSiZsop7AtL VdjvkWYU6dyFao53TXEMrvPUEnE3oCW9dFD+FG3JdN1COKrgNrYrD6RkDGORYhzW 0KCC59kK1Dnt9UXyaJNxA47aKDMK3euWsHalZJ3XdrJ/hkqxEzi8zfOAb9+Zmlea OTAIYMp71HbAwAxR32ZsUn9VeHc+Q+n5PvHYMtyGAtnIdifFi+JKnxOcIceFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUFBbzh898eN6BpqJKqneFeMg69oAwHwYDVR0j BBgwFoAUJ8aohBdkGFGS07fj/G0avS0TfVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTMwYWM2NC0wZjEzLTQxNjItOTY4Zi1hZmU1Y2M3MTRjZjYvMC8yN0M2QTg4NDE3 NjQxODUxOTJEM0I3RTNGQzZEMUFCRDJEMTM3RDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQyRDEz N0Q1MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllMzBhYzY0LTBmMTMtNDE2Mi05 NjhmLWFmZTVjYzcxNGNmNi8wLzMxMzAzMzJlMzEzODM5MmUzMTM2MzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzODM4MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnvaYwDQYJ KoZIhvcNAQELBQADggEBALsos5rokSkrxGsZkafuetZwAijXHxYEcBsiCjuT4oWI cei+ZF8ymOzTtt3yhzg2JZeuvLSG87gxAz86tmbLZmihAIB+A73vk///CvVZLYSx Bwot3vTLRxEZNLBfHOGfsgDRNntbIHsWuVVVbbmpPWPQjcrQ/k40OWxqJFvOr0CB n2DmP+1moUXxC+o1Z6h3exMDa0a4F36OE0yIxjNVSuJcJVjfLOQo8xcM6t/LSC8x leFU3FuvMKZtxTUh4ekzc7ZOyNS5EfRalS/uBnyHBbx9hIgCu0Y8VWlveiU6jetY kqNwdbWjjCqOCqk1gD3iMVM9eCcZKwhDc6B5AHm0cU0= -----END CERTIFICATE-----Generated at Thu Mar 26 21:58:00 2026 by rpki-client