$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa File: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (raw, json) Hash identifier: Ay9vedxkj9NIxBoHD8ESz9hY10sIn+9uaHhelrAKQ/c= Subject key identifier: FB:CA:74:45:B1:49:19:15:A3:B7:43:0F:93:05:4F:32:A6:60:7B:58 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 4519491CC28390CF47DFF5AA897214E92D21A5CB Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa Signing time: Mon 23 Mar 2026 13:00:00 +0000 ROA not before: Mon 23 Mar 2026 12:55:00 +0000 ROA not after: Mon 22 Mar 2027 13:00:00 +0000 asID: 136075 IP address blocks: 103.84.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:19:49:1c:c2:83:90:cf:47:df:f5:aa:89:72:14:e9:2d:21:a5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Mar 23 12:55:00 2026 GMT Not After : Mar 22 13:00:00 2027 GMT Subject: CN=FBCA7445B1491915A3B7430F93054F32A6607B58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:b1:94:1c:87:1a:10:62:d6:92:f9:62:fd: 71:a6:8c:8b:0b:3b:f4:ab:c8:f4:7a:70:6d:af:c8: 50:02:85:43:72:fa:1c:51:4b:72:c5:33:cf:63:b5: fa:66:41:11:bc:b9:36:c6:60:a1:99:0d:74:57:65: ad:4b:24:cf:aa:59:cf:b4:a3:5a:5f:6a:0b:aa:84: 5f:db:43:81:18:53:ee:e2:b5:5d:d2:f7:37:f7:eb: e6:1d:39:0e:a4:a5:a1:18:b9:aa:98:58:87:5d:9c: f8:1d:f0:a3:f1:a7:0c:fc:f1:9f:b7:e8:12:0e:65: 21:9a:1c:76:6e:df:5a:5f:4d:02:b2:3a:f9:2b:c7: 0b:c6:35:ba:0d:fd:81:87:b0:32:b7:f1:d0:3a:0a: 28:a0:6a:12:e5:e4:8e:f0:fd:94:7e:1d:06:30:72: e9:94:ad:dd:3c:41:5e:04:43:22:18:19:be:94:f9: 6f:04:f3:92:05:67:e8:3b:a4:28:51:73:c2:9f:14: 0c:ab:f8:b3:17:b4:99:9a:2d:02:ed:96:f2:46:4c: ae:ca:30:9e:25:f1:22:0f:59:a6:39:ba:97:51:6c: 7e:aa:6d:40:08:ad:38:47:18:6d:b4:da:f3:9a:5e: e2:ff:5f:a1:b8:8a:f7:0c:8e:c9:69:95:1f:8a:1c: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CA:74:45:B1:49:19:15:A3:B7:43:0F:93:05:4F:32:A6:60:7B:58 X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.208.0/24 Signature Algorithm: sha256WithRSAEncryption 17:2a:44:2d:af:e6:5c:4a:f0:cc:bf:3f:b5:3e:bf:7b:eb:a7: 9a:a1:6e:d1:7f:f0:3b:17:ae:51:7e:66:37:f7:e4:d7:14:1c: 73:fd:97:d4:8b:28:4d:19:05:87:da:57:88:b7:50:5b:f4:b8: 18:cf:66:a2:09:ab:ef:17:e7:9c:fd:02:9b:85:91:b9:c5:6a: ff:38:ec:79:56:64:8e:70:fb:d1:f1:85:d0:fc:f2:67:26:35: 23:5b:69:8c:3c:c3:4f:7d:55:57:27:41:2b:07:d0:9d:68:61: 21:b4:16:f5:b9:c3:8c:a9:c4:5a:73:24:d5:9f:a5:cf:5b:b4: c8:bd:58:b0:2f:40:72:4d:3b:ea:d8:38:f2:32:48:5a:55:93: de:34:55:ae:3c:cb:b7:cf:d2:64:d5:d0:d8:ea:bf:de:6a:92: 77:79:b9:9a:38:e2:3f:94:3b:f3:57:40:2a:fa:3c:c9:e2:2c: 76:50:1c:ee:be:74:9c:ed:bf:95:63:9c:ff:f5:37:fc:68:d6: d8:3a:f9:45:b6:95:90:0d:69:e4:96:42:3d:04:54:dc:72:54: 37:6a:a9:e6:fe:7c:bf:29:51:cd:25:7d:e6:11:35:e8:43:9f: a8:49:0e:92:2a:24:80:d4:70:23:68:e6:9c:e2:78:9a:33:16: c1:76:7f:d0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURRlJHMKDkM9H3/WqiXIU6S0hpcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNjAzMjMxMjU1MDBaFw0yNzAzMjIxMzAwMDBaMDMxMTAvBgNV BAMTKEZCQ0E3NDQ1QjE0OTE5MTVBM0I3NDMwRjkzMDU0RjMyQTY2MDdCNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7urGUHIcaEGLWkvli/XGmjIsL O/SryPR6cG2vyFAChUNy+hxRS3LFM89jtfpmQRG8uTbGYKGZDXRXZa1LJM+qWc+0 o1pfaguqhF/bQ4EYU+7itV3S9zf36+YdOQ6kpaEYuaqYWIddnPgd8KPxpwz88Z+3 6BIOZSGaHHZu31pfTQKyOvkrxwvGNboN/YGHsDK38dA6CiigahLl5I7w/ZR+HQYw cumUrd08QV4EQyIYGb6U+W8E85IFZ+g7pChRc8KfFAyr+LMXtJmaLQLtlvJGTK7K MJ4l8SIPWaY5updRbH6qbUAIrThHGG202vOaXuL/X6G4ivcMjslplR+KHF+hAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+8p0RbFJGRWjt0MPkwVPMqZge1gwHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlMGU1YWMyLWI2YmItNGJlYy05 ZGM5LWU0MzBhNjczMzIxNi8wLzMxMzAzMzJlMzgzNDJlMzIzMDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1TQMA0GCSqG SIb3DQEBCwUAA4IBAQAXKkQtr+ZcSvDMvz+1Pr9766eaoW7Rf/A7F65RfmY39+TX FBxz/ZfUiyhNGQWH2leIt1Bb9LgYz2aiCavvF+ec/QKbhZG5xWr/OOx5VmSOcPvR 8YXQ/PJnJjUjW2mMPMNPfVVXJ0ErB9CdaGEhtBb1ucOMqcRacyTVn6XPW7TIvViw L0ByTTvq2DjyMkhaVZPeNFWuPMu3z9Jk1dDY6r/eapJ3ebmaOOI/lDvzV0Aq+jzJ 4ix2UBzuvnSc7b+VY5z/9Tf8aNbYOvlFtpWQDWnklkI9BFTcclQ3aqnm/ny/KVHN JX3mETXoQ5+oSQ6SKiSA1HAjaOac4niaMxbBdn/Q -----END CERTIFICATE-----Generated at Thu Mar 26 07:50:44 2026 by rpki-client