$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa File: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (raw, json) Hash identifier: me4Thz++4xDOJptBVD82BSTSCpqoOV6Ns3JSmzTub28= Subject key identifier: FB:A6:DF:34:9F:4B:8B:C5:EC:95:0E:1F:AE:4E:F3:FF:50:42:EE:97 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 3FA217A7C175DBC12D8E904F60D77D398BF189C8 Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa Signing time: Sat 21 Mar 2026 20:00:00 +0000 ROA not before: Sat 21 Mar 2026 19:55:00 +0000 ROA not after: Sat 20 Mar 2027 20:00:00 +0000 asID: 136075 IP address blocks: 103.84.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a2:17:a7:c1:75:db:c1:2d:8e:90:4f:60:d7:7d:39:8b:f1:89:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Mar 21 19:55:00 2026 GMT Not After : Mar 20 20:00:00 2027 GMT Subject: CN=FBA6DF349F4B8BC5EC950E1FAE4EF3FF5042EE97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b9:66:21:1b:9e:b9:7d:26:5f:99:85:85:77: 22:9d:89:14:b8:02:53:72:11:2e:ab:07:aa:41:bf: 42:c3:c0:1a:9f:2c:9c:b0:6e:23:db:04:4c:22:77: d5:6b:bc:38:c1:86:d0:66:7a:8e:cb:63:f8:67:a4: 03:46:73:a6:f6:bf:68:fd:a9:6c:50:c4:cc:e3:ae: a3:7c:cd:12:66:4c:02:17:f6:a3:2e:3e:36:c7:f9: ad:7d:d5:15:fd:ee:6e:36:29:69:27:1a:ea:fe:b9: 77:8b:ce:9c:0e:15:e2:b0:6d:79:1c:ba:c5:01:04: b8:31:a4:92:08:58:c4:31:d4:24:d2:1c:0a:79:24: 51:6f:8b:13:7d:d8:80:c6:d5:ef:9f:41:48:3f:e7: 86:84:a0:c0:a9:94:74:26:89:76:73:67:d0:5b:07: a2:61:2a:b5:0b:ab:08:a4:dc:0d:60:1e:41:85:35: 38:75:24:d3:29:e8:86:61:df:d3:c2:b0:3d:01:b5: f9:e4:40:99:f9:e9:be:0e:b1:16:94:e1:96:80:0a: 38:d5:89:6f:b1:4d:cb:0d:8c:74:3f:c8:a8:57:74: d1:2d:9b:02:2e:2c:1c:68:dd:39:ba:a3:9a:8b:5e: 48:12:69:a9:aa:18:f0:e0:26:25:81:0c:76:f9:a9: 00:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A6:DF:34:9F:4B:8B:C5:EC:95:0E:1F:AE:4E:F3:FF:50:42:EE:97 X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.209.0/24 Signature Algorithm: sha256WithRSAEncryption bb:5c:54:3a:21:44:bc:8c:a6:03:b3:1e:bc:37:d2:38:ad:ae: b9:e7:17:5b:45:11:f8:ac:35:26:bd:d7:fb:2f:14:2c:4c:ef: 70:31:0f:ee:10:1d:2e:51:bb:6a:9f:38:08:0c:09:59:b9:7d: 8a:af:8e:4e:dc:6b:02:c4:2e:31:75:63:8a:34:02:6d:4b:df: 25:d3:52:b4:5c:4b:41:6c:a6:2f:39:e5:f2:e4:f2:a0:87:eb: 70:54:45:ff:9a:c2:94:5c:9b:48:9d:1b:4a:81:e2:d7:ca:7f: b7:d7:dc:9d:55:49:be:46:d4:03:37:fd:8e:9f:19:98:46:ca: 94:42:40:51:7e:82:36:e5:b8:80:82:71:62:92:50:b7:e8:aa: 2a:07:4c:3c:6a:53:f4:a4:58:3b:80:6b:de:20:1a:d5:6a:f3: 45:38:f5:ac:a2:f1:61:02:cc:35:9a:6c:40:23:d7:76:3f:35: 46:5c:d2:95:a9:2e:a1:0e:6e:1e:15:18:4e:17:9a:f3:e5:5d: 29:41:ee:82:a8:89:67:b5:78:5d:13:d6:b3:d1:dd:80:a8:82: 7a:93:ec:57:12:65:fa:ea:c0:a6:74:ee:9f:55:3d:52:06:b3: bb:b4:23:ff:fd:cb:14:af:5d:ab:36:8d:45:79:40:f9:78:65: ad:4d:34:75 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUP6IXp8F128EtjpBPYNd9OYvxicgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNjAzMjExOTU1MDBaFw0yNzAzMjAyMDAwMDBaMDMxMTAvBgNV BAMTKEZCQTZERjM0OUY0QjhCQzVFQzk1MEUxRkFFNEVGM0ZGNTA0MkVFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUuWYhG565fSZfmYWFdyKdiRS4 AlNyES6rB6pBv0LDwBqfLJywbiPbBEwid9VrvDjBhtBmeo7LY/hnpANGc6b2v2j9 qWxQxMzjrqN8zRJmTAIX9qMuPjbH+a191RX97m42KWknGur+uXeLzpwOFeKwbXkc usUBBLgxpJIIWMQx1CTSHAp5JFFvixN92IDG1e+fQUg/54aEoMCplHQmiXZzZ9Bb B6JhKrULqwik3A1gHkGFNTh1JNMp6IZh39PCsD0BtfnkQJn56b4OsRaU4ZaACjjV iW+xTcsNjHQ/yKhXdNEtmwIuLBxo3Tm6o5qLXkgSaamqGPDgJiWBDHb5qQCtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+6bfNJ9Li8XslQ4frk7z/1BC7pcwHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlMGU1YWMyLWI2YmItNGJlYy05 ZGM5LWU0MzBhNjczMzIxNi8wLzMxMzAzMzJlMzgzNDJlMzIzMDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1TRMA0GCSqG SIb3DQEBCwUAA4IBAQC7XFQ6IUS8jKYDsx68N9I4ra655xdbRRH4rDUmvdf7LxQs TO9wMQ/uEB0uUbtqnzgIDAlZuX2Kr45O3GsCxC4xdWOKNAJtS98l01K0XEtBbKYv OeXy5PKgh+twVEX/msKUXJtInRtKgeLXyn+319ydVUm+RtQDN/2OnxmYRsqUQkBR foI25biAgnFiklC36KoqB0w8alP0pFg7gGveIBrVavNFOPWsovFhAsw1mmxAI9d2 PzVGXNKVqS6hDm4eFRhOF5rz5V0pQe6CqIlntXhdE9az0d2AqIJ6k+xXEmX66sCm dO6fVT1SBrO7tCP//csUr12rNo1FeUD5eGWtTTR1 -----END CERTIFICATE-----Generated at Thu Mar 26 07:54:13 2026 by rpki-client