$ rpki-client -vvf repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa File: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (raw, json) Hash identifier: rIYCgafp/WEWzvlvx7yaeEO/w4xXICOq4QKmq/Vz29E= Subject key identifier: C7:99:CD:9E:03:BB:1E:9C:33:69:9F:3C:EF:B2:A4:BF:C2:37:E2:9A Certificate issuer: /CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Certificate serial: 4C35065036E94D52AB7A2EF61B769C35B195B926 Authority key identifier: 8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa Signing time: Thu 19 Mar 2026 05:00:00 +0000 ROA not before: Thu 19 Mar 2026 04:55:00 +0000 ROA not after: Thu 18 Mar 2027 05:00:00 +0000 asID: 38320 IP address blocks: 103.160.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:35:06:50:36:e9:4d:52:ab:7a:2e:f6:1b:76:9c:35:b1:95:b9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Validity Not Before: Mar 19 04:55:00 2026 GMT Not After : Mar 18 05:00:00 2027 GMT Subject: CN=C799CD9E03BB1E9C33699F3CEFB2A4BFC237E29A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:33:d2:49:86:7e:3c:d4:8f:f9:1d:1d:0f:49: 3f:5f:39:73:51:d8:a3:c0:90:a7:6f:4c:9b:23:46: 6c:4f:b1:f0:f6:bb:40:d5:ad:cb:3c:83:ae:02:7c: 71:57:d0:06:2a:f7:3b:75:2f:09:e7:1d:85:77:47: 91:1c:1d:91:49:78:de:3e:41:81:52:b6:28:e9:89: 89:6f:68:47:9e:6b:2b:e7:09:53:ab:d2:33:5d:12: a2:e3:78:26:a3:5c:55:ad:63:05:f4:50:34:5f:94: b9:54:3e:ea:1c:33:6b:8a:ab:78:17:0e:90:4d:0a: d7:19:08:d8:50:5e:fa:d8:86:07:81:49:26:63:d4: a6:c4:d4:53:ec:d4:ce:23:99:2d:18:fc:28:31:74: e8:3f:6d:1a:05:be:ea:b8:da:0c:f4:42:eb:a0:41: db:39:0b:5f:01:3c:c0:1b:5d:e2:d2:1b:27:ba:88: db:42:d6:3a:52:e8:9e:41:3c:98:4e:a6:94:7d:a3: d0:05:a4:6a:02:b8:d6:05:60:cb:09:8d:a4:d3:6b: 5f:92:58:d2:d8:2a:2c:e3:1f:ab:ed:a8:74:f3:40: 1c:8c:3c:90:14:77:41:b1:80:3d:0c:f7:14:96:5b: 22:fc:3f:26:80:a1:0c:6a:20:6d:cf:e1:cc:0e:8c: be:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:99:CD:9E:03:BB:1E:9C:33:69:9F:3C:EF:B2:A4:BF:C2:37:E2:9A X509v3 Authority Key Identifier: keyid:8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.138.0/23 Signature Algorithm: sha256WithRSAEncryption b0:f3:81:8c:70:cb:bf:98:7c:eb:cf:90:f5:54:bf:d2:28:0c: e8:78:c9:e9:b1:ec:b6:35:a9:76:22:28:03:3e:b1:ad:d8:ad: 8a:a5:7e:55:a7:66:eb:66:93:c3:41:4c:03:d0:a3:7c:6a:b6: 99:eb:aa:5e:ba:c0:45:6f:b4:61:86:f2:d6:14:87:65:36:d9: 1e:ef:46:8a:e8:45:01:4c:62:75:1b:a2:9b:72:66:ff:4c:f1: fc:84:2f:c8:44:73:e7:fc:bf:ba:70:b1:3c:b2:f0:c2:7d:a9: c5:54:ce:ae:a2:97:b2:f7:c4:6b:70:c4:17:59:63:69:8a:10: 10:20:94:12:58:a1:db:6a:43:47:d9:6b:9e:61:a3:02:f9:58: 12:02:76:98:32:cd:eb:18:1a:a4:f6:0a:a7:48:55:a6:e3:9c: 5a:f4:79:d9:64:ae:55:5a:38:3f:41:6a:51:d3:6e:16:e8:aa: 3d:b5:de:88:a7:81:d3:29:0e:e8:9a:67:ab:75:97:c4:c6:87: 02:c1:ac:55:f7:7b:f5:3e:68:36:5a:aa:ae:d5:42:ef:b6:fa: 1b:a3:ea:f2:6b:ee:6c:7b:65:12:4c:86:e7:29:19:c5:ef:0c: c9:41:0e:43:01:ca:e1:0c:53:0b:6d:ff:40:66:f6:22:8f:55: c3:22:f4:81 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTDUGUDbpTVKrei72G3acNbGVuSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFG MDNGMTFBNzAeFw0yNjAzMTkwNDU1MDBaFw0yNzAzMTgwNTAwMDBaMDMxMTAvBgNV BAMTKEM3OTlDRDlFMDNCQjFFOUMzMzY5OUYzQ0VGQjJBNEJGQzIzN0UyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEM9JJhn481I/5HR0PST9fOXNR 2KPAkKdvTJsjRmxPsfD2u0DVrcs8g64CfHFX0AYq9zt1LwnnHYV3R5EcHZFJeN4+ QYFStijpiYlvaEeeayvnCVOr0jNdEqLjeCajXFWtYwX0UDRflLlUPuocM2uKq3gX DpBNCtcZCNhQXvrYhgeBSSZj1KbE1FPs1M4jmS0Y/CgxdOg/bRoFvuq42gz0Quug Qds5C18BPMAbXeLSGye6iNtC1jpS6J5BPJhOppR9o9AFpGoCuNYFYMsJjaTTa1+S WNLYKizjH6vtqHTzQByMPJAUd0GxgD0M9xSWWyL8PyaAoQxqIG3P4cwOjL5/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUx5nNngO7HpwzaZ8877Kkv8I34powHwYDVR0j BBgwFoAUjR2EuKViJLTikPvaXHkM0fA/EacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmRiMThlZi02NTlmLTRiMWUtYTJlMC1iNThhZjZiMTI3MWYvMC84RDFEODRCOEE1 NjIyNEI0RTI5MEZCREE1Qzc5MENEMUYwM0YxMUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFGMDNG MTFBNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JmZGIxOGVmLTY1OWYtNGIxZS1h MmUwLWI1OGFmNmIxMjcxZi8wLzMxMzAzMzJlMzEzNjMwMmUzMTMzMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6CKMA0GCSqG SIb3DQEBCwUAA4IBAQCw84GMcMu/mHzrz5D1VL/SKAzoeMnpsey2Nal2IigDPrGt 2K2KpX5Vp2brZpPDQUwD0KN8araZ66peusBFb7RhhvLWFIdlNtke70aK6EUBTGJ1 G6Kbcmb/TPH8hC/IRHPn/L+6cLE8svDCfanFVM6uopey98RrcMQXWWNpihAQIJQS WKHbakNH2WueYaMC+VgSAnaYMs3rGBqk9gqnSFWm45xa9HnZZK5VWjg/QWpR024W 6Ko9td6Ip4HTKQ7ommerdZfExocCwaxV93v1Pmg2Wqqu1ULvtvobo+rya+5se2US TIbnKRnF7wzJQQ5DAcrhDFMLbf9AZvYij1XDIvSB -----END CERTIFICATE-----Generated at Thu Mar 26 19:29:11 2026 by rpki-client