$ rpki-client -vvf repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa File: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (raw, json) Hash identifier: x5Hp+HOblAHOHP0M7M1Nf47NaRwReuKAEuMVfjybHpo= Subject key identifier: B2:B3:E4:D3:8B:B0:19:25:F4:F1:70:F1:BE:D3:AF:D1:CF:82:B1:23 Certificate issuer: /CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Certificate serial: 3F6CA9F091E1E2EE9EF1273BDD817C8140BD6D81 Authority key identifier: D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa Signing time: Thu 26 Mar 2026 05:02:51 +0000 ROA not before: Thu 26 Mar 2026 04:57:51 +0000 ROA not after: Thu 25 Mar 2027 05:02:51 +0000 asID: 149753 IP address blocks: 103.189.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6c:a9:f0:91:e1:e2:ee:9e:f1:27:3b:dd:81:7c:81:40:bd:6d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Validity Not Before: Mar 26 04:57:51 2026 GMT Not After : Mar 25 05:02:51 2027 GMT Subject: CN=B2B3E4D38BB01925F4F170F1BED3AFD1CF82B123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:3f:5f:69:15:d8:0a:19:6f:74:c9:77:1f: 9c:2d:47:f3:7e:1c:d7:83:91:6e:58:49:34:19:1f: 69:0f:00:69:78:43:ac:e0:57:34:a6:7f:6a:d8:96: b1:28:be:8f:ba:e7:c4:9f:0b:0c:9a:f9:3b:9c:1b: 99:f1:09:a5:3e:df:54:86:1f:18:16:0a:4e:63:4f: 6f:4a:a3:9e:e1:bd:97:25:87:27:20:12:51:06:2a: fa:9a:37:e4:9b:fe:89:80:61:6f:65:a3:d5:20:c7: 99:94:33:7f:d6:ad:43:f8:9f:3e:af:5a:89:33:11: 59:be:38:50:50:5d:1d:c8:62:3c:36:e3:8f:3d:4a: 8c:91:25:0c:46:3e:8e:bf:51:f6:b6:4d:8c:74:ef: 82:74:7a:cb:f7:3d:42:4e:0f:7e:cb:01:cb:f5:0e: 43:d2:82:89:89:a3:32:2b:ad:d9:6c:7d:97:43:2e: 93:4f:58:8a:07:43:19:0c:d2:1a:77:27:02:15:14: 7e:7e:cc:47:6a:39:88:1b:a1:19:3a:a7:17:5f:6d: a7:5c:86:6a:42:1b:32:c7:80:66:dd:99:f0:c3:4b: 19:ee:44:bf:0c:f4:23:62:df:37:79:3d:dc:3b:8a: 86:28:9e:cf:dc:a3:b5:05:09:d2:1a:9a:82:f2:02: f2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B3:E4:D3:8B:B0:19:25:F4:F1:70:F1:BE:D3:AF:D1:CF:82:B1:23 X509v3 Authority Key Identifier: keyid:D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.114.0/24 Signature Algorithm: sha256WithRSAEncryption 76:77:99:b2:aa:96:10:a8:77:cb:34:45:62:ca:68:96:c8:fe: 59:16:77:96:a9:da:ae:66:cf:d4:bc:b5:c1:9e:0c:50:e6:69: e9:28:3f:ab:55:74:03:d0:c8:e5:d3:71:13:54:fd:d0:95:1f: 1e:c0:c3:0c:3a:fc:f2:0b:32:21:a2:e4:23:5c:ae:d4:8a:f2: fd:06:d5:3b:74:87:37:51:f0:5d:53:f1:9c:ee:b3:ae:b9:7f: bb:33:ac:d2:fa:07:3c:13:42:43:b5:ba:30:3e:7a:4d:f1:2f: 74:fe:8d:06:df:f7:e8:da:0d:da:38:43:72:cb:1e:5b:ba:55: 92:ba:52:40:31:0b:bb:7e:4b:3f:39:33:50:c4:eb:dd:9a:21: c2:3d:21:a5:99:8a:91:a9:e9:c1:15:1e:74:39:98:42:10:63: 42:f1:e9:6d:85:1f:2e:3e:8c:3b:ac:d0:bc:07:0b:7b:91:38: d6:1a:86:20:27:a7:8d:bb:0b:f5:13:8a:da:ce:98:2c:40:05: 91:7f:d6:c7:72:46:ab:ef:b5:7e:90:15:03:fc:71:ea:36:35: b6:06:da:43:13:f9:8b:0f:82:48:74:3d:f3:46:e9:19:6e:61: e1:cb:4b:44:3a:9b:7f:d6:81:bf:b6:46:d9:88:75:77:23:d1: fc:50:23:95 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUP2yp8JHh4u6e8Sc73YF8gUC9bYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4 MTkzNTIzMTAeFw0yNjAzMjYwNDU3NTFaFw0yNzAzMjUwNTAyNTFaMDMxMTAvBgNV BAMTKEIyQjNFNEQzOEJCMDE5MjVGNEYxNzBGMUJFRDNBRkQxQ0Y4MkIxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPT9faRXYChlvdMl3H5wtR/N+ HNeDkW5YSTQZH2kPAGl4Q6zgVzSmf2rYlrEovo+658SfCwya+TucG5nxCaU+31SG HxgWCk5jT29Ko57hvZclhycgElEGKvqaN+Sb/omAYW9lo9Ugx5mUM3/WrUP4nz6v WokzEVm+OFBQXR3IYjw24489SoyRJQxGPo6/Ufa2TYx074J0esv3PUJOD37LAcv1 DkPSgomJozIrrdlsfZdDLpNPWIoHQxkM0hp3JwIVFH5+zEdqOYgboRk6pxdfbadc hmpCGzLHgGbdmfDDSxnuRL8M9CNi3zd5Pdw7ioYons/co7UFCdIamoLyAvJLAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUsrPk04uwGSX08XDxvtOv0c+CsSMwHwYDVR0j BBgwFoAU0099SKB7uKLe7cjIeBl3EYGTUjEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzU5YjZhMy1iNzRiLTRiYWEtOTkzYS04MThmYjcyMTA3MjIvMC9EMzRGN0Q0OEEw N0JCOEEyREVFREM4Qzg3ODE5NzcxMTgxOTM1MjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4MTkz NTIzMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzNTliNmEzLWI3NGItNGJhYS05 OTNhLTgxOGZiNzIxMDcyMi8wLzMxMzAzMzJlMzEzODM5MmUzMTMxMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvXIwDQYJ KoZIhvcNAQELBQADggEBAHZ3mbKqlhCod8s0RWLKaJbI/lkWd5ap2q5mz9S8tcGe DFDmaekoP6tVdAPQyOXTcRNU/dCVHx7Awww6/PILMiGi5CNcrtSK8v0G1Tt0hzdR 8F1T8Zzus665f7szrNL6BzwTQkO1ujA+ek3xL3T+jQbf9+jaDdo4Q3LLHlu6VZK6 UkAxC7t+Sz85M1DE692aIcI9IaWZipGp6cEVHnQ5mEIQY0Lx6W2FHy4+jDus0LwH C3uRONYahiAnp427C/UTitrOmCxABZF/1sdyRqvvtX6QFQP8ceo2NbYG2kMT+YsP gkh0PfNG6RluYeHLS0Q6m3/Wgb+2RtmIdXcj0fxQI5U= -----END CERTIFICATE-----Generated at Fri Mar 27 00:37:27 2026 by rpki-client