$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa File: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (raw, json) Hash identifier: 7cY2fjKwV/HHKZsrfzlu8ZyOit5FsK86Mnd1T/8Ljpc= Subject key identifier: 33:FB:6E:19:E6:7F:01:FB:84:B0:17:86:4D:78:9D:5C:C4:2F:2F:E0 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 7E40BB0B4C8FB50394ED6DB9FD662B9BF1B9EDE0 Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa Signing time: Thu 19 Mar 2026 11:00:02 +0000 ROA not before: Thu 19 Mar 2026 10:55:02 +0000 ROA not after: Thu 18 Mar 2027 11:00:02 +0000 asID: 151599 IP address blocks: 103.7.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:40:bb:0b:4c:8f:b5:03:94:ed:6d:b9:fd:66:2b:9b:f1:b9:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Mar 19 10:55:02 2026 GMT Not After : Mar 18 11:00:02 2027 GMT Subject: CN=33FB6E19E67F01FB84B017864D789D5CC42F2FE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:29:34:d7:9a:56:2d:43:0b:fa:86:8e:ff:e6: fb:04:7b:1e:db:50:c8:38:01:57:3e:dd:49:9b:1b: af:cb:9b:45:71:77:6c:3c:c7:7f:72:83:f9:dc:e7: 91:dd:0b:52:40:dd:b9:e9:03:66:46:0c:4c:d0:8e: 32:ce:53:d2:c1:6a:69:e3:3c:7b:41:bd:f8:6b:a2: a2:70:27:c4:1c:38:b7:fa:d5:78:32:10:fc:bd:a4: 90:58:0c:1d:62:fd:d4:ad:85:29:29:30:82:1d:8e: 0d:4e:14:55:8c:e0:ed:51:50:1a:88:68:30:62:90: 28:9f:04:2d:6f:5f:8e:23:e8:aa:e7:b7:ba:29:1b: 46:8a:23:b8:ef:c1:23:da:9a:16:a1:ec:5d:00:b8: 47:d9:87:ae:be:62:2c:fb:2d:4c:13:a6:7b:75:37: ea:ea:0c:76:dc:a8:fc:e2:96:74:48:d9:ea:fa:3b: 81:05:76:94:e4:d2:d5:1e:38:d0:00:c5:96:34:aa: 39:45:29:3b:6a:8f:d3:87:ba:23:01:45:36:5f:f4: 16:2e:84:42:47:94:77:36:e8:d3:ce:bc:4a:69:7e: 54:b7:f3:cb:af:7d:8e:9a:40:f3:85:e7:c0:d5:7a: f4:0d:49:36:5b:0c:a5:8e:50:60:03:1e:4f:98:b5: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:6E:19:E6:7F:01:FB:84:B0:17:86:4D:78:9D:5C:C4:2F:2F:E0 X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.106.0/23 Signature Algorithm: sha256WithRSAEncryption 14:ac:c8:9c:8a:2c:2a:66:25:ea:52:d0:b4:d6:7d:20:a9:b2: 43:d7:17:72:ce:bb:f2:fa:34:b4:a2:be:e7:3a:50:6b:d1:40: c5:3a:35:6c:1f:fd:d5:5e:79:6d:19:81:76:1e:39:88:ec:a6: d7:3e:77:1f:6f:16:f2:7a:29:b8:bc:e8:cc:3f:c4:94:87:c9: 66:b7:f7:60:fb:6c:fc:4a:d7:a3:91:67:ef:2f:b8:b4:6d:19: f8:5e:1f:55:cf:26:3e:df:3e:0e:1b:db:40:23:0c:36:4c:7b: 9d:22:40:65:a2:2e:41:eb:ed:c1:77:28:1a:6e:5f:aa:64:4e: 37:3d:81:3e:c7:b8:2d:4a:46:f1:9a:75:d0:70:83:3d:ab:ca: b1:6d:1c:37:80:d5:bb:8b:48:70:da:97:5f:33:f9:c8:fd:9e: ba:e5:a2:45:37:a8:38:67:6c:13:73:34:6b:70:b3:b2:9d:8a: 9c:a4:0b:eb:7a:16:a5:5b:ed:ac:70:7f:0b:e9:a9:99:72:70: e7:b8:0e:40:58:8e:52:f5:8b:15:c7:b3:66:97:11:e2:e0:ba: 42:5f:ee:b4:94:45:93:3d:39:90:5c:09:0f:e4:55:61:da:25: f0:8a:5e:68:61:58:b0:0b:fe:8f:9b:5f:89:5e:9f:bb:f7:2f: 50:92:1c:34 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfkC7C0yPtQOU7W25/WYrm/G57eAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNjAzMTkxMDU1MDJaFw0yNzAzMTgxMTAwMDJaMDMxMTAvBgNV BAMTKDMzRkI2RTE5RTY3RjAxRkI4NEIwMTc4NjRENzg5RDVDQzQyRjJGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKTTXmlYtQwv6ho7/5vsEex7b UMg4AVc+3UmbG6/Lm0Vxd2w8x39yg/nc55HdC1JA3bnpA2ZGDEzQjjLOU9LBamnj PHtBvfhroqJwJ8QcOLf61XgyEPy9pJBYDB1i/dSthSkpMIIdjg1OFFWM4O1RUBqI aDBikCifBC1vX44j6Krnt7opG0aKI7jvwSPamhah7F0AuEfZh66+Yiz7LUwTpnt1 N+rqDHbcqPzilnRI2er6O4EFdpTk0tUeONAAxZY0qjlFKTtqj9OHuiMBRTZf9BYu hEJHlHc26NPOvEppflS388uvfY6aQPOF58DVevQNSTZbDKWOUGADHk+YtTHDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUM/tuGeZ/AfuEsBeGTXidXMQvL+AwHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhMTI0ZTZhLWY1MWItNDZkMC04 ZWEzLTc2YjI3NDQ1NThhNi8wLzMxMzAzMzJlMzcyZTMxMzAzNjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMTM1MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcHajANBgkqhkiG 9w0BAQsFAAOCAQEAFKzInIosKmYl6lLQtNZ9IKmyQ9cXcs678vo0tKK+5zpQa9FA xTo1bB/91V55bRmBdh45iOym1z53H28W8nopuLzozD/ElIfJZrf3YPts/ErXo5Fn 7y+4tG0Z+F4fVc8mPt8+DhvbQCMMNkx7nSJAZaIuQevtwXcoGm5fqmRONz2BPse4 LUpG8Zp10HCDPavKsW0cN4DVu4tIcNqXXzP5yP2euuWiRTeoOGdsE3M0a3Czsp2K nKQL63oWpVvtrHB/C+mpmXJw57gOQFiOUvWLFcezZpcR4uC6Ql/utJRFkz05kFwJ D+RVYdol8IpeaGFYsAv+j5tfiV6fu/cvUJIcNA== -----END CERTIFICATE-----Generated at Thu Mar 26 23:45:23 2026 by rpki-client