$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa File: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (raw, json) Hash identifier: +UxVLTx+8JWWF1I8NQ2V32cZmbcrP31Hh0f15uy9i4c= Subject key identifier: 5A:09:2B:74:6A:1D:D7:38:DA:01:BD:F4:3C:C4:41:64:79:CE:78:6C Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 0E698D9CC97B176EFB8D5BA8E0CA0F8336134EA4 Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa Signing time: Sat 07 Mar 2026 17:00:00 +0000 ROA not before: Sat 07 Mar 2026 16:55:00 +0000 ROA not after: Sat 06 Mar 2027 17:00:00 +0000 asID: 133799 IP address blocks: 103.42.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:69:8d:9c:c9:7b:17:6e:fb:8d:5b:a8:e0:ca:0f:83:36:13:4e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: Mar 7 16:55:00 2026 GMT Not After : Mar 6 17:00:00 2027 GMT Subject: CN=5A092B746A1DD738DA01BDF43CC4416479CE786C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c2:a7:e1:29:45:97:be:d3:80:3f:1d:e4:79: a9:be:06:12:ef:54:d5:cf:1f:30:b9:a3:c1:50:b8: 12:6b:5d:51:ab:ad:83:a7:b0:26:08:25:f6:7a:62: 6a:3d:f1:59:09:86:0a:ee:3a:54:20:14:83:c5:a2: ec:2e:91:68:6f:ec:7d:0d:55:4f:59:59:d9:4c:0e: 20:55:ee:1a:33:4a:c2:5f:2c:b9:06:61:6b:ef:2d: 80:6b:b4:0e:26:1c:23:97:7f:bc:ad:22:a3:a7:9e: 4e:57:d3:90:80:de:96:29:89:4b:59:dc:9a:a2:73: 92:22:95:ab:aa:71:f2:15:79:1f:99:db:60:ab:fd: 6e:38:ca:ad:b9:33:d7:c7:a8:16:0c:82:ae:46:0b: 48:29:25:fa:c0:fb:18:f1:ea:89:4c:43:8c:8a:58: e9:ce:39:d0:5d:61:77:69:b2:30:eb:20:a6:29:6a: c8:0c:dd:75:c8:e6:dd:d8:fc:6e:0c:27:1b:5d:93: 3f:ca:cb:12:e5:3b:40:49:51:ef:0c:92:ca:fe:44: ae:cf:8d:1e:7c:7a:12:e3:29:d1:8c:d9:2f:b1:8b: e2:f0:f2:90:53:98:5d:87:fc:6e:7d:95:3b:d6:92: d8:76:28:c5:1e:2b:01:dc:90:56:8c:19:ac:10:ba: d9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:09:2B:74:6A:1D:D7:38:DA:01:BD:F4:3C:C4:41:64:79:CE:78:6C X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.252.0/22 Signature Algorithm: sha256WithRSAEncryption d7:09:a5:f1:c6:1e:52:e1:74:16:8b:ef:8c:03:d1:f6:cb:c6: 89:c9:6b:37:82:eb:b2:df:22:80:63:13:bd:07:53:04:d5:b5: 4e:59:21:91:26:2a:66:f0:e9:d7:30:31:13:29:31:c0:31:7f: 60:a2:5c:3e:e2:55:d7:19:87:b4:0e:7f:e1:17:4d:68:73:85: 75:99:41:1b:d9:c3:92:4f:e9:d2:b1:52:2b:4d:f5:de:90:da: b1:a1:6e:8e:79:1d:fe:1f:0d:54:f2:ef:26:c9:57:8d:44:ff: dd:d8:95:ea:92:a1:2f:df:bd:56:4d:d7:3f:ac:4a:72:b9:6c: fc:5b:d1:b1:63:0e:aa:6b:a6:da:57:81:14:12:cf:5c:ac:f6: 85:4d:a2:10:c5:24:a4:5e:bc:c3:cb:87:5e:db:5d:bc:62:60: 21:b9:3b:b4:99:d9:aa:64:3a:0b:ae:19:21:22:e1:a2:e3:61: 89:83:7e:40:52:28:ce:39:04:00:da:d3:1b:7a:dc:2c:ee:04: f9:a9:47:83:3e:0d:4a:49:c9:5e:d0:9e:3b:0c:22:76:dd:4d: 9d:d5:f2:79:b1:5e:97:92:eb:ae:ea:d7:df:f2:23:57:f0:17: 96:d8:23:34:24:d5:85:b8:fc:1e:49:65:b8:fb:0d:1c:e6:38: 2e:a5:6c:75 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDmmNnMl7F277jVuo4MoPgzYTTqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNjAzMDcxNjU1MDBaFw0yNzAzMDYxNzAwMDBaMDMxMTAvBgNV BAMTKDVBMDkyQjc0NkExREQ3MzhEQTAxQkRGNDNDQzQ0MTY0NzlDRTc4NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFwqfhKUWXvtOAPx3keam+BhLv VNXPHzC5o8FQuBJrXVGrrYOnsCYIJfZ6Ymo98VkJhgruOlQgFIPFouwukWhv7H0N VU9ZWdlMDiBV7hozSsJfLLkGYWvvLYBrtA4mHCOXf7ytIqOnnk5X05CA3pYpiUtZ 3Jqic5IilauqcfIVeR+Z22Cr/W44yq25M9fHqBYMgq5GC0gpJfrA+xjx6olMQ4yK WOnOOdBdYXdpsjDrIKYpasgM3XXI5t3Y/G4MJxtdkz/KyxLlO0BJUe8Mksr+RK7P jR58ehLjKdGM2S+xi+Lw8pBTmF2H/G59lTvWkth2KMUeKwHckFaMGawQutmHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWgkrdGod1zjaAb30PMRBZHnOeGwwHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04 N2JjLThiZmY1MDRkYTFmNC8wLzMxMzAzMzJlMzQzMjJlMzIzNTMyMmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzEzMzMzMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZyr8MA0GCSqG SIb3DQEBCwUAA4IBAQDXCaXxxh5S4XQWi++MA9H2y8aJyWs3guuy3yKAYxO9B1ME 1bVOWSGRJipm8OnXMDETKTHAMX9golw+4lXXGYe0Dn/hF01oc4V1mUEb2cOST+nS sVIrTfXekNqxoW6OeR3+Hw1U8u8myVeNRP/d2JXqkqEv371WTdc/rEpyuWz8W9Gx Yw6qa6baV4EUEs9crPaFTaIQxSSkXrzDy4de2128YmAhuTu0mdmqZDoLrhkhIuGi 42GJg35AUijOOQQA2tMbetws7gT5qUeDPg1KScle0J47DCJ23U2d1fJ5sV6Xkuuu 6tff8iNX8BeW2CM0JNWFuPweSWW4+w0c5jgupWx1 -----END CERTIFICATE-----Generated at Thu Mar 26 21:17:43 2026 by rpki-client