$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa File: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (raw, json) Hash identifier: Eio3CIIbJAaiz2bm6bSx1QfF11U/yV3nf0IBr7k8yqU= Subject key identifier: 36:60:FE:01:1C:B8:E8:17:80:AB:FC:C5:93:0E:18:50:5E:E5:CB:40 Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 6D46AF55FB538DFC83ED7899473AB7006019831A Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa Signing time: Sat 07 Mar 2026 18:00:01 +0000 ROA not before: Sat 07 Mar 2026 17:55:01 +0000 ROA not after: Sat 06 Mar 2027 18:00:01 +0000 asID: 133799 IP address blocks: 103.42.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:46:af:55:fb:53:8d:fc:83:ed:78:99:47:3a:b7:00:60:19:83:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: Mar 7 17:55:01 2026 GMT Not After : Mar 6 18:00:01 2027 GMT Subject: CN=3660FE011CB8E81780ABFCC5930E18505EE5CB40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3e:61:7e:47:7a:55:68:96:f4:03:24:5d:d3: b3:b5:ca:90:ab:0a:7b:73:97:cd:bb:7c:4b:27:7f: c4:f7:95:0f:53:ec:1f:5c:6f:d0:9f:1b:d2:b1:6c: 63:48:fa:bd:e6:62:33:c0:03:d2:6e:cc:ac:6d:9d: 01:0e:e7:ce:9e:df:74:25:55:59:36:9c:d0:70:af: c2:f1:13:3c:cd:d8:1b:cf:e9:53:af:95:2d:30:5b: dc:cd:8b:3a:1b:29:76:1f:b2:85:3d:59:3b:36:79: cc:68:e8:96:37:36:83:c0:95:5b:43:cd:16:3c:77: bf:01:b3:f7:ff:a7:d2:d6:53:b5:88:3e:de:1b:9a: a1:77:f8:55:89:b1:56:1a:cb:5d:84:2f:43:92:9f: 69:9e:65:08:d1:20:a7:83:dc:9e:d9:d6:52:08:16: 9b:1b:63:34:dc:8c:a6:b2:a8:84:c9:cb:82:22:b4: ee:48:50:aa:af:55:91:ba:e4:75:1e:04:8e:41:cc: d2:61:e9:03:19:ee:ea:09:2b:23:04:83:82:e2:3b: f4:41:a5:af:41:c5:ed:99:56:59:0f:79:3f:fd:06: dc:b1:de:22:4c:6e:27:57:bc:a2:9c:53:46:07:27: 37:e0:97:35:85:c7:ae:4f:65:89:7a:66:41:08:b8: 0e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:60:FE:01:1C:B8:E8:17:80:AB:FC:C5:93:0E:18:50:5E:E5:CB:40 X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.252.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:44:3b:05:0c:47:09:60:b8:2b:d4:a5:f3:f7:cd:ea:be:75: a9:58:61:da:94:5b:7a:4c:b3:19:f7:80:c7:bb:62:d7:85:44: 4f:f1:e9:36:15:42:04:64:c7:4c:9c:2f:cd:ed:a3:54:d7:12: dd:d4:69:99:07:7b:f4:e0:88:04:97:1c:d1:a3:d5:4a:2a:15: cf:ed:3b:76:4b:5e:ee:3c:1a:dd:82:47:72:6d:84:8d:32:e7: 25:90:b7:2c:ba:5e:82:ec:e9:7f:8d:a2:19:5d:28:50:69:e9: eb:66:23:c3:cb:64:7b:db:6a:17:55:fb:b3:49:54:2f:c7:1a: 5b:19:96:1c:06:0a:e9:d3:ec:cf:4c:fc:b2:fa:b5:21:05:07: a1:6e:a6:59:b0:e7:01:c1:af:b3:a3:f1:e0:1a:a0:20:36:d1: 7f:48:a4:7e:01:fd:eb:4e:1f:84:7a:cb:4c:7b:56:3c:f0:3a: 3f:e7:f2:a8:f2:6f:10:7a:44:e2:88:f2:c3:e4:10:07:8d:b7: ea:1f:4d:9c:ba:18:a0:89:ad:6c:ee:82:78:b0:03:33:8f:12: a2:9d:96:a4:d4:0c:79:ae:54:a4:47:e8:88:90:e7:e7:cf:6b: 8d:70:ae:be:9e:e1:64:52:09:ba:3c:a5:cc:ec:44:0e:c8:be: 93:4c:81:72 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbUavVftTjfyD7XiZRzq3AGAZgxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNjAzMDcxNzU1MDFaFw0yNzAzMDYxODAwMDFaMDMxMTAvBgNV BAMTKDM2NjBGRTAxMUNCOEU4MTc4MEFCRkNDNTkzMEUxODUwNUVFNUNCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnPmF+R3pVaJb0AyRd07O1ypCr Cntzl827fEsnf8T3lQ9T7B9cb9CfG9KxbGNI+r3mYjPAA9JuzKxtnQEO586e33Ql VVk2nNBwr8LxEzzN2BvP6VOvlS0wW9zNizobKXYfsoU9WTs2ecxo6JY3NoPAlVtD zRY8d78Bs/f/p9LWU7WIPt4bmqF3+FWJsVYay12EL0OSn2meZQjRIKeD3J7Z1lII FpsbYzTcjKayqITJy4IitO5IUKqvVZG65HUeBI5BzNJh6QMZ7uoJKyMEg4LiO/RB pa9Bxe2ZVlkPeT/9Btyx3iJMbidXvKKcU0YHJzfglzWFx65PZYl6ZkEIuA7JAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUNmD+ARy46BeAq/zFkw4YUF7ly0AwHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04 N2JjLThiZmY1MDRkYTFmNC8wLzMxMzAzMzJlMzQzMjJlMzIzNTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyr8MA0GCSqG SIb3DQEBCwUAA4IBAQCbRDsFDEcJYLgr1KXz983qvnWpWGHalFt6TLMZ94DHu2LX hURP8ek2FUIEZMdMnC/N7aNU1xLd1GmZB3v04IgElxzRo9VKKhXP7Tt2S17uPBrd gkdybYSNMuclkLcsul6C7Ol/jaIZXShQaenrZiPDy2R722oXVfuzSVQvxxpbGZYc Bgrp0+zPTPyy+rUhBQehbqZZsOcBwa+zo/HgGqAgNtF/SKR+Af3rTh+EestMe1Y8 8Do/5/Ko8m8QekTiiPLD5BAHjbfqH02cuhigia1s7oJ4sAMzjxKinZak1Ax5rlSk R+iIkOfnz2uNcK6+nuFkUgm6PKXM7EQOyL6TTIFy -----END CERTIFICATE-----Generated at Thu Mar 26 22:16:00 2026 by rpki-client