$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa File: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (raw, json) Hash identifier: GwmFP4HHeJBtoNFyPKI5mF0Cj0VtYHLQG/3aYlgxoFI= Subject key identifier: E9:EB:AC:89:5E:C5:F9:65:99:08:F5:CD:2F:74:34:EB:1C:0D:04:17 Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 6F7A7770B1178B3A886D942B31EB6A6F8F93BC8D Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa Signing time: Sat 07 Mar 2026 18:00:01 +0000 ROA not before: Sat 07 Mar 2026 17:55:01 +0000 ROA not after: Sat 06 Mar 2027 18:00:01 +0000 asID: 133799 IP address blocks: 103.42.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7a:77:70:b1:17:8b:3a:88:6d:94:2b:31:eb:6a:6f:8f:93:bc:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: Mar 7 17:55:01 2026 GMT Not After : Mar 6 18:00:01 2027 GMT Subject: CN=E9EBAC895EC5F9659908F5CD2F7434EB1C0D0417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:da:27:35:02:df:ee:0c:19:2c:62:a2:20: 6d:b3:93:b1:4e:7c:09:70:a0:ab:b9:c5:be:d6:cb: 91:5f:fd:bf:fb:c9:0b:4f:71:48:4c:d7:c3:0a:a5: 57:2b:71:2e:e8:32:d6:bf:50:0d:2c:c4:bd:69:db: 03:45:78:2d:be:92:0b:7b:b6:24:8b:72:af:d0:4f: 46:57:df:7d:b7:98:fa:11:8c:84:b2:80:54:8e:44: 0f:52:6f:82:c3:3a:f7:66:4b:a3:20:72:c5:df:ed: 8b:8e:fb:f3:81:26:11:8f:04:5c:29:01:14:98:95: 73:3f:04:94:67:91:7a:9d:a8:ce:25:36:fb:10:36: e9:db:52:7e:20:31:96:96:9a:b1:51:7c:d3:9a:ca: db:23:dc:b8:8e:0d:28:b8:d7:d3:29:ba:8e:1b:fc: b9:5a:06:e6:b8:73:a9:a7:4b:79:ca:f9:17:53:47: a8:f5:c4:09:28:a3:54:65:1d:3f:68:b9:a0:65:1f: 9d:de:b5:b4:0d:84:64:f0:30:1e:74:60:60:b3:02: 26:18:3b:57:cf:55:a2:e0:64:e6:e2:d2:15:36:c6: 01:b2:0c:0f:bb:2f:34:a8:f3:8b:8b:73:34:df:50: 53:91:b5:e1:ad:4b:8b:15:b7:d1:38:9b:d5:38:4e: 14:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EB:AC:89:5E:C5:F9:65:99:08:F5:CD:2F:74:34:EB:1C:0D:04:17 X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.253.0/24 Signature Algorithm: sha256WithRSAEncryption 28:94:4d:a9:74:6d:94:99:37:11:fb:36:5b:a2:c3:22:d6:3a: 3b:c0:0d:05:49:2f:ce:4f:25:f8:a4:46:b4:1c:e8:9a:a9:1b: 7f:a1:39:e1:1a:69:49:1b:3e:97:fb:85:54:82:8c:b9:b8:26: cd:63:25:7f:8b:cf:19:65:a2:2a:6a:f5:5a:6d:bb:e4:fd:fd: dd:40:4b:5f:24:8c:13:a2:89:ba:26:7f:cf:28:05:48:cd:d2: 57:97:8f:03:4c:85:41:07:dd:2c:d0:07:bf:05:5e:37:99:ca: e8:fd:1a:9b:a6:94:a5:47:20:96:b0:a4:67:e0:69:a4:49:39: 2c:7a:0c:11:5d:fb:c2:26:10:72:31:d0:71:8d:48:4d:8d:1c: 40:a7:32:a5:50:ac:59:f3:bb:5f:eb:69:3d:7c:e4:2f:35:be: be:59:6f:8e:bc:46:f7:25:0b:c4:72:4b:d4:4c:1b:94:a4:7d: be:84:f7:a5:0d:1c:99:61:bf:46:53:74:29:01:9e:a3:bf:86: 12:d6:cd:18:50:39:42:19:96:8e:dd:bc:ec:46:b0:06:48:65: 9b:e0:91:43:80:75:a4:a2:12:b8:a2:87:cb:75:7c:08:6e:bd: 67:fc:e2:f8:eb:80:aa:5f:be:16:a7:50:42:a1:6d:c3:77:6f: a9:61:d0:66 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUb3p3cLEXizqIbZQrMetqb4+TvI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNjAzMDcxNzU1MDFaFw0yNzAzMDYxODAwMDFaMDMxMTAvBgNV BAMTKEU5RUJBQzg5NUVDNUY5NjU5OTA4RjVDRDJGNzQzNEVCMUMwRDA0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETdonNQLf7gwZLGKiIG2zk7FO fAlwoKu5xb7Wy5Ff/b/7yQtPcUhM18MKpVcrcS7oMta/UA0sxL1p2wNFeC2+kgt7 tiSLcq/QT0ZX3323mPoRjISygFSORA9Sb4LDOvdmS6MgcsXf7YuO+/OBJhGPBFwp ARSYlXM/BJRnkXqdqM4lNvsQNunbUn4gMZaWmrFRfNOaytsj3LiODSi419Mpuo4b /LlaBua4c6mnS3nK+RdTR6j1xAkoo1RlHT9ouaBlH53etbQNhGTwMB50YGCzAiYY O1fPVaLgZObi0hU2xgGyDA+7LzSo84uLczTfUFORteGtS4sVt9E4m9U4ThSjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU6eusiV7F+WWZCPXNL3Q06xwNBBcwHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04 N2JjLThiZmY1MDRkYTFmNC8wLzMxMzAzMzJlMzQzMjJlMzIzNTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyr9MA0GCSqG SIb3DQEBCwUAA4IBAQAolE2pdG2UmTcR+zZbosMi1jo7wA0FSS/OTyX4pEa0HOia qRt/oTnhGmlJGz6X+4VUgoy5uCbNYyV/i88ZZaIqavVabbvk/f3dQEtfJIwToom6 Jn/PKAVIzdJXl48DTIVBB90s0Ae/BV43mcro/RqbppSlRyCWsKRn4GmkSTksegwR XfvCJhByMdBxjUhNjRxApzKlUKxZ87tf62k9fOQvNb6+WW+OvEb3JQvEckvUTBuU pH2+hPelDRyZYb9GU3QpAZ6jv4YS1s0YUDlCGZaO3bzsRrAGSGWb4JFDgHWkohK4 oofLdXwIbr1n/OL464CqX74Wp1BCoW3Dd2+pYdBm -----END CERTIFICATE-----Generated at Thu Mar 26 19:53:33 2026 by rpki-client