$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa File: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (raw, json) Hash identifier: 9MZOe6QpSTe26/D5cgumj760XrxDwdEgmc9HaXW98ik= Subject key identifier: 22:AC:BC:7D:D9:4B:0D:07:21:04:D1:35:5A:1E:28:54:84:7B:43:B5 Certificate issuer: /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Certificate serial: 2F038205294CF1FB6FDDA3123D4D462BA606F4 Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa Signing time: Fri 20 Mar 2026 08:03:18 +0000 ROA not before: Fri 20 Mar 2026 07:58:18 +0000 ROA not after: Fri 19 Mar 2027 08:03:18 +0000 asID: 150973 IP address blocks: 103.17.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:03:82:05:29:4c:f1:fb:6f:dd:a3:12:3d:4d:46:2b:a6:06:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Validity Not Before: Mar 20 07:58:18 2026 GMT Not After : Mar 19 08:03:18 2027 GMT Subject: CN=22ACBC7DD94B0D072104D1355A1E2854847B43B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:18:e3:c8:6a:e2:6b:51:20:bd:34:9d:9c: a0:95:f0:e1:82:0f:ec:a8:2b:60:ff:de:0f:ae:e4: a4:d7:b8:03:d9:50:ed:92:f9:cf:ee:c0:f6:16:4e: 60:b5:cf:98:97:f5:6f:1b:53:c1:7c:73:6c:f9:ef: 61:75:51:7f:89:50:1b:21:0e:0c:6f:cd:cc:fd:68: c7:08:5b:08:c3:a0:92:1c:5d:8b:1d:0c:b5:79:d6: ec:f6:f8:d1:7d:49:a1:c1:9d:48:9c:67:a7:44:36: ca:01:c3:99:86:70:43:7c:9a:f7:7c:58:e8:0a:50: 85:fd:8f:b2:da:8c:c1:b5:d1:3f:7d:a3:4c:ce:43: df:3b:8c:42:e8:fd:aa:6a:c5:7f:8b:d0:d9:30:1a: 84:e4:1d:4c:69:ea:37:63:f9:27:cd:44:2c:3d:b2: b1:c6:67:38:cd:75:d8:fa:78:f0:7c:cf:c9:91:ee: b3:ab:0b:d3:50:01:fb:44:3c:85:9d:3e:aa:05:41: e3:ed:4c:f1:ec:0e:65:bd:fe:3a:d4:26:29:50:30: 30:24:41:4b:78:f0:4f:ee:dd:fc:7e:48:e4:bb:c6: 67:47:c6:a4:b5:b1:31:f5:4a:15:d4:5f:43:b5:7b: 9a:c8:db:d6:ec:cc:f4:6f:86:e9:0e:c9:c8:7e:94: 51:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AC:BC:7D:D9:4B:0D:07:21:04:D1:35:5A:1E:28:54:84:7B:43:B5 X509v3 Authority Key Identifier: keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.248.0/24 Signature Algorithm: sha256WithRSAEncryption 20:a8:a4:93:76:14:c9:9d:f8:55:71:d4:58:82:af:d1:5e:80: c5:96:40:7c:72:34:d1:83:b1:1e:39:50:f2:5d:49:ef:5b:c5: e1:c0:71:71:27:9a:54:be:bf:a9:3c:aa:df:dc:86:dd:11:40: 86:d0:09:38:c8:ab:e2:1b:0f:16:63:ea:52:cd:bb:ca:82:d0: 76:c5:9e:03:07:51:fe:4d:68:ac:fd:38:fb:08:82:3c:2a:d8: ba:80:f7:da:c5:92:a1:a7:2f:0e:21:20:53:bd:58:57:46:b7: 9e:48:2c:36:08:b9:a2:dd:5b:80:89:6c:4e:c6:03:be:93:38: 97:ec:67:b8:89:61:63:a6:44:be:f5:92:06:ca:94:25:40:9d: 69:3f:ab:33:1a:b0:f8:d2:33:eb:6c:fa:68:04:7c:c0:b0:a6: 46:21:44:19:69:52:d1:60:31:f4:46:96:b3:6b:51:16:7f:ec: e9:63:43:b5:b2:1b:e4:a9:05:71:8a:b4:13:38:16:d5:fc:d1: 22:12:8e:5d:ed:3e:89:bf:33:b7:1f:b1:d2:2e:8a:7f:34:b6: f7:60:82:5b:1d:5a:22:a9:d4:4c:67:37:e5:ef:0e:47:7b:86: ad:22:95:6e:02:73:30:5d:c1:24:68:62:96:c9:6f:9b:95:53: 5b:15:c2:26 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgITLwOCBSlM8ftv3aMSPU1GK6YG9DANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhFOThCNUM4REU2Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVE ODAyMUE1MB4XDTI2MDMyMDA3NTgxOFoXDTI3MDMxOTA4MDMxOFowMzExMC8GA1UE AxMoMjJBQ0JDN0REOTRCMEQwNzIxMDREMTM1NUExRTI4NTQ4NDdCNDNCNTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALYiGOPIauJrUSC9NJ2coJXw4YIP 7KgrYP/eD67kpNe4A9lQ7ZL5z+7A9hZOYLXPmJf1bxtTwXxzbPnvYXVRf4lQGyEO DG/NzP1oxwhbCMOgkhxdix0MtXnW7Pb40X1JocGdSJxnp0Q2ygHDmYZwQ3ya93xY 6ApQhf2PstqMwbXRP32jTM5D3zuMQuj9qmrFf4vQ2TAahOQdTGnqN2P5J81ELD2y scZnOM112Pp48HzPyZHus6sL01AB+0Q8hZ0+qgVB4+1M8ewOZb3+OtQmKVAwMCRB S3jwT+7d/H5I5LvGZ0fGpLWxMfVKFdRfQ7V7msjb1uzM9G+G6Q7JyH6UURcCAwEA AaOCAjQwggIwMB0GA1UdDgQWBBQirLx92UsNByEE0TVaHihUhHtDtTAfBgNVHSME GDAWgBTpi1yN5s2KgwkvtVV4OIu1XYAhpTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Nm ZGFmZTU2LTg0MzQtNGJiYS1iMTc2LTM1ZTg3MmMxYWMxOC8wL0U5OEI1QzhERTZD RDhBODMwOTJGQjU1NTc4Mzg4QkI1NUQ4MDIxQTUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9FOThCNUM4REU2Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVEODAy MUE1LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvMzEzMDMzMmUzMTM3MmUzMjM0MzgyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnEfgwDQYJKoZI hvcNAQELBQADggEBACCopJN2FMmd+FVx1FiCr9FegMWWQHxyNNGDsR45UPJdSe9b xeHAcXEnmlS+v6k8qt/cht0RQIbQCTjIq+IbDxZj6lLNu8qC0HbFngMHUf5NaKz9 OPsIgjwq2LqA99rFkqGnLw4hIFO9WFdGt55ILDYIuaLdW4CJbE7GA76TOJfsZ7iJ YWOmRL71kgbKlCVAnWk/qzMasPjSM+ts+mgEfMCwpkYhRBlpUtFgMfRGlrNrURZ/ 7OljQ7WyG+SpBXGKtBM4FtX80SISjl3tPom/M7cfsdIuin80tvdgglsdWiKp1Exn N+XvDkd7hq0ilW4CczBdwSRoYpbJb5uVU1sVwiY= -----END CERTIFICATE-----Generated at Thu Mar 26 22:37:30 2026 by rpki-client