$ rpki-client -vvf repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa File: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (raw, json) Hash identifier: z0rECM3efkE2+DnM5Y5ZVNfMBzgGRmK7CsM1zy/77CM= Subject key identifier: B3:30:E6:6E:16:94:91:95:0D:A4:46:5E:8E:4A:4A:83:F8:74:5A:E4 Certificate issuer: /CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Certificate serial: 0F440D95964DAE9C67E78E6B95CA6C9A99C29CF4 Authority key identifier: 9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa Signing time: Mon 23 Mar 2026 04:00:56 +0000 ROA not before: Mon 23 Mar 2026 03:55:56 +0000 ROA not after: Mon 22 Mar 2027 04:00:56 +0000 asID: 151404 IP address blocks: 103.253.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:44:0d:95:96:4d:ae:9c:67:e7:8e:6b:95:ca:6c:9a:99:c2:9c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Validity Not Before: Mar 23 03:55:56 2026 GMT Not After : Mar 22 04:00:56 2027 GMT Subject: CN=B330E66E169491950DA4465E8E4A4A83F8745AE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:47:74:be:d7:b8:f4:65:5c:f8:8c:89:7e:0c: 95:59:5e:2a:6d:14:69:26:da:e2:53:80:cd:3d:5e: 6d:1d:05:e1:e9:f3:ea:72:65:cc:2c:13:86:c1:08: 71:07:78:7c:83:c2:40:a8:30:d9:4b:a3:8e:97:84: d5:28:37:a0:b4:8f:d5:8d:d6:58:73:47:58:19:5c: 1f:0c:9a:8a:ed:a5:73:97:34:1a:70:e6:b3:15:c4: 1a:57:05:e0:39:25:c9:50:bb:41:d9:92:6f:56:50: 08:aa:af:dc:0b:fd:36:f6:1e:a7:f4:fb:43:e7:9f: 7e:95:30:db:1f:bd:05:bb:2d:c1:5b:f3:a0:9d:4f: 50:bf:f7:35:99:24:69:e0:95:15:a1:81:6c:e6:94: ca:8a:4e:70:e7:7d:a3:03:4f:52:75:ce:29:e7:7a: 29:bf:9f:f2:51:05:e5:6b:1e:5e:e8:4a:71:c3:db: ec:ad:08:fe:f7:65:c4:6f:33:cd:fc:82:66:ef:fe: a2:09:54:11:49:12:62:41:46:26:d5:6f:95:2e:bb: 4a:55:3f:dc:7e:8f:61:46:bb:1d:02:88:0b:76:d5: c8:9d:69:7e:ab:d4:65:d7:71:67:bb:6f:58:40:01: fc:12:a2:7a:fb:98:0d:08:75:b5:56:7b:53:a7:bd: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:30:E6:6E:16:94:91:95:0D:A4:46:5E:8E:4A:4A:83:F8:74:5A:E4 X509v3 Authority Key Identifier: keyid:9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.229.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:8c:49:b4:c1:0b:c8:0d:83:e2:c6:18:32:f9:5a:31:8f:00: cc:0d:66:28:ce:24:7a:dc:f3:c5:6e:8a:23:27:2d:69:86:5d: 56:56:3e:94:ff:5d:20:46:d7:46:fb:2c:b6:bb:66:86:35:8b: 54:7a:a1:f6:84:c0:68:f5:09:e9:cb:6d:fa:7e:da:e4:d1:1b: 8e:fa:3f:7c:1d:30:fc:89:b6:e8:41:5d:46:78:f4:ed:02:a9: e7:de:bd:4e:52:b6:40:c6:a4:43:3a:43:3d:f7:82:73:b5:2b: 52:e9:9a:33:a5:12:a1:16:49:7a:a6:62:ab:2f:43:d2:d6:2a: fb:35:60:49:8f:9e:fd:98:ba:93:ce:5c:ed:ae:91:ad:c2:e6: ac:02:d6:56:cc:5c:d8:15:d9:fa:39:80:28:d5:b2:f7:2f:51: 64:d1:e5:3e:a7:04:6c:59:8a:ef:fc:75:23:a2:b5:0f:2d:4e: 9a:e6:ae:a8:69:89:06:8a:d7:00:7b:f3:f2:eb:10:15:1a:6e: 4c:a1:71:71:4e:5f:1a:3d:15:62:ed:ac:7d:4f:1d:ac:69:5a: 51:27:42:5d:6b:3b:cb:ff:da:2e:72:3e:d1:dd:62:32:e6:51: d0:36:58:04:cf:77:d3:89:22:a3:36:68:37:07:fb:65:15:67: 90:05:e8:bf -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUD0QNlZZNrpxn545rlcpsmpnCnPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFE NDg5RDI0MDAeFw0yNjAzMjMwMzU1NTZaFw0yNzAzMjIwNDAwNTZaMDMxMTAvBgNV BAMTKEIzMzBFNjZFMTY5NDkxOTUwREE0NDY1RThFNEE0QTgzRjg3NDVBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXR3S+17j0ZVz4jIl+DJVZXipt FGkm2uJTgM09Xm0dBeHp8+pyZcwsE4bBCHEHeHyDwkCoMNlLo46XhNUoN6C0j9WN 1lhzR1gZXB8MmortpXOXNBpw5rMVxBpXBeA5JclQu0HZkm9WUAiqr9wL/Tb2Hqf0 +0Pnn36VMNsfvQW7LcFb86CdT1C/9zWZJGnglRWhgWzmlMqKTnDnfaMDT1J1zinn eim/n/JRBeVrHl7oSnHD2+ytCP73ZcRvM838gmbv/qIJVBFJEmJBRibVb5Uuu0pV P9x+j2FGux0CiAt21cidaX6r1GXXcWe7b1hAAfwSonr7mA0IdbVWe1OnvVBZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUszDmbhaUkZUNpEZejkpKg/h0WuQwHwYDVR0j BBgwFoAUnmrRLodj9oaSBVvE7loXQdSJ0kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2QxNWQ1My1hNGI0LTQ0MzUtYTFkYS01MmQwMjEyZWYzM2QvMC85RTZBRDEyRTg3 NjNGNjg2OTIwNTVCQzRFRTVBMTc0MUQ0ODlEMjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFENDg5 RDI0MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3ZDE1ZDUzLWE0YjQtNDQzNS1h MWRhLTUyZDAyMTJlZjMzZC8wLzMxMzAzMzJlMzIzNTMzMmUzMjMyMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNDMwMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn/eUwDQYJ KoZIhvcNAQELBQADggEBAF6MSbTBC8gNg+LGGDL5WjGPAMwNZijOJHrc88VuiiMn LWmGXVZWPpT/XSBG10b7LLa7ZoY1i1R6ofaEwGj1CenLbfp+2uTRG476P3wdMPyJ tuhBXUZ49O0CqefevU5StkDGpEM6Qz33gnO1K1LpmjOlEqEWSXqmYqsvQ9LWKvs1 YEmPnv2YupPOXO2uka3C5qwC1lbMXNgV2fo5gCjVsvcvUWTR5T6nBGxZiu/8dSOi tQ8tTprmrqhpiQaK1wB78/LrEBUabkyhcXFOXxo9FWLtrH1PHaxpWlEnQl1rO8v/ 2i5yPtHdYjLmUdA2WATPd9OJIqM2aDcH+2UVZ5AF6L8= -----END CERTIFICATE-----Generated at Thu Mar 26 21:35:03 2026 by rpki-client