$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa File: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (raw, json) Hash identifier: kTrFLDCi/3VQV7a7pkmW+dWv+0RMpkZ4AhkZOzoo+gg= Subject key identifier: 1F:EF:2B:EA:BE:34:59:8E:0D:E3:36:65:4F:B0:01:B2:F0:B5:47:47 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 210D6759053F7D4DBD0A87865D6BFDF4BCA7BA8D Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa Signing time: Mon 23 Mar 2026 09:00:01 +0000 ROA not before: Mon 23 Mar 2026 08:55:01 +0000 ROA not after: Mon 22 Mar 2027 09:00:01 +0000 asID: 149717 IP address blocks: 103.186.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0d:67:59:05:3f:7d:4d:bd:0a:87:86:5d:6b:fd:f4:bc:a7:ba:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: Mar 23 08:55:01 2026 GMT Not After : Mar 22 09:00:01 2027 GMT Subject: CN=1FEF2BEABE34598E0DE336654FB001B2F0B54747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:80:93:fa:3b:5d:eb:a2:44:21:47:cb:6e: ee:cf:83:a8:2e:82:20:f0:2c:ac:27:99:4b:eb:f6: 0c:9c:a6:e0:af:ff:c7:ff:22:35:f7:02:6a:22:4d: 79:7f:84:e3:33:21:ed:b0:f9:67:fa:f6:a8:1b:bf: 6d:d6:f0:38:82:df:f6:fd:ad:22:0b:cf:49:17:cf: 1e:4c:ae:2c:b3:8e:c9:15:50:89:d6:02:24:d0:ab: e5:4f:9b:23:f5:9d:bf:c7:9b:b8:e0:3c:0d:45:e5: 65:bc:ef:bb:e3:35:6c:46:8d:8c:d8:62:e7:e7:76: a1:58:2b:69:73:0e:fe:97:f4:62:ed:06:1d:4f:cd: be:2b:95:f3:7b:81:0b:e3:30:16:d6:31:fd:73:6c: c6:43:75:8a:b6:d2:80:c9:f4:53:1e:e9:ac:4c:65: 63:27:57:86:fe:ea:91:22:e7:24:fa:e5:7a:2c:5d: 09:0b:18:6f:29:81:52:fe:62:06:7f:f6:18:7a:62: d8:d6:fe:74:c9:da:16:9c:c4:18:ab:b9:f5:0b:f7: 91:fd:3a:54:c7:20:31:99:78:57:c4:72:a0:f4:0e: d6:64:f0:ab:9f:a2:8b:2c:78:6e:07:ed:ad:d1:29: 3a:a7:a6:e3:e8:0d:5a:49:ff:69:28:c5:a8:ee:43: 14:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EF:2B:EA:BE:34:59:8E:0D:E3:36:65:4F:B0:01:B2:F0:B5:47:47 X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.88.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:09:bc:10:b4:3a:fc:94:65:db:fd:83:2d:ce:31:ac:df:c0: de:7e:0b:6b:3a:1d:42:2e:c2:cf:22:fd:f4:0a:d3:e9:2e:77: e5:7c:7d:25:96:6c:e3:14:d9:5a:5c:6d:89:f0:b1:30:1d:58: af:5b:80:07:7c:89:b8:23:a3:ad:94:88:82:70:0d:dc:36:c1: 49:4f:94:59:6a:07:2a:e3:81:73:cc:8d:1b:98:bd:cf:76:86: b0:1f:78:65:e8:c6:9d:71:e7:85:34:62:93:13:91:c4:b1:56: d5:39:93:e3:bd:a1:3a:06:81:95:52:8b:e1:09:80:97:69:50: 2d:29:91:c6:45:b2:9d:b6:70:65:ca:12:9f:9a:a1:4c:8d:b6: 6d:00:d6:af:b7:8b:3c:b8:d8:fe:26:33:72:bc:88:ca:7d:6e: fa:7f:16:a7:4f:31:c8:3f:a4:ce:bd:d1:c7:ee:37:50:76:8b: 2b:6b:ed:dd:03:25:db:0c:01:23:87:cd:35:f9:80:78:97:66: a6:82:63:ce:fa:1e:4f:bd:3a:3c:c6:49:33:4b:66:03:2f:2e: 23:dc:49:8c:6c:c3:f8:4b:4a:7e:16:2a:06:21:f8:60:47:4e: de:43:14:72:e2:49:8c:75:36:18:0c:43:ad:2f:a2:6e:26:dd: 90:e1:bf:1b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIQ1nWQU/fU29CoeGXWv99Lynuo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNjAzMjMwODU1MDFaFw0yNzAzMjIwOTAwMDFaMDMxMTAvBgNV BAMTKDFGRUYyQkVBQkUzNDU5OEUwREUzMzY2NTRGQjAwMUIyRjBCNTQ3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TYCT+jtd66JEIUfLbu7Pg6gu giDwLKwnmUvr9gycpuCv/8f/IjX3AmoiTXl/hOMzIe2w+Wf69qgbv23W8DiC3/b9 rSILz0kXzx5MriyzjskVUInWAiTQq+VPmyP1nb/Hm7jgPA1F5WW877vjNWxGjYzY YufndqFYK2lzDv6X9GLtBh1Pzb4rlfN7gQvjMBbWMf1zbMZDdYq20oDJ9FMe6axM ZWMnV4b+6pEi5yT65XosXQkLGG8pgVL+YgZ/9hh6YtjW/nTJ2hacxBirufUL95H9 OlTHIDGZeFfEcqD0DtZk8KufoosseG4H7a3RKTqnpuPoDVpJ/2koxajuQxSnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUH+8r6r40WY4N4zZlT7ABsvC1R0cwHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UzMjk1ZGU2LTIwNTgtNDZhNy05 MzZiLTA1MmNmMmZhOTIwZC8wLzMxMzAzMzJlMzEzODM2MmUzODM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7pYMA0GCSqG SIb3DQEBCwUAA4IBAQBKCbwQtDr8lGXb/YMtzjGs38DefgtrOh1CLsLPIv30CtPp LnflfH0llmzjFNlaXG2J8LEwHVivW4AHfIm4I6OtlIiCcA3cNsFJT5RZagcq44Fz zI0bmL3PdoawH3hl6MadceeFNGKTE5HEsVbVOZPjvaE6BoGVUovhCYCXaVAtKZHG RbKdtnBlyhKfmqFMjbZtANavt4s8uNj+JjNyvIjKfW76fxanTzHIP6TOvdHH7jdQ dosra+3dAyXbDAEjh801+YB4l2amgmPO+h5PvTo8xkkzS2YDLy4j3EmMbMP4S0p+ FioGIfhgR07eQxRy4kmMdTYYDEOtL6JuJt2Q4b8b -----END CERTIFICATE-----Generated at Thu Mar 26 18:37:27 2026 by rpki-client