$ rpki-client -vvf repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa File: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (raw, json) Hash identifier: UvASTZKyP+lPiza2+zYNFb+djLhbQRam++EmghJYKgc= Subject key identifier: E3:4F:44:FA:1C:E6:5F:DF:AC:A2:01:D1:23:66:E9:CD:28:0E:43:79 Certificate issuer: /CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Certificate serial: 2444B94E5A40FFB59DD420B1C2DCC030723592C0 Authority key identifier: 2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa Signing time: Sat 21 Mar 2026 11:00:02 +0000 ROA not before: Sat 21 Mar 2026 10:55:02 +0000 ROA not after: Sat 20 Mar 2027 11:00:02 +0000 asID: 138822 IP address blocks: 103.137.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:44:b9:4e:5a:40:ff:b5:9d:d4:20:b1:c2:dc:c0:30:72:35:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Validity Not Before: Mar 21 10:55:02 2026 GMT Not After : Mar 20 11:00:02 2027 GMT Subject: CN=E34F44FA1CE65FDFACA201D12366E9CD280E4379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:97:dd:d5:0a:39:96:12:7d:a5:c7:57:d8: 60:d9:a2:bc:a5:bd:21:2e:6d:0e:23:ff:2c:47:85: 7a:df:67:69:13:8c:f3:1e:33:b2:8b:ad:5c:2c:b8: 1d:40:8c:7e:ab:1e:e8:1c:2d:a5:d8:46:b8:44:e4: 92:b9:57:45:22:db:a5:68:54:28:b6:76:c0:d4:47: fe:c9:4e:8a:28:f6:78:df:fa:96:b6:de:6a:77:fa: 3f:3b:91:73:b2:5d:cf:cd:2c:26:dd:e0:ae:a8:f7: 05:4a:4e:5c:f7:c8:88:68:f0:4a:9f:09:85:09:b2: a4:8e:3e:44:42:38:0b:b3:0c:52:e7:ce:a9:a6:36: d2:0f:93:d6:91:d8:25:5d:6b:e6:19:0f:b5:87:c3: 71:64:fc:49:20:3c:68:db:7e:2f:a3:db:39:8e:e5: 7d:23:d2:63:2b:e9:00:d8:1d:5f:ff:c5:6c:5b:c0: 63:00:df:86:31:00:b2:86:a3:97:3a:e3:4d:5e:1f: d9:c9:7a:45:5b:ee:0f:66:13:af:79:4f:1d:57:fe: 3e:09:e3:00:ff:42:f5:82:17:f1:35:82:45:b2:13: d4:b3:37:08:44:fc:10:3f:3b:00:d2:b0:2f:21:77: 10:9a:3f:94:f5:f8:3c:21:5b:2e:db:e2:87:35:e8: 33:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4F:44:FA:1C:E6:5F:DF:AC:A2:01:D1:23:66:E9:CD:28:0E:43:79 X509v3 Authority Key Identifier: keyid:2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.38.0/23 Signature Algorithm: sha256WithRSAEncryption 70:84:bc:89:02:5d:f1:71:55:bf:e6:71:36:00:69:c3:cd:cd: fe:03:7b:a2:8b:a3:19:d8:6b:69:23:e3:f6:ab:f2:92:a3:c9: cc:3b:7d:48:4d:b0:6b:7a:9e:92:26:04:38:60:e2:e3:d4:8f: 65:0b:66:e1:d4:47:5c:ae:73:bc:46:7b:3b:98:5b:39:39:f4: 03:ad:ab:43:94:19:53:8b:b0:2c:63:20:96:94:5e:a5:3b:42: 28:4d:67:54:dc:dd:38:df:31:83:0b:42:3e:01:8e:5a:81:d0: 88:22:27:43:df:77:0c:2e:11:cb:69:72:13:9e:74:e5:ba:3c: a8:d4:b9:a6:14:ca:d9:df:ad:8e:f6:46:0a:be:f1:aa:5e:5d: 12:01:26:f3:a3:99:76:2d:a0:52:d4:62:b5:b4:d6:7a:78:67: 99:f2:97:7c:a7:88:75:21:5b:39:ed:22:f3:e3:32:5f:1d:5e: 1a:9a:9b:66:91:4d:3b:4d:ad:8f:38:7b:f8:82:3c:31:f4:a1: a4:64:4c:5e:c9:cc:a1:cd:50:b3:37:f0:c4:e5:5c:73:f8:c3: 5a:0b:65:78:58:cc:11:0f:da:40:53:17:16:06:0b:6a:97:16: 83:48:39:f9:fc:4b:4d:c5:0d:3e:46:2e:fa:ef:db:da:73:12: fd:b4:e7:a5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJES5TlpA/7Wd1CCxwtzAMHI1ksAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4 M0E2MzNENDAeFw0yNjAzMjExMDU1MDJaFw0yNzAzMjAxMTAwMDJaMDMxMTAvBgNV BAMTKEUzNEY0NEZBMUNFNjVGREZBQ0EyMDFEMTIzNjZFOUNEMjgwRTQzNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEJfd1Qo5lhJ9pcdX2GDZoryl vSEubQ4j/yxHhXrfZ2kTjPMeM7KLrVwsuB1AjH6rHugcLaXYRrhE5JK5V0Ui26Vo VCi2dsDUR/7JTooo9njf+pa23mp3+j87kXOyXc/NLCbd4K6o9wVKTlz3yIho8Eqf CYUJsqSOPkRCOAuzDFLnzqmmNtIPk9aR2CVda+YZD7WHw3Fk/EkgPGjbfi+j2zmO 5X0j0mMr6QDYHV//xWxbwGMA34YxALKGo5c6401eH9nJekVb7g9mE695Tx1X/j4J 4wD/QvWCF/E1gkWyE9SzNwhE/BA/OwDSsC8hdxCaP5T1+DwhWy7b4oc16DO9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU409E+hzmX9+sogHRI2bpzSgOQ3kwHwYDVR0j BBgwFoAULex9sqXJYs+lPVeN6n3IQ4OmM9QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l M2JiZjFkYS1lMzE3LTQ4ZWYtYWQ2ZC1mZThhOGJmMDg0MDAvMC8yREVDN0RCMkE1 Qzk2MkNGQTUzRDU3OERFQTdEQzg0MzgzQTYzM0Q0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4M0E2 MzNENC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UzYmJmMWRhLWUzMTctNDhlZi1h ZDZkLWZlOGE4YmYwODQwMC8wLzMxMzAzMzJlMzEzMzM3MmUzMzM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4kmMA0GCSqG SIb3DQEBCwUAA4IBAQBwhLyJAl3xcVW/5nE2AGnDzc3+A3uii6MZ2GtpI+P2q/KS o8nMO31ITbBrep6SJgQ4YOLj1I9lC2bh1EdcrnO8Rns7mFs5OfQDratDlBlTi7As YyCWlF6lO0IoTWdU3N043zGDC0I+AY5agdCIIidD33cMLhHLaXITnnTlujyo1Lmm FMrZ362O9kYKvvGqXl0SASbzo5l2LaBS1GK1tNZ6eGeZ8pd8p4h1IVs57SLz4zJf HV4amptmkU07Ta2POHv4gjwx9KGkZExeycyhzVCzN/DE5Vxz+MNaC2V4WMwRD9pA UxcWBgtqlxaDSDn5/EtNxQ0+Ri7679vacxL9tOel -----END CERTIFICATE-----Generated at Thu Mar 26 16:02:23 2026 by rpki-client