$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa File: 3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (raw, json) Hash identifier: BAiFeUHCTKKVIDcPoWOZ3Xb7HazuROwsLCkUKw6ZY04= Subject key identifier: F6:62:DD:BC:89:1A:98:53:2C:4F:34:FD:BF:28:6C:FB:9D:9B:E5:AB Certificate issuer: /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1 Certificate serial: 465C06A9E9312C47DE0EE9CDE65CE937CBFDE00F Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa Signing time: Wed 25 Mar 2026 05:00:02 +0000 ROA not before: Wed 25 Mar 2026 04:55:02 +0000 ROA not after: Wed 24 Mar 2027 05:00:02 +0000 asID: 139951 IP address blocks: 103.79.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:5c:06:a9:e9:31:2c:47:de:0e:e9:cd:e6:5c:e9:37:cb:fd:e0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1 Validity Not Before: Mar 25 04:55:02 2026 GMT Not After : Mar 24 05:00:02 2027 GMT Subject: CN=F662DDBC891A98532C4F34FDBF286CFB9D9BE5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:37:7a:dd:6b:53:ac:a1:db:80:77:c2:5d:98: c5:54:51:04:7e:77:1a:63:ea:9f:57:fa:50:3b:e8: c1:a0:79:9e:ea:c4:11:f9:cc:18:3a:56:5d:1c:67: 74:ee:8a:14:07:40:cb:41:5d:aa:03:32:5b:c8:91: eb:f8:54:0b:80:f4:f8:7e:0a:50:88:e6:57:56:67: 75:69:2d:80:cb:56:36:c4:ca:8f:f2:28:ac:d4:77: 6b:b1:c9:9b:a1:ba:14:94:52:5c:af:83:52:02:1b: 9c:a1:60:5e:9a:7f:cc:a2:57:2e:3a:fb:bd:37:de: 67:2c:aa:b0:f3:3a:b0:22:6f:89:ec:05:ad:67:a1: 02:fa:59:33:74:a2:be:f0:2a:56:a3:f5:f0:89:4c: 34:5c:40:ab:3d:1f:9b:ef:eb:97:98:ea:bf:da:a3: f1:a4:8f:e3:ff:47:23:08:e1:87:16:33:05:fb:91: 29:53:bf:fe:b7:f4:33:b4:c5:11:1a:c7:96:3b:12: d0:7f:62:a6:d9:77:d6:35:5d:72:fe:89:6b:8f:0b: 9b:c2:05:07:19:e2:23:80:49:98:f7:f8:d3:a6:8e: a0:3a:ae:fa:7e:97:07:20:81:44:50:de:a9:e8:5b: 66:e3:69:51:44:f8:b4:5e:0c:2c:05:6c:6e:06:98: 20:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:62:DD:BC:89:1A:98:53:2C:4F:34:FD:BF:28:6C:FB:9D:9B:E5:AB X509v3 Authority Key Identifier: keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.79.129.0/24 Signature Algorithm: sha256WithRSAEncryption 59:70:8a:b2:aa:a6:c8:55:1c:18:bb:be:94:00:7a:31:f4:32: 92:41:84:42:9f:92:4f:6d:e3:1b:c3:68:f2:0d:76:8a:89:20: e4:63:99:62:09:67:8f:8d:90:c4:12:fb:6e:04:20:91:bd:85: 3e:59:f2:1f:e3:83:30:49:c8:fc:28:fb:51:bd:e3:15:d2:ed: e2:7f:e0:84:ff:a1:97:26:72:00:85:54:fc:07:82:1e:d4:f5: c4:38:13:f6:2c:24:1f:ce:88:26:48:c0:2e:c3:a5:00:6c:66: 79:4e:04:40:cc:3c:5e:b8:e8:23:7b:0e:b0:d3:53:79:8a:d2: 47:9b:69:ca:6c:9a:2e:43:19:47:ef:d7:a2:0a:36:0e:ab:32: a0:49:03:9e:0d:0f:b8:de:fc:94:32:70:14:ac:ca:46:5d:7b: 26:f7:41:84:6c:70:80:d7:eb:c0:14:97:e9:23:58:d2:38:b1: 8d:66:15:74:d4:2f:80:a7:de:ae:da:01:fe:f7:60:0f:e4:27: 9a:83:08:c8:20:e6:b0:f0:b8:b4:46:1b:0c:0a:a2:42:d6:4b: 5d:4e:4b:d5:ae:6d:5d:b1:59:0b:4a:f9:63:57:9e:52:2c:4f: 87:29:77:bf:ed:51:8e:fb:cc:3a:3b:6c:3c:63:48:f6:52:e2: 4e:b2:7e:00 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURlwGqekxLEfeDunN5lzpN8v94A8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMz MTk0OTJGMTAeFw0yNjAzMjUwNDU1MDJaFw0yNzAzMjQwNTAwMDJaMDMxMTAvBgNV BAMTKEY2NjJEREJDODkxQTk4NTMyQzRGMzRGREJGMjg2Q0ZCOUQ5QkU1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChN3rda1OsoduAd8JdmMVUUQR+ dxpj6p9X+lA76MGgeZ7qxBH5zBg6Vl0cZ3TuihQHQMtBXaoDMlvIkev4VAuA9Ph+ ClCI5ldWZ3VpLYDLVjbEyo/yKKzUd2uxyZuhuhSUUlyvg1ICG5yhYF6af8yiVy46 +7033mcsqrDzOrAib4nsBa1noQL6WTN0or7wKlaj9fCJTDRcQKs9H5vv65eY6r/a o/Gkj+P/RyMI4YcWMwX7kSlTv/639DO0xREax5Y7EtB/YqbZd9Y1XXL+iWuPC5vC BQcZ4iOASZj3+NOmjqA6rvp+lwcggURQ3qnoW2bjaVFE+LReDCwFbG4GmCDfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9mLdvIkamFMsTzT9vyhs+52b5aswHwYDVR0j BBgwFoAUJxFM/FhcXbLgrF2nTwTGbDGUkvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWM4YjllMy1iNDRmLTQ5MGItYmY1MS05OWYyZGQyYTEzNjQvMC8yNzExNENGQzU4 NUM1REIyRTBBQzVEQTc0RjA0QzY2QzMxOTQ5MkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMzMTk0 OTJGMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1YzhiOWUzLWI0NGYtNDkwYi1i ZjUxLTk5ZjJkZDJhMTM2NC8wLzMxMzAzMzJlMzczOTJlMzEzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0+BMA0GCSqG SIb3DQEBCwUAA4IBAQBZcIqyqqbIVRwYu76UAHox9DKSQYRCn5JPbeMbw2jyDXaK iSDkY5liCWePjZDEEvtuBCCRvYU+WfIf44MwScj8KPtRveMV0u3if+CE/6GXJnIA hVT8B4Ie1PXEOBP2LCQfzogmSMAuw6UAbGZ5TgRAzDxeuOgjew6w01N5itJHm2nK bJouQxlH79eiCjYOqzKgSQOeDQ+43vyUMnAUrMpGXXsm90GEbHCA1+vAFJfpI1jS OLGNZhV01C+Ap96u2gH+92AP5CeagwjIIOaw8Li0RhsMCqJC1ktdTkvVrm1dsVkL SvljV55SLE+HKXe/7VGO+8w6O2w8Y0j2UuJOsn4A -----END CERTIFICATE-----Generated at Thu Mar 26 14:41:54 2026 by rpki-client