$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa File: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (raw, json) Hash identifier: tg7oTYGEZ2y6EAZnzLfwX6fiXnxgi/X70lPZSwsCDsU= Subject key identifier: C8:8B:A7:90:AB:CC:7A:30:B2:56:B5:4F:D4:4F:86:13:98:6D:CC:CD Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 0C4DBBF48D8ED1EA414298EBA36A4AE8707CBDD9 Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa Signing time: Thu 19 Mar 2026 07:00:00 +0000 ROA not before: Thu 19 Mar 2026 06:55:00 +0000 ROA not after: Thu 18 Mar 2027 07:00:00 +0000 asID: 139460 IP address blocks: 103.166.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:4d:bb:f4:8d:8e:d1:ea:41:42:98:eb:a3:6a:4a:e8:70:7c:bd:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Mar 19 06:55:00 2026 GMT Not After : Mar 18 07:00:00 2027 GMT Subject: CN=C88BA790ABCC7A30B256B54FD44F8613986DCCCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c6:e1:cf:b8:ea:01:5b:9b:01:63:a3:93:bc: 30:74:e0:51:e1:a2:23:3e:12:c2:51:2b:97:87:06: 90:40:98:6b:08:f0:0c:56:9f:2a:bc:21:ae:33:bb: 91:e9:e2:ee:b8:eb:e3:3b:51:28:78:7a:9f:12:2a: 6b:b5:ef:db:74:10:59:7c:34:63:e0:3f:23:64:83: 65:e0:f9:9a:ca:b0:0c:45:eb:8e:82:03:dd:67:21: 8a:cb:b4:0d:b6:0c:11:34:34:0e:bd:e7:b9:34:61: a5:5f:99:c8:51:07:23:21:13:21:8a:3d:76:90:58: 07:ce:00:d4:d7:2b:b6:84:d5:c5:49:70:7f:3c:2f: ad:3c:47:24:ac:25:b4:38:a2:9f:38:b9:ee:8c:88: 7e:05:67:e3:5e:82:ad:fc:3a:e7:39:24:23:71:af: 96:c4:53:ef:4d:6b:f8:31:e3:8e:0a:42:0d:b2:25: a1:25:a1:24:69:e2:94:f2:a2:27:96:54:f6:20:28: c4:7b:83:a6:6c:a9:5d:e8:3d:30:5b:01:90:bc:34: 21:f7:62:3d:c3:99:d8:4b:75:d3:d5:33:68:1b:25: b7:e4:80:25:28:62:26:24:bb:cb:d9:57:be:aa:a0: da:ae:c3:7a:c1:0b:cf:d0:74:59:01:69:7e:d0:ea: 8d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8B:A7:90:AB:CC:7A:30:B2:56:B5:4F:D4:4F:86:13:98:6D:CC:CD X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.48.0/23 Signature Algorithm: sha256WithRSAEncryption b0:05:88:48:7f:79:e9:81:bb:39:e6:3a:43:92:41:e5:66:b3: a2:57:c0:52:c9:f4:93:dc:10:be:27:1e:82:1c:98:ce:2d:da: 25:9f:9c:08:5a:a7:72:eb:74:23:fc:15:1d:7f:3b:dc:d7:74: 95:e7:37:4d:82:73:1f:cb:da:c2:09:32:14:a6:73:43:5b:50: 18:16:71:50:d1:18:bf:0e:0b:78:36:1a:3d:f3:dd:83:66:43: 6b:a1:06:a1:98:98:cc:d8:48:3b:2c:1e:af:59:43:b7:6f:9c: a4:11:6a:0e:5c:13:89:d4:42:d1:12:8d:a2:47:79:48:5d:f2: d0:42:05:80:94:75:94:c8:f3:76:3a:fc:bd:1c:5d:1b:25:33: 97:a9:ca:79:ad:ff:1a:a4:7d:b5:44:77:8d:13:1a:65:7a:f2: 0c:22:70:65:eb:08:37:5a:d7:7e:d7:1c:6d:9f:2e:e0:b0:68: 42:69:76:70:4d:75:64:7f:e1:5e:09:6f:09:f1:a1:cd:1d:8c: 0f:bd:d9:f7:50:51:31:d6:ac:9d:20:e5:02:41:12:36:05:c8: a2:25:68:2d:55:79:b1:98:94:d2:47:80:97:74:b7:02:21:f8: 65:01:cf:2c:ef:89:83:4b:84:9c:dc:a9:a5:81:3c:9c:c6:14: b7:55:ce:91 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDE279I2O0epBQpjro2pK6HB8vdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNjAzMTkwNjU1MDBaFw0yNzAzMTgwNzAwMDBaMDMxMTAvBgNV BAMTKEM4OEJBNzkwQUJDQzdBMzBCMjU2QjU0RkQ0NEY4NjEzOTg2RENDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnxuHPuOoBW5sBY6OTvDB04FHh oiM+EsJRK5eHBpBAmGsI8AxWnyq8Ia4zu5Hp4u646+M7USh4ep8SKmu179t0EFl8 NGPgPyNkg2Xg+ZrKsAxF646CA91nIYrLtA22DBE0NA6957k0YaVfmchRByMhEyGK PXaQWAfOANTXK7aE1cVJcH88L608RySsJbQ4op84ue6MiH4FZ+Negq38Ouc5JCNx r5bEU+9Na/gx444KQg2yJaEloSRp4pTyoieWVPYgKMR7g6ZsqV3oPTBbAZC8NCH3 Yj3DmdhLddPVM2gbJbfkgCUoYiYku8vZV76qoNquw3rBC8/QdFkBaX7Q6o0/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyIunkKvMejCyVrVP1E+GE5htzM0wHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4YjYzZTdkLWE2MTctNGU4Yy1h ODIxLTYyMzk1NmQ0ZDRhZS8wLzMxMzAzMzJlMzEzNjM2MmUzNDM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6YwMA0GCSqG SIb3DQEBCwUAA4IBAQCwBYhIf3npgbs55jpDkkHlZrOiV8BSyfST3BC+Jx6CHJjO Ldoln5wIWqdy63Qj/BUdfzvc13SV5zdNgnMfy9rCCTIUpnNDW1AYFnFQ0Ri/Dgt4 Nho9892DZkNroQahmJjM2Eg7LB6vWUO3b5ykEWoOXBOJ1ELREo2iR3lIXfLQQgWA lHWUyPN2Ovy9HF0bJTOXqcp5rf8apH21RHeNExplevIMInBl6wg3Wtd+1xxtny7g sGhCaXZwTXVkf+FeCW8J8aHNHYwPvdn3UFEx1qydIOUCQRI2BciiJWgtVXmxmJTS R4CXdLcCIfhlAc8s74mDS4Sc3KmlgTycxhS3Vc6R -----END CERTIFICATE-----Generated at Fri Mar 27 03:41:20 2026 by rpki-client