$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa File: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (raw, json) Hash identifier: DEfILCQcOW3DvGA4WAN4WdaUEk+0PAQPVVSPnyIr0No= Subject key identifier: 41:3B:FC:C1:81:FB:65:DE:E0:D2:A7:3C:7C:A0:EF:19:25:79:5B:DF Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 58580B6A7FECAE9297BCEA12C6D004DD20163CBD Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa Signing time: Tue 17 Mar 2026 06:02:53 +0000 ROA not before: Tue 17 Mar 2026 05:57:53 +0000 ROA not after: Tue 16 Mar 2027 06:02:53 +0000 asID: 149696 IP address blocks: 103.186.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:58:0b:6a:7f:ec:ae:92:97:bc:ea:12:c6:d0:04:dd:20:16:3c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: Mar 17 05:57:53 2026 GMT Not After : Mar 16 06:02:53 2027 GMT Subject: CN=413BFCC181FB65DEE0D2A73C7CA0EF1925795BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:45:b5:dd:e6:e8:a6:00:1b:68:51:46:10: 0b:85:48:6b:3e:ac:e1:7c:4a:de:ca:cb:97:1e:37: c6:a7:03:25:dd:a5:dd:a3:9d:a3:17:95:63:28:b6: 14:36:c0:18:d7:81:22:99:41:86:11:f5:d9:39:d9: 6e:f0:e8:7b:3b:70:75:f0:2e:05:cb:05:d9:92:ab: 40:f8:42:8d:45:c6:aa:cc:37:1a:fe:ca:61:43:fe: 94:92:92:92:f1:5f:c7:e5:9a:e3:99:02:9e:9c:ea: 34:8d:98:a2:31:20:66:aa:85:df:0f:ac:e4:c1:2e: 23:5e:07:95:9f:33:ad:20:19:1f:56:3a:63:03:ab: ea:1f:94:2c:27:96:7d:3f:47:60:f7:8f:ea:0a:fb: ba:20:44:3c:6b:14:48:35:4d:b2:e1:71:9c:46:6e: dd:2a:27:09:84:69:6d:53:fd:43:c1:67:e0:a5:02: ee:8d:2c:54:70:6b:69:eb:95:75:bb:08:e7:51:7a: f4:ae:d7:1f:b0:82:23:f7:24:b5:ed:9a:ba:ad:38: 03:d6:17:25:d7:31:52:5d:2f:af:e8:27:6a:76:5e: 77:ff:44:be:0a:3e:c0:8e:d7:85:14:aa:fe:57:f9: e1:8e:c9:03:21:0e:86:35:ee:7a:ee:d3:b8:0d:35: d7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3B:FC:C1:81:FB:65:DE:E0:D2:A7:3C:7C:A0:EF:19:25:79:5B:DF X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.99.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:1d:02:6c:38:57:1a:99:6f:ef:d5:ec:d0:22:f7:8a:89:d2: d7:8c:e7:39:59:a3:d6:6f:18:b9:8c:03:c9:ea:27:1b:c3:10: 8c:11:46:2f:7c:24:4f:92:96:48:7c:f7:b3:ad:ad:c0:16:43: 80:b0:38:d0:77:8e:15:96:fb:e4:36:55:d3:59:e1:d6:9f:6d: a1:da:04:00:62:c4:f1:fa:f2:e9:31:05:49:17:5e:72:d0:b1: f9:ff:4a:cd:c9:f9:c4:1e:cd:aa:e3:1e:2d:ce:8b:8f:e7:74: a9:84:fc:a2:51:7e:84:89:e4:ff:2a:64:ea:3e:95:23:a2:97: ed:7e:09:a2:b2:99:3c:9d:9c:d3:e1:27:68:06:af:c1:e4:0b: b2:12:d4:fc:36:e1:11:b8:51:58:94:98:de:f5:ff:91:18:8e: 8d:f8:22:d8:be:a2:af:0a:04:16:a9:23:b0:1c:fc:02:7b:88: d4:20:a7:fc:96:3f:a7:68:8e:da:4a:9f:15:fe:d3:0f:c7:d7: d1:07:91:c2:99:8d:2d:56:f0:86:17:94:5a:2d:db:47:62:58: 87:bd:09:20:4b:6e:6b:a1:19:ce:30:f2:57:6b:6d:24:c7:b1: ff:d3:35:76:40:f2:62:9e:e8:70:4b:20:ff:3e:8c:9c:b7:5a: 59:c2:7e:67 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWFgLan/srpKXvOoSxtAE3SAWPL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNjAzMTcwNTU3NTNaFw0yNzAzMTYwNjAyNTNaMDMxMTAvBgNV BAMTKDQxM0JGQ0MxODFGQjY1REVFMEQyQTczQzdDQTBFRjE5MjU3OTVCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNEW13ebopgAbaFFGEAuFSGs+ rOF8St7Ky5ceN8anAyXdpd2jnaMXlWMothQ2wBjXgSKZQYYR9dk52W7w6Hs7cHXw LgXLBdmSq0D4Qo1FxqrMNxr+ymFD/pSSkpLxX8flmuOZAp6c6jSNmKIxIGaqhd8P rOTBLiNeB5WfM60gGR9WOmMDq+oflCwnln0/R2D3j+oK+7ogRDxrFEg1TbLhcZxG bt0qJwmEaW1T/UPBZ+ClAu6NLFRwa2nrlXW7COdRevSu1x+wgiP3JLXtmrqtOAPW FyXXMVJdL6/oJ2p2Xnf/RL4KPsCO14UUqv5X+eGOyQMhDoY17nru07gNNdelAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQTv8wYH7Zd7g0qc8fKDvGSV5W98wHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwODcyMDg2LTgwNWMtNDBhYS04 N2IxLWJlYjhlMTMwMmMyNi8wLzMxMzAzMzJlMzEzODM2MmUzOTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7pjMA0GCSqG SIb3DQEBCwUAA4IBAQB9HQJsOFcamW/v1ezQIveKidLXjOc5WaPWbxi5jAPJ6icb wxCMEUYvfCRPkpZIfPezra3AFkOAsDjQd44VlvvkNlXTWeHWn22h2gQAYsTx+vLp MQVJF15y0LH5/0rNyfnEHs2q4x4tzouP53SphPyiUX6EieT/KmTqPpUjopftfgmi spk8nZzT4SdoBq/B5AuyEtT8NuERuFFYlJje9f+RGI6N+CLYvqKvCgQWqSOwHPwC e4jUIKf8lj+naI7aSp8V/tMPx9fRB5HCmY0tVvCGF5RaLdtHYliHvQkgS25roRnO MPJXa20kx7H/0zV2QPJinuhwSyD/Poyct1pZwn5n -----END CERTIFICATE-----Generated at Thu Mar 26 19:15:56 2026 by rpki-client