$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa File: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (raw, json) Hash identifier: pWFmQgShm/pzlWpAOaPAaUyW15mLcTXhzsrhlkIsBwA= Subject key identifier: A0:CC:8F:3A:25:FD:8A:61:DE:D2:EE:25:F2:2B:25:BD:8F:A9:60:F2 Certificate issuer: /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Certificate serial: 2315FE623861634EF2C302887E6440CABB2CCE6B Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa Signing time: Mon 23 Mar 2026 07:02:46 +0000 ROA not before: Mon 23 Mar 2026 06:57:46 +0000 ROA not after: Mon 22 Mar 2027 07:02:46 +0000 asID: 149412 IP address blocks: 103.191.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:15:fe:62:38:61:63:4e:f2:c3:02:88:7e:64:40:ca:bb:2c:ce:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Validity Not Before: Mar 23 06:57:46 2026 GMT Not After : Mar 22 07:02:46 2027 GMT Subject: CN=A0CC8F3A25FD8A61DED2EE25F22B25BD8FA960F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:df:f5:43:f7:eb:3c:01:cd:72:5f:98:fa:26: 56:59:be:10:e8:c0:a0:f0:f6:03:0b:ea:36:ff:5b: 5f:60:d7:53:23:38:01:d1:6f:07:75:0f:7b:31:60: 71:45:c8:24:86:a3:1c:b2:ab:fb:00:6b:98:2c:16: 44:dd:69:22:5b:1e:e4:f6:e1:80:1e:f9:57:aa:b0: 9e:84:27:55:b3:24:d6:1d:24:fa:de:05:38:62:54: 5c:7f:43:ea:ea:d4:0f:91:e1:56:3d:c5:48:2b:6e: c9:bd:a7:68:55:a5:8b:30:ce:5d:16:51:94:17:86: 5d:22:a4:9c:ea:74:84:58:80:5c:e0:ad:cb:0c:c8: e7:aa:c5:3a:d2:b6:75:1c:5e:dd:5a:fe:50:a0:0c: ea:0d:5a:4e:d2:f2:75:2f:26:2b:fb:f6:fb:58:60: 48:58:6a:fb:e3:b9:fe:f9:f9:ab:e9:16:15:47:5e: 6d:32:1c:c1:2b:18:8a:d6:e0:bb:8f:3d:88:8c:95: de:1e:18:24:46:e9:49:d7:a3:4d:98:96:e1:57:0c: 55:6a:6d:c0:5c:3f:77:a7:e1:39:c8:9b:8a:c6:ab: ec:71:b6:5f:5b:cc:c3:e5:c3:73:c0:55:8c:ca:0e: 0b:22:37:65:ce:3f:b5:e4:ab:a0:77:0d:a9:dc:02: 27:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CC:8F:3A:25:FD:8A:61:DE:D2:EE:25:F2:2B:25:BD:8F:A9:60:F2 X509v3 Authority Key Identifier: keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.94.0/24 Signature Algorithm: sha256WithRSAEncryption 75:bd:05:18:08:af:d1:25:01:4a:4b:c5:25:8d:d8:a3:06:9e: f3:b7:75:55:0b:f5:28:bd:85:fe:56:07:04:e3:22:c2:89:7a: aa:e7:3c:0e:c0:8d:e5:98:f8:29:3d:36:bc:cf:e2:97:b0:b1: cf:be:98:24:44:06:79:d4:26:d7:31:16:9b:1e:cb:fa:2a:26: e5:d7:64:43:74:95:f9:57:87:3a:1f:52:74:de:88:fd:78:27: 95:33:2f:2e:71:5a:d9:40:ae:3f:5b:d2:8d:40:76:ec:92:88: 24:0e:d4:c5:6f:c2:2a:a3:20:f4:fd:d8:6b:db:50:0a:99:ea: 4d:c6:b2:e0:c6:68:14:39:2c:0c:56:1f:5f:86:9c:31:8d:f5: 94:91:3c:02:43:b0:6d:c2:e1:11:70:ff:d3:ab:e9:0a:c1:2c: 5c:68:75:fc:93:72:a9:58:a8:85:b8:81:d9:bf:bc:86:e6:75: cf:91:e0:2d:b7:96:6d:22:89:d0:f2:e5:ae:76:99:e3:5b:14: 08:0a:f3:db:d8:38:b1:0d:55:88:ff:95:c5:cd:1b:34:6a:48: 8d:22:06:c0:66:69:8c:18:c0:ff:97:35:7c:1c:03:62:0d:3c: 39:d4:0f:21:a2:76:f7:5f:75:0c:77:0f:ca:6e:21:d8:8d:4e: 23:48:3f:32 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIxX+YjhhY07ywwKIfmRAyrsszmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMz RUU5QzYwRTAeFw0yNjAzMjMwNjU3NDZaFw0yNzAzMjIwNzAyNDZaMDMxMTAvBgNV BAMTKEEwQ0M4RjNBMjVGRDhBNjFERUQyRUUyNUYyMkIyNUJEOEZBOTYwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3/VD9+s8Ac1yX5j6JlZZvhDo wKDw9gML6jb/W19g11MjOAHRbwd1D3sxYHFFyCSGoxyyq/sAa5gsFkTdaSJbHuT2 4YAe+VeqsJ6EJ1WzJNYdJPreBThiVFx/Q+rq1A+R4VY9xUgrbsm9p2hVpYswzl0W UZQXhl0ipJzqdIRYgFzgrcsMyOeqxTrStnUcXt1a/lCgDOoNWk7S8nUvJiv79vtY YEhYavvjuf75+avpFhVHXm0yHMErGIrW4LuPPYiMld4eGCRG6UnXo02YluFXDFVq bcBcP3en4TnIm4rGq+xxtl9bzMPlw3PAVYzKDgsiN2XOP7Xkq6B3DancAiczAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUoMyPOiX9imHe0u4l8islvY+pYPIwHwYDVR0j BBgwFoAUp0lmJAtkJ0uQ6+Bs4O4iLD7pxg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGRjMTI4My0xY2UyLTQxYTUtYWZlNi1mMGJlMzFlOWIxMGQvMC9BNzQ5NjYyNDBC NjQyNzRCOTBFQkUwNkNFMEVFMjIyQzNFRTlDNjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMzRUU5 QzYwRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwZGMxMjgzLTFjZTItNDFhNS1h ZmU2LWYwYmUzMWU5YjEwZC8wLzMxMzAzMzJlMzEzOTMxMmUzOTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzQzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ79eMA0GCSqG SIb3DQEBCwUAA4IBAQB1vQUYCK/RJQFKS8UljdijBp7zt3VVC/UovYX+VgcE4yLC iXqq5zwOwI3lmPgpPTa8z+KXsLHPvpgkRAZ51CbXMRabHsv6Kibl12RDdJX5V4c6 H1J03oj9eCeVMy8ucVrZQK4/W9KNQHbskogkDtTFb8IqoyD0/dhr21AKmepNxrLg xmgUOSwMVh9fhpwxjfWUkTwCQ7BtwuERcP/Tq+kKwSxcaHX8k3KpWKiFuIHZv7yG 5nXPkeAtt5ZtIonQ8uWudpnjWxQICvPb2DixDVWI/5XFzRs0akiNIgbAZmmMGMD/ lzV8HANiDTw51A8honb3X3UMdw/KbiHYjU4jSD8y -----END CERTIFICATE-----Generated at Thu Mar 26 19:47:28 2026 by rpki-client