$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa File: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (raw, json) Hash identifier: 7IqBpxVZHjqfgHzWU3S4QhDBbMlKh+5/MdFRd+vD9Sg= Subject key identifier: F9:4B:BF:3D:7B:AD:53:1B:B9:AA:8D:09:C4:A0:B0:EA:77:8E:24:D3 Certificate issuer: /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Certificate serial: 348DF34E8A05B4117F7DCBD45FE457B0C38EC41D Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa Signing time: Mon 16 Mar 2026 09:00:00 +0000 ROA not before: Mon 16 Mar 2026 08:55:00 +0000 ROA not after: Mon 15 Mar 2027 09:00:00 +0000 asID: 147144 IP address blocks: 103.175.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:8d:f3:4e:8a:05:b4:11:7f:7d:cb:d4:5f:e4:57:b0:c3:8e:c4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Validity Not Before: Mar 16 08:55:00 2026 GMT Not After : Mar 15 09:00:00 2027 GMT Subject: CN=F94BBF3D7BAD531BB9AA8D09C4A0B0EA778E24D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:00:a7:c3:39:07:60:68:6b:2a:6b:7b:d2: 96:c9:7d:4d:6a:1f:69:eb:b5:c7:73:21:ea:d8:e5: 96:e3:31:d7:05:d0:39:c5:f6:b2:a3:e9:d4:ed:26: 61:6d:16:55:f7:42:96:6f:be:c4:e0:0c:ac:4e:48: ad:22:cf:c9:79:80:66:f1:66:f6:63:84:5e:7e:c2: 9a:fb:99:db:4c:56:f5:01:99:95:cd:f6:9f:49:77: 8f:80:21:f4:24:c2:8e:ff:6b:24:c2:8a:f3:83:61: b3:98:cf:0b:b8:c5:95:aa:15:1a:b4:a9:34:30:e3: 80:08:5c:6f:60:84:9d:08:6c:2b:a3:09:2d:7b:72: c7:3c:21:5d:49:b1:f7:0f:a2:b7:a6:1f:f4:9c:3c: 60:ee:3e:8e:5d:b9:6b:cd:31:4c:e9:a6:6a:76:90: 1d:3d:ae:c0:e3:ec:ee:00:2e:bb:41:f3:f2:2b:e5: 55:f8:8f:d8:fd:4c:a0:f3:39:56:a5:fb:6c:b0:b0: a6:e2:90:15:e1:d2:dc:f3:55:d3:45:94:70:b1:31: f8:4d:7f:ea:ca:ef:77:0a:68:37:12:1b:45:69:d0: de:dc:42:77:3a:34:df:7b:bf:69:40:5b:91:15:e2: 4f:40:d5:03:e0:1c:51:98:95:a0:86:1f:1d:66:1f: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4B:BF:3D:7B:AD:53:1B:B9:AA:8D:09:C4:A0:B0:EA:77:8E:24:D3 X509v3 Authority Key Identifier: keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.87.0/24 Signature Algorithm: sha256WithRSAEncryption 38:24:4b:56:0b:46:43:63:c3:53:4d:4e:de:34:a8:fb:58:49: a5:49:d6:93:a6:92:9d:80:bb:0f:14:7a:2e:dc:77:9d:5d:0d: ab:ba:4d:68:93:19:c5:92:ec:ef:39:a1:fd:e3:f2:b5:0c:27: f3:fb:6f:b1:5d:ac:e4:81:96:a1:ec:e0:21:fb:ca:20:d9:7f: 2d:99:b6:23:c4:fd:11:e8:6c:e9:88:59:9d:53:96:66:7c:77: 46:73:63:e9:b4:c3:98:cb:1b:fd:ba:2b:56:00:50:07:7f:fb: 62:ae:1f:d0:1c:43:b6:37:0b:f6:94:ef:bd:43:1b:ea:be:82: 00:d7:b7:d1:6a:e9:97:38:86:fe:c1:03:cb:25:c1:b9:75:4d: b7:bf:bc:b6:52:41:ad:fa:54:43:07:d3:86:2e:d9:78:66:bb: e1:70:98:00:63:41:eb:fb:f5:c3:91:c8:81:01:0b:2d:51:97: 9c:89:a8:29:96:4b:be:cd:f0:91:3c:05:c4:cf:e3:9b:14:38: 89:ec:77:b0:9f:3c:20:18:78:66:55:68:3d:22:a1:70:54:d6: 93:aa:6c:44:2a:73:8f:c6:8e:d2:05:58:f4:b8:19:b9:14:8a: 7a:a7:e4:97:bb:46:a4:a5:21:c2:65:9d:f9:29:ba:eb:f4:3d: ab:25:19:c3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNI3zTooFtBF/fcvUX+RXsMOOxB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4 MTkxMURCQjAeFw0yNjAzMTYwODU1MDBaFw0yNzAzMTUwOTAwMDBaMDMxMTAvBgNV BAMTKEY5NEJCRjNEN0JBRDUzMUJCOUFBOEQwOUM0QTBCMEVBNzc4RTI0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52wCnwzkHYGhrKmt70pbJfU1q H2nrtcdzIerY5ZbjMdcF0DnF9rKj6dTtJmFtFlX3QpZvvsTgDKxOSK0iz8l5gGbx ZvZjhF5+wpr7mdtMVvUBmZXN9p9Jd4+AIfQkwo7/ayTCivODYbOYzwu4xZWqFRq0 qTQw44AIXG9ghJ0IbCujCS17csc8IV1JsfcPoremH/ScPGDuPo5duWvNMUzppmp2 kB09rsDj7O4ALrtB8/Ir5VX4j9j9TKDzOVal+2ywsKbikBXh0tzzVdNFlHCxMfhN f+rK73cKaDcSG0Vp0N7cQnc6NN97v2lAW5EV4k9A1QPgHFGYlaCGHx1mHw+vAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+Uu/PXutUxu5qo0JxKCw6neOJNMwHwYDVR0j BBgwFoAU2ElUUU4v+BcfHcjYyRGpZIGRHbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRF MkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTExREJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4MTkx MURCQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1Yjg0NTlhLWUzNTEtNGM4ZC1i YzI5LTVmZDA4YzRjNTk0MS8wLzMxMzAzMzJlMzEzNzM1MmUzODM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ69XMA0GCSqG SIb3DQEBCwUAA4IBAQA4JEtWC0ZDY8NTTU7eNKj7WEmlSdaTppKdgLsPFHou3Hed XQ2ruk1okxnFkuzvOaH94/K1DCfz+2+xXazkgZah7OAh+8og2X8tmbYjxP0R6Gzp iFmdU5ZmfHdGc2PptMOYyxv9uitWAFAHf/tirh/QHEO2Nwv2lO+9QxvqvoIA17fR aumXOIb+wQPLJcG5dU23v7y2UkGt+lRDB9OGLtl4ZrvhcJgAY0Hr+/XDkciBAQst UZeciagplku+zfCRPAXEz+ObFDiJ7HewnzwgGHhmVWg9IqFwVNaTqmxEKnOPxo7S BVj0uBm5FIp6p+SXu0akpSHCZZ35Kbrr9D2rJRnD -----END CERTIFICATE-----Generated at Thu Mar 26 22:03:53 2026 by rpki-client