$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa File: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (raw, json) Hash identifier: y+iKNFKKHbs0CSJEt1lYsgu6qhzfE0PgaZ6d5ep/InE= Subject key identifier: 72:0F:2D:23:63:8E:C5:0F:71:3F:82:3E:89:94:05:E6:0F:42:85:4C Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 7580CBE6BFE19F96E2DC843E28BE308FA0A70BC1 Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa Signing time: Sun 22 Mar 2026 18:00:01 +0000 ROA not before: Sun 22 Mar 2026 17:55:01 +0000 ROA not after: Sun 21 Mar 2027 18:00:01 +0000 asID: 147138 IP address blocks: 103.177.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:80:cb:e6:bf:e1:9f:96:e2:dc:84:3e:28:be:30:8f:a0:a7:0b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Mar 22 17:55:01 2026 GMT Not After : Mar 21 18:00:01 2027 GMT Subject: CN=720F2D23638EC50F713F823E899405E60F42854C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:b6:ea:4f:db:8d:61:db:5b:38:39:56:cc: 86:54:95:a5:6c:1d:71:9e:37:cb:35:c5:c8:fa:72: 23:09:01:7f:2c:1b:e3:0d:81:0f:b4:87:44:86:35: b3:ec:7c:66:9f:e5:e8:6c:92:80:f5:65:33:04:2c: 79:ec:38:d5:f2:50:38:aa:38:d3:1c:78:ec:cb:71: e0:08:35:f1:aa:bd:af:98:f1:58:62:5f:3c:03:2d: 04:d8:07:0b:c9:20:8b:d7:8f:92:a4:0e:96:52:65: b2:38:e3:7f:8e:ad:bf:a2:51:a4:50:f2:37:2f:ec: bc:ba:7d:ab:22:52:be:fe:91:d8:39:e5:57:21:5f: 4f:6b:0c:5d:2b:49:bd:30:01:22:99:7c:62:19:32: c4:48:6a:6b:75:12:42:97:2e:ec:ae:18:35:6e:9d: 02:42:1a:5a:bb:b0:f5:8f:ac:4e:38:2f:28:b6:fd: 11:84:5a:90:5a:16:25:e1:ac:11:39:b1:db:38:14: e2:0d:fd:2c:d8:e1:3e:0b:92:d3:e8:42:b4:26:64: a9:1e:63:7e:d1:6c:6d:67:8c:e6:4e:bc:c1:48:19: 78:17:5c:5b:70:86:bc:67:7a:bc:21:76:ff:f1:ec: 51:8d:e1:ba:57:89:d9:64:ea:40:9a:8a:e6:07:8e: cd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0F:2D:23:63:8E:C5:0F:71:3F:82:3E:89:94:05:E6:0F:42:85:4C X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.14.0/23 Signature Algorithm: sha256WithRSAEncryption 63:91:0e:6d:5b:60:d7:3a:26:d0:b0:69:24:d7:55:f6:46:18: a6:31:4b:90:7d:df:4b:78:40:4c:d4:f7:16:83:9f:62:25:99: 09:d1:0f:d8:63:7b:96:75:b2:cb:b7:3d:c8:32:b6:5e:ca:b8: ee:be:5d:63:81:37:9b:3b:ef:61:81:b3:ae:73:30:41:94:8a: 2b:be:20:e4:55:b2:8b:09:5f:f8:4d:74:87:b1:2b:c6:4b:90: f8:44:18:e9:e7:53:fa:2a:b6:da:e6:ab:54:99:cc:42:46:49: 2a:f5:2d:16:92:71:c9:29:a6:c6:81:d1:35:08:04:b7:7a:77: a3:70:96:ed:4d:16:4b:1e:d9:79:88:42:50:3f:a9:cc:c5:41: b3:32:e5:d0:85:f0:0a:da:1c:73:0e:3c:36:6c:3d:34:3a:aa: 54:ea:7e:2e:a6:d7:73:32:67:e4:91:a1:25:37:e9:bc:7a:7c: c3:21:72:ed:98:2e:95:df:84:32:fd:62:02:c3:49:90:52:cd: 3a:af:57:ce:20:c4:dd:96:29:ec:f0:b1:68:f3:d3:e9:ab:3c: e1:f0:de:8c:d8:7d:66:d7:23:fe:be:bf:89:1a:4f:65:2f:86: a1:f9:cb:f3:60:be:c9:98:d8:d0:c6:4b:eb:45:03:38:c6:ce: c2:16:e0:e3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdYDL5r/hn5bi3IQ+KL4wj6CnC8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNjAzMjIxNzU1MDFaFw0yNzAzMjExODAwMDFaMDMxMTAvBgNV BAMTKDcyMEYyRDIzNjM4RUM1MEY3MTNGODIzRTg5OTQwNUU2MEY0Mjg1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lLbqT9uNYdtbODlWzIZUlaVs HXGeN8s1xcj6ciMJAX8sG+MNgQ+0h0SGNbPsfGaf5ehskoD1ZTMELHnsONXyUDiq ONMceOzLceAINfGqva+Y8VhiXzwDLQTYBwvJIIvXj5KkDpZSZbI443+Orb+iUaRQ 8jcv7Ly6fasiUr7+kdg55VchX09rDF0rSb0wASKZfGIZMsRIamt1EkKXLuyuGDVu nQJCGlq7sPWPrE44Lyi2/RGEWpBaFiXhrBE5sds4FOIN/SzY4T4LktPoQrQmZKke Y37RbG1njOZOvMFIGXgXXFtwhrxnerwhdv/x7FGN4bpXidlk6kCaiuYHjs3vAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcg8tI2OOxQ9xP4I+iZQF5g9ChUwwHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiZTA0MDM4LWExYjYtNDMyYy04 NTRiLWNjNmU4Y2YzMmUwNi8wLzMxMzAzMzJlMzEzNzM3MmUzMTM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDM3MzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7EOMA0GCSqG SIb3DQEBCwUAA4IBAQBjkQ5tW2DXOibQsGkk11X2RhimMUuQfd9LeEBM1PcWg59i JZkJ0Q/YY3uWdbLLtz3IMrZeyrjuvl1jgTebO+9hgbOuczBBlIorviDkVbKLCV/4 TXSHsSvGS5D4RBjp51P6Krba5qtUmcxCRkkq9S0WknHJKabGgdE1CAS3enejcJbt TRZLHtl5iEJQP6nMxUGzMuXQhfAK2hxzDjw2bD00OqpU6n4uptdzMmfkkaElN+m8 enzDIXLtmC6V34Qy/WICw0mQUs06r1fOIMTdlins8LFo89Ppqzzh8N6M2H1m1yP+ vr+JGk9lL4ah+cvzYL7JmNjQxkvrRQM4xs7CFuDj -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:21 2026 by rpki-client